Data Minimization
We ask for only what we need: name, email, phone, payment method. No unnecessary fields. No data harvesting for marketing profiles.
We built mantra888 around your account security and privacy. Every deposit through DANA, OVO, GoPay or QRIS, every table you join, every bet you place — your information...
mantra888 operates under the laws of supported regions where local regulation permits. We collect personal information — your name, email, phone number and payment details — only to verify your account, process deposits via DANA, OVO, GoPay and QRIS, and keep your lobby access live. We never sell your data to third parties. Your information is stored on secure servers and deleted
according to our retention schedule. We use cookies to remember your preferences and login state. You can manage these in your browser settings at any time.
Service availability is jurisdiction-dependent. Users are responsible for checking local law before access.
All data in transit and at rest uses TLS 1.2+ encryption. Payment details are tokenized so we never store raw card or e-wallet numbers on our servers.
We commission annual security audits from independent firms. Results inform our data handling practices and help us stay ahead of emerging threats.
Our privacy practices align with international data protection standards. We review local Indonesian regulations regularly to ensure our policy stays current.
Every team member handling customer data completes privacy and security training annually. Access to personal information is role-based and logged.
If a data breach occurs, we notify affected users within 72 hours and work with authorities. Our incident response plan is tested quarterly.
We keep account data for as long as your account is active, plus 7 years for regulatory compliance. You can request deletion anytime via your settings.
We ask for only what we need: name, email, phone, payment method. No unnecessary fields. No data harvesting for marketing profiles.
DANA, OVO, GoPay and QRIS transactions are tokenized. We never see or store your actual payment credentials on our infrastructure.
We disclose every cookie we use — session, analytics, preference — and let you disable non-essential ones without losing account access.
Your information is never sold, rented or shared with advertisers. We use it only for account operations, fraud prevention and legal compliance.
You can request access to your data, correct inaccuracies, export your information or ask for deletion. Submit requests via email or account settings.
When we change this policy, we notify you 30 days in advance. Material changes require your explicit consent before they take effect.
We operate in supported regions where local law permits. Your privacy rights are governed by the jurisdiction where your account is registered.