Privacy Policy

1 Introduction

This Privacy Policy governs the collection, storage, processing, and disclosure of personal data by mex389, operated at https://mex389.cam (hereinafter referred to as "mex389", "the Platform", "we", "us", or "our"). It applies to all individuals who access, register on, or otherwise interact with the mex389 platform, including registered players, prospective users, and visitors browsing without an account (collectively referred to as "you" or "the User").

By accessing or using any part of the mex389 platform, you acknowledge that you have read, understood, and agree to the data practices described in this Privacy Policy. If you do not agree with any aspect of this policy, you should discontinue use of the platform immediately.

This Privacy Policy is incorporated by reference into our Terms & Conditions and forms part of the overall agreement governing your relationship with mex389. We encourage you to read both documents in full before using our services.

2 Definitions

The following definitions apply throughout this Privacy Policy:

3 Data We Collect

mex389 collects personal data across several categories depending on how you interact with the platform. The following table outlines the categories of data we collect and representative examples within each:

We do not intentionally collect sensitive personal data categories such as racial or ethnic origin, religious beliefs, health data, or biometric data unless directly required by a specific regulatory obligation and only with explicit consent where legally mandated.

4 How Data Is Collected

mex389 collects personal data through the following channels and mechanisms:

4.1 Direct Submission

You provide data directly to us when you register an account, complete the KYC verification process, make a deposit or withdrawal request, submit documents for identity verification, contact our customer support team, or respond to surveys or promotions. All fields marked as mandatory during registration are required for the lawful provision of our services.

4.2 Automated Collection

When you visit the mex389 platform, our servers automatically collect certain technical data, including your IP address, device identifiers, browser configuration, and session metadata. This data is collected through server logs, cookies, and similar tracking technologies as described in Section 11 of this policy.

4.3 Third-Party Sources

We may receive personal data about you from trusted third-party service providers who assist in the delivery of our services, including:

• Identity verification and KYC service providers who validate the authent icity of submitted documents
• Payment processors and banking partners (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja) who confirm transaction details
• Fraud detection and anti-money laundering screening providers who flag high-risk activity patterns
• Analytics providers who supply aggregated behavioral data to help us improve the platform experience

Any data received from third-party sources is handled in accordance with this Privacy Policy and subject to the same security and retention standards applied to data you provide directly.

5 Purposes of Processing

mex389 processes your personal data only for clearly defined, legitimate purposes. We do not process data in any manner incompatible with the purposes disclosed at the time of collection. The primary purposes for which we process personal data are as follows:

5.1 Account Management & Service Delivery

We process identity and contact data to create and maintain your registered account, authenticate your identity on login, deliver the gaming and betting services you request, process deposits and withdrawals via local Indonesian payment channels, and communicate service-related updates including changes to terms, scheduled maintenance, and security alerts.

5.2 KYC & Regulatory Compliance

We are required to verify the identity and age of all registered players before authorizing withdrawals and as part of our ongoing compliance obligations. Processing identity and verification document data enables us to confirm that you are at least 21 years of age, a genuine individual operating your own account, and not subject to any self-exclusion or sanctions list. This processing is a legal and operational necessity — accounts that cannot be verified may be restricted or closed.

5.3 Financial Transaction Processing

Financial data is processed to execute deposit and withdrawal requests accurately and securely, reconcile transaction records, detect and prevent unauthorized transactions, and fulfill reporting obligations to our licensed payment processing partners. All financial data is transmitted over encrypted channels and stored in compliance with applicable data security standards.

5.4 Fraud Prevention & Security

Technical data, account activity data, and financial data are analyzed to detect patterns consistent with fraud, money laundering, bonus abuse, account compromise, or other prohibited conduct as defined in our Terms & Conditions. Automated and manual reviews may be conducted when anomalous activity is detected. This processing is essential to protecting both the platform and all legitimate users from financial and reputational harm.

5.5 Customer Support

Communications data and account activity data are processed to respond to your support inquiries, investigate complaints, resolve disputes, and improve the quality of our customer service. Support interactions may be recorded for quality assurance and training purposes. Our support team includes native Indonesian-speaking agents available 24 hours a day, 7 days a week.

5.6 Platform Improvement & Analytics

Aggregated and anonymized technical and behavioral data is used to analyze platform performance, understand how players navigate the site, identify technical issues, and make data-driven improvements to user experience. Where analytics processing involves non-anonymized data, it is conducted under a legitimate interests basis and limited to the minimum data necessary for the analytical purpose.

5.7 Marketing Communications

Where you have provided explicit consent, we may use your contact data to send promotional communications about mex389 bonuses, seasonal promotions (such as offers tied to Idul Fitri, Ramadhan, or Indonesian Independence Day), and new product features. You may withdraw consent and unsubscribe from marketing communications at any time by contacting our support team. Withdrawal of consent does not affect the lawfulness of processing conducted prior to withdrawal.

