Privacy Policy

Throughout this Privacy Policy, the following terms carry the meanings defined below unless the context requires otherwise:

• "mz356" refers to the online gaming and sports betting platform operating at mz356.club, including all pages, features, games, and services accessible via the website.
• "Personal Data" means any information that identifies or could reasonably be used to identify a natural person, directly or indirectly — including name, email address, date of birth, IP address, device identifiers, and payment details.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, or deletion.
• "Member" or "You" means any individual who has registered an Account on the mz356 Platform or who visits the mz356 website.
• "Account" means the personal account created by a Member following successful registration on the mz356 Platform.
• "KYC" (Know Your Customer) means the identity and age verification process required by mz356 in accordance with its compliance obligations.
• "Cookies" means small text files placed on your device by the mz356 Platform to enable functionality, remember preferences, and analyze site usage.
• "Third-Party Providers" means companies engaged by mz356 to deliver specific services — including payment processors, game software studios, fraud detection services, and customer support platforms — who may process Personal Data on mz356's behalf.
• "WIB" means Western Indonesia Time (UTC+7), the default operating time zone of mz356.

mz356 acts as the data controller in respect of all Personal Data collected from Members and website visitors via the mz356 Platform. As data controller, mz356 determines the purposes for which and the manner in which Personal Data is processed.

mz356 operates as an international online gaming platform holding a license issued by a recognized international gaming regulatory authority. While the Platform serves users across multiple markets — with a particular focus on Indonesian players — it is operated in accordance with the terms of that international license and applicable data protection principles.

If you have any questions about how mz356 handles your Personal Data, or wish to exercise any of your data rights described in Clause 11, you may contact the mz356 Privacy Team at [email protected] with the subject line "Privacy Request — [Your Account Username]".

mz356 collects only the Personal Data that is necessary for the purposes described in this Policy. The categories of data we collect are set out below:

Registration & Account Data

• Full legal name and date of birth
• Email address and, where provided, mobile phone number
• Residential address (city, province, country)
• Username and encrypted password
• Preferred currency (IDR or USDT)

Identity Verification (KYC) Data

• Government-issued identification document (KTP or passport) — including document number, expiry date, and the photograph contained in the document
• Proof of address documentation (utility bill, bank statement, or equivalent)
• Payment method ownership documents where required for withdrawal verification

Financial & Transaction Data

• Deposit and withdrawal transaction records, including amounts, timestamps, and payment method references (e.g., masked bank account numbers for BCA, BRI, BNI, Bank Mandiri, CIMB Niaga, OCBC NISP, BSI, and Bank Permata; e-wallet IDs for OVO, DANA, GoPay, ShopeePay, and LinkAja; USDT wallet addresses on the TRC-20 network)
• Account balance history and bonus transaction logs

Gameplay & Betting Data

• Bets placed, game sessions initiated, and wager amounts
• Game outcomes, bonus activations, and wagering requirement progress
• Responsible gaming tool usage (deposit limit settings, cooling-off periods, self-exclusion requests)

Technical & Usage Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser version
• Pages visited, session duration, and clickstream data within the Platform
• Referral source (the URL from which you arrived at mz356.club, where available)

Communications Data

• Records of live chat conversations, email correspondence, and WhatsApp support interactions
• Feedback, complaint, and dispute records

mz356 collects Personal Data through the following channels:

• Directly from you: When you register an Account, complete the KYC process, make a deposit or withdrawal, place a bet, contact support, or respond to a promotion.
• Automatically via the Platform: Through cookies, server logs, and analytics technologies that record technical and usage data whenever you access the mz356 website or web application.
• From Third-Party Providers: Payment processors (including local Indonesian banks, e-wallets, and the TRC-20 USDT network) may provide transaction confirmation data. Fraud detection partners may provide risk-scoring information based on device or behavioral signals.
• From publicly available sources: In limited circumstances, mz356 may cross-reference Personal Data against publicly available records (e.g., sanctions screening lists) as part of its compliance obligations.

mz356 processes your Personal Data on the following legal grounds:

mz356 uses the Personal Data it collects for the following purposes:

