At mc999, protecting your personal data is a responsibility we take seriously. This Privacy Policy explains what information we collect, how we use it, who we share it with, how long we retain it, and what rights you have over your data as an mc999 member in Indonesia.
Six core principles that govern how mc999 handles every piece of personal data we collect from our members.
mc999 collects only the personal data that is strictly necessary to deliver our Services, verify your identity, process transactions in IDR, and comply with applicable regulations. We do not collect data speculatively or for undefined future purposes.
All personal data stored on mc999 servers is protected by AES-256 encryption at rest and TLS 1.3 in transit. Access to member data is restricted on a strict need-to-know basis, and all staff with data access undergo regular security training and background screening.
mc999 will never sell, rent, or trade your personal data to any third party for their own independent commercial use. Data sharing is limited to operational partners and regulatory bodies strictly as required to deliver our Services or meet our legal obligations.
We retain your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. Account data is retained for a minimum of five years following account closure to meet anti-money-laundering obligations.
As an mc999 member, you have the right to access, correct, export, restrict, or request deletion of your personal data at any time, subject to applicable legal requirements. Data subject requests are processed within 30 days of receipt.
mc999 recognises the local context of our Indonesian member base. KYC documentation (including KTP national ID cards), local bank details (BCA, BRI, BNI, Mandiri), and e-wallet identifiers (OVO, DANA, GoPay) are handled with heightened care and stored on secured, access-controlled infrastructure.
In this Privacy Policy, the following terms carry the meanings set out below unless context requires otherwise:
| Term | Meaning |
|---|---|
| "mc999" / "we" / "us" / "our" | mc999 and its affiliated entities operating the online casino and sportsbook platform at https://mc999.vu. |
| "Member" / "you" / "your" | Any individual who has registered a verified account on the mc999 platform or who browses the Platform without registering. |
| "Personal Data" | Any information relating to an identified or identifiable natural person, including but not limited to name, email address, date of birth, national identity number, financial account details, and device identifiers. |
| "Processing" | Any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, and deletion. |
| "Platform" | The mc999 website at https://mc999.vu, its mobile-optimised site, and any associated software or APIs through which Services are delivered. |
| "Services" | All online casino games, sportsbook markets, live dealer tables, slots, promotional offers, and ancillary features provided by mc999. |
| "KYC" | Know Your Customer — the identity and age verification process mc999 uses to confirm a Member's eligibility to access the Services. |
| "IDR" / "Rp" | Indonesian Rupiah, the sole account currency used on the mc999 Platform. |
2.1 mc999 acts as the Data Controller in respect of all Personal Data collected from Members who register on or browse the Platform. As Data Controller, mc999 determines the purposes and means of processing your Personal Data in accordance with this Privacy Policy.
2.2 mc999 operates under an internationally recognised gaming licence and adheres to globally accepted data protection standards in its handling of member information. Our data infrastructure is maintained on secured, access-controlled servers with industry-standard encryption protocols applied at all layers.
2.3 For all data-related enquiries, including data subject requests and privacy complaints, members may contact our dedicated data protection team at: support at mc999.vu (plain text — not a clickable link).
mc999 acknowledges the importance of data privacy for our Indonesian member base. Where local Indonesian data protection requirements are applicable, mc999 will comply with those requirements in addition to our standard data protection practices.
3.1 Registration Data. When you create an mc999 account, we collect the information you provide during the registration process, including:
3.2 KYC Verification Data. To comply with our regulatory obligations and to protect against fraud and money laundering, we may collect:
3.3 Financial Transaction Data. When you make deposits or request withdrawals, we collect transaction records including:
3.4 Gameplay & Betting Data. mc999 records all gaming activity on the Platform, including:
3.5 Technical & Device Data. When you access the Platform, we automatically collect certain technical data including:
mc999 collects Personal Data through the following channels:
| Collection Method | Description |
|---|---|
| Direct submission | Data you enter directly into Platform forms during registration, KYC verification, deposit/withdrawal requests, or customer support interactions. |
| Automated technical collection | Data collected automatically by our servers and analytics systems when you browse or use the Platform, including IP address, device fingerprint, and session data. |
| Cookies & similar technologies | Persistent and session cookies, pixel tags, and local storage identifiers placed on your device to enable core Platform functionality and improve user experience (see Section 8). |
| Third-party game providers | Game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft may pass limited gameplay event data to mc999 for account crediting and dispute resolution purposes. |
| Payment processors | Banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) transmit transaction confirmation data to mc999 to facilitate deposit and withdrawal processing. |
| Fraud & compliance screening | Third-party identity verification and fraud detection partners may share risk-scoring data associated with your account activity, used solely to protect the integrity of the Platform and safeguard Members. |
mc999 uses your Personal Data for the following purposes:
5.1 Service Delivery. To create and manage your account, process deposits and withdrawals in IDR, credit winnings, administer bonuses and promotions, and provide customer support in English and Indonesian.
