Privacy Policy

1.1  mata56 is committed to protecting the privacy and personal data of every individual who interacts with the platform. This commitment is reflected in our approach to data minimisation — we collect only what is necessary — and in the technical and organisational measures we apply to keep personal data secure throughout its lifecycle.

1.2  The mata56 platform is designed to serve English-preference players across Indonesia, including users located in major cities such as Jakarta, Surabaya, Medan, Bandung, Bali, Yogyakarta, Semarang, and Makassar, as well as Indonesian nationals accessing the platform from other locations. This Policy reflects the data processing practices applicable to all Platform users, wherever located.

1.3  We recognise that the personal data you share with mata56 — including your identity documents, financial information, and gaming activity — is sensitive. We do not treat it as a commercial asset. We use it to operate your account, verify your identity, process your transactions, maintain platform security, fulfil our responsible gaming obligations, and comply with applicable regulatory requirements. Nothing more.

2.1  The data controller for personal data processed in connection with the mata56 platform is mata56, the internationally licensed operator of https://mata56.app. As data controller, mata56 determines the purposes for which personal data is processed and is responsible for ensuring that processing is carried out in accordance with applicable data protection principles.

2.2  For all data protection enquiries, access requests, correction requests, deletion requests, or complaints relating to the processing of your personal data, you may contact the mata56 data protection point of contact at: [email protected]. Please include "Data Protection Request" in the subject line of your email to ensure your enquiry is routed to the appropriate team member.

3.1  mata56 collects the following categories of personal data in connection with account registration, platform use, and regulatory compliance:

Identity & Contact Data

Financial & Transaction Data

Technical & Usage Data

4.1  Directly from you. The majority of personal data mata56 holds is provided directly by you during account registration, the KYC verification process, payment method registration, and support correspondence. You control what information you provide at each of these stages.

4.2  Automatically during platform use. When you access and use the mata56 platform, certain technical and usage data is collected automatically through the platform's server infrastructure, session management systems, and cookies. This data collection is necessary for platform security, fraud detection, and service optimisation.

4.3  From payment processing partners. When you conduct a deposit or withdrawal transaction, mata56 receives confirmation data from the relevant payment processor (your bank or e-wallet provider) confirming that the transaction has been initiated or completed. mata56 does not have direct access to your full bank account credentials; transaction confirmation data is transmitted via secure, encrypted payment gateway connections.

4.4  From identity verification services. During enhanced KYC verification, mata56 may use third-party identity document verification services to confirm the authenticity of submitted identity documents. These services process only the document image you provide and return a verification result; they do not retain your document data beyond the immediate verification process.

5.1  mata56 processes personal data for the following specific and legitimate purposes:

• Account management: Creating, maintaining, and administering your mata56 account, including processing login authentication, account settings changes, and communication preferences.
• Identity verification (KYC): Verifying that account holders meet the 21+ minimum age requirement, confirming account ownership prior to withdrawal processing, and fulfilling anti-money-laundering (AML) due diligence obligations.
• Payment processing: Processing deposit credits and withdrawal payments via Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja), and maintaining transaction records as required by financial regulations.
• Fraud prevention and security: Detecting and preventing unauthorised access, account fraud, money laundering, bonus abuse, collusion, match-fixing, and other prohibited conduct as defined in the mata56 Terms & Conditions.
• Responsible gaming: Monitoring account activity to identify patterns consistent with problem gambling behaviour, applying player-requested protection tools (deposit limits, self-exclusion), and fulfilling responsible gaming obligations.
• Customer support: Responding to queries, complaints, and requests submitted via email or live chat, and maintaining records of support interactions for quality assurance and dispute resolution purposes.
• Platform operation and improvement: Analysing aggregated, anonymised usage data to identify platform performance issues, improve user experience, and develop new features. Individual-level data is not used for this purpose without anonymisation.
• Legal and regulatory compliance: Retaining transaction and identity records as required by applicable financial regulation, responding to lawful requests from courts or regulatory authorities, and enforcing the mata56 Terms & Conditions.

6.1  mata56 processes personal data on the following legal bases:

• Contractual necessity: Processing that is necessary to perform the contract between mata56 and the Player (the Terms & Conditions), including account operation, payment processing, and KYC verification. Without this processing, the contractual relationship cannot be fulfilled.
• Legal obligation: Processing required to comply with applicable financial regulation, anti-money-laundering requirements, and any lawful order from a competent court or regulatory authority. mata56 is obligated to retain certain transaction and identity records regardless of the Player's preferences regarding data retention.
• Legitimate interests: Processing conducted for fraud prevention, platform security, and responsible gaming monitoring, where mata56's legitimate interest in maintaining a safe and compliant platform is not overridden by the Player's privacy interests. mata56 conducts a balancing assessment before relying on this basis for any new processing activity.
• Consent: Where mata56 processes data beyond the above bases — for example, in connection with optional marketing communications — it will seek your explicit consent and provide a clear mechanism for withdrawal of that consent at any time.

