Privacy Policy — mog500

This Privacy Policy ("Policy") is published by mog500 ("the Company", "we", "us", "our"), the operator of the online gaming and sports betting platform accessible at https://mog500.cam ("the Platform"). This Policy governs the collection, use, storage, disclosure, and protection of personal data submitted by individuals ("you", "the Player") who access or use the Platform.

mog500 is committed to protecting the privacy of all players, with particular sensitivity to the expectations of our primary user base in Indonesia. We handle all personal data in accordance with internationally recognized data protection principles, including the principles of purpose limitation, data minimization, accuracy, storage limitation, and integrity and confidentiality.

By registering an account on the Platform, you acknowledge that you have read and understood this Policy and that you consent to the data practices described herein. If you do not agree with any part of this Policy, you should not register an account or continue using the Platform.

This Policy should be read in conjunction with our Terms & Conditions, which govern the contractual relationship between you and mog500. In the event of a conflict between the two documents, the Terms & Conditions shall prevail with respect to contractual matters; this Policy shall prevail with respect to data privacy matters.

mog500 collects the minimum personal data necessary to provide a safe, compliant, and high-quality gaming service. The categories of personal data we collect are set out below:

We do not collect special categories of sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data) unless explicitly required for AML compliance purposes and with your explicit consent.

mog500 collects personal data through the following channels:

• Direct submission: Data you provide when completing account registration forms, submitting KYC documents, making deposit or withdrawal requests, or contacting our support team.
• Automated collection: Technical and behavioral data collected automatically via server logs, cookies, and analytics tools when you access and navigate the Platform.
• Payment processors: Transaction confirmation data received from local bank transfer gateways and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) to verify deposit receipt and withdrawal completion.
• Identity verification partners: Where third-party KYC service providers are used to assist with document verification, those providers may return verification status flags to mog500; the underlying document images remain within our secure storage environment.
• Fraud prevention tools: Risk scoring data generated by automated fraud detection systems based on behavioral and technical signals.

We process your personal data for the following purposes:

mog500 processes your personal data under the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing required to fulfill the contract between you and mog500, including account creation, payment processing, and service delivery.
• Legal obligation: Processing necessary to comply with applicable laws and regulatory requirements, including KYC/AML obligations and the reporting of suspicious financial activity.
• Legitimate interests: Processing carried out in pursuit of mog500's legitimate business interests — such as fraud prevention, platform security, responsible gaming monitoring, and product analytics — where those interests are not overridden by your fundamental privacy rights.
• Consent: Processing for optional activities such as marketing communications, for which we obtain your explicit opt-in consent at registration. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawa l.

mog500 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may share your data only in the following limited circumstances:

• Payment processors and banking partners: Local bank transfer gateways and e-wallet providers (including OVO, DANA, GoPay, ShopeePay, and LinkAja) receive only the transaction data necessary to process your deposit or withdrawal request. They are not provided with your full gaming history or account details.
• KYC and identity verification providers: Where a specialist third-party provider is engaged to assist with document verification, that provider operates under a strict data processing agreement and may only use your data for verification purposes on our behalf.
• Fraud prevention and security services: Aggregated risk signals may be shared with anti-fraud consortia or security service providers to identify and prevent cross-platform fraudulent activity.
• Game content providers: Studios such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Pocket Games Soft may receive anonymized player session data (e.g., game round identifiers) for the purpose of game integrity verification and RNG auditing. These providers do not receive personally identifiable information.
• Regulatory and law enforcement authorities: We may disclose personal data in response to a lawful court order, regulatory investigation, or statutory reporting obligation. Where legally permitted, we will notify you of such disclosures.
• Corporate transactions: In the event of a merger, acquisition, or sale of all or part of the Company's assets, your data may be transferred to the acquiring entity, subject to equivalent privacy protections. You will be notified of any such transfer via registered email.

mog500 operates infrastructure across multiple jurisdictions. Your personal data may be stored on or transferred to servers located outside Indonesia. Where such transfers occur, we take appropriate measures to ensure that your data receives a level of protection equivalent to international data protection standards.

Safeguards we apply to international data transfers include:

• Engaging only processors located in jurisdictions that maintain adequate data protection frameworks or that have committed to equivalent contractual protections.
• Implementing standard contractual clauses (SCCs) in agreements with data processors located in non-adequate jurisdictions.
• Applying end-to-end encryption to data in transit across all international links.
• Conducting regular security assessments of third-party data processors to verify ongoing compliance.

