At mg525, your personal data is handled with the same level of care we apply to your funds. This Privacy Policy explains exactly what we collect, why we collect it, how it is used, and the rights you hold over your own information as a member of our platform.
Effective Date: 1 January 2026 | Last Updated: 1 January 2026Identity, contact, financial, and usage data only.
Account management, KYC, fraud prevention, and service improvement.
Only verified partners — never sold to third parties.
TLS 1.3 encryption, access controls, and regular audits.
Active account lifetime plus a mandatory 5-year post-closure period.
Access, rectify, erase, restrict, and port your data at any time.
In this Privacy Policy the following terms carry the meanings set out below:
mg525 collects Personal Data across four broad categories. The table below summarises each category and provides examples of the specific data points involved:
| Category | Examples of Data Collected | Mandatory? |
|---|---|---|
| Identity Data | Full legal name, date of birth, government-issued ID number (KTP/passport/SIM), nationality, selfie photograph for liveness verification. | Yes — required for KYC |
| Contact Data | Email address, Indonesian mobile phone number, residential address (including city, province, and postal code — e.g., Jakarta, Surabaya, Bandung, Bali). | Yes — required for account creation |
| Financial Data | Bank account name and number (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, Bank Permata), e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja), deposit and withdrawal transaction records, account balance history. | Yes — required for payments |
| Technical & Usage Data | IP address, device type and operating system, browser type and version, session timestamps, pages visited, bet history, game session logs, click-stream data, and crash/error reports. | Collected automatically |
| Communications Data | Records of live chat conversations, support ticket content, email correspondence, and any information you voluntarily provide when contacting our team. | Collected when you contact us |
| Marketing Preferences | Your opt-in or opt-out status for promotional emails, WhatsApp notifications, and SMS communications. | Optional |
📌 Sensitive Data: mg525 does not intentionally collect sensitive personal data such as racial or ethnic origin, religious beliefs, health information, or political opinions. If any such data is incidentally disclosed by a Member (for example, in a support message), it will not be stored beyond what is necessary to resolve the relevant query.
3.1 Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, place a bet, contact customer support, or update your account profile.
3.2 Automatically — when you access or interact with the Platform, our servers, analytics tools, and fraud-detection systems record Technical & Usage Data automatically. This includes data captured via cookies, web beacons, and server logs. See Section 8 for full details on our cookie practices.
3.3 From third parties — we may receive data about you from the following third-party sources:
mg525 processes your Personal Data only for the following defined purposes:
5.1 mg525 relies on one or more of the following legal bases to process your Personal Data:
💡 Where we rely on legitimate interests as our legal basis, we conduct a balancing test to ensure that our interests do not override your fundamental rights and freedoms. You may request details of any such assessment by contacting us at [email protected].
6.1 mg525 does not sell, rent, or trade your Personal Data to any third party for commercial marketing purposes. We share your data only in the circumstances described below, and only to the minimum extent necessary:
7.1 The mg525 Platform serves Members primarily located in Indonesia. Some of our service providers and game-content partners operate data centres located outside Indonesia, which means your Personal Data may be transferred to and processed in countries other than your country of residence.
7.2 Where such transfers occur, mg525 ensures that appropriate safeguards are in place, which may include:
7.3 You may request details of the specific safeguards in place for any given international transfer by contacting our privacy team.
8.1 mg525 uses cookies and similar tracking technologies (including web beacons, pixel tags, and local storage) to operate the Platform, remember your preferences, and gather analytics data. The categories of cookies we deploy are set out below:
| Cookie Type | Purpose | Can You Opt Out? |
|---|---|---|
| Strictly Necessary | Session management, authentication tokens, security identifiers. Required for the Platform to function. | No — essential to operation |
| Functional | Remembering language preferences, display settings, and notification preferences between sessions. | Yes — via browser settings |
| Analytics | Aggregated, anonymised statistics on page views, session duration, and feature usage — used to improve the Platform. | Yes — via browser settings |
| Fraud & Security | Device fingerprinting and behavioural-analysis signals used to detect automated bots, account takeover attempts, and bonus abuse. | No — required for platform integrity |
8.2 Most web browsers allow you to control cookie storage through their settings panels. Disabling strictly necessary or security cookies may prevent you from logging in or using core platform features. Disabling analytics or functional cookies will not affect your ability to bet or withdraw funds.