6 Legal Basis for Processing

mex389 processes personal data under one or more of the following recognized legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing required to fulfill our obligations under the User Agreement and Terms & Conditions — including account creation, service delivery, and payment processing — is carried out on the basis that it is necessary for the performance of a contract with you.
• Legal Obligation: Certain processing activities — particularly KYC verification, transaction record-keeping, and fraud reporting — are carried out because mex389 is legally required to do so under applicable international gaming regulations and anti-money laundering frameworks.
• Legitimate Interests: Processing for fraud prevention, platform security, analytics, and customer service improvement is carried out on the basis of mex389's legitimate interests in operating a secure, compliant, and high-quality platform. Such processing is proportionate and does not override your fundamental privacy rights.
• Consent: Processing for optional marketing communications and non-essential cookies is conducted on the basis of your freely given, informed consent. You may withdraw consent at any time without detriment to your account standing.

7 Data Sharing

mex389 does not sell your personal data. We share personal data only in the following circumstances and only to the extent necessary for the stated purpose:

7.1 Service Providers (Data Processors)

We engage carefully selected third-party service providers who process personal data on our behalf under strict contractual obligations. These include KYC and identity verification partners, payment processing intermediaries, fraud detection vendors, cloud infrastructure providers, and customer support platform operators. All processors are required to implement appropriate technical and organizational security measures and may not use your data for any purpose beyond the specific service they provide to mex389.

7.2 Payment Partners

To process deposits and withdrawals via Indonesian banking and e-wallet channels — including BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, and LinkAja — we share the minimum necessary financial and identity data with the relevant payment institution. Each payment partner operates under its own privacy policy and applicable Indonesian banking regulations.

7.3 Game Content Providers

Our casino game and betting content is supplied by internationally licensed studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft. These providers may receive limited technical data (such as a player session token or anonymized identifier) to facilitate gameplay. No personally identifiable data beyond what is technically necessary is shared with game providers.

7.4 Legal & Regulatory Disclosure

We may disclose personal data to law enforcement agencies, regulatory authorities, courts, or other public bodies where we are required to do so by law, court order, or regulatory direction. We will notify affected users of such disclosure requests to the extent permitted by applicable law.

7.5 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of substantially all of mex389's assets, personal data held by us may be transferred to the relevant successor entity. Users will be notified of any such transfer and the privacy terms applicable thereafter prior to the transfer taking effect.

8 International Data Transfers

mex389 operates as an internationally licensed platform. As a result, your personal data may be transferred to, stored in, and processed in countries outside Indonesia where our infrastructure providers, game content partners, or compliance service providers are located. Not all such countries maintain data protection laws equivalent to Indonesian standards.

Where personal data is transferred internationally, mex389 takes appropriate safeguards to ensure the data remains protected to a standard consistent with this Privacy Policy. These safeguards include contractual protections with data recipients, application of recognized international data security frameworks, and where possible, data minimization to reduce the volume of personal data transferred across borders.

If you have specific questions about the international transfer of your data or wish to obtain information about the safeguards in place for a particular transfer, you may contact us using the details provided in Section 15.

9 Data Retention

mex389 retains personal data for no longer than is necessary to fulfill the purposes for which it was collected, subject to any legal or regulatory retention obligations that require us to hold certain data for a minimum specified period. The following general retention periods apply:

Once the applicable retention period has expired, personal data is securely deleted or irreversibly anonymized. Anonymized data — from which no individual can be identified — may be retained indefinitely for statistical and analytical purposes.

10 Your Rights

As a data subject, you hold a number of rights in respect of your personal data held by mex389. We are committed to facilitating the exercise of these rights promptly and without unnecessary burden. The rights available to you include:

10.1 Right of Access

You have the right to request a copy of the personal data mex389 holds about you, along with information about how it is processed, the purposes of processing, the categories of data held, and any third parties with whom it has been shared. Requests will be responded to within 30 days of receipt.

10.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. You may update certain account details directly through your account settings; for other corrections, please contact our support team.

10.3 Right to Erasure

You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent and no other legal basis applies, or where the data has been processed unlawfully. Erasure requests are subject to any overriding legal retention obligations — data required for regulatory compliance or dispute resolution cannot be deleted before the applicable retention period expires.

10.4 Right to Restriction of Processing

You may request that mex389 restrict processing of your personal data in certain circumstances — for example, where you contest the accuracy of data and we are verifying it, or where processing is unlawful but you prefer restriction to erasure.

10.5 Right to Data Portability

Where processing is based on consent or contractual necessity and conducted by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format, and to have it transmitted to another controller where technically feasible.