By registering an account on the Platform, you acknowledge that your personal data may be transferred internationally as described above, and you consent to such transfers subject to the protections outlined in this clause.

mog500 retains personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. The following retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymized. Requests for early deletion are handled under the rights framework described in Section 11, subject to any overriding legal retention obligations.

mog500 uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file placed on your device when you visit a website. The types of cookies we use are as follows:

mog500 does not deploy third-party behavioral advertising cookies or cross-site tracking technologies. You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair the functionality of the Platform and may prevent you from logging into your account.

mog500 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your browser and our servers, as well as between our servers and third-party service providers.
• Encrypted database storage for all personally identifiable fields, including identity documents and financial account details. Encryption keys are managed via a dedicated key management system with access restricted to authorized personnel only.
• Two-factor authentication (2FA) available to all players for account login and withdrawal requests. We strongly encourage all players to enable 2FA via their account security settings.
• Access controls ensuring that internal staff access to player data is restricted on a strict need-to-know basis, with all access events logged and audited.
• Regular penetration testing conducted by independent third-party security firms on a scheduled basis to identify and remediate vulnerabilities before they can be exploited.
• Incident response procedures designed to detect, contain, and notify affected parties of data breaches within 72 hours of discovery where feasible.

While mog500 employs industry-standard security practices, no system is entirely immune to risk. You are responsible for maintaining the confidentiality of your own account credentials. If you suspect that your account has been accessed without authorization, contact our support team immediately at [email protected].

Subject to applicable law and any overriding legal obligations (such as AML retention requirements), you have the following rights with respect to your personal data held by mog500:

• Right of Access: You may request a copy of the personal data we hold about you, along with information about how it is being processed. We will provide this within 30 days of a verified request.
• Right to Rectification: If any of your personal data is inaccurate or incomplete, you may request that we correct or update it. Minor details such as your phone number or address can be updated directly from your account settings panel.
• Right to Erasure ("Right to Be Forgotten"): You may request that we delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where you object to processing and we have no overriding legitimate grounds. Note that certain data must be retained for legal compliance reasons and cannot be erased upon request.
• Right to Restriction of Processing: You may request that we limit our processing of your data in certain circumstances — for example, while we investigate a rectification request or in connection with a pending dispute.
• Right to Data Portability: Where processing is based on your consent or on a contract, and is carried out by automated means, you may request that we provide your data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing based on our legitimate interests, including direct marketing. Upon a valid objection to direct marketing, we will cease processing your data for that purpose immediately.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time via your account settings or by contacting support. Withdrawal of consent does not affect the lawfulness of processing that occurred before withdrawal.

To exercise any of the above rights, please contact our support team at support@mog500.cam with the subject line "Data Rights Request" and your registered username. We will verify your identity before processing any data request, and will respond within 30 calendar days. Complex requests may take up to 60 days with prior notification.

The mog500 Platform is strictly for individuals aged 21 and over. We do not knowingly collect personal data from anyone under the age of 21. Age verification is conducted at the KYC stage for all accounts that initiate a withdrawal, and mog500 reserves the right to request age verification at any point during the registration or gameplay process.

If we become aware that personal data has been collected from a person under the age of 21, we will take immediate steps to close that account, reverse any transactions, and permanently delete all associated personal data. If you are a parent or guardian and believe that your child has registered on the Platform, please contact us immediately at support@mog500.cam.

mog500 reserves the right to update or amend this Privacy Policy at any time. When material changes are made, we will notify registered players via email to their registered email address and by posting a prominent notice on the Platform for a minimum of 30 days following the update. The "Last Updated" date at the top of this page will reflect the date on which the most recent revision was published.

Where changes involve new or expanded processing of your personal data, or changes to the legal basis on which we process data, we will seek your renewed consent where required. Your continued use of the Platform following the effective date of a revised Policy constitutes your acceptance of those changes.

We encourage you to review this page periodically to stay informed about how mog500 protects your information. If you disagree with the terms of a revised Privacy Policy, you should discontinue use of the Platform and submit an account closure request to our support team.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which mog500 handles your personal data, please contact our Data Privacy team through the following channel. Our support team is available 24 hours a day, 7 days a week, in both English and Bahasa Indonesia.

For general account support, game queries, or payment assistance, you may contact the same address with the relevant subject line. For responsible gaming requests — including self-exclusion, deposit limit adjustments, or problem gambling guidance — please visit our dedicated Responsible Gaming page or use the subject line "Responsible Gaming" in your support email for prioritized handling.