myspil Privacy Policy

1. Introduction and Scope

myspil ("we", "us", "our") is committed to protecting the privacy and security of your personal information. This Privacy Policy describes how we collect, use, disclose, store, and safeguard personal data provided by users ("you", "your") of the myspil online betting platform, accessible at https://myspil.cam and through our mobile applications (collectively, the "Platform"). This Privacy Policy applies to all users located in Indonesia and covers all services offered by myspil, including sports betting (bandar bola), live casino games, togel (lottery), slot games, and other gambling products.

By registering an account, accessing the Platform, or using any of our services, you acknowledge that you have read, understood, and agree to the collection, use, and disclosure of your personal information as described in this Privacy Policy. If you do not agree with this Privacy Policy, you must immediately cease using our services and close your account. myspil reserves the right to amend this Privacy Policy at any time. Any changes will be effective immediately upon publication on this page, and the "Last Updated" date will be revised accordingly. Your continued use of the Platform after any modification constitutes acceptance of the revised Privacy Policy.

2. Information We Collect

myspil collects several categories of personal information to provide, maintain, improve, and secure our services. The types of data we collect include:

2.1 Information You Provide Directly

When you register an account on myspil, you voluntarily provide personal information including:

• Identity Information: Full legal name (as it appears on your government-issued identification), date of birth, gender, and nationality. This information is required to verify that you meet our minimum age requirement of 21 years and to comply with KYC regulations.
• Contact Information: Email address, mobile phone number (including country code for Indonesia, typically +62), and residential address (street, city, province, postal code). We use this information to communicate with you about your account, transactions, promotions, and customer support inquiries.
• Account Credentials: Username and password chosen during registration. You are solely responsible for maintaining the confidentiality of these credentials. We encrypt passwords using industry-standard hashing algorithms and never store passwords in plain text.
• Identity Verification Documents: To comply with KYC and AML regulations, we require you to upload copies of government-issued photo identification (Indonesian KTP, passport, or driving license), proof of residential address (utility bill, bank statement, or government correspondence dated within the last 3 months), and in some cases, proof of payment method ownership (bank statement or e-wallet screenshot showing your name and account number). We store these documents securely and use them solely for identity verification purposes.
• Financial Information: Bank account details (bank name, account number, account holder name) or e-wallet information (DANA, OVO, GoPay, ShopeePay, LinkAja account details) for processing deposits and withdrawals. We do not store complete credit card numbers or CVV codes; payment processing is handled by licensed third-party payment processors using PCI-DSS compliant systems.
• Communication Records: If you contact our customer support team via live chat, WhatsApp, email, or in-app messaging, we retain transcripts of these communications to resolve your inquiries, improve service quality, and maintain a record of customer interactions for legal and compliance purposes.

2.2 Information Collected Automatically

When you access or use the myspil Platform, we automatically collect certain technical and usage information:

• Device Information: Device type (mobile phone, tablet, desktop computer), operating system (Android, iOS, Windows, macOS), browser type and version, screen resolution, and device identifiers (IMEI, IDFA, Android ID, or similar unique identifiers).
• IP Address and Location Data: Your Internet Protocol (IP) address is automatically logged each time you access the Platform. We use IP addresses to determine your approximate geographic location (country, city-level) to ensure you are accessing our services from within Indonesia and to detect suspicious login attempts from unusual locations. We do not use GPS-level precise location tracking unless you explicitly grant location permissions in our mobile app.
• Cookies and Tracking Technologies: myspil uses cookies (small text files stored on your device), web beacons, pixel tags, and similar tracking technologies to enhance user experience, maintain login sessions, analyze site traffic, and deliver personalized content. For detailed information about cookies, see Section 9 below.
• Betting and Gaming Activity: We record all betting and gaming activity on your account, including bets placed (stake amount, odds, bet type, event details), bets settled (wins, losses, refunds), games played, session duration, deposit and withdrawal transactions, bonus usage, and account balance history. This data is essential for providing our services, calculating payouts, detecting fraud, and complying with responsible gaming policies.
• Website and App Usage Data: Pages visited, features used, links clicked, time spent on each page, search queries entered on our Platform, referring URL (the website you came from before visiting myspil), and clickstream behavior. We analyze this data to understand user preferences, improve website navigation, and optimize our services.

