Privacy Policy

1 Definitions

The following definitions apply throughout this Privacy Policy:

• "mt966", "We", "Us", or "Our" refers to mt966 and its affiliated entities operating the platform at https://mt966.cam.
• "Platform" refers to the mt966 website, its mobile-optimised version, and any associated services offered thereunder.
• "Player", "You", or "Your" refers to any individual who visits, registers on, or uses the mt966 platform in any capacity.
• "Personal Data" refers to any information that identifies or could reasonably be used to identify a natural person, including but not limited to name, date of birth, residential address, email address, phone number, national identity number, payment account details, and device identifiers.
• "Processing" refers to any operation performed on personal data, including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure, or destruction.
• "KYC" refers to the Know Your Customer identity verification process, including document collection and identity checks required before withdrawal processing.
• "Third-Party Service Provider" refers to any external vendor, processor, or partner engaged by mt966 to assist in delivering the platform's services, including payment processors, KYC verification providers, game studios, and analytics providers.
• "Cookies" refers to small text files placed on your device by the mt966 platform to facilitate session management, preference storage, and usage analytics.

2 Information We Collect

mt966 collects personal data through several channels. The categories of data we collect, and the context in which each category is gathered, are described below.

2.1 Registration Data

When you create an mt966 account, we collect the information you submit in the registration form, including your full legal name, date of birth, Indonesian residential address, email address, and mobile phone number. This information is required to open your account and cannot be omitted.

2.2 Identity Verification (KYC) Data

To comply with our obligations to prevent fraud and money laundering, we collect copies of official identity documents submitted during the KYC process. Accepted documents include the Indonesian National Identity Card (KTP), a valid Indonesian passport, and a valid Indonesian driving licence (SIM). We may additionally collect proof-of-address documents and payment method confirmation screenshots.

2.3 Financial Transaction Data

We record full details of every deposit and withdrawal transaction processed through your mt966 account, including the amount (in IDR), the payment method used (such as BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, or LinkAja), timestamps, and transaction reference numbers. This data is retained for a minimum of five years in accordance with financial record-keeping obligations.

2.4 Usage and Behavioural Data

We automatically collect data about how you interact with the mt966 platform, including pages visited, games played, bets placed, session duration, and navigation paths. This data is used in aggregate to improve our product and in individual form to detect unusual account activity that may indicate fraud or problem gambling patterns.

2.5 Technical and Device Data

We collect technical information from your device when you access the mt966 platform, including your IP address, device type (desktop, mobile, tablet), operating system, browser type and version, screen resolution, and time zone. This information is used for security monitoring, fraud prevention, and geographic eligibility verification.

2.6 Communication Data

When you contact mt966 customer support, submit a complaint, or interact with our team via live chat or email, we retain a record of that correspondence. This includes the content of messages, the channel used, and the resolution outcome. These records are kept for quality assurance and dispute resolution purposes.

3 How We Use Your Data

mt966 uses personal data only for specific, legitimate purposes. The table below summarises the primary purposes for which your data is used and the corresponding data categories involved.

mt966 does not use your personal data to make automated decisions that produce legal or similarly significant effects on you without human review. Where automated profiling is used for fraud detection, any resulting account action (such as a temporary hold or review) is subject to human oversight by our compliance team.

4 Legal Basis for Processing

mt966 processes personal data only where a valid legal basis exists. The legal bases on which we rely are as follows:

• Contract Performance: Processing your registration data, KYC documents, and financial transaction records is necessary to fulfil our contractual obligations to you under the mt966 Terms & Conditions. Without this processing, we cannot provide account services, accept deposits, or pay out winnings.
• Legal Obligation: Certain processing activities — particularly KYC verification, retention of financial transaction records, and reporting of suspicious activity — are required by applicable anti-money-laundering laws and financial regulations. Compliance with these obligations is mandatory and cannot be waived by player consent.
• Legitimate Interests: mt966 processes usage, behavioural, and technical data on the basis of its legitimate interests in operating a secure, fair, and commercially viable platform. This includes fraud detection, security monitoring, platform analytics, and responsible gaming surveillance. We have assessed that these legitimate interests do not override your fundamental data rights where appropriate safeguards are in place.
• Consent: Where mt966 sends you marketing communications — including promotional emails, bonus notifications, and special offer alerts — we do so only on the basis of your explicit, freely given consent. You may withdraw consent to marketing communications at any time by updating your account preferences or using the unsubscribe link in any marketing message.

5 Data Sharing & Disclosure

mt966 does not sell your personal data. We share personal data only in the limited circumstances described below, and only to the extent necessary for the relevant purpose.