10.6 Right to Object

You have the right to object to processing carried out on the basis of legitimate interests, including profiling for fraud detection purposes. You also have an unconditional right to object to processing for direct marketing purposes at any time, after which your data will no longer be used for that purpose.

10.7 Exercising Your Rights

To exercise any of the rights described above, please contact our support team at [email protected]. We will verify your identity before processing any data subject request to protect against unauthorized access. There is no fee for standard requests; mex389 reserves the right to charge a reasonable administrative fee for manifestly unfounded or repetitive requests.

11 Cookies & Tracking Technologies

mex389 uses cookies and similar tracking technologies to operate certain platform functions, analyze usage patterns, and deliver a personalized experience. The following categories of cookies are used on the mex389 platform:

11.1 Strictly Necessary Cookies

These cookies are essential for the platform to function correctly. They enable core functionality such as user authentication, session management, and security enforcement. Strictly necessary cookies cannot be disabled without disrupting your ability to use the platform. They do not require your consent as they are necessary for the provision of a service you have explicitly requested.

11.2 Performance & Analytics Cookies

These cookies collect anonymized or pseudonymized information about how visitors interact with the platform — which pages are visited most frequently, where errors occur, and how navigation flows are used. This data helps us continuously improve the platform experience. These cookies are only placed with your consent.

11.3 Functional Cookies

Functional cookies remember your preferences — such as your preferred language settings and display options — so that the platform behaves consistently across sessions without requiring you to reconfigure settings each time you log in.

11.4 Managing Cookies

You may manage cookie preferences through your browser settings. Most modern browsers allow you to view, block, or delete cookies at any time. Please note that blocking strictly necessary cookies may impair your ability to log in or use core platform features. Adjusting analytics or functional cookie settings will not affect your account status or gameplay access.

12 Security Measures

mex389 implements a comprehensive set of technical and organizational security measures designed to protect your personal data against unauthorized access, accidental loss, alteration, disclosure, or destruction. Our security infrastructure includes:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the mex389 platform is encrypted using industry-standard TLS protocols, preventing interception by unauthorized parties.
• Encrypted Data Storage: Sensitive personal data, including identity document copies and financial account details, is stored in encrypted form within secured data centers with restricted physical and logical access controls.
• Access Control: Access to personal data within mex389's internal systems is granted on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations and undergo regular data security training.
• Continuous Monitoring: Our security operations team conducts continuous monitoring of platform infrastructure for anomalous access patterns, intrusion attempts, and other indicators of compromise. Security incidents are investigated and remediated without delay.
• Penetration Testing: mex389 commissions periodic third-party penetration testing of its platform infrastructure to identify and address potential vulnerabilities proactively.
• Two-Factor Authentication: Players are encouraged to enable two-factor authentication (2FA) on their accounts for an additional layer of login security beyond a standard password.

While we employ commercially reasonable security practices, no digital platform can guarantee absolute security. In the event of a data breach that poses a material risk to affected users, mex389 will notify impacted individuals and, where applicable, relevant regulatory authorities, in accordance with our incident response obligations.

13 Minors

The mex389 platform is strictly intended for adults aged 21 years and over. We do not knowingly collect, store, or process personal data from individuals under the age of 21. Age verification is a mandatory component of the account registration and KYC process, and accounts that cannot be verified as belonging to an adult will be suspended pending investigation.

If mex389 becomes aware that personal data has been collected from an individual under the age of 21 without appropriate parental or guardian consent, that data will be deleted promptly and the associated account permanently closed. If you believe that a minor has registered an account on the mex389 platform, please contact us immediately at [email protected] so that appropriate action can be taken without delay.

Parents and guardians who are concerned about underage access to online gaming platforms are encouraged to review our Responsible Gaming page for guidance on parental controls and access restriction tools.

14 Policy Amendments

mex389 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable legal requirements, or the evolution of our platform and services. Where amendments are material — meaning they meaningfully affect the way we collect, use, or share your personal data — we will notify registered players via their registered email address at least 14 days before the changes take effect.

The "Last Updated" date displayed at the top of this page reflects the date of the most recent revision. We encourage you to review this Privacy Policy periodically to remain informed of how mex389 handles your personal data. Continued use of the platform after an amendment takes effect constitutes your acknowledgment of the revised policy.

Historical versions of this Privacy Policy are available on request by contacting our support team. If any amendment reduces your data protection rights and you do not wish to accept the revised terms, you may request account closure prior to the amendment's effective date, at which point your data will be handled in accordance with the retention schedule described in Section 9.

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by mex389, please contact our dedicated data privacy support channel:

For questions about our general Terms & Conditions, please visit the Terms & Conditions page. For responsible gaming support, please visit our Responsible Gaming page.