2.3 Information from Third Parties

In some cases, we receive information about you from third-party sources:

• Payment Processors: When you deposit funds via bank transfer or e-wallet, our licensed payment processing partners (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, OCBC NISP, BSI, DANA, OVO, GoPay, ShopeePay, LinkAja) may share transaction details with us to confirm payment completion and prevent fraud.
• Identity Verification Services: We may use third-party identity verification and KYC service providers to validate the authenticity of documents you submit and to screen against databases of known fraudsters, politically exposed persons (PEPs), and sanction lists.
• Marketing Partners: If you arrive at myspil through an affiliate link or marketing campaign, we may receive information about the referral source, campaign identifier, and conversion data. We do not receive any personal data from these partners beyond what you voluntarily provide when creating your account.

3. How We Use Your Information

myspil uses the personal information we collect for the following purposes:

3.1 Service Provision and Account Management

• To create, maintain, and manage your myspil account.
• To process deposits, withdrawals, and other financial transactions in Indonesian Rupiah (IDR/Rp).
• To offer sports betting, live casino, togel, slots, and other gaming products.
• To calculate, settle, and credit winnings to your account balance.
• To manage bonuses, promotions, free bets, and loyalty programs.
• To provide customer support via live chat, WhatsApp, email, and in-app messaging.

3.2 Legal and Regulatory Compliance

• To verify your identity, age (21+ requirement), and residential address through KYC procedures.
• To comply with anti-money laundering (AML) regulations by monitoring transaction patterns and reporting suspicious activity.
• To detect and prevent fraud, collusion, bonus abuse, multi-accounting, and other violations of our Terms and Conditions.
• To maintain records required by gaming regulators and financial authorities.
• To respond to lawful requests from law enforcement, courts, or regulatory bodies.

3.3 Security and Fraud Prevention

• To protect the security and integrity of the myspil Platform by monitoring for unauthorized access, hacking attempts, and technical vulnerabilities.
• To detect duplicate accounts, automated bot activity, and other forms of abuse.
• To analyze IP addresses, device fingerprints, and behavioral patterns to identify fraudulent behavior.
• To implement and maintain technical security measures including 256-bit SSL encryption and firewalls.

3.4 Marketing and Communications

• To send you promotional offers, bonus notifications, and updates about new games or features via email, SMS, WhatsApp, or in-app notifications (only if you have consented to receive marketing communications; you may opt out at any time).
• To personalize your experience on the Platform by recommending games, betting markets, or promotions based on your past activity and preferences.
• To conduct market research and analyze user preferences to improve our product offerings.

3.5 Service Improvement and Analytics

• To analyze website and app usage patterns to identify areas for improvement, optimize user interface design, and enhance overall user experience.
• To test new features, conduct A/B testing, and gather feedback on Platform performance.
• To generate aggregated, anonymized statistical reports about user demographics, betting trends, and popular games (this data does not identify individual users).

3.6 Responsible Gaming

• To monitor betting patterns and identify signs of problem gambling behavior.
• To enforce deposit limits, time-out periods, and self-exclusion requests.
• To provide information and support resources for players who may be experiencing gambling-related harm.

4. How We Share Your Information

myspil does not sell, rent, or trade your personal information to third parties for their own marketing purposes. However, we may share your information with the following categories of recipients under strict confidentiality and data protection agreements:

4.1 Service Providers and Business Partners

We engage trusted third-party service providers to perform functions on our behalf, including:

• Payment Processors: BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, OCBC NISP, BSI, DANA, OVO, GoPay, ShopeePay, LinkAja, and other licensed payment gateway providers process deposits and withdrawals on our behalf. These providers only receive information necessary to complete transactions (name, account number, transaction amount).
• KYC and Identity Verification Services: Third-party identity verification specialists analyze documents you submit to confirm authenticity and screen against fraud databases. These providers operate under strict data protection agreements and delete document copies after verification is complete.
• Customer Support Tools: We use live chat software, ticketing systems, and customer relationship management (CRM) platforms to manage support inquiries. These tools may be hosted by third-party providers who have access to communication transcripts solely for the purpose of facilitating customer support.
• Marketing and Analytics Platforms: We use analytics tools (e.g., Google Analytics with IP anonymization enabled) and email marketing services to track Platform usage, measure campaign effectiveness, and send promotional communications to users who have opted in.
• Cloud Hosting and Data Storage: myspil stores data on secure cloud servers provided by reputable hosting companies. All data is encrypted at rest and in transit, and access is restricted to authorized personnel only.

