Privacy Policy

This Privacy Policy applies to all personal data processed by maca73 in connection with the operation of its online betting and gaming platform at https://maca73.cam. It governs data collected from:

• Registered members and prospective members who visit the platform from any location within Indonesia, including Jakarta, Surabaya, Bandung, Medan, Bali, Makassar, Semarang, Palembang, and Yogyakarta.
• Individuals who communicate with maca73 via email, live chat, or any other supported contact channel without necessarily completing registration.
• Former members whose accounts have been closed or suspended, to the extent that data retention obligations require continued processing.

This policy does not apply to third-party websites, payment processors, or game studio platforms that may be accessible via links or integrations within the maca73 platform. Those entities operate under their own privacy policies, which we encourage you to review separately.

By registering an account on maca73 or by continuing to use the platform after the effective date of this policy, you acknowledge that you have read and understood these privacy practices.

maca73 collects the following categories of personal data in the course of providing our services:

maca73 collects personal data through the following channels and mechanisms:

• Direct Submission: Information you provide voluntarily during account registration, KYC document upload, deposit and withdrawal requests, support interactions, and responsible gaming tool configurations.
• Automated Technical Collection: Data gathered automatically by our platform servers when you access the site, including IP addresses, device fingerprinting data, session logs, and browser telemetry. This collection occurs regardless of whether you are logged in.
• Payment Processor Callbacks: Confirmation data returned by Indonesian banking partners and e-wallet providers (including transaction reference numbers and payment status flags) when you process a deposit or withdrawal through BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, or LinkAja.
• Identity Verification Partners: Where maca73 uses a third-party KYC verification service to validate identity documents, that service may return a verification result and confidence score to our platform. The identity documents themselves are processed in accordance with our data handling standards.
• Cookies and Tracking Technologies: Session cookies, persistent cookies, and similar technologies that help maintain your logged-in state, remember your preferences, and support platform analytics. See Section 6 for full details.

maca73 processes your personal data for the following specific purposes, each supported by a lawful basis:

Where maca73 relies on your consent as the lawful basis for processing — specifically for personalised promotional communications — you may withdraw that consent at any time by updating your communication preferences within your account dashboard or by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

maca73 does not sell your personal data to any third party. Data sharing is limited to the following categories of recipient, each bound by contractual data processing obligations consistent with this policy:

• Payment Processing Partners: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) receive the minimum financial data required to process your requested transaction. These entities operate under their own regulatory obligations.
• KYC and Identity Verification Providers: Third-party services engaged to verify identity documents and screen against sanctions lists receive identity and contact data solely for verification purposes. They are contractually prohibited from using this data for any other purpose.
• Game Studio Providers: Our licensed game studio partners — including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Pocket Games Soft — receive a pseudonymous player identifier and session token to authenticate your access to their game content. They do not receive your full identity or financial data.
• IT Infrastructure and Cloud Hosting Providers: maca73 operates on secure, enterprise-grade cloud infrastructure. Our hosting providers have access to encrypted server environments but are contractually restricted from accessing or processing member data for any purpose beyond infrastructure maintenance.
• Legal and Regulatory Authorities: maca73 may be required to disclose personal data to law enforcement agencies, financial intelligence units, or regulatory bodies in response to lawful orders. We will notify affected members of such disclosures where we are legally permitted to do so.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of maca73's assets, member personal data may be transferred as part of that transaction. Affected members will be notified in advance with the option to request account closure prior to transfer.

maca73 uses cookies and similar technologies to ensure the platform functions correctly, to maintain your session security, and to gather aggregate analytics data that helps us improve the user experience.

You may configure your browser to block or delete cookies at any time. Please note that blocking strictly necessary cookies will impair your ability to log in and use core platform features. maca73 does not use third-party advertising cookies or cross-site tracking pixels.

maca73 retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, subject to the following schedule:

• Active Account Data: Retained for the full duration of your active membership and for 12 months following verified account closure.
• Financial Transaction Records: Retained for a minimum of 5 years from the date of transaction, in accordance with international anti-money laundering record-keeping standards.
• KYC Documents: Retained for 5 years from the date of submission or from the date of account closure, whichever is later.
• Support Communications: Retained for 3 years from the date of last interaction, to support dispute resolution and audit requirements.
• Technical / Log Data: Retained for 12 months on a rolling basis, after which it is purged from active systems and archived in anonymised form for aggregate analytics purposes only.
• Self-Exclusion Records: Retained for the full duration of the self-exclusion period plus 7 years thereafter, to prevent inadvertent re-registration during an active exclusion.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any identifiable individual.