• To create, manage, and secure your Account on the mz356 Platform.
• To verify your identity and age in accordance with the KYC requirements described in our Terms & Conditions — including confirming that you are 21 years of age or older.
• To process deposits and withdrawals via your chosen payment method (Indonesian bank transfer, e-wallet, or USDT TRC-20).
• To deliver the games, sportsbook markets, live casino tables, esports betting events, and other Services you request.
• To apply and track bonuses, promotions, and wagering requirements associated with your Account.
• To operate responsible gaming tools including deposit limits, session reminders, cooling-off periods, and self-exclusion requests.
• To detect, investigate, and prevent fraudulent activity, bonus abuse, multi-accounting, and other violations of the Terms & Conditions.
• To respond to your support queries, complaints, and dispute requests via live chat, WhatsApp, or email.
• To send you transactional communications (deposit confirmations, withdrawal updates, KYC status notifications) via email or in-app notification.
• To send promotional communications about bonuses, new game launches, and seasonal offers — only where you have opted in to marketing communications and only to the contact details on your Account.
• To comply with applicable legal and regulatory obligations, including anti-money-laundering screening and sanctions compliance.
• To analyze aggregate usage patterns to improve Platform performance, game selection, and user experience. Such analysis uses anonymized or pseudonymized data where possible.

mz356 does not sell, rent, or trade your Personal Data to third parties for their own marketing purposes. Personal Data is shared with third parties only in the following limited circumstances:

Service Providers (Data Processors)

mz356 engages trusted third-party service providers who process Personal Data on its behalf and under its instructions. These include:

• Payment processors: Local Indonesian banks (BCA, BRI, BNI, Bank Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata), e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja), and cryptocurrency network infrastructure for USDT TRC-20 transactions.
• Game software providers: Licensed game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft, who may process gameplay session data on their own secure servers.
• Fraud detection and KYC verification services: Third-party identity verification and anti-fraud platforms used to confirm Member identities and detect suspicious activity.
• Customer support platforms: Live chat and ticketing software providers used to deliver 24/7 Indonesian and English-language support.
• Analytics providers: Anonymized or pseudonymized usage data may be processed by analytics platforms to help mz356 understand Platform performance.

All Third-Party Providers engaged by mz356 are contractually required to process Personal Data only for the specified purpose, to implement appropriate security measures, and not to retain data beyond the period necessary for the service.

Legal & Regulatory Disclosure

mz356 may disclose Personal Data to regulatory authorities, law enforcement agencies, courts, or other government bodies where required to do so by applicable law, by court order, or by the requirements of our international gaming license. In such cases, mz356 will disclose only the minimum data necessary to satisfy the legal obligation.

Business Transfers

In the event that mz356 undergoes a merger, acquisition, restructuring, or sale of assets, Personal Data held by mz356 may be transferred to the acquiring entity as part of that transaction. Where such a transfer occurs, mz356 will ensure that the receiving entity is bound by data protection obligations consistent with this Privacy Policy, and will notify affected Members via their registered email address.

mz356 uses cookies and similar technologies (local storage, session tokens) to operate the Platform, remember your preferences, and analyze how Members interact with the site. The following cookie categories are used:

mz356 does not use advertising cookies or third-party retargeting cookies. You may manage your cookie preferences via your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in to your mz356 Account.

mz356 retains Personal Data for the minimum period necessary to fulfil the purposes for which it was collected, subject to any longer retention requirements imposed by applicable law or our international gaming license obligations.

• Account and registration data: Retained for the duration of your Account and for a minimum of 5 years following permanent Account closure, in accordance with anti-money-laundering record-keeping requirements.
• KYC documents: Retained for a minimum of 5 years following the completion of the KYC process, or longer if required by the applicable regulatory framework.
• Financial transaction records: Retained for a minimum of 5 years following each transaction.
• Gameplay and betting records: Retained for a minimum of 3 years following the relevant game session or bet.
• Support communications: Retained for 2 years following the resolution of the relevant query or complaint.
• Technical and analytics data: Aggregated or anonymized data may be retained indefinitely for Platform improvement purposes. Raw IP and device logs are retained for a maximum of 12 months.
• Marketing consent records: Retained for the duration of your consent and for 2 years following any withdrawal of consent, to evidence compliance.

When Personal Data is no longer required for the purposes described above, mz356 will securely delete or anonymize it in accordance with industry best practices.

mz356 implements a comprehensive suite of technical and organizational security measures to protect your Personal Data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• Transport Layer Security (TLS 1.3): All data transmitted between your browser and the mz356 Platform is encrypted in transit.
• AES-256 encryption at rest: Sensitive Personal Data — including KYC documents, payment references, and identity fields — is encrypted in our databases.
• Bcrypt password hashing: Passwords are never stored in plain text. All passwords are salted and hashed using bcrypt before storage.
• Access controls and role-based permissions: Internal access to Personal Data is restricted to staff who require it to perform their job functions, governed by a principle of least privilege.
• Regular security audits and penetration testing: mz356 engages independent security specialists to test Platform infrastructure on a regular schedule.
• Intrusion detection and 24/7 monitoring: Automated systems monitor for anomalous access patterns, failed login attempts, and other indicators of compromise.
• Two-factor authentication (2FA): Members are encouraged to enable 2FA on their Account via Account settings to add an additional layer of protection.

