marvel365Privacy Policy

This page describes what we collect when you use marvel365 and how we keep that data protected. We at marvel365 collect personal information only to provide our service—account registration, payment processing, identity verification, and customer support. We do not sell, share, or monetise your data with third parties for marketing purposes.

Our data handling is governed by applicable laws in the jurisdictions where our service operates. We store some data on servers located outside Indonesia; those servers are protected by standard encryption and access controls. Your payment details are never stored on our marvel365 systems—payment providers (DANA, e-wallet, mobile banking, local payment) handle sensitive financial data directly.

This policy applies to all users of marvel365 across Android app, iOS browser access, and web platforms. If you have questions about your data or wish to request a copy of your records, contact our support team via in-app chat or email during standard hours.

What data we collect on marvel365

When you register for marvel365, we collect your email address, phone number, and a password you create. We use your email for account recovery and notifications; we use your phone number for two-factor authentication (2FA) and account verification. We ask for your full name, date of birth, and postal address during Know Your Customer (KYC) verification, required before your first withdrawal. This information is stored securely and accessed only by our compliance and support teams.

We collect transaction data when you deposit, place predictions, or withdraw funds. This includes the amount, payment method (DANA, e-wallet, mobile banking, local payment, or bank transfer), timestamp, and settlement status. We do not store your full payment card or bank account numbers—payment gateways retain that data. We log your game activity on marvel365: which tables you accessed, your predictions or bets, your balances, and settlement outcomes. This information is used for dispute resolution, fraud prevention, and your own account history review.

We collect cookie data when you use our web platform or mobile browser. Cookies track your session, remember your preferences (such as low-data mode), and help us understand how you navigate marvel365. You can disable cookies in your browser settings, though some features may not work correctly. We do not use cookies to track you across unrelated websites—our cookies are limited to marvel365 itself.

We also collect usage analytics: which games you play, how long you stay in each session, and which payment methods you prefer. This data is aggregated and anonymised; we use it to optimise marvel365 performance, identify popular games, and improve our support. Individual players are never identified in these analytics.

How we use your data on marvel365

Your marvel365 data serves five main purposes. First, account administration: we use your email and phone to confirm your identity, reset forgotten passwords, and notify you of account changes (new withdrawal, security alert, etc.). Second, payment processing: your name and postal address are shared with payment providers (online payment, e-wallet, mobile banking, local payment) to settle deposits and withdrawals. Third, legal and compliance: we retain your KYC data, transaction records, and betting history to comply with financial regulations and respond to law-enforcement requests. Fourth, fraud prevention: we analyse your login patterns, device IDs, and transaction history to detect suspicious activity and protect your account. Fifth, customer support: our team accesses your account history to answer questions, resolve disputes, and explain settlement decisions.

We do not use your data for direct marketing unless you opt in. We do not sell your email or phone number to third-party marketers. We do not use your prediction history to profile you for targeted advertising on other sites. If you receive marketing emails from marvel365, you can unsubscribe by clicking the unsubscribe link in the email.

Third-party processors and data sharing on marvel365

We share your data with essential service providers. Payment gateways (online payment, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment) receive your name, phone, and transaction details to process deposits and withdrawals. Our email service provider receives your email address to send account notifications and password-reset links. Our analytics platform (Google Analytics, anonymised) receives aggregated usage data to help us understand marvel365 traffic patterns. Our cloud hosting provider (servers may sit outside Indonesia) stores encrypted copies of your account data for backup and disaster recovery.

We do not share your data with live-dealer studios, slot-game providers, or esports betting partners—these services are integrated into marvel365 and accessed through our systems, not directly. We do not disclose your identity to other players; your marvel365 username is visible at live tables, but your real name, email, and payment details are never shared with other users.

Your rights and data retention on marvel365

You have the right to access, correct, and request deletion of your marvel365 data. To access your information, log in to your account menu and select "Download my data"—we'll generate a file containing your personal information, transaction history, and betting records. To correct inaccurate data (for example, if your address changed), contact our support team and we'll update your records. To request deletion of non-essential data (such as marketing cookies or analytics), we'll process your request within 30 days, though legal requirements may prevent deletion of transaction records.

We retain your marvel365 data as follows: account credentials (email, phone, password hash) are kept for the life of your account. Transaction records, betting history, and KYC verification data are retained for seven years to comply with financial regulations, then securely deleted. Cookies expire after 12 months of inactivity. Backup copies are retained for up to 90 days in case account recovery is needed. If you close your marvel365 account, we delete all non-essential data within 30 days, though transaction records are retained for the full seven-year period.

Data security and encryption on marvel365

We protect your marvel365 data using industry-standard encryption. All data transmitted between your device and our servers is encrypted using TLS (Transport Layer Security), the same encryption used by banks. Your password is never stored in plain text; we hash it using industry-standard algorithms so even our staff cannot see your original password. Your account is protected by two-factor authentication (2FA), so even if someone learns your password, they cannot access your account without the SMS code sent to your phone.

Our servers use firewalls, intrusion-detection systems, and regular security updates to prevent unauthorised access. We do not publicly disclose our exact security measures (to avoid helping attackers), but we undergo annual third-party security audits to verify our protections. If we discover a security breach affecting marvel365 user data, we will notify affected players via email and through an in-app alert. We do not guarantee that our systems are perfectly secure—no online service is immune to skilled attackers—but we maintain security measures consistent with financial-services standards.

Cookies and tracking on marvel365

We use cookies on the marvel365 web platform to track your session, remember your login, and store your preferences (such as language or low-data mode). These are "first-party" cookies set by marvel365 itself, not by external advertisers. We also use Google Analytics to track aggregate traffic patterns (total visitors, popular games, device types), but this data is anonymised and does not identify individual players. You can disable analytics by opting out in your account settings.

We do not use cookies to track you across unrelated websites or to build a profile of your browsing behaviour outside marvel365. Third-party advertisers do not have access to marvel365 cookie data. If you disable cookies in your browser, you can still use marvel365, though some features (such as remembering your login between sessions) may not work correctly.

Contact and data requests on marvel365

If you have questions about our privacy practices on marvel365, wish to request a copy of your data, or want to report a suspected data breach, contact us via in-app chat, email to our support address, or phone during standard business hours. We respond to data-access requests within 15 days and to deletion requests within 30 days (though legal requirements may prevent deletion of transaction records). If you're located in Jakarta, Surabaya, Bandung, Medan, or Semarang and have concerns about how your data is handled, our local support team is available during Indonesian business hours.

We reserve the right to update this privacy policy if our practices change or if new laws require it. We will notify you of material changes via email and through an in-app notice. Your continued use of marvel365 after such notice means you accept the updated policy. This policy was last updated on the date shown at the bottom of this page. If you have not reviewed it in more than 12 months, we encourage you to re-read it to understand your current rights and our current practices.