As a maca73 member, you hold the following rights with respect to your personal data. To exercise any of these rights, submit a written request to [email protected] with the subject line "Data Rights Request". We will acknowledge your request within 48 hours and provide a substantive response within 30 calendar days.

maca73 implements a comprehensive, layered security framework to protect member personal data from unauthorised access, accidental loss, destruction, or disclosure. Our security measures include, but are not limited to:

• Transport Encryption: All data transmitted between your browser and maca73 servers is encrypted using TLS 1.2 or higher with 256-bit symmetric keys.
• Encryption at Rest: Sensitive data fields — including national ID numbers, bank account references, and KYC documents — are encrypted at rest using AES-256 encryption within our database systems.
• Access Controls: Access to production systems and member data is restricted to authorised personnel on a strict need-to-know basis. All internal access is logged and subject to regular audit review.
• Two-Factor Authentication (2FA): All internal administrative accounts require 2FA. Member accounts are also strongly encouraged to enable 2FA via their account security settings.
• Penetration Testing: maca73 engages independent security firms to conduct regular penetration tests and vulnerability assessments of our platform infrastructure.
• Incident Response: A documented incident response plan is maintained and tested annually. In the event of a confirmed data breach, affected members will be notified within 72 hours as described in the Feature Highlights section above.

While maca73 takes every reasonable precaution to secure your data, no online platform can guarantee absolute security. Members are responsible for maintaining the confidentiality of their own account credentials and should report any suspected unauthorised access to [email protected] immediately.

The maca73 platform is strictly restricted to adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. If maca73 discovers or is notified that a registered account belongs to a person under 21, the account will be immediately suspended, all associated personal data will be reviewed under our KYC process, and the account will be permanently closed. Any balance in the account at the time of closure will be subject to forfeiture in accordance with our Terms & Conditions.

Parents or guardians who believe that a minor may have registered on the maca73 platform are encouraged to contact us immediately at [email protected] so that the matter can be investigated and resolved without delay.

As an internationally operated platform serving the Indonesian market, maca73 may process or store certain categories of personal data on servers located outside of Indonesia. Where such international transfers occur, maca73 ensures that appropriate safeguards are in place to protect your data to a standard at least equivalent to the protections described in this policy. These safeguards include:

• Standard contractual clauses incorporated into agreements with all data processors located in third countries.
• Technical security controls (encryption, access restrictions, audit logging) applied uniformly across all data processing locations regardless of geography.
• Restrictions on further transfer — our processors are contractually prohibited from transferring your data to sub-processors without maca73's prior written authorisation.

Financial transaction data processed through Indonesian banking channels (BCA, BRI, BNI, Mandiri, and others) is processed within Indonesia and subject to Indonesian banking regulations. This data does not leave Indonesian banking infrastructure as part of normal transaction processing.

maca73 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or platform functionality. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page.
• Display a prominent in-platform notification to all active members for a minimum of 14 days following the change, giving you sufficient time to review the updated policy before continued use of the platform constitutes acceptance.
• Send a notification to your registered email address for any changes that materially affect how we use your personal data or your rights as a data subject.

We encourage you to review this Privacy Policy periodically. The most current version will always be accessible at https://maca73.cam/privacy-policy. If you do not agree with a revised policy, you may request account closure as described in our Terms & Conditions before the revised policy takes effect.

For all privacy-related enquiries, data rights requests, or concerns about how maca73 handles your personal data, please contact us through the following channel:

If you are not satisfied with maca73's response to a privacy concern, you have the right to escalate the matter through the dispute resolution process described in our Terms & Conditions, or to seek independent advice from a qualified legal professional in your jurisdiction.