Privacy Policy

This Privacy Policy ("Policy") describes how mata56, the internationally operated online betting and gaming platform accessible at https://mata56.cam ("Platform", "mata56", "we", "us", "our"), collects, uses, stores, shares, and protects personal data relating to individuals who access the Platform ("Players", "you", "your").

mata56 is committed to the responsible stewardship of personal data. This Policy is written in plain, accessible English so that every Player — whether based in Jakarta, Surabaya, Bali, Medan, Bandung, or elsewhere across Indonesia — understands precisely how their information is handled before they create an Account or place a wager.

This Policy forms part of the agreement between you and mata56 and should be read alongside our Terms & Conditions and our Responsible Gaming Policy.

"Personal Data" means any information that identifies or could reasonably identify a natural person, directly or indirectly, including name, email address, phone number, device identifiers, and financial account details.

"Processing" means any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, erasure, or destruction.

"Controller" means the entity that determines the purposes and means of Processing Personal Data — in this context, mata56.

"Processor" means a third party that processes Personal Data on behalf of the Controller in accordance with the Controller's documented instructions.

"KYC" or "Know Your Customer" means the identity, age, and eligibility verification process applied to all Players as a condition of Account activation and withdrawal eligibility.

"Consent" means a freely given, specific, informed, and unambiguous indication of agreement by a Player to the Processing of their Personal Data for a stated purpose.

"Sensitive Data" refers to categories of Personal Data that warrant heightened protection, including but not limited to health information, government identification numbers, and financial account credentials.

3.1 Data Provided Directly by You. When you register an Account, complete KYC verification, make a deposit, submit a support request, or communicate with mata56 in any way, you may provide the following categories of Personal Data:

• Full legal name as it appears on a government-issued identification document;
• Date of birth (used to verify that you are 21 years of age or older);
• Email address and Indonesian mobile number;
• Residential address in Indonesia;
• Copies of identity documents (KTP, passport, or SIM) submitted during KYC;
• Bank account details or e-wallet identifiers (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, OVO, DANA, GoPay, ShopeePay, LinkAja) used for deposits and withdrawals;
• Selfie photographs submitted as part of biometric KYC verification;
• Any information included in support tickets, chat transcripts, or email correspondence with mata56.

3.2 Data Collected Automatically. When you access the Platform, mata56's systems automatically collect certain technical and behavioural data:

• IP address and approximate geolocation derived from IP;
• Device type, operating system, and browser version;
• Session timestamps, pages viewed, and navigation paths within the Platform;
• Wagering activity, game selections, deposit and withdrawal history, and Wallet balance history;
• Cookie identifiers and similar session tokens (see Section 9).

3.3 Data from Third Parties. mata56 may receive Personal Data about you from third-party sources in limited circumstances, including:

• KYC verification partners who validate the authenticity of identification documents;
• Payment processors who confirm the status and ownership of a payment instrument;
• Fraud prevention and anti-money-laundering screening services that flag risk indicators against industry watchlists.

mata56 uses the Personal Data it collects for the following purposes:

1. Account Management: Creating and maintaining your Account, authenticating your identity at login, and communicating transactional updates (deposit confirmations, withdrawal notifications, security alerts).
2. KYC and Age Verification: Verifying that you are at least 21 years of age and that the identity and payment method details you have provided are genuine and belong to you.
3. Payment Processing: Facilitating deposits and withdrawals via Indonesian local banks (BCA, BRI, BNI, Mandiri, and others) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja), and maintaining accurate Wallet balance records.
4. Responsible Gaming: Monitoring account activity to detect patterns consistent with problem gambling, applying self-imposed limits you have set, and contacting you if internal assessments indicate a responsible gaming intervention may be warranted.
5. Fraud Prevention and Security: Detecting and investigating suspicious activity, preventing unauthorized access to Accounts, and complying with anti-money-laundering and counter-financing-of-terrorism obligations.
6. Platform Improvement: Analysing aggregated, anonymized usage data to improve game selection, interface design, performance, and the overall player experience.
7. Legal Compliance: Retaining records required under applicable law, responding to lawful regulatory requests, and enforcing the mata56 Terms & Conditions.
8. Marketing Communications (with consent): Sending you information about new games, promotions, seasonal bonuses, and platform updates — only where you have provided explicit consent to receive such communications.