7.1  mata56 does not sell, rent, or trade personal data to any third party. Personal data is shared only in the following limited and necessary circumstances:

• Payment processors and banking partners: Transaction data is shared with your chosen payment provider (e.g., your bank or e-wallet operator such as BCA, OVO, or GoPay) solely to execute deposit and withdrawal transactions. Each payment partner operates under its own privacy policy and data protection obligations.
• Identity verification service providers: KTP document images submitted during KYC verification may be processed by a certified third-party identity verification service for document authenticity checks. These providers are contractually bound to process the data only for the verification purpose and to delete it immediately thereafter.
• Platform technology providers: Infrastructure, cloud hosting, and security service providers who process data solely as data processors acting on mata56's instructions, under contractual data processing agreements that impose strict confidentiality and security obligations.
• Legal and regulatory authorities: mata56 will disclose personal data to courts, law enforcement agencies, or regulatory authorities where required to do so by a valid legal order, warrant, or regulatory direction. mata56 will, where legally permissible, notify the affected Player of such a disclosure.
• Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of mata56's assets, personal data held by mata56 may be transferred to the successor entity, which will be required to honour this Privacy Policy or provide Players with notice and an opportunity to request deletion before any material policy change takes effect.

8.1  mata56 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention period required by applicable law or regulation.

8.2  The following indicative retention periods apply:

8.3  When personal data is no longer required for any of the above purposes and no legal retention obligation applies, mata56 will securely delete or anonymise the data so that it can no longer be attributed to an identified or identifiable individual.

9.1  mata56 applies a combination of technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• Transport encryption: All data transmitted between your browser and the mata56 platform is protected by 256-bit TLS (Transport Layer Security) encryption. The platform enforces HTTPS on all connections and does not permit unencrypted access.
• Data-at-rest encryption: Personal data stored on mata56's server infrastructure is encrypted at rest using AES-256 encryption. Encryption keys are managed separately from the data they protect.
• Password hashing: Account passwords are hashed using a one-way cryptographic hashing algorithm with per-account salting. Plain-text passwords are never stored or logged.
• Two-factor authentication (2FA): 2FA is available to all mata56 account holders and is strongly recommended. When enabled, account login and sensitive account changes require both the account password and a time-limited verification code.
• Login anomaly monitoring: mata56's security systems monitor account login activity in real time for patterns consistent with credential stuffing, brute-force attacks, or access from unusual locations. Suspicious login attempts trigger automated account protection measures.
• Access controls: Internal access to personal data is restricted to mata56 team members who require it to perform their specific job functions. Access rights are reviewed regularly and revoked promptly when no longer required.
• Segregated player funds: Player account balances are held in accounts segregated from mata56's operational funds. This is a financial protection measure, not a data security measure, but it reflects mata56's broader commitment to treating Player assets with institutional-grade care.

9.2  In the event of a personal data breach that poses a risk to your rights and interests, mata56 will notify affected Players via the email address registered on their account without undue delay, and will take immediate remedial action to contain the breach and prevent recurrence.

10.1  The mata56 platform uses cookies and similar tracking technologies to operate core platform functions, maintain session security, and analyse aggregate usage patterns. mata56 does not use third-party advertising or behavioural targeting cookies.

10.2  The following categories of cookies are used by mata56:

10.3  You can configure your browser to refuse or delete cookies, but disabling strictly necessary cookies will prevent you from logging into your mata56 account. Functional and analytical cookies can be disabled without affecting core account functionality.

11.1  You have the following rights in respect of personal data held by mata56. To exercise any of these rights, contact [email protected] with the subject line "Data Rights Request":

12.1  The mata56 platform is strictly restricted to adults aged 21 years and above. mata56 does not knowingly collect personal data from individuals under the age of 21, and will immediately close and delete any account found to belong to a person under that age.

12.2  If you are a parent or guardian and believe that a minor under your care has submitted personal data to mata56 or registered an account, please contact [email protected] immediately. mata56 will investigate and, if confirmed, will delete the minor's personal data and close the account without delay.

13.1  mata56 is an internationally operated platform. As a result, personal data collected from Players located in Indonesia may be processed on infrastructure hosted in jurisdictions outside Indonesia, including in cloud data centre regions within the Asia-Pacific zone.

13.2  Where personal data is transferred to a jurisdiction that does not provide a level of data protection equivalent to that applicable in Indonesia, mata56 will implement appropriate safeguards to protect the data during transfer and in storage, including contractual data processing agreements that impose binding data protection obligations on the receiving entity.

13.3  mata56's payment processing integrations with Indonesian banks (BCA, BRI, BNI, Mandiri, and others) and e-wallet operators (OVO, DANA, GoPay, ShopeePay, LinkAja) involve data transmission to those providers' own infrastructure. These providers are regulated financial institutions subject to Indonesian financial sector regulations and are independently responsible for the security of data within their own systems.

14.1  mata56 may update this Privacy Policy from time to time to reflect changes in platform practices, applicable law, or regulatory requirements. The revised Policy will be published on this page with an updated "Last updated" date. Where changes are material — meaning they significantly affect how your personal data is used or your rights in relation to it — mata56 will notify registered Players via the email address on their account before the changes take effect.

14.2  Your continued use of the mata56 platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated Policy. If you do not accept the revised Policy, you should close your account by contacting [email protected] prior to the effective date of the change.

14.3  We encourage you to review this Privacy Policy periodically to remain informed about how mata56 is protecting your personal data.

15.1  For all data protection enquiries, personal data access or deletion requests, or privacy complaints relating to the mata56 platform, please contact us using the details below:

Email: [email protected]
Subject line: "Data Protection Request" or "Privacy Complaint"
Response time: Acknowledgement within 2 business days; substantive response within 10 business days
Support hours: 24 hours a day, 7 days a week (WIB / UTC+7)

15.2  If you are not satisfied with mata56's response to a data protection request or privacy complaint, you may escalate the matter to the relevant data protection authority in your jurisdiction or to the dispute resolution mechanism available under mata56's licensing framework.