mahjong900Privacy Policy

This page describes what we collect when you use mahjong900 and how we keep that data protected. Our privacy commitments are grounded in Indonesian data protection law and international best practices. We collect only what is necessary to verify your identity, process your payments, settle your predictions, and comply with local regulations. We do not sell your data, do not share it with marketing agencies, and do not use it to profile you for advertising purposes.

When you create an account on mahjong900, you provide personal information—your name, national identity number, date of birth, and residential address. When you deposit via DANA, e-wallet, mobile banking, local payment, online payment, or bank transfer, we record the transaction details and the payment method. When you place a prediction or play a game, we log the activity along with a timestamp. All this data is encrypted and stored on secure servers. We retain it only for as long as your account is active, plus any period required by Indonesian financial law.

This policy applies to all access points: the mahjong900 Android app, iOS browser access, desktop browsers, and any future platforms we launch. If you have questions about your data or wish to exercise your privacy rights, contact our support team through the methods listed in your account settings.

What Data We Collect on mahjong900

We collect data in three categories: account information, payment information, and activity information. Account information includes your full name, national identity number (KTP or passport), date of birth, residential address, email address, and phone number. This data is collected during account registration and is mandatory for KYC verification. We cross-reference this information against official records to confirm your identity and prevent fraud.

Payment information includes transaction records—the date, time, amount, payment method (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or bank transfer), and deposit or withdrawal status. We do not store your full payment credentials (e.g., your banking PIN or e-wallet password); those are handled by the payment provider directly. We do store a record that a transaction occurred and whether it succeeded or failed.

Activity information includes every action you take on mahjong900: predictions placed, games played, amounts wagered, results, login times, IP address, device type, and browser information. We log this data to settle predictions fairly, prevent fraud, and comply with regulations. This information is tied to your account and is visible to you in your account history.

How We Use Your Data on mahjong900

We use your account information for identity verification and KYC compliance. When you register, we verify that your name, identity number, and date of birth match official records. This step is mandatory and is conducted by a third-party verification service. Once verified, your account is eligible for deposits and withdrawals. We retain your identity information for the life of your account plus seven years, as required by Indonesian banking law.

We use your activity information to settle predictions, to calculate your account balance, and to provide you with a record of your account history. All settlement is automated based on official data feeds (e.g., official Liga 1 results, Piala AFF outcomes). We also use activity logs to detect patterns consistent with fraud, money laundering, or bonus abuse. If suspicious patterns are detected, we may freeze your account pending review.

We use your email and phone number to send you account confirmations (e.g., successful login, withdrawal request received) and to contact you if we need to verify information or investigate suspicious activity. We do not use your contact information to send unsolicited promotional messages. You may opt out of non-critical communications through your account settings.

Third Parties Who Access Your Data at mahjong900

We share your data with third-party service providers only to the extent necessary for mahjong900 to operate. These parties include payment processors (the companies that handle mobile banking, local payment, online payment, e-wallet, and mobile banking transfers), banks (local payment, online payment, e-wallet, mobile banking for Virtual Account transfers), KYC verification services (who confirm your identity), and fraud detection services (who monitor for suspicious activity). All these partners are contractually bound to keep your data confidential and to use it only for the purpose specified.

We may be required to share your data with Indonesian government authorities if we receive a legal order, warrant, or regulatory request. This includes the Financial Services Authority (OJK), the Financial Transaction Reports and Analysis Centre (PPATK), and law enforcement agencies. We comply with such requests as required by law. If legally permissible, we notify you of the request; if prohibited by law, we cannot.

We do not sell your data. We do not share it with marketing agencies, advertisers, or data brokers. We do not provide your information to other online gaming platforms or to any third party for commercial purposes.

Payment processors

local payment, online payment, e-wallet, mobile banking, local payment, and bank partners receive transaction data only (amount, account number, timestamp). They do not receive your full identity information.

KYC verification services

Third-party vendors receive your name, ID number, and date of birth solely to verify your identity against official records. They do not store this data after verification completes.

