m8win Casino & Sportsbook Data Care

This page describes what we collect when you use m8win and how we keep that data protected. Our privacy commitments centre on transparency — we tell you what data we gather, why we need it, who can access it, and how long we keep it. We do not sell your information to advertisers, and we do not share your betting history or payment details with other players or external marketers.

We understand that trusting m8win with your email, phone, identity documents, and payment information is a significant step. This policy explains the rules we follow to earn and maintain that trust. If you have questions after reading this, our support team is available in English and Indonesian.

Our services are available only where local law permits. Data protection laws vary by jurisdiction — some regions grant users the right to access, correct, or delete their data; others do not. We comply with the laws that apply to your location. This policy is written for all m8win users regardless of jurisdiction, so some sections may not apply to you.

What m8win collects and why

We collect data in three stages: account creation, ongoing use, and payment processing. When you create an m8win account, we ask for your email address, phone number, full name, date of birth, and identity document (passport, national ID, or driver's license). We use these to verify your identity under anti-money-laundering laws, prevent fraud, and confirm you meet any age requirements under local law in your jurisdiction.

Once your account is live, we collect data about your activity. When you wager on Liga 1, Piala AFF, Piala Indonesia, Piala Asia, or Champions League, we log your bet slip (match, market type, stake, potential payout, result). When you play live-dealer games or slots, we log the game you played, your stake, and your outcome. When you access m8win, we log your IP address, device type, browser, and login time. We use this data to settle your bets, calculate payouts, detect fraud, and comply with gaming regulations.

When you deposit or withdraw, we collect payment data: your e-wallet ID (if using DANA, e-wallet, mobile banking, local payment, online payment, or e-wallet) or your bank account number and routing details (if using mobile banking, local payment, online payment, e-wallet, or another bank). We never store your full payment credentials — we use tokenization, meaning we keep a secure reference code instead of your actual card or bank number. We share this tokenized data only with our payment processors, who process the transaction on your behalf.

How m8win uses your data

Your data serves four purposes on m8win: account management, settlement and payout, fraud prevention, and legal compliance. Account management means we store your login credentials, email, and phone securely so you can access your account and reset your password. Settlement and payout means we use your bet history to calculate winnings and credit them to your balance. Fraud prevention means we analyze patterns (like sudden large deposits from new payment methods, or withdrawal requests to a different bank than usual) to detect suspicious activity. Legal compliance means we retain records to meet anti-money-laundering, tax, and gaming regulations.

We do not use your data for marketing unless you opt in. We do not send you promotional emails about new slot games or tournament markets unless you explicitly allow it in your account settings. If you choose to receive notifications, you can disable them at any time.

Identity data

Used to verify your identity, prevent fraud, and comply with anti-money-laundering law. Stored securely and never shared with third parties except as required by law.

Bet and game data

Used to settle markets, calculate payouts, and investigate disputes. Visible only to you and m8win staff who handle your account. Not shared with other players.

Payment data

Tokenized (secure reference code stored, not actual card/bank details). Shared only with payment processors who need it to execute your transaction.

Activity logs

IP address, device type, login times, and deposit/withdrawal records. Used to detect fraud and comply with gaming audits. Stored for at least two years.

Where m8win stores and processes your data

Our servers may sit outside your jurisdiction. We use encrypted databases hosted by licensed cloud providers with data centres in multiple countries. Your data in transit (between your device and our servers) travels over HTTPS, meaning it is encrypted end-to-end. Your data at rest (in our databases) is encrypted using industry-standard algorithms. We do not share unencrypted data with staff unless they have a specific need to access it (for example, our support team can see your email and phone to help you reset your password, but they cannot see your payment credentials).

Some of our service partners (payment processors, game studios, odds compilers) may process your data on our behalf. We only share data with partners who agree in writing to protect it at the same standard we do. If a partner breaches data protection, we have the right to terminate our relationship and pursue legal action.

Your rights and m8win commitments

In some jurisdictions, you have the right to access, correct, or delete your data. We respect these rights. If you request a copy of your data (including your email, phone, identity document, bet history, and payment records), we will provide it within thirty days. If you believe your data is inaccurate, you can request a correction — for example, if your phone number changed, we will update it. If you want to delete your account, we will close it and stop collecting new data. However, we will retain your historical data for at least seven years to comply with financial and gaming regulations.

We commit to the following practices on m8win: We encrypt all data in transit and at rest. We never sell your data to advertisers, data brokers, or other third parties. We do not build profiles of your behaviour outside m8win. We do not use cookies to track you across other websites. We monitor our systems for security breaches and notify you immediately if we suspect your data has been compromised. We do not share your betting history with other players — your wagers are private. We do not share your payment details with anyone except the payment processor handling your specific transaction.

1. Data encryption

   All data travels over HTTPS and is encrypted at rest using AES-256 or equivalent standard.

2. No data sales

   We do not sell your information. We do not monetize your data by licensing it to third parties.

3. Breach notification

   If we detect unauthorized access to your data, we notify you and relevant authorities within the timeframe required by law.

4. Data retention

   We retain account, transaction, and bet data for at least seven years; we delete inactive account data securely after closure and retention period.

Cookies and tracking on m8win

m8win uses cookies to remember your login session, your language preference, and your account settings. These are functional cookies — they help m8win work smoothly. We do not use tracking cookies that follow you across other websites. We do not use cookies to build a profile of your interests or sell that profile to advertisers. When you close your browser, session cookies expire. You can disable cookies in your browser settings, but this may prevent m8win from functioning properly.

Contact m8win about your data

If you have questions about this privacy policy, or if you want to request access to your data, contact our support team. You can reach us via the support portal on m8win (available in English and Indonesian). We will respond within one business day. If you believe m8win has violated your data protection rights, you have the right to lodge a complaint with your local data protection authority (if one exists in your jurisdiction).

This policy is current as of the date shown on the m8win website. We may update it if our practices change or if local laws require it. We will notify you of material changes by email or by posting a notice on m8win. Continued use of m8win after a policy update means you accept the new terms.