mahesaPrivacy Policy

This page describes what we collect when you use mahesa and how we keep that data protected. When you create an account, deposit funds, withdraw winnings, or play games on our platform, we collect information about you. We use that information to verify your identity, process your payments, provide customer support, and comply with legal requirements. We do not sell your data to third parties.

We understand that your privacy matters. mahesa handles your personal information — name, email, phone number, government ID, bank account details, and payment history — with care. We use industry-standard encryption to protect your data in transit and at rest. We limit access to your data to mahesa staff who need it to serve you. We retain your data only as long as necessary to fulfill our obligations or comply with law.

This policy applies to all mahesa users across our supported regions, including Jakarta, Surabaya, Bandung, Medan, Semarang, and Yogyakarta. If you have questions about how we handle your data, contact our support team. We aim to respond within one business day.

What Data We Collect on mahesa

We collect information you provide directly: your full name, email address, phone number, date of birth, and government-issued ID number (national ID, passport, or driver's license). We also collect proof of address — utility bills, bank statements, or government documents — to verify where you live. This information is required for account opening and identity verification (KYC).

We collect payment information when you deposit or withdraw. For e-wallet deposits (DANA, e-wallet, mobile banking, local payment, online payment) and e-wallet transfers, we receive a transaction record from your payment provider — your account identifier, the amount, and the timestamp. For bank transfers (mobile banking, local payment, online payment, e-wallet virtual accounts), we receive similar details from your bank. We do not store your PIN, password, or banking credentials; those remain with your bank or e-wallet provider.

We collect game play information: which games you access, how long you play, your account balance, and your betting history. We collect account activity logs — login times, location (IP address), device type, and browser. We may collect cookies and similar tracking technologies to remember your login status and preferences.

How We Use Your Data on mahesa

We use your name, email, and phone to open and manage your account. We use your government ID and address proof to verify your identity before allowing withdrawals. We use your payment information to process deposits and withdrawals. We share your payment details with your bank or e-wallet provider to complete transactions — they handle the actual fund transfer.

We use your game play information to detect fraud, prevent money laundering, and comply with anti-fraud regulations. We analyze game play patterns to identify suspicious activity — for example, rapid deposit-and-withdrawal cycles that may indicate money laundering. If we detect suspicious patterns, we may freeze your account pending investigation.

We use your account activity logs to troubleshoot technical issues, recover lost accounts, and investigate disputes. If you contact support claiming a missing deposit, we review your payment records and account logs to confirm whether the transaction arrived. If a system error caused a balance discrepancy, we use these logs to restore your account.

Data Protection and Third-Party Processors on mahesa

We keep your data protected using encryption (HTTPS for web traffic, SSL for database storage) and access controls (staff can access only the information they need to serve you). We conduct regular security audits. We do not store your data longer than necessary — account information is retained for at least six years for regulatory compliance, but game play history may be archived or deleted after one year of account inactivity.

Our servers may sit outside your jurisdiction. Data transfers across borders are subject to the laws of the countries where our servers are located. By using mahesa, you consent to this data processing outside your home country, subject to the protections we describe in this policy.

We work with third-party processors to deliver our service: payment processors (your bank, e-wallet providers), hosting providers (who store our servers and databases), and customer support platforms (where we log your inquiries). These processors are bound by confidentiality agreements and are prohibited from using your data for their own purposes. However, we are not responsible for their practices — if you have privacy concerns about a specific processor, contact us and we will provide their privacy policy.

We at mahesa encrypt your data, limit staff access, and do not share your information with third parties except where necessary to provide our service or comply with law.

Your Rights and Data Requests on mahesa

You have the right to request access to your personal data. Contact our support team and we will provide a copy of all information we hold about you within one business day (or within a timeframe required by your jurisdiction's law). You have the right to correct inaccurate information — if your name or address is wrong in our records, contact support and we will update it.

You have the right to request deletion of your data, subject to legal retention requirements. If you close your account, we will delete your data within one business day, except for information we are required to retain by law (typically account records for six years). You have the right to object to certain uses of your data, such as marketing communications — we will honor requests to stop sending promotional emails.

If you believe we have misused your data or violated this policy, contact our support team and we will investigate. If you remain unsatisfied, you may lodge a complaint with your local data protection authority.

Cookies and Tracking on mahesa

Our platform uses cookies (small text files stored on your device) to remember your login status and user preferences. These are essential cookies required for mahesa to function. We do not use cookies for marketing or third-party tracking. You can disable cookies in your browser settings, but doing so may prevent mahesa from working correctly.

Our platform may log your IP address (your device's internet address) to identify your general location, detect fraud, and troubleshoot technical issues. We use this information only for service improvement and security — we do not sell your IP address or share it with advertisers.

Changes to This Privacy Policy

We may update this policy at any time to reflect changes in our practices, technology, or law. Changes take effect immediately upon posting. Your continued use of mahesa after updates are posted constitutes acceptance of the updated policy. We recommend reviewing this page periodically to stay informed of any changes. If we make significant changes that affect how we use your data, we will notify you via email.

If you have any questions about this privacy policy or how mahesa handles your data, contact our support team via email, in-app chat, or phone. We are available during business hours and aim to respond to all privacy inquiries within one business day.