Privacy Policy — mostfm

This Privacy Policy ("Policy") describes how mostfm ("we", "us", "our", "the Platform") collects, processes, stores, and protects the personal data of individuals ("you", "Member", "User") who access or use the website at https://mostfm.cam and all associated services. This Policy forms part of the contractual relationship between you and mostfm, read together with our Terms & Conditions.

By registering an account or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with any part of this Policy, you must not use the Platform.

Introduction & Scope

This Policy applies to all personal data processed by mostfm in connection with the operation of the Platform, including data collected during account registration, identity verification (KYC), deposit and withdrawal transactions, customer support interactions, promotional communications, and routine platform usage.

mostfm primarily serves Members located in Indonesia, including players in Jakarta, Surabaya, Medan, Bandung, Bali, Yogyakarta, Semarang, Palembang, and Makassar. Accordingly, the data practices described in this Policy are designed to be consistent with internationally recognized data protection standards and the personal data protection principles applicable in the Indonesian market context.

This Policy does not apply to third-party websites or services that may be referenced on the Platform. Third-party game studios (such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, and Spribe), payment processors, and analytics providers operate under their own separate privacy policies.

Data Controller

For the purposes of this Policy, mostfm acts as the data controller in respect of all personal data collected directly from Members through the Platform. As data controller, mostfm determines the purposes and means by which personal data is processed.

Where mostfm engages third-party processors (such as payment gateway operators, KYC verification service providers, or analytics platforms) to process personal data on its behalf, such processors act under written data processing agreements that impose obligations equivalent to those set out in this Policy.

All data controller enquiries, subject access requests, and complaints should be directed to: [email protected] (plain text — not a clickable link).

Data We Collect

mostfm collects the following categories of personal data in the course of operating the Platform:

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data beyond what is strictly necessary for identity verification purposes.

How We Collect Data

mostfm collects personal data through the following channels:

• Direct submission: Information you provide when registering an account, completing KYC verification, submitting a deposit or withdrawal request, or contacting our support team.
• Automated collection: Technical data collected automatically via cookies, web beacons, server logs, and similar tracking technologies when you access or navigate the Platform. See Clause 9 (Cookies & Tracking) for full details.
• Third-party sources: Identity verification data returned by KYC service providers following document validation; fraud scoring data from anti-fraud platforms; and IP geolocation data from third-party geolocation services used for access control and compliance purposes.
• Payment processors: Transaction confirmation data returned by payment gateway operators following deposit or withdrawal processing via Indonesian bank transfer or e-wallet services.

Purpose & Legal Basis for Processing

mostfm processes personal data only for specific, legitimate purposes. The table below summarizes the primary processing purposes and the legal basis on which each is carried out:

Data Sharing

mostfm does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share personal data only in the following limited circumstances:

• Service providers and processors: Third-party vendors engaged by mostfm to provide specific operational services, including KYC identity verification platforms, payment gateway operators (handling transactions via BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and LinkAja), fraud prevention services, and customer support infrastructure providers. All such processors are contractually bound to use personal data only for the purposes specified by mostfm.
• Game studio providers: Where technically necessary to facilitate gameplay, certain session identifiers may be passed to licensed third-party game studios (such as Pragmatic Play, Evolution Gaming, and Spribe). No detailed personal identity data is shared with game studios beyond what is operationally required.
• Law enforcement and regulatory authorities: Where mostfm is required by applicable law, court order, or regulatory directive to disclose personal data to competent authorities. mostfm will notify the affected Member of such disclosure where legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of mostfm's assets, personal data held about Members may be transferred to the acquiring entity. Members will be notified of such a transfer and the applicable privacy terms of the successor entity at least 30 days in advance.

International Data Transfers

To deliver its services to Members across Indonesia, mostfm may transfer personal data to, and process it in, countries other than Indonesia where our service providers operate data centers or processing infrastructure. Such transfers may include jurisdictions in Southeast Asia, the Asia-Pacific region, and Europe.