4.2 Legal and Regulatory Authorities

We may disclose your personal information to law enforcement agencies, courts, regulatory bodies, or government authorities when required by law or when we believe in good faith that disclosure is necessary to:

• Comply with a legal obligation, court order, subpoena, or warrant.
• Enforce our Terms and Conditions or investigate potential violations.
• Protect the rights, property, or safety of myspil, our users, or the public.
• Detect, prevent, or investigate fraud, security breaches, or illegal activities.

4.3 Business Transfers

In the event that myspil undergoes a merger, acquisition, reorganization, or sale of all or a portion of its assets, your personal information may be transferred to the acquiring entity. We will notify you via email and/or a prominent notice on our Platform prior to any such transfer, and the acquiring entity will be required to continue protecting your data in accordance with this Privacy Policy.

4.4 Aggregated and Anonymized Data

We may share aggregated, anonymized, or de-identified data that does not personally identify you with third parties for statistical analysis, research, or business intelligence purposes. For example, we may publish reports about overall betting trends, popular games, or demographic distribution of our user base without revealing any individual user information.

5. Data Retention and Deletion

myspil retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal and regulatory obligations, resolve disputes, and enforce our agreements. Specific retention periods include:

• Active Accounts: Personal data associated with active accounts is retained for the duration of your relationship with myspil and for a reasonable period thereafter to handle any post-closure inquiries or disputes.
• Closed Accounts: After you close your account (either voluntarily or due to Terms violations), we retain essential records (identity documents, transaction history, betting records) for a minimum of 7 years as required by AML regulations and gaming licensing requirements.
• KYC Documents: Identity verification documents (KTP, passport, proof of address) are retained for the duration of your account lifetime plus 7 years after account closure to comply with regulatory record-keeping obligations.
• Financial Transaction Records: Deposit, withdrawal, and betting transaction logs are retained for a minimum of 7 years to comply with financial regulations and to resolve any transaction disputes.
• Marketing Communications: If you opt out of marketing communications, we will retain a record of your opt-out preference indefinitely to ensure we do not accidentally send you promotional messages in the future.
• Technical Logs: Server logs, IP addresses, and device identifiers are typically retained for 12-24 months for security monitoring and troubleshooting purposes, then automatically deleted or anonymized.

After the applicable retention period expires, we securely delete or anonymize your personal information in accordance with industry best practices. Deletion is permanent and irreversible. Please note that due to backups and technical constraints, complete deletion from all systems may take up to 90 days.

6. Your Privacy Rights

Depending on your jurisdiction and applicable data protection laws, you may have the following rights regarding your personal information:

6.1 Right to Access

You have the right to request a copy of the personal information myspil holds about you. To exercise this right, contact our customer support team at [email protected] (display only, not a clickable link). We will provide the requested information in a structured, commonly used electronic format within 30 days of receiving your request, subject to identity verification.

6.2 Right to Rectification

You have the right to request correction of inaccurate or incomplete personal information. You can update most information (email, phone number, address) directly through your account settings. For changes that require document verification (e.g., name correction), contact our support team.

6.3 Right to Erasure (Right to Be Forgotten)

You have the right to request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected, or if you withdraw consent. However, this right is not absolute — we may be legally required to retain certain information for regulatory compliance (e.g., AML records must be kept for 7 years). We will honor all legally permissible deletion requests.

6.4 Right to Data Portability

You have the right to receive your personal data in a structured, machine-readable format and to transmit that data to another service provider. This right applies to data you provided to us with your consent or under a contract.

6.5 Right to Object and Withdraw Consent

You have the right to object to certain processing activities, including direct marketing. You can opt out of marketing communications at any time by clicking the unsubscribe link in promotional emails, adjusting your communication preferences in account settings, or contacting support. Note that even if you opt out of marketing, we will still send transactional emails (deposit confirmations, withdrawal notifications, security alerts) necessary for account management.

6.6 Right to Restrict Processing

In certain circumstances, you have the right to request that we temporarily restrict processing of your personal data while we verify accuracy or assess your objection to processing.

To exercise any of these rights, please contact our Data Protection Officer at [email protected] (display only, not a clickable link) with your full name, registered email address, and a description of your request. We will respond within 30 days. If we cannot honor your request due to legal obligations or other legitimate reasons, we will explain why.