5.2 Identity Verification & Compliance. To conduct KYC verification and confirm that you are at least 21 years of age and a resident of Indonesia. mc999 is obligated to verify member identities under its international gaming licence conditions and applicable anti-money-laundering frameworks.
5.3 Fraud Prevention & Security. To detect and prevent fraudulent activity, account takeovers, bonus abuse, money laundering, and other prohibited conduct. mc999 employs automated anomaly-detection systems that analyse account activity patterns in real time.
5.4 Responsible Gaming. To monitor gameplay patterns for signs of problem gambling behaviour, administer self-exclusion and cooling-off periods, enforce deposit and loss limits, and proactively reach out to Members who may be experiencing gambling-related harm.
5.5 Marketing Communications. Where you have provided explicit consent, to send you promotional offers, tournament invitations, and personalised bonus notifications via email. You may withdraw marketing consent at any time by clicking the unsubscribe link in any marketing email or by contacting support at mc999.vu.
5.6 Platform Improvement. To analyse aggregated, anonymised usage data in order to improve the design, performance, and content of the Platform, personalise your experience, and develop new product features.
5.7 Legal Obligations. To comply with applicable laws, respond to lawful requests from regulatory authorities, and resolve disputes or enforce our Terms & Conditions.
mc999 will never use your Personal Data to make fully automated decisions that produce significant legal effects without human oversight. Any profiling that may affect your account standing is reviewed by a member of our compliance team before action is taken.
mc999 processes your Personal Data on one or more of the following legal bases:
| Legal Basis | When It Applies |
|---|---|
| Contractual necessity | Processing required to perform the Services you have contracted with mc999 to receive — including account creation, deposits, withdrawals, and game access. |
| Legal obligation | Processing required to comply with applicable laws, including KYC/AML verification requirements, regulatory reporting, and responses to lawful authority requests. |
| Legitimate interests | Processing for fraud prevention, security monitoring, responsible gaming oversight, and Platform improvement, where mc999's legitimate interests are not overridden by your fundamental rights. |
| Consent | Processing for marketing communications and optional personalisation features, where you have given explicit, informed consent. Consent is freely given and may be withdrawn at any time. |
7.1 Operational Partners. mc999 shares limited Personal Data with third-party service providers who assist in delivering the Services, strictly on a data-processor basis. These include:
7.2 Regulatory Disclosure. mc999 may disclose Personal Data to regulatory authorities, law enforcement agencies, or courts where required to do so by applicable law, court order, or regulatory direction. mc999 will notify affected Members of such disclosures where legally permitted to do so.
7.3 Business Transfers. In the event of a merger, acquisition, or sale of all or part of mc999's business, Personal Data held by mc999 may be transferred to the acquiring entity. mc999 will notify Members of any such transfer and ensure the acquiring entity is bound by privacy obligations no less protective than those in this Policy.
7.4 Prohibited Disclosures. mc999 will never sell, rent, licence, or otherwise transfer your Personal Data to third parties for their own independent marketing, advertising, or commercial purposes. This prohibition applies without exception.
No data sales — ever. mc999's business model is built on providing trusted gaming services, not on monetising member data. Your personal information is used solely to operate and improve our Services and to meet our legal obligations.
8.1 What Are Cookies? Cookies are small text files placed on your device by the Platform when you visit. They enable core functionality, remember your preferences, and help mc999 understand how the Platform is being used so we can improve it.
8.2 Types of Cookies We Use.
| Cookie Type | Purpose | Retention |
|---|---|---|
| Essential | Required for the Platform to function. Enable session management, login authentication, and security features such as CSRF protection. Cannot be disabled without breaking core functionality. | Session / up to 30 days |
| Functional | Remember your language and display preferences, previously viewed game categories, and responsible gaming settings to personalise your experience. | Up to 12 months |
| Analytics | Collect anonymised, aggregated data about how Members navigate the Platform — pages visited, time on site, device type — to help mc999 identify performance issues and improve content. | Up to 24 months |
| Marketing (consent required) | Used only where you have given explicit consent to receive personalised promotional communications. Track which offers you have engaged with so we can send you more relevant promotions. | Up to 12 months |
8.3 Managing Cookies. You can manage or disable non-essential cookies at any time through your browser settings. Please note that disabling essential cookies will impair your ability to log in and use core Platform features. mc999 does not use cookies to serve third-party advertising on the Platform.
