mat11 Privacy Policy

The following definitions apply throughout this Privacy Policy:

mat11 collects the following categories of personal data from players. Each category is collected only to the extent necessary for the specific purpose described alongside it.

2.1 Identity & Registration Data

• Full legal name (as it appears on your Indonesian National Identity Card — KTP / e-KTP, passport, or SIM);
• Date of birth (to verify you meet the 21+ age requirement);
• Indonesian residential address;
• Email address and chosen username;
• Phone number (if provided for two-factor authentication or support purposes).

2.2 KYC Verification Documents

• Scanned copies or photographs of government-issued identity documents (KTP, passport, SIM);
• Proof of address documents (utility bills, bank statements dated within 3 months);
• Bank account or e-wallet ownership evidence (account statement showing your name and account number at BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, LinkAja, or other accepted providers);
• Source-of-funds documentation, where required for anti-money laundering compliance.

2.3 Financial & Transaction Data

• Deposit and withdrawal transaction records (amount in IDR, date, time, payment method);
• Bank account numbers and e-wallet identifiers associated with your account;
• Bet history, game play records, and account balance history.

2.4 Technical & Device Data

• IP address and geolocation data (country and city level — used for fraud prevention and regional eligibility checks);
• Device type, operating system, browser type and version;
• Session logs, login timestamps, and access records.

2.5 Communication Data

• Messages sent to mat11 support via email ([email protected]), live chat, or any other communication channel;
• Survey responses and feedback submitted voluntarily.

mat11 collects personal data through the following channels:

• Direct submission: When you register an account, complete KYC verification, make a deposit or withdrawal, place a bet, or contact our support team, you provide personal data directly to us;
• Automated collection: When you browse or use the mat11 platform, we automatically collect technical and device data (see Section 2.4) through server logs and cookies (see Section 7);
• Third-party providers: We may receive identity verification results from our KYC and AML service providers, and fraud-risk scores from our payment processing partners, where this is necessary to confirm your eligibility or protect the platform's integrity;
• Public sources: In limited circumstances related to fraud prevention, we may cross-reference information against publicly available records or sanctions lists.

mat11 uses your personal data solely for the following purposes:

• Account management: To register and maintain your player account, authenticate your identity at login, and manage your profile settings;
• Service delivery: To process bets and wagers, settle winnings, credit bonuses, and provide access to all platform features including live casino, slots, togel, and virtual sports;
• Financial processing: To process deposits and withdrawals via Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja), and to maintain accurate transaction records in IDR;
• Identity and age verification: To fulfil our KYC obligations and confirm that you are at least 21 years of age and eligible to use our services;
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, duplicate accounts, bonus abuse, and other prohibited conduct as defined in our Terms & Conditions;
• Responsible gaming: To monitor for signs of problem gambling behaviour, enforce self-exclusion requests, apply deposit limits, and fulfil our duty of care obligations — visit our Responsible Gaming page for details;
• Customer support: To respond to your enquiries, resolve disputes, and communicate important account-related information;
• Legal compliance: To comply with applicable international licensing requirements, anti-money laundering regulations, and any lawful requests from regulatory or law enforcement authorities;
• Platform improvement: To analyse aggregate, anonymised usage patterns in order to improve platform performance, user experience, and game content.

mat11 processes your personal data on one or more of the following legal grounds:

• Contractual necessity: Processing is required to fulfil our contractual obligations to you under the mat11 Terms & Conditions — for example, to operate your account, process transactions, and deliver the Services you have requested;
• Legal obligation: Processing is required to comply with applicable legal and regulatory requirements, including KYC identity verification, anti-money laundering record-keeping, and responsible gaming obligations imposed by our international licensing framework;
• Legitimate interests: Processing is necessary for mat11's legitimate business interests — specifically, fraud detection and prevention, platform security, abuse prevention, and aggregate analytics — where such interests are not overridden by your rights and interests;
• Consent: Where we rely on your consent as a legal basis (for example, for optional marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing. To withdraw consent, contact [email protected].

6.1 Who We Share Data With. mat11 does not sell your personal data. We share personal data only with the following categories of third parties, and only to the extent necessary for the stated purpose:

• Payment processors and banks: To facilitate deposits and withdrawals, we transmit the minimum necessary transaction data to your chosen Indonesian bank or e-wallet provider (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, OVO, DANA, GoPay, ShopeePay, LinkAja);
• KYC and AML service providers: To verify your identity and comply with anti-money laundering obligations, we may share identity document data with third-party verification specialists under strict contractual data-protection obligations;
• Game content providers: Game studios such as Pragmatic Play, Evolution Gaming, PG Soft, Microgaming, NetEnt, and Spribe operate games within the mat11 platform. These providers may receive anonymised session tokens but do not receive your full personal profile;
• Fraud and risk management providers: We use third-party risk-scoring tools to identify suspicious activity. These providers receive IP addresses and device identifiers under confidentiality agreements;
• Legal and regulatory authorities: We will disclose personal data to law enforcement agencies, regulatory bodies, or courts where we are required to do so by law, court order, or our licensing authority.