7. Data Security Measures

myspil employs industry-leading technical, physical, and organizational security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction:

• Encryption: All data transmitted between your device and our servers is protected using 256-bit SSL/TLS encryption. Sensitive data (passwords, payment details, identity documents) is encrypted at rest using AES-256 encryption standards.
• Secure Servers: Our data centers are located in secure facilities with 24/7 monitoring, redundant power supplies, fire suppression systems, and restricted physical access limited to authorized personnel only.
• Access Controls: Employee access to personal data is strictly limited based on role and necessity. All access is logged and regularly audited. Employees handling sensitive data undergo background checks and sign confidentiality agreements.
• Firewalls and Intrusion Detection: We deploy advanced firewalls, intrusion detection systems (IDS), and intrusion prevention systems (IPS) to monitor and block malicious traffic.
• Regular Security Audits: myspil undergoes regular third-party security audits, vulnerability assessments, and penetration testing to identify and remediate potential weaknesses.
• Secure Payment Processing: All payment transactions are processed through PCI-DSS Level 1 compliant payment gateways. myspil does not store complete credit card numbers or CVV codes.
• Incident Response: We maintain a comprehensive incident response plan to quickly detect, contain, and respond to any data security breach. In the unlikely event of a breach affecting your personal data, we will notify you and relevant authorities as required by law.

While we implement robust security measures, no system is entirely immune to attack. You are responsible for maintaining the confidentiality of your account credentials and for any activity that occurs under your account. Do not share your password with anyone, and immediately notify us if you suspect unauthorized access to your account.

8. International Data Transfers

myspil primarily operates within Indonesia and serves Indonesian residents. However, some of our service providers and data processing facilities may be located outside Indonesia. When we transfer your personal data to countries outside Indonesia, we ensure adequate protection through one or more of the following mechanisms:

• Standard Contractual Clauses (SCCs) approved by relevant data protection authorities.
• Processing agreements requiring third-party providers to implement security measures equivalent to those described in this Privacy Policy.
• Transfers to countries recognized as providing adequate data protection standards.

By using myspil services, you acknowledge and consent to the transfer of your personal data to these third-party providers for the purposes described in this Privacy Policy.

9. Cookies and Tracking Technologies

myspil uses cookies and similar tracking technologies to enhance your experience, maintain login sessions, analyze site usage, and deliver personalized content. A cookie is a small text file stored on your device by your web browser. Cookies allow us to recognize your device on subsequent visits and remember your preferences.

Types of Cookies We Use:

• Essential Cookies: Necessary for the Platform to function properly. These cookies enable core functionality such as account login, secure transactions, and navigation. Disabling these cookies will impair Platform functionality.
• Performance and Analytics Cookies: Collect anonymous information about how visitors use the Platform (pages visited, time spent, errors encountered). We use this data to improve website performance and user experience. These cookies do not identify you personally.
• Functionality Cookies: Remember your preferences (language, currency display, bet slip settings) to provide a more personalized experience.
• Marketing and Advertising Cookies: Track your browsing behavior to deliver relevant advertisements and measure campaign effectiveness. These cookies may be set by third-party advertising partners.

You can control cookie settings through your browser preferences. Most browsers allow you to refuse all cookies or only accept certain types. However, disabling essential cookies may prevent you from accessing certain Platform features. For more information about cookies and how to manage them, visit www.allaboutcookies.org (reference only, not a clickable link per site restrictions).

10. Children's Privacy

myspil services are intended exclusively for adults aged 21 years and older. We do not knowingly collect personal information from anyone under the age of 21. If we become aware that a user is under 21, we will immediately close their account, void all transactions, and delete their personal information. If you believe a minor has created an account on myspil, please contact us immediately at [email protected] (display only, not a clickable link) so we can take appropriate action.

11. Changes to This Privacy Policy

myspil reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or business operations. When we make material changes, we will notify you by email (if you have provided an email address) and/or by posting a prominent notice on our Platform at least 7 days before the changes take effect. The "Last Updated" date at the top of this document will always reflect the most recent revision date. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of myspil services after the effective date of any changes constitutes acceptance of the revised Privacy Policy.

12. Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or our data handling practices, please contact our Data Protection Officer:

• Email: [email protected] (display only, not a clickable link)
• Live Chat: Available 24/7 via the chat icon on the myspil Platform
• WhatsApp Support: Contact number visible after login (displayed as text only, not a clickable tel: link)
• In-App Messaging: Submit a privacy-related inquiry through your account dashboard

We are committed to resolving privacy concerns promptly and transparently. Our Indonesian-speaking support team operates 24/7 in Western Indonesia Time (WIB, UTC+7) and will respond to privacy inquiries within 48 hours during business days.