mc999 retains Personal Data for the minimum period necessary to fulfil the purpose for which it was collected, subject to applicable legal minimum retention requirements. The following retention schedule applies:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account registration data | Duration of account + 5 years post-closure | AML regulatory requirement |
| KYC verification documents | Duration of account + 5 years post-closure | AML regulatory requirement |
| Financial transaction records | Duration of account + 5 years post-closure | AML & financial record-keeping |
| Gameplay & betting history | Duration of account + 3 years post-closure | Dispute resolution & audit |
| Marketing consent records | Until consent is withdrawn + 3 years | Consent audit trail |
| Technical / device logs | Up to 13 months on a rolling basis | Security & fraud prevention |
| Customer support records | 3 years from last interaction | Service quality & dispute resolution |
Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised in accordance with mc999's data destruction procedures.
As an mc999 member, you have the following rights over your Personal Data. To exercise any of these rights, contact our data protection team at support at mc999.vu with the subject line "Data Subject Request". mc999 will respond within 30 calendar days of receiving a valid request.
Request a copy of all Personal Data mc999 holds about you, including the purposes for which it is processed.
Request correction of any inaccurate or incomplete Personal Data held in your account profile.
Request deletion of your Personal Data where it is no longer necessary, subject to our legal retention obligations.
Request that mc999 restrict processing of your data while a rectification or objection request is being resolved.
Request your Personal Data in a structured, machine-readable format to transfer to another service provider.
Object to processing based on legitimate interests or direct marketing at any time, with immediate effect for marketing.
Please note that certain rights are subject to limitations. For example, mc999 cannot erase transaction records that are required to be retained under AML regulations, even upon request. mc999 will always explain the specific basis for any limitation on a data subject request response.
11.1 Technical Safeguards. mc999 implements the following technical security controls to protect your Personal Data:
11.2 Organisational Safeguards. In addition to technical measures, mc999 maintains the following organisational security practices:
11.3 Data Breach Notification. In the event of a personal data breach that poses a risk to your rights and freedoms, mc999 will notify affected Members without undue delay and in any case within 72 hours of becoming aware of the breach, in accordance with applicable data protection standards. Notification will include the nature of the breach, the categories of data affected, and the steps mc999 is taking to mitigate the impact.
While mc999 employs industry-leading security measures, no system is entirely immune to risk. We strongly encourage all Members to use a unique, strong password for their mc999 account and to enable two-factor authentication (2FA) in account settings for an additional layer of protection.
12.1 mc999 strictly prohibits use of the Platform by persons under 21 years of age. The collection of Personal Data from minors is entirely contrary to mc999's policies, and we do not knowingly collect or process data from individuals who are under 21.
12.2 Age verification is conducted as part of the KYC process for all new Members. Where mc999 becomes aware that Personal Data of a person under 21 has been collected, that account will be immediately suspended, all data will be securely deleted (to the extent permissible under applicable law), and any deposits held will be returned to the originating payment method.
12.3 Parents and guardians are encouraged to use parental control software to prevent minors from accessing online gambling sites. mc999 supports responsible parenting efforts by maintaining a clean, identifiable domain that can be included in parental filtering lists.
21+ Only. By creating an account on mc999, you confirm that you are at least 21 years of age. If you are aware of a minor who has registered or is attempting to register on mc999, please report this immediately to support at mc999.vu.
13.1 mc999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform features. The "Last updated" date at the top of this page indicates when the most recent revision was made.
13.2 Where changes are material — meaning they significantly affect how we collect, use, or share your Personal Data — mc999 will notify registered Members via email and/or a prominent in-Platform notification at least 14 days before the changes take effect.
13.3 Your continued use of the Platform following the effective date of any updated Privacy Policy constitutes your acknowledgement of the revised terms. If you do not agree with the updated Policy, you may close your account by contacting support at mc999.vu.
13.4 Previous versions of this Privacy Policy are archived and available upon request to any Member who wishes to review the history of changes to our data practices.
If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your Personal Data, please contact mc999 through the following channels:
mc999's customer support team operates around the clock, including during Indonesian national holidays such as Idul Fitri / Lebaran and Indonesian Independence Day (17 August). For responsible gaming support, please visit our dedicated Responsible Gaming page.
This Privacy Policy was last reviewed and updated on 1 January 2026. mc999 is committed to keeping this Policy accurate, up to date, and written in clear, accessible English so that all Members understand exactly how their data is handled. If anything in this Policy is unclear, please reach out — we are happy to explain.
Now that you understand how mc999 protects your personal data, join thousands of Indonesian players already enjoying our world-class casino games, live sportsbook, and exclusive bonuses — all in Indonesian Rupiah.