mpodewa Casino & Sportsbook Data Care

This page describes what we collect when you use mpodewa and how we keep that data protected. Our privacy practices are designed to meet international data-protection standards while complying with Indonesian regulatory requirements. We collect only the information necessary to operate our platform, verify your identity, process your payments, and provide customer support.

We understand that your personal information is sensitive. We encrypt all data in transit and at rest, limit access to authorised staff, and store information only as long as you maintain an account with us. This policy explains the categories of data we collect, how we use each category, who we share it with, and the rights you have over your information.

Our commitment is transparency: we do not sell your data, do not use it for marketing outside our platform, and do not share it with third parties except where required by law or necessary to deliver your gaming and banking services.

Data We Collect at mpodewa

We collect data in three categories: account registration, gameplay and betting activity, and payment information. When you sign up for mpodewa, we require your email address, a password you create, and your phone number. We use these to log you in, send you account notifications, and verify your identity if you contact support.

For identity verification (KYC), we collect your legal name, date of birth, and government-issued ID number (KTP, passport, or equivalent). Many users in Jakarta, Surabaya, and Bandung provide this information at signup; some defer it until their first deposit. We cross-check this data against government databases to confirm your age and prevent fraud. This information is mandatory — we cannot process deposits or withdrawals without it.

Payment Data at mpodewa

When you deposit or withdraw via our payment partners (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet), we collect transaction records — the amount, method, timestamp, and confirmation code. We do not store your full payment card numbers or e-wallet passwords. Payment processors (the banks and e-wallet providers) handle sensitive payment credentials; we receive only a confirmation that the transaction succeeded.

Gameplay and Betting Records

We record your account balance, bets placed on our sportsbook (Liga 1, Piala Indonesia, football tournaments), live-dealer gameplay (blackjack, roulette, baccarat, Dragon Tiger), slot spins (Aviator, Sweet Bonanza, Gates of Olympus, Fortune Tiger, Mahjong Ways), and esports market activity (Mobile Legends, Free Fire, PUBG Mobile). We use these records to calculate your winnings or losses, prevent fraud, and comply with gaming regulations. Your betting data is linked to your account and not shared publicly; it is visible only to you and our compliance team when needed.

Device and Network Information

When you access mpodewa via Android app, iOS browser, or desktop, we log your device type, operating system version, IP address, and general location (city or region, not street address). We use this to detect suspicious login attempts, prevent account takeover, and understand how users in Medan, Semarang, and Yogyakarta access our platform. Location data helps us comply with regional laws and provide localised support.

Data security: We encrypt all data transmitted between your device and our servers using TLS 1.3. Our databases are encrypted at rest, access is restricted to authorised personnel, and we conduct regular security audits.

How We Use Your Data

We use your data for six core purposes: account management, payment processing, fraud prevention, regulatory compliance, customer support, and service improvement.

  • Account management: We authenticate you at login, store your profile, and manage your balance and game history.
  • Payment processing: We pass your KYC data to our banking partners to confirm your identity before deposits and withdrawals; we record transaction confirmations to reconcile your account balance.
  • Fraud prevention: We analyse betting patterns and login locations to detect unusual activity — e.g., login from two countries within minutes, or bets far above your normal range — and flag them for review.
  • Regulatory compliance: Indonesian gaming and financial regulations require us to maintain records of player identity, deposits, withdrawals, and betting activity. We keep these records for at least five years.
  • Customer support: When you contact our support team, we access your account history to resolve billing disputes, answer gameplay questions, or investigate payment failures.
  • Service improvement: We analyse aggregate (non-personal) data — how many users access via Android vs iOS, which games are most popular, which payment methods settle fastest — to optimise our platform.

We do not use your data for marketing purposes beyond your own account. We do not email you promotional offers for other platforms, sell your contact information to third parties, or share your betting data with advertisers.

Third Parties and Data Sharing

We share your data with external partners only when necessary to operate mpodewa:

  • Payment processors: mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, and local payment network operators receive your KYC data and transaction details to process deposits and withdrawals. These partners operate under their own privacy policies and banking-secrecy laws.
  • Live-dealer provider (SA Gaming): When you play blackjack or roulette, your balance and bets are transmitted to SA Gaming's servers to settle outcomes. SA Gaming's privacy policy governs how they handle this data.
  • Slot providers: Aviator, Sweet Bonanza, and other slot providers receive your balance to deduct spins and credit wins. Each provider has a separate privacy policy.
  • Customer support tools: We may use third-party live-chat or ticketing platforms to manage support requests; your account history and messages are visible to support staff within these systems.
  • Cloud hosting: Our databases may be hosted on servers outside Indonesia; your data is encrypted, so host-country privacy laws do not directly apply to the content.
  • Law enforcement: If required by court order or police inquiry, we disclose data to authorities. We will notify you of such requests unless legally prohibited.

At mpodewa, we share your data only with partners essential to deliver gaming and banking services, never for profit or third-party marketing.

mpodewa privacy team

Cookies and Tracking

We use cookies to maintain your login session, remember your preferences (e.g., your preferred payment method), and track how you navigate mpodewa so we can improve user experience. Cookies are small text files stored on your device; they expire after a set period (typically 30 days) or when you log out. You can disable cookies in your browser settings, though this may prevent mpodewa from functioning properly.

We do not use cookies to track you across other websites or build a profile for advertising. Our analytics tool records only aggregate statistics — total logins per day, average session duration — not individual user journeys.

Your Rights Over Your Data

You have the right to access, correct, and delete your personal data. To exercise these rights:

  1. Access: Contact our support team with your request; we will provide a copy of your data within 14 days.
  2. Correction: Log into your account and update your name, email, or phone number directly. For data we hold externally (e.g., at payment processors), contact support to request correction.
  3. Deletion: You can close your account, which flags your data for deletion. We retain KYC and transaction records for five years (required by law), but anonymise other personal information. After the retention period, we purge your data from our systems.
  4. Portability: If you wish to export your betting history or account statements, contact support and we will provide the data in CSV or JSON format.

If you believe we have misused your data, you may lodge a complaint with Indonesia's data-protection authority or seek legal remedies.

Data Retention and Deletion

We retain your data according to regulatory requirements and operational necessity. KYC information (name, ID number, date of birth) is kept for five years after your final transaction, as required by Indonesian banking regulations. Transaction records (deposits, withdrawals, betting activity) are retained for the same period to support audits and prevent fraud. Email addresses and phone numbers are deleted when you close your account unless we are legally obligated to keep them.

If your account has been inactive for two years, we may flag it for archival. You can reactivate your account by logging in; if your account is deleted, you can re-register with the same email address.

International Data Transfers

Our servers and databases may be located outside Indonesia. When your data is transferred internationally, we ensure it is encrypted and protected at the same level as Indonesian data-protection standards. We use standard contractual clauses with our hosting providers to guarantee data safety regardless of host-country location.

Contact Us About Privacy

If you have questions about our privacy practices, wish to exercise your data rights, or suspect a data breach, contact our privacy team:

  • Email: [email protected] (response within 7 business days)
  • In-app support: Submit a privacy inquiry through mpodewa's help menu
  • Mailing address: Provide a verified postal address via email if you prefer written correspondence

We may update this privacy policy to reflect changes in our operations or legal requirements. We will notify you of material changes via email or account notification at least 30 days before they take effect. Your continued use of mpodewa after changes indicates your acceptance of the updated policy.

Our commitment is to handle your data responsibly, transparently, and in compliance with applicable law. We do not treat your information as a commodity; it is a trust you place in us, and we protect it accordingly. For additional detail, review our Terms and Conditions or contact our support team at any time.