Subject to applicable law and our legitimate operational and compliance interests, you have the following rights in relation to your Personal Data held by mz356:

• Right of Access: You may request a copy of the Personal Data mz356 holds about you.
• Right to Rectification: You may request correction of any inaccurate or incomplete Personal Data. Basic account details (email address, residential city) can be updated directly via your Account settings.
• Right to Erasure ("Right to be Forgotten"): You may request that mz356 delete your Personal Data. Note that this right is subject to exceptions where retention is required by law (e.g., AML record-keeping obligations) or to protect mz356's legitimate legal interests.
• Right to Restriction of Processing: You may request that mz356 restrict the processing of your data in certain circumstances, for example while a dispute about the accuracy of the data is being resolved.
• Right to Data Portability: You may request that mz356 provide your Personal Data in a structured, machine-readable format so that you can transfer it to another service provider.
• Right to Object: You may object to the processing of your Personal Data where that processing is based on legitimate interests, including the right to object to receiving marketing communications at any time.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, contact the mz356 Privacy Team at [email protected] with the subject line "Data Rights Request — [Your Account Username]". mz356 will acknowledge your request within 5 business days (WIB) and aim to fulfil verified requests within 30 days. In complex cases, this period may be extended by up to an additional 30 days, with prior notification to you.

The mz356 Platform is strictly intended for adults aged 21 and above. mz356 does not knowingly collect Personal Data from individuals under the age of 21.

Age verification is a mandatory component of the KYC process. Any Account found to be held by a person under the age of 21 will be immediately closed and all funds held in that Account will be returned (less any bonuses) pending a review. mz356 reserves the right to withhold winnings generated on an Account held by a minor.

If you believe that a minor has registered an Account on the mz356 Platform or has accessed the site using an adult's credentials, please contact us immediately at [email protected]. mz356 will investigate and take appropriate action promptly.

Parents and guardians in Indonesia who are concerned about minors accessing online gambling content are encouraged to install parental control software and to review online safety resources provided by relevant Indonesian consumer protection bodies.

mz356 operates as an international platform. As a result, your Personal Data may be transferred to and processed on servers located outside of Indonesia, including in the jurisdiction in which mz356 holds its international gaming license and in the locations where our Third-Party Providers operate their infrastructure.

When Personal Data is transferred internationally, mz356 ensures that appropriate safeguards are in place to protect that data, including:

• Contractual clauses with Third-Party Providers requiring them to apply equivalent data protection standards to those described in this Policy.
• Transfer only to jurisdictions or service providers that implement recognized data security frameworks and industry-standard protections.

By registering an Account and using the mz356 Platform, you acknowledge and consent to the transfer of your Personal Data to jurisdictions outside Indonesia for the purposes described in this Policy.

mz356 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or Platform features. The date of the most recent revision is displayed at the top of this page.

Where material changes are made to this Policy — particularly changes that affect the way in which mz356 uses or shares your Personal Data — mz356 will provide advance notice via a notification displayed upon login or via the email address registered to your Account, giving you a reasonable opportunity to review the changes before they take effect.

Your continued use of the mz356 Platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not agree with any amendment, you must cease using the Platform and may request Account closure and withdrawal of your available balance in accordance with the Terms & Conditions.

mz356 recommends that all Members review this Privacy Policy periodically to remain informed about how their Personal Data is being handled.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way mz356 handles your Personal Data, please get in touch through one of the following channels:

• Email (Privacy Requests): [email protected] — use subject line "Privacy Request — [Your Account Username]"
• Live Chat: Available in-app after login, 24 hours a day, 7 days a week in Indonesian and English
• WhatsApp: Available after login during WIB business hours

mz356 will acknowledge all privacy-related enquiries within 5 business days (WIB) and will aim to provide a substantive response within 30 days. For urgent data security concerns — such as suspected unauthorized access to your Account — please mark your email with the subject line "URGENT — Security Concern" and our team will prioritize your case.