mimpi Casino & Sportsbook Data Care

This page describes what we collect when you use mimpi and how we keep that data protected. We operate from a regulated jurisdiction and handle your personal information — email, identity documents, payment details — under strict encryption and access controls. Our policy reflects how we actually process data: we do not sell your information to third parties, we do not use your gaming history for marketing without your consent, and we provide you with access to your own data at any time.

We collect information for three primary purposes: account verification (KYC compliance), payment processing, and service improvement. Each purpose is described below with clear details on how long we retain your data, where your data may travel, and what rights you hold over your information. We've designed this policy to be readable and actionable — not a legal document buried in jargon.

If you have questions about how mimpi handles your data or how to request access to your information, our support team responds in English and Indonesian across standard business hours. We take your privacy seriously because we believe trust is fundamental to our platform.

What we collect and why

When you register for an account on mimpi, we collect your email address and a chosen password. This information is required to create and secure your account. During KYC verification, we request your full name, date of birth, government-issued ID (KTP, passport, or driver's license), and proof of address (utility bill or bank statement). We collect this information to comply with financial regulations and to prevent fraud. We do not request this information for marketing purposes.

When you deposit or withdraw funds, we collect information about your payment method — the bank or mobile wallet you use, your transaction amount, and the timestamp of your request. We collect this information to process your transaction, reconcile your account balance, and maintain audit records. We also collect your IP address and device type when you log in. This information helps us detect unauthorized access and prevent account takeovers.

We collect gameplay data — which games you play, how long you play, which bet types you select, and the outcomes of your bets. This information is used to calculate your account balance, verify payout calculations, and improve our game recommendations. We do not use this data to identify you personally or to sell to third parties.

Data we do not collect: We do not collect your browsing history outside mimpi, your location via GPS, your contacts, your photos, or any biometric data. We do not track you across other websites. We collect only information necessary to operate our service.

How we use your data

We use your email and password to authenticate your account and allow you to log in. We use your identity documents to verify that you are a real person and to comply with anti-money-laundering (AML) regulations. We use your payment information to process deposits and withdrawals. We use your gameplay data to calculate winnings, detect fraud, and improve our games. We use your IP address to prevent unauthorized access and to identify technical issues affecting your session.

We do not use your data to send unsolicited marketing messages unless you have explicitly opted in. We do not use your gaming history to build a profile of you for sale to advertisers. We do not share your personal information with third parties except where required by law (e.g., law enforcement requests) or to process your transactions (e.g., payment providers like DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, and e-wallet).

Third-party data processors

We use third-party services to operate mimpi. Payment providers — mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment — receive your payment information to process your deposits and withdrawals. These providers maintain their own privacy policies and security standards. We recommend reviewing their policies if you have concerns about how they handle your data.

We use hosting providers to store your data. These providers maintain encrypted servers and backup systems to prevent data loss. Our servers may sit outside your jurisdiction (Indonesia), which means your data may be stored in a different country. However, your data remains encrypted in transit and at rest, and our hosting providers are contractually bound to maintain the same security standards we apply.

We use analytics tools to understand how players use our platform. These tools collect aggregated data about gameplay patterns, feature usage, and technical performance. This data is anonymized — it does not identify you personally — and is used only to improve mimpi's features and stability.

Your rights over your data on mimpi

You have the right to request access to all your personal data that we hold. You have the right to correct any data you believe is inaccurate. You have the right to request deletion of your data, subject to legal hold periods. Contact our support team to exercise these rights.

How long we keep your data

We retain your account information (email, password hash, identity documents) for as long as your account is active. If you request account closure, we retain your data for seven years to comply with financial regulations. After seven years, we delete your personal information from our active servers. However, anonymized transaction records may be retained indefinitely for audit and compliance purposes.

We retain your gameplay data (bets, outcomes, balances) for as long as your account is active and for seven years after closure. This retention allows us to honor withdrawal requests and to respond to disputes. We retain your payment transaction records for the same period.

Cookies and tracking

We use cookies to store your login session, your language preference, and your table favorites. These cookies are not shared with third parties and expire when you log out or after a set period of inactivity. We do not use cookies to track you across other websites or to build an advertising profile.

We use a single analytics cookie to count visitors and understand basic usage patterns (which games are most popular, which features are used most). This cookie is anonymized and does not identify you personally. You can disable this cookie in your browser settings without affecting your ability to use mimpi.

  • Session cookie: Required to keep you logged in. Expires when you log out.
  • Preference cookie: Stores your language choice and table favorites. Expires after one year.
  • Analytics cookie: Anonymized usage data. Expires after one year. You can opt out in browser settings.

Security and encryption

We protect your data with industry-standard SSL encryption. All communication between your device and our servers is encrypted using TLS 1.2 or higher. Your password is hashed using a cryptographic algorithm and is never stored in plaintext. Your identity documents and payment information are encrypted at rest and are accessed only by authorized staff members under strict access controls.

We conduct regular security audits and penetration testing to identify and fix vulnerabilities. We maintain redundant backups of your data to prevent loss in the event of a hardware failure or data center incident. Our infrastructure is monitored 24/7 to detect and respond to potential breaches.

How to contact us about your data

If you have questions about how we handle your data, want to request access to your information, or wish to request deletion, contact our support team. We respond in English and Indonesian across standard business hours. You can reach us via live chat on mimpi or by email. Our support team will direct your request to our data protection officer if necessary.

This privacy policy is effective as of the date it appears on this page. We may update this policy from time to time as our practices change or as legal requirements evolve. If we make material changes to how we collect or use your data, we will notify you via email at the address you provided during account registration.

Our services are available only where local law permits. If you have concerns about our data practices or believe we have violated your privacy rights, you may lodge a complaint with your local data protection authority.