mata56 processes your Personal Data only where a recognized legal basis applies. The primary legal bases relied upon are:

• Contractual Necessity: Processing required to perform the contract between you and mata56 (i.e., operating your Account, processing payments, settling Wagers).
• Legal Obligation: Processing required to comply with applicable law, regulatory requirements, or lawful orders from competent authorities — including KYC, anti-money-laundering record-keeping, and age verification.
• Legitimate Interests: Processing necessary for mata56's legitimate interests in fraud prevention, platform security, responsible gaming monitoring, and service improvement — where those interests are not overridden by your privacy rights.
• Consent: Processing for marketing communications and certain optional personalisation features, where you have given explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6.1 mata56 does not sell, rent, or trade your Personal Data to any third party for that party's own independent commercial purposes.

6.2 mata56 shares Personal Data only with the following categories of recipients, and only to the extent necessary for the stated purpose:

• Payment Processors: Banks and e-wallet operators (including those supporting BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and LinkAja transactions) who process your deposits and withdrawals on mata56's behalf;
• KYC and Identity Verification Partners: Third-party providers who verify the authenticity of identity documents and confirm age eligibility;
• Fraud and AML Screening Services: Providers who screen transactions and account activity against industry fraud watchlists and anti-money-laundering databases;
• Game Content Providers: Licensor studios (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Pocket Games Soft, and Spribe) who may receive limited technical session data to deliver game content and resolve disputes;
• IT and Platform Infrastructure Providers: Cloud hosting, CDN, and cybersecurity vendors who process data solely on mata56's documented instructions and under binding data processing agreements;
• Regulatory and Law Enforcement Authorities: Where disclosure is required by law, court order, or the lawful request of a competent regulatory or law enforcement body.

6.3 All third-party Processors engaged by mata56 are required to implement appropriate technical and organizational security measures and to process Personal Data solely in accordance with mata56's written instructions.

7.1 mata56 retains Personal Data for no longer than is necessary for the purposes for which it was collected, taking into account applicable legal retention obligations.

7.2 The following standard retention periods apply:

7.3 Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymized so that it can no longer be attributed to any individual. Anonymized data may be retained indefinitely for aggregated analytical purposes.

8.1 mata56 implements a layered approach to data security that includes the following technical and organizational controls:

• TLS 1.2 / 1.3 encryption for all data in transit between your device and Platform servers;
• AES-256 encryption for sensitive data at rest, including stored KYC documents and financial records;
• Role-based access controls ensuring that staff can only access Personal Data necessary for their specific job function;
• Multi-factor authentication requirements for all administrative Platform access;
• Regular penetration testing and vulnerability assessments conducted by independent cybersecurity specialists;
• 24/7 intrusion detection and security incident monitoring;
• Strict data processing agreements with all third-party Processors imposing equivalent security standards.

8.2 In the event of a Personal Data breach that is likely to result in a high risk to your rights and freedoms, mata56 will notify affected Players without undue delay and will take immediate remediation steps.

8.3 While mata56 implements robust technical safeguards, no system connected to the internet is entirely immune to risk. You are responsible for maintaining the security of your own Account credentials. mata56 will never ask you to share your password via email, chat, or any other channel.

9.1 mata56 uses cookies — small text files stored on your device — and similar technologies such as local storage tokens and session identifiers. These technologies are used for the following purposes:

9.2 mata56 does not deploy third-party advertising cookies, cross-site tracking pixels, or behavioural profiling technologies from social media platforms or ad networks.