Fraud detection services

These partners receive activity logs and transaction patterns to identify suspicious behaviour. They do not receive payment details or personal information beyond what is necessary for fraud analysis.

Government authorities

We comply with legal orders and regulatory requests from Indonesian authorities. Sharing is limited to the specific data requested and is subject to legal confidentiality requirements.

How Long We Keep Your Data at mahjong900

We retain your account information (name, identity number, date of birth, address) for the life of your account. If you close your account, we retain this information for seven years as required by Indonesian Law No. 8 of 1997 on Document Companies and related financial regulations. We do this to enable regulatory compliance, to respond to government requests, and to prevent fraud.

We retain transaction records (deposits, withdrawals, predictions, settlement) for seven years. This retention period is mandated by Indonesian banking law. After seven years, transaction records are archived and are not accessible through your account interface, but they are retained in secure cold storage in case of a regulatory audit or legal proceeding.

We retain activity logs (login times, IP addresses, game history) for one year. After one year, these logs are aggregated into anonymous summaries for system analysis and are not tied to your individual account. If you request account deletion, we delete activity logs immediately, subject to any outstanding legal obligations.

Your Rights Regarding Your Data on mahjong900

Under Indonesian data protection law and our own policies, you have the following rights. You have the right to access all data we hold about you. Log into your mahjong900 account and navigate to your account settings to view your personal information, payment history, and activity log. You can download a complete record of your account at any time.

You have the right to correct inaccurate data. If you notice that your name, address, or phone number is incorrect in our records, contact our support team to request a correction. We will verify the correction and update our records promptly.

You have the right to opt out of non-critical communications. If we send you account notifications (e.g., withdrawal confirmations) or compliance messages (e.g., account review notifications), these are mandatory and cannot be turned off. However, if we introduce optional communications (e.g., promotional notifications about new games or features), you can opt out through your account settings or by contacting support.

How We Secure Your Data at mahjong900

We encrypt all data at rest on our servers using AES-256 encryption. This means that even if someone gains physical access to our servers, they cannot read your personal information, payment history, or activity logs without the encryption key. Encryption keys are stored separately from the encrypted data and are accessible only to authorized personnel.

We enforce strict access controls. Only employees who need access to specific data for their job role can view it. All access is logged and monitored. We conduct regular security audits and penetration tests to identify and fix vulnerabilities. If we discover a data breach, we notify affected users and relevant authorities within the timeframe required by Indonesian law.

Our servers are located in secure data centres with redundant power supply, 24/7 monitoring, and physical access controls. Backups are encrypted and stored in geographically separate locations to ensure data recovery in case of disaster. We do not store data in countries with weaker data protection laws than Indonesia.

Cookies and Tracking Technology on mahjong900

We use cookies to maintain your login session, to remember your language preference, and to analyze site traffic. Session cookies expire when you close your browser and are necessary for the platform to function. Persistent cookies (if you choose "remember me" during login) expire after thirty days. We do not use cookies for tracking or profiling outside of mahjong900.

We do not use third-party tracking pixels, analytics services, or advertising networks that follow you across the internet. We use only first-party analytics to understand how users navigate our platform and to identify technical issues. This data is aggregated and anonymous; we do not link it to your personal information.

Contacting Us About Privacy at mahjong900

If you have questions about our privacy practices, wish to access your data, request a correction, or exercise any of your privacy rights, contact our support team. You can reach us through the contact form in your mahjong900 account settings, by email, or by phone. We respond to all privacy requests within seven days. For complex requests (e.g., a full data export), we may need up to thirty days.

Our privacy policy is effective as of its publication date. We may update this policy from time to time to reflect changes in our practices, technology, or legal requirements. If we make material changes, we will notify you via email and will ask for your consent if required by law. Your continued use of mahjong900 after policy updates indicates your acceptance of the revised terms. For the most current version of this policy, visit the footer of mahjong900.id.