5.1 Third-Party Service Providers

We share personal data with trusted service providers who assist in delivering the mt966 platform. These include:

• Payment processors — Indonesian bank transfer partners and e-wallet platforms (OVO, DANA, GoPay, ShopeePay, LinkAja) receive transaction data necessary to process deposits and withdrawals on your behalf.
• KYC and identity verification providers — We use accredited third-party identity verification services to process and authenticate KYC documents. These providers receive your identity document images and personal details solely for verification purposes.
• Game studio providers — Game studios such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Pocket Games Soft, and Spribe may receive your anonymised player session data via their platform integration APIs. These studios do not receive your name, contact details, or financial information.
• Cloud hosting and infrastructure providers — mt966's platform is hosted on enterprise-grade cloud infrastructure. Server providers receive transactional access to stored data as part of platform operations and are bound by strict data processing agreements.
• Analytics providers — Aggregated, anonymised usage data may be processed by analytics platforms to help us understand platform performance. No personally identifiable information is shared with analytics tools.

All third-party service providers engaged by mt966 are required to enter into a formal data processing agreement, obligating them to process personal data only on mt966's documented instructions and to maintain appropriate security standards.

5.2 Regulatory and Law Enforcement Disclosure

mt966 may disclose personal data to governmental authorities, financial intelligence units, or law enforcement agencies where required by applicable law or by a valid legal order. In such cases, mt966 will disclose only the minimum information required to satisfy the legal obligation and will notify the affected player where legally permissible to do so.

5.3 Business Transfers

In the event of a merger, acquisition, or sale of all or a substantial part of mt966's business assets, player personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any material change to this Privacy Policy that may result from the transaction.

6 Cookies & Tracking Technologies

The mt966 platform uses cookies and similar tracking technologies to deliver a functional, personalised, and secure user experience. The following categories of cookies are in use:

• Strictly Necessary Cookies: These cookies are essential for the platform to function and cannot be disabled. They manage your login session, maintain your account authentication state, protect against cross-site request forgery (CSRF), and ensure financial transactions are processed securely. No personally identifiable data is stored in strictly necessary cookies beyond what is required for session integrity.
• Functional Cookies: These cookies remember your preferences — such as your chosen language display, preferred currency format, and game lobby filters — so that the platform behaves consistently across visits. Functional cookies improve usability but are not required for core platform operations.
• Analytics Cookies: mt966 uses analytics cookies to collect aggregated, anonymised data about how players navigate the platform. This data helps us identify pages with usability issues, optimise loading performance, and understand which game categories are most popular. Analytics cookie data is not linked to your personal account.
• Marketing and Retargeting Cookies: With your consent, mt966 may deploy marketing cookies that allow us to present relevant promotions to you when you revisit the platform. These cookies track your interaction with specific promotional content and may be used to measure the effectiveness of our campaigns. You may opt out of marketing cookies via your account notification preferences.

You can manage or delete cookies via your browser settings at any time. Please note that disabling strictly necessary cookies will prevent you from logging in to your mt966 account. Disabling other cookie categories will not affect your ability to access the platform but may reduce certain personalisation features.

7 Data Security

mt966 implements a layered security framework designed to protect personal data against unauthorised access, accidental loss, alteration, or disclosure. Our security measures include:

• Transport Layer Security (TLS): All data transmitted between your browser and the mt966 platform is encrypted using TLS 1.2 or higher. Our SSL certificate is maintained by a trusted certificate authority and renewed continuously.
• Encrypted Data Storage: Sensitive personal data — including identity document images, bank account numbers, and password hashes — is stored in encrypted form using AES-256 or equivalent standards at rest.
• Access Controls: Access to player personal data within mt966's internal systems is restricted on a strict need-to-know basis. Staff are granted access only to the data categories required for their specific role. All internal access events are logged and subject to periodic audit.
• Two-Factor Authentication (2FA): mt966 offers two-factor authentication as an optional additional security layer on player accounts. We strongly recommend enabling 2FA to protect your account, particularly before making large withdrawals. All mt966 internal staff accounts with access to player data are required to use 2FA without exception.
• Intrusion Detection and Monitoring: The mt966 platform operates 24/7 security monitoring covering server infrastructure, application behaviour, and financial transaction patterns. Anomalous activity triggers automated alerts reviewed by our security team in WIB (Western Indonesia Time, UTC+7).
• Penetration Testing: mt966 commissions regular independent security assessments and penetration tests by accredited cybersecurity firms. Findings are acted on under a prioritised remediation schedule.

Despite these measures, no digital platform can guarantee absolute security. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, mt966 will notify affected players without undue delay and take all reasonable steps to contain and remediate the breach.

8 Data Retention

mt966 retains personal data for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following standard retention periods apply:

When a retention period expires, personal data is securely deleted from active systems and backups within a reasonable timeframe following the scheduled purge cycle. Data that has been fully anonymised — such that it can no longer be linked to an identifiable individual — is not subject to these retention limits and may be retained indefinitely for statistical purposes.