9.3 You can control cookie behaviour through your browser settings. Disabling essential cookies will prevent the Platform from functioning correctly. Disabling non-essential cookies (analytics and preference cookies) will not affect your core Platform experience.

10.1 Subject to applicable law and verification of your identity, you may exercise any of the following rights in relation to the Personal Data mata56 holds about you:

1. Access: Obtain a copy of your Personal Data held by mata56;
2. Rectification: Request correction of inaccurate or incomplete data;
3. Erasure: Request deletion of Personal Data where it is no longer required for its original purpose, subject to legal retention obligations;
4. Restriction: Ask mata56 to temporarily pause processing of your data while a dispute is under review;
5. Portability: Receive your data in a structured, machine-readable format for transfer to another provider;
6. Objection: Object to processing carried out on the basis of legitimate interests;
7. Withdrawal of Consent: Withdraw consent for marketing processing at any time.

10.2 To submit a data rights request, contact the mata56 privacy team at [email protected]. Requests will be acknowledged within 5 business days and resolved within 30 calendar days. Complex requests may require up to an additional 60 days, in which case you will be informed of the extension and its reason.

10.3 mata56 may need to verify your identity before processing a data rights request to protect against unauthorized requests. Verification typically requires you to respond from the email address registered to your Account.

11.1 With your explicit consent, mata56 may send you promotional communications by email or SMS, including information about new game releases, bonus offers, seasonal promotions tied to events such as Idul Fitri, Ramadhan, or the BRI Liga 1 season, and platform feature updates.

11.2 You may withdraw your marketing consent at any time by:

• Clicking the "unsubscribe" link in any mata56 marketing email;
• Updating your communication preferences in your Account dashboard;
• Contacting support at [email protected] and requesting removal from marketing lists.

11.3 Withdrawing marketing consent does not affect your ability to receive transactional communications (deposit confirmations, withdrawal updates, security alerts, or KYC status notifications) that are necessary for the operation of your Account.

11.4 mata56 does not sell your contact details to third-party marketers. All promotional communications originate from mata56 and relate exclusively to the Platform's own products and services.

12.1 The mata56 Platform is strictly intended for adults aged 21 and over. mata56 does not knowingly collect Personal Data from individuals under the age of 21.

12.2 Age verification is a mandatory step in the Account registration process. Where mata56 has reasonable grounds to believe that a registered Account is operated by a person under 21 , the Account will be immediately suspended pending verification. Any funds deposited by an underage player will be returned and all Wager activity will be voided.

12.3 If you are a parent or guardian and believe your child has registered an Account with mata56, please contact us immediately at [email protected]. We will investigate and take prompt action, including Account closure and refund of any deposited funds where applicable.

13.1 mata56 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, our data processing practices, or the services offered on the Platform.

13.2 Where a change is material — meaning it significantly affects how we collect, use, or share your Personal Data — mata56 will provide at least 14 days' advance notice by posting a prominent notice on the Platform and, where possible, by sending a notification to the email address registered to your Account.

13.3 Minor amendments (such as clarifications, formatting corrections, or updates to contact details) may be made without advance notice. The "Last updated" date at the top of this Policy will always reflect the date of the most recent revision.

13.4 Your continued use of the Platform after the effective date of a revised Policy constitutes your acceptance of the updated terms. If you do not agree with the revised Policy, you should close your Account and withdraw any remaining Wallet balance before the effective date.

14.1 For any questions, concerns, or requests relating to this Privacy Policy or the way mata56 handles your Personal Data, please contact our privacy team using the details below:

Privacy & Data Enquiries: [email protected]

Response Time: mata56 aims to acknowledge all privacy-related enquiries within 2 business hours during standard WIB operating hours (09:00–22:00 WIB, 7 days a week) and to provide a substantive response within 5 business days.

Language: You may submit privacy enquiries in English or Indonesian. Our privacy team is fluent in both languages.