6.2 No Sale of Data. mat11 does not sell, rent, or commercially exploit your personal data to any third party. Data shared with service providers is governed by written data processing agreements that restrict those providers from using your data for any purpose beyond the specific service they provide to mat11.

6.3 International Transfers. Some of mat11's service providers operate infrastructure outside Indonesia. Where personal data is transferred internationally, we ensure appropriate safeguards are in place — including contractual data protection clauses — to maintain a level of protection equivalent to our obligations under this Privacy Policy.

mat11 uses cookies and similar technologies (such as local storage and session tokens) to operate the platform effectively. By using the mat11 website, you agree to the use of cookies as described in this section.

7.1 Types of Cookies We Use

7.2 Managing Cookies. You can control and delete cookies through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging in and using the mat11 platform. For guidance on managing cookies in your specific browser, refer to your browser's help documentation. mat11 does not use cross-site advertising trackers or behavioural profiling cookies.

mat11 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected or as required by applicable law. The following general retention periods apply:

• Active account data: Retained for the full duration of your account and for a minimum of 5 years after account closure, in accordance with international anti-money laundering record-keeping requirements;
• KYC verification documents: Retained for a minimum of 5 years following completion of the verification process, or longer where required by our licensing authority;
• Transaction records: Retained for a minimum of 5 years from the date of the transaction, for regulatory compliance and dispute resolution purposes;
• Support communications: Retained for 3 years from the date of the most recent communication in a support thread;
• Technical logs: Server access logs and security logs are retained for 12 months on a rolling basis, after which they are automatically deleted or anonymised;
• Anonymised analytics data: May be retained indefinitely, as it contains no information that can identify you as an individual.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where deletion is not immediately technically feasible (for example, data held in encrypted backup archives), we will ensure that the data is isolated from active processing and queued for deletion at the next practicable opportunity.

mat11 maintains a comprehensive information security programme designed to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. Our security measures include:

• Encryption in transit: All communications between your device and mat11 servers are encrypted using TLS 1.2 or higher (256-bit SSL);
• Encryption at rest: Sensitive data fields — including identity document data, national identity numbers, and financial account details — are stored in encrypted form on our servers;
• Access control: Access to personal data within mat11 is restricted to employees and contractors who have a legitimate operational need. Access is granted on a role-based, least-privilege basis and reviewed regularly;
• Audit logging: All access to personal data records is logged and subject to periodic security audit review;
• Penetration testing: mat11 engages independent security specialists to conduct regular penetration tests and vulnerability assessments of our platform infrastructure;
• Incident response: In the event of a data breach that is likely to result in risk to your rights, mat11 will notify affected players without undue delay and report the incident to the relevant regulatory authority as required by our licensing conditions.

As a player on the mat11 platform, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request". We will respond within 30 calendar days of receiving your request.

• Right of access: You may request a copy of the personal data mat11 holds about you, along with information about how it is being processed;
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. You may also update certain profile information directly through your account settings;
• Right to erasure ("right to be forgotten"): You may request that we delete your personal data. We will comply where there is no overriding legal obligation requiring us to retain the data (for example, anti-money laundering record-keeping obligations may prevent immediate deletion);
• Right to restriction of processing: You may request that we restrict the processing of your personal data in certain circumstances — for example, if you contest its accuracy while we carry out a verification check;
• Right to data portability: Where processing is based on your consent or a contractual relationship, you may request that we provide your personal data in a structured, commonly used, machine-readable format;
• Right to object: You may object to the processing of your personal data on the basis of legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests;
• Right to withdraw consent: Where processing is based on your consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

The mat11 platform does not include links to third-party websites for advertising or affiliate purposes. Any external content accessible through game studio interfaces (such as help pages hosted by Pragmatic Play or Evolution Gaming) is governed by those studios' own privacy policies, over which mat11 has no control. We recommend reviewing the privacy policy of any external service you access via game provider interfaces.

mat11 does not knowingly collect personal data from individuals under the age of 21. Our platform is strictly intended for adults aged 21 and above. Age verification is a mandatory component of our KYC process, and we employ automated systems designed to detect underage registration attempts.

If we discover or are notified that we have inadvertently collected personal data from an individual who is under 21 years of age, we will immediately suspend the associated account, delete the collected personal data to the extent not required for legal reporting purposes, and take appropriate steps to prevent recurrence.

13.1 Right to Update. mat11 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. The updated policy will be published on this page with a revised effective date.

13.2 Material Changes. Where a change to this Privacy Policy is material — meaning it significantly affects how we process your personal data or reduces your rights — we will notify you by email to your registered address at least 14 calendar days before the change takes effect.

13.3 Continued Use. Your continued use of the mat11 platform after any revised Privacy Policy becomes effective constitutes your acknowledgement of the updated terms. If you do not agree with the revised policy, you may request account closure in accordance with our Terms & Conditions.

For any questions, concerns, or requests relating to this Privacy Policy or to the personal data mat11 holds about you, please contact our data support team:

If you are not satisfied with our response to a privacy concern, you may escalate the matter to the relevant licensing or data protection authority as specified in our licensing conditions. Details of the applicable authority are available upon request by contacting [email protected].