9 Your Rights

As a registered mt966 player, you have the following rights with respect to your personal data. To exercise any of these rights, please contact our support team as described in Clause 13.

• Right of Access: You have the right to request a copy of the personal data mt966 holds about you. We will provide this information in a structured, commonly used format within 30 days of receiving a valid request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For example, if you have moved to a new address within Indonesia, you may request an update to your residential address on file.
• Right to Erasure ("Right to Be Forgotten"): You may request that mt966 delete your personal data where it is no longer necessary for the purpose it was collected, where you have withdrawn consent, or where processing was unlawful. Please note that this right is subject to our legal retention obligations — certain financial and KYC records must be retained regardless of erasure requests.
• Right to Restrict Processing: You may request that mt966 restrict the processing of your personal data in certain circumstances — for example, while a dispute about data accuracy is being resolved, or pending the outcome of an objection to processing.
• Right to Data Portability: Where processing is based on your consent or the performance of a contract, you may request that we provide your personal data in a structured, machine-readable format suitable for transfer to another service provider.
• Right to Object: You have the right to object to the processing of your personal data where mt966 relies on legitimate interests as its legal basis. We will assess your objection and cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where mt966 processes your data on the basis of consent — such as for marketing communications — you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

10 Age Restriction & Children's Privacy

The mt966 platform is strictly restricted to individuals who are 21 years of age or older. mt966 does not knowingly collect personal data from any individual under the age of 21.

During the account registration process, players are required to declare that they meet the 21+ age requirement. This declaration is reinforced by our KYC verification process, which confirms age using official government-issued identity documents such as the Indonesian National Identity Card (KTP) or passport.

If mt966 discovers that personal data has been collected from an individual who does not meet the 21+ age requirement — whether through self-disclosure, KYC review, or any other means — the following steps will be taken immediately:

• The account will be suspended and access revoked pending investigation.
• Any real-money balance in the account will be reviewed; deposits may be refunded at mt966's discretion to the original payment method.
• All personal data associated with the underage account will be securely deleted as soon as is reasonably practicable, except where legal obligations require retention of certain records.
• The matter will be referred to mt966's compliance team for review and, where appropriate, to the relevant regulatory authority.

If you believe that an individual under the age of 21 has registered or attempted to register on the mt966 platform, please contact our support team immediately at [email protected].

11 Third-Party Services & External Links

The mt966 platform integrates services provided by third-party game studios, payment processors, and infrastructure providers. While mt966 selects these partners carefully and requires them to adhere to strict data protection standards, this Privacy Policy applies only to data processing carried out by mt966 directly or by third parties acting on mt966's documented instructions as data processors.

Game studios whose titles are hosted on the mt966 platform — including but not limited to Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Pocket Games Soft — operate under their own privacy policies with respect to any data processed through their proprietary game engines. mt966 ensures that no personally identifiable player data beyond an anonymised session token is passed to game studio systems.

Indonesian payment partners — including bank transfer systems operated by BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, and Bank Danamon, and e-wallet platforms OVO, DANA, GoPay, ShopeePay, and LinkAja — process your payment data under their own respective terms of service and privacy policies when you initiate a transaction. mt966 is not responsible for the data practices of these independent payment institutions beyond the scope of our contractual data processing agreements with them.

12 Amendments to This Policy

mt966 reserves the right to update this Privacy Policy from time to time to reflect changes in applicable law, our data processing practices, or the services we offer. The following process applies when changes are made:

• The "Last updated" date at the top of this page will be revised to reflect the date of the most recent change.
• Where a change is material — such as a new category of data being collected, a new third-party processor being engaged, or a change in data retention periods — mt966 will notify registered players by email at least 14 days before the change takes effect.
• Non-material changes, such as typographical corrections, clarifications that do not alter the substance of the policy, or updates to contact details, may be implemented without advance notice.
• Your continued use of the mt966 platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not accept the revised terms, you should cease using the platform and may request account closure and data deletion as described in Clause 9.

We encourage you to review this Privacy Policy periodically. All previous versions of this policy are retained by mt966 and are available upon request from our support team.

13 Contact & Data Rights Requests

For any questions, concerns, or requests relating to this Privacy Policy or the personal data mt966 holds about you, please contact us through the following channel:

When submitting a data rights request, please include your registered account username and, where applicable, a description of the specific data or processing activity your request relates to. This will help our team locate the relevant records and respond to your request within the 30-day timeframe described in Clause 9.

If you are not satisfied with mt966's response to a data rights request or privacy complaint, you have the right to escalate the matter through the formal complaints process described in our Terms & Conditions, or to seek independent dispute resolution through the relevant authority under mt966's operating licence.