LEGAL REFERENCE

Your data. Your control. Our commitment.

We handle your account details, payment history and personal information with the same care we put into our platform. This policy shows exactly how we collect, use and...

Data SecurityPayment PrivacyAccount ProtectionTransparencyYour Rights
See the Lobby Read FAQ
mechaslot Your data. Your control. Our commitment.

Privacy policy scope and jurisdiction

mechaslot operates in supported regions where local law permits. This policy covers how we collect and handle your personal data when you open an account, deposit via DANA, OVO, GoPay or QRIS, and use our live casino tables, slot lobbies and sportsbook. We comply with data protection standards applicable to our operating jurisdictions. Your information stays encrypted and segregated from third parties

unless you explicitly authorise a transaction or we're required by law to disclose.

Service availability is jurisdiction-dependent. Users are responsible for checking local law before access.

SUPPORT

Privacy questions and requests

Email Support Contact our data team at [email protected] with any questions about how we handle your information or to request access to your personal data.
Account Settings Manage your privacy preferences directly in your account dashboard. Update contact details, review login history and control data sharing settings anytime.
Data Requests Submit formal requests for data access, correction or deletion through your account portal. We respond within the timeframe required by applicable law.
EDITORIAL CLARITY

How we earn your trust on privacy

Encryption Standard

All account credentials, payment details and personal identifiers travel over TLS 1.2+ encryption. Data at rest is encrypted using AES-256 standards.

No Third-Party Sales

We never sell your personal data to marketers, brokers or unrelated companies. Payment processors and fraud-detection partners see only what's necessary for your transaction.

Regular Audits

Our security posture is reviewed quarterly by independent auditors. Findings are addressed immediately and logged in our compliance register.

Transparent Logging

Every login, deposit and withdrawal is timestamped and stored. You can review your full activity log in account settings anytime.

Vendor Agreements

Every third party we work with — payment gateways, live dealers, sportsbook providers — signs a data protection addendum before accessing any customer information.

Incident Response

If a breach occurs, we notify affected users within 24 hours and provide guidance on account security steps. Our incident log is available upon request.

Privacy consistency across mechaslot

Live Casino Tables
Your session data, bet history and dealer interactions are logged for dispute resolution and fraud prevention only. Not shared with other players or external parties.
Slot Lobbies
Spin records and feature outcomes are stored on your account for payout verification. RNG audit trails are kept separate from personal identifiers.
Sportsbook Markets
Betting slips, odds snapshots and settlement records are tied to your account. Market data is anonymised before being used for platform analytics.
Payment Processing
DANA, OVO, GoPay and QRIS transactions are tokenised. Your wallet credentials never touch our servers; payment gateways handle the exchange directly.
Account Recovery
If you lose access, we verify your identity using email, phone or security questions. Recovery codes are encrypted and never displayed in plaintext.
Promotional Communications
We send updates about new games, promos and account activity only to the email or phone you provided. Unsubscribe anytime from account settings.
Data Retention
Account records are kept for the duration of your membership plus seven years for regulatory compliance. Deleted accounts are purged after 90 days.
AT A GLANCE

What shapes our privacy approach

01
Indonesia-First Design We built our data handling around how Indonesia players actually use DANA, OVO, GoPay and QRIS. Your payment flow is private by default, not by exception.
02
Account Ownership Your account is yours alone. We don't share login credentials, session tokens or account history with anyone — not even support staff without your explicit consent.
03
Minimal Collection We ask for only what we need: name, email, phone and payment details. No unnecessary fields, no optional data harvesting, no demographic profiling.
04
Transparent Policies This policy is written in plain language, not legal jargon. We explain what we collect, why we collect it and how long we keep it — no hidden clauses.
05
User Control You can update your information, download your data or request deletion anytime. Privacy choices are in your account settings, not buried in a support form.
06
Compliance Ready We comply with data protection standards in supported regions. Our practices are audited regularly and updated as regulations evolve.

Privacy questions answered

We collect your name, email, phone number, date of birth for age verification, and payment details when you deposit. We also log your IP address, device type and login timestamps for security. We don't collect browsing history, location data or demographic profiling information.

Payment details are tokenised immediately — your DANA, OVO, GoPay or QRIS credentials never touch our servers. We use PCI-DSS compliant processors and encrypt all transaction records. Your wallet is verified by the payment provider, not stored by us.

Yes. Go to account settings and select 'Download My Data' to receive a copy of everything we hold. To request deletion, submit a formal request through our privacy portal. We'll confirm deletion within 90 days and provide a certificate of removal.

Only you and authorised mechaslot staff can access your account. Payment processors see transaction details only. Live dealers and sportsbook providers see only your username and bet amounts — never your personal identity or payment method.

Account records are retained for seven years to comply with financial regulations in supported regions. After that, all personal data is permanently deleted. You can request earlier deletion, though some records may be kept for legal compliance.

We notify affected users within 24 hours with details of what was accessed and steps to secure your account. We provide free credit monitoring where applicable and work with authorities to investigate. Our incident response plan is tested quarterly.

No. We never sell personal data to marketers, data brokers or unrelated companies. Payment processors and fraud-detection partners access only what's necessary for your transaction. All vendors sign data protection agreements before accessing any information.