masha Platform Privacy Notice
This page describes what we collect when you use masha and how we keep that data protected. We at masha take your privacy seriously and operate transparently about data handling, third-party processors, and your rights under applicable law.
Our masha platform collects information necessary to operate our service: account details, payment information, gameplay history, and device identifiers. We use this data to process deposits and withdrawals via DANA, e-wallet, mobile banking, local payment, online payment, and your bank, to verify your identity, to prevent fraud, and to improve our platform. We do not sell your data to advertisers or marketing firms.
This notice applies to all users of masha across supported jurisdictions, whether you access our platform from Jakarta, Surabaya, Bandung, Medan, Semarang, or elsewhere. We comply with applicable data-protection laws and provide you with rights to access, correct, and delete your information. If you have questions about our privacy practices, our support team can provide clarification.
What data we collect on masha
We at masha collect the following categories of information when you create an account and use our platform:
-
1
Account informationCategory
Your email address, phone number, username, password (encrypted), date of birth, and full name. We use this to create and manage your masha account.
-
2
Identity verification dataCategory
A copy of your government-issued ID and proof of address (utility bill, bank statement). We collect this to comply with anti-money-laundering regulations and prevent fraud.
-
3
Payment informationCategory
Your linked payment method (DANA, e-wallet, mobile banking, local payment, online payment, or bank account details). We store this securely to process deposits and withdrawals.
-
4
Gameplay and transaction historyCategory
Records of your bets, wins, losses, deposits, and withdrawals on masha. We retain this for account reconciliation and dispute resolution.
-
5
Device and usage dataCategory
Your IP address, device type, operating system, browser type, and pages visited on masha. We use this to detect fraud, improve performance, and troubleshoot technical issues.
How we use your data on masha
We at masha use your data for the following purposes:
Account management: We use your account information to create your masha profile, process your login, and manage your account settings. Your email and phone are used for password resets and account recovery.
Payment processing: We use your payment details to process deposits and withdrawals via e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, and e-wallet. Our payment processors may store your information to facilitate future transactions.
Fraud prevention and compliance: We use your identity verification data and device information to detect fraudulent activity, prevent money laundering, and comply with anti-money-laundering regulations. We may share this information with regulatory authorities if required by law.
Gameplay and settlement: We use your transaction history to settle bets, calculate payouts, and resolve disputes. This data is retained for at least 7 years to comply with financial record-keeping requirements.
Platform improvement: We analyze aggregated usage data (not linked to your identity) to improve masha's performance, identify technical issues, and develop new features. We do not use your personal data for marketing or profiling.
Third-party processors and data sharing
We at masha work with third-party service providers to operate our platform. These processors handle specific functions but do not own or control your data:
Payment processors: Our payment partners (mobile banking, local payment, online payment, e-wallet, mobile banking, and banks) receive your payment information to process transactions. They operate under their own privacy policies and are bound by data-protection agreements with masha.
Identity verification providers: We use third-party services to verify your identity documents. These providers store your ID and proof of address temporarily and delete it after verification is complete.
Cloud hosting: Our servers may sit outside your jurisdiction (e.g., in Singapore or Australia). Your data is encrypted in transit and at rest, and our hosting provider is contractually bound to protect your information.
Regulatory authorities: We may disclose your information to government agencies, law enforcement, or financial regulators if required by law or court order. We will notify you of such disclosures unless legally prohibited.
We do not sell your data
We at masha do not sell, rent, or lease your personal information to third parties for marketing purposes. We do not share your data with advertisers or data brokers. Your information is used solely to operate masha and comply with applicable law.
Your rights and data retention on masha
We at masha recognize your rights under applicable data-protection laws. You have the right to:
Access: Request a copy of all personal data we hold about you. We will provide this within 30 days of your request.
Correction: Request that we correct inaccurate or incomplete information in your masha account. You can update most information yourself in your account settings.
Deletion: Request that we delete your personal data, subject to legal retention requirements. We may retain some data (e.g., transaction history) for compliance purposes even after account closure.
Portability: Request that we provide your data in a portable format so you can transfer it to another service.
To exercise these rights, contact our support team via email or in-app chat. We will verify your identity before processing your request.
Data retention: We retain your account information for as long as your masha account is active. After you close your account, we retain transaction history for 7 years to comply with financial regulations. Identity verification documents are deleted after 2 years unless required by law to retain them longer.
Cookies and tracking on masha
We at masha use cookies and similar tracking technologies to operate our platform and improve your experience. Our cookies serve the following purposes:
Session cookies: These keep you logged into masha during your session. They expire when you close your browser.
Preference cookies: These remember your settings (e.g., language, theme) so you do not have to reset them each time you visit masha.
Analytics cookies: These track how you use masha (e.g., which games you play, how long you stay) to help us improve performance. This data is aggregated and not linked to your identity.
You can disable cookies in your browser settings, but this may limit masha's functionality. We do not use third-party tracking pixels or retargeting cookies.
Security and data protection on masha
We at masha protect your data using industry-standard security measures:
Encryption: All data transmitted between your device and our servers is encrypted using TLS (Transport Layer Security). Your password is encrypted and stored securely—we cannot see it.
Access controls: Only authorized masha employees can access your personal data, and only for legitimate business purposes. We use role-based access controls to limit exposure.
Regular audits: We conduct regular security audits and penetration testing to identify and fix vulnerabilities.
However, no security system is perfect. If we discover a data breach, we will notify you and relevant authorities as required by law.
Contact us about privacy on masha
If you have questions about our privacy practices, wish to exercise your rights, or suspect a data breach, contact our support team:
Email: [email protected]
In-app chat: Available during standard operating hours
Mailing address: Our support team can provide a physical address upon request
We will respond to your inquiry within 30 days. If you are not satisfied with our response, you may lodge a complaint with your local data-protection authority.
This privacy notice was last updated in 2024 and may be updated periodically. We will notify you of material changes via email or in-app notification. Your continued use of masha after such changes constitutes your acceptance of the updated notice.