mainduit Platform Privacy Notice

When you access mainduit on Android, via iOS browser, or through our mobile-first web interface, you share personal data with us. This page describes what we collect, how we use it, and the steps we take to keep it protected. We collect only what we need to verify your identity, process deposits via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, or e-wallet, and respond to your support requests.

Our privacy practices reflect the principle that your data is yours. We do not sell it, do not share it without your consent (except as required by law), and do not retain it longer than necessary. If you have questions about how we handle your information, our support team can address them in your preferred language.

What We Collect and Why

We collect information in several categories. Your identity data—full name, date of birth, government-issued ID number, a selfie for facial match, and proof of address—arrives during account verification. We retain your ID image and address proof as encrypted files for regulatory compliance and dispute resolution. We collect your email and phone number to contact you about account activity, withdrawals, or support tickets.

Your financial data includes banking details (account number, bank name, linked card digits) needed to process deposits and withdrawals. We collect transaction history—what you deposit, when, which method you used, and settlement status. Device and usage data—your IP address, device type, browser, operating system, pages visited, and bet placement timestamps—helps us detect fraud and ensure platform stability.

Note: We do not collect your browsing history outside mainduit or track you across other websites.

How We Use Your Data

Your identity and financial data enable us to operate mainduit. We verify your age and legal status, comply with anti-money-laundering regulations, and process your deposits and withdrawals securely. We use your contact details—email and phone—to send account updates, withdrawal confirmations, and responses to your support inquiries. Around major events like Liga 1 matches or Piala AFF tournaments, we may send newsletters about live markets available on mainduit, but only if you have opted in.

We analyse your transaction data to flag suspicious patterns—for example, rapid deposits followed by immediate large withdrawals, or unusual geographic access—and respond with account reviews if needed. We use device and session data to prevent fraud, enforce our terms against multi-accounting, and diagnose technical issues affecting your experience.

Third-Party Processors and Sharing

We share your data with specific third parties only to deliver our service. Payment processors—the companies that handle DANA, e-wallet, mobile banking, and bank transfers—receive your banking details and transaction amounts to settle funds. These processors are contractually bound to protect your data and may not use it for their own purposes.

Our customer support platform stores your emails, chat messages, and account details to respond to your inquiries. Our web hosting provider (which may be located outside Indonesia) stores your account file and encrypted ID image. We do not sell your personal information to advertisers, data brokers, or any other party. We may disclose your data if required by law—for instance, a government agency investigates fraud—but only to the minimum extent legally required.

Cookies and Tracking

We use cookies to keep you logged in, remember your preferences (such as preferred language or odds format), and prevent abuse. Session cookies expire when you close your browser; persistent cookies remain for up to one year. We do not use cookies to track you after you leave mainduit.

We believe privacy is a service quality signal. Transparent data handling and honest communication are part of what mainduit offers.

How Long We Keep Your Data

We retain your identity documents (ID image and address proof) for as long as your account exists, plus seven years after you close it—this is a regulatory requirement in most jurisdictions. Your transaction history remains in our system for the same period to support potential disputes. Email correspondence and support tickets are kept for two years unless you request deletion sooner.

Your device and usage logs are stored for up to 90 days; older logs are deleted automatically. If you request account deletion, we erase your email, phone, and preference data immediately but retain financial and identity records for the seven-year compliance window.

Your Rights on mainduit

You have the right to request a copy of all data we hold about you. Submit a request via our support team—provide your account email and full name—and we will prepare a file within fourteen days. You can request correction of inaccurate information, such as a mistyped address, and we will update it within seven days.

You may request deletion of your account and associated data, subject to the legal retention periods noted above. You can opt out of promotional emails at any time using the unsubscribe link in each message. You cannot opt out of transactional emails (withdrawal confirmations, support responses) as these are required to run your account.

International Data Transfers

Our servers may sit outside Indonesia, and your data may be processed in other countries. When we transfer your data internationally, we apply encryption and contractual safeguards to ensure protection equivalent to Indonesian data protection standards. We do not transfer data to jurisdictions with inadequate legal protections.

Contacting Us About Privacy

If you have questions about this privacy notice or believe we have mishandled your data, contact our support team via live chat, email, or in-app help. We respond to privacy inquiries within ten business days. If you believe we have violated your rights, you may file a complaint with your local data protection authority in Jakarta, Surabaya, Bandung, or Medan.

We update this privacy notice from time to time to reflect operational or legal changes. We announce updates via email and in-app notification at least fourteen days before they take effect.