9.1 mg525 retains your Personal Data for as long as your account is active and for a mandatory post-closure period to meet our legal and regulatory obligations. The table below summarises our standard retention periods by data category:
| Data Category | Retention Period | Basis |
|---|---|---|
| Identity & KYC documents | 5 years from account closure | AML / licensing obligation |
| Financial transaction records | 5 years from the date of the transaction | AML / licensing obligation |
| Bet and game session logs | 5 years from account closure | Dispute resolution / licensing |
| Customer support communications | 3 years from the date of the last communication | Legitimate interest / dispute resolution |
| Marketing preferences & logs | Until consent is withdrawn, then deleted within 30 days | Consent |
| Technical & usage logs | 13 months from collection | Legitimate interest / security |
9.2 Once the applicable retention period expires, Personal Data is either securely deleted or anonymised so that it can no longer be attributed to any individual Member.
10.1 mg525 implements a layered security framework to protect your Personal Data from unauthorised access, accidental loss, destruction, or disclosure. Key measures include:
🛡️ Your role in security: mg525's security measures protect your data at the platform level, but you also play a critical role. Use a strong, unique password for your mg525 account, enable two-factor authentication (2FA), and never share your login credentials with anyone. mg525 staff will never ask for your password.
11.1 As a Member of mg525, you have the following rights in relation to your Personal Data. These rights are subject to certain legal limitations — for example, we may be unable to delete data that we are legally required to retain for AML purposes — but we will always explain the reason if we cannot fulfil a request in full.
Request a copy of all Personal Data we hold about you.
Ask us to correct inaccurate or incomplete data.
Request deletion of data where retention is no longer legally required.
Ask us to pause processing while a dispute is being resolved.
Receive your data in a structured, machine-readable format.
Object to processing based on legitimate interests or for direct marketing.
11.2 To exercise any of the rights listed above, please submit a written request to [email protected] with the subject line "Data Rights Request — [Your Name]". We will acknowledge your request within 5 business days and aim to fulfil it within 30 calendar days. Where a request is complex or we have received a high volume of requests, we may extend this period by a further 60 days, in which case we will notify you of the extension and the reason for it.
11.3 We will not charge a fee for handling your data rights request unless the request is manifestly unfounded or excessive — in which case we may charge a reasonable administrative fee or decline the request, and will explain our reasoning to you in writing.
12.1 The mg525 Platform is strictly for adults aged 21 years and over. We do not knowingly collect, store, or process the Personal Data of individuals under the age of 21. Our registration process includes date-of-birth verification and KYC checks specifically designed to prevent access by minors.
12.2 If you are a parent or guardian and believe that a minor under your care has created an account on mg525 or has otherwise submitted Personal Data to us, please contact us immediately at [email protected]. We will investigate promptly, close the account, return any deposited funds, and permanently delete any Personal Data associated with the minor's account.
12.3 We encourage parents and guardians to use parental control software to prevent minors from accessing online gambling platforms. Resources and guidance are available on our Responsible Gaming page.
13.1 The mg525 Platform does not contain links to external third-party websites for commercial or affiliate purposes. However, game interfaces provided by our content partners (such as Evolution Gaming or Pragmatic Play) operate within an embedded iframe environment on our Platform. While mg525 selects partners carefully, we are not responsible for the privacy practices or content of those partner environments.
13.2 If you navigate away from the mg525 Platform to any external site — for example, by independently visiting a payment provider's own website — this Privacy Policy no longer applies. We encourage you to read the privacy policy of any external site you visit.
14.1 mg525 reserves the right to update this Privacy Policy at any time to reflect changes in our data-processing practices, new legal requirements, or improvements to our platform. Where changes are material — meaning they significantly affect how we use your data or the rights available to you — we will provide advance notice via the Platform and/or by email to registered Members at least 7 calendar days before the revised policy takes effect.
14.2 The "Last Updated" date at the top of this page will always reflect the date on which the most recent revision was published. We recommend reviewing this page periodically. Your continued use of the Platform after the revised policy takes effect constitutes your acknowledgement of the changes.
14.3 If you do not agree with any material change to this Privacy Policy, you may close your account as described in Clause 9 of our Terms & Conditions.
15.1 For any questions, requests, or concerns relating to this Privacy Policy or our data-processing practices, please contact our privacy team through the following channels:
15.2 We aim to resolve all privacy-related enquiries within 10 business days. If you are not satisfied with our response, you have the right to escalate your complaint to the relevant data-protection supervisory authority in your jurisdiction.
15.3 For formal Data Rights Requests (access, erasure, portability, etc.), please follow the procedure described in Section 11.2 above to ensure your request is handled by the appropriate team within the required timeframes.
Read our Terms & Conditions for the full platform rules, visit our FAQ for quick answers, or review our Responsible Gaming commitments. We believe informed members play better.