Where personal data is transferred outside Indonesia, mostfm takes all reasonable steps to ensure that appropriate safeguards are in place, including contractual protections equivalent to internationally recognized data protection standards. By using the Platform, you consent to such international transfers of your personal data as described in this Policy.

Members have the right to request details of the specific countries to which their data has been transferred by contacting [email protected].

Data Retention

mostfm retains personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable legal or regulatory obligations. The standard retention periods applied by mostfm are as follows:

• Account and transaction data: Retained for 7 years from the date of account closure, in accordance with anti-money laundering record-keeping requirements.
• KYC documentation: Retained for 7 years from the date of submission or the date of account closure, whichever is later.
• Marketing communications: Retained until you withdraw consent or for 3 years from the date of last engagement, whichever is earlier.
• Technical logs and session data: Retained for 12 months from the date of collection, after which anonymized aggregate data may be retained indefinitely for analytics purposes.
• Customer support records: Retained for 3 years from the date of the last communication to support complaint investigation and service improvement.

Following expiry of the applicable retention period, personal data is either securely deleted or anonymized such that it can no longer be attributed to an identifiable individual.

Cookies & Tracking Technologies

mostfm uses cookies, web beacons, and similar tracking technologies to enhance your experience on the Platform, analyze usage patterns, and deliver relevant communications. The types of cookies deployed are as follows:

• Essential cookies: Strictly necessary for the operation of the Platform, including session management, authentication, and fraud detection. These cannot be disabled without materially impairing Platform functionality.
• Functional cookies: Enable personalized features such as language preference, time-zone settings, and last-visited pages. These improve user experience but are not critical to core functionality.
• Analytics cookies: Collect aggregated data on how Members use the Platform (pages visited, click paths, session duration) to inform service improvements. mostfm uses first-party analytics only — no third-party advertising trackers.
• Preference cookies: Remember your settings such as odds format display, preferred deposit method (BCA, BRI, OVO, DANA), and notification preferences.

Most browsers allow you to control cookies through their settings panel. Disabling cookies may impact the functionality of the Platform, particularly features requiring login persistence or personalized settings.

Security Measures

mostfm employs industry-standard technical and organizational measures to protect personal data against unauthorized access, accidental loss, alteration, or disclosure. Key security controls include:

• Encryption: All personal data at rest is encrypted using AES-256 encryption. All data in transit is protected by TLS 1.3 (Transport Layer Security).
• Access controls: Personal data is accessible only to authorized mostfm personnel and processors on a need-to-know basis. Role-based access controls and multi-factor authentication are enforced for all administrative accounts.
• Network security: Web application firewalls, intrusion detection systems, and DDoS mitigation infrastructure are deployed to protect the Platform from external attack.
• Regular audits: Independent security audits and penetration testing are conducted annually to identify and remediate vulnerabilities.
• Password hashing: Member passwords are hashed using bcrypt or Argon2 algorithms — mostfm staff cannot view plaintext passwords.
• Secure KYC document handling: KYC documents are stored in isolated, encrypted storage environments accessible only to compliance personnel.

While mostfm takes all reasonable steps to secure personal data, no method of electronic transmission or storage is completely secure. Members are responsible for maintaining the confidentiality of their own account credentials and should notify mostfm immediately if they suspect unauthorized account access.

Your Rights

As a Member, you hold the following rights in respect of your personal data processed by mostfm:

• Right of access: You may request a copy of all personal data held about you. mostfm will provide this within 30 days of a verified request.
• Right to rectification: You may request correction of inaccurate or incomplete personal data. Identity, contact, and payment data can be updated directly via your account dashboard.
• Right to erasure: You may request deletion of your personal data following account closure, subject to our legal retention obligations (see Clause 8).
• Right to restriction: You may request temporary suspension of processing in cases where you contest data accuracy or where processing is no longer necessary but the data must be retained for legal claims.
• Right to data portability: You may request a machine-readable export of personal data you have provided, for transmission to another service provider.
• Right to object: You may object to processing carried out on the basis of legitimate interests, including profiling for marketing purposes.
• Right to withdraw consent: Where processing is based on consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

To exercise any of these rights, please contact [email protected] with a clear description of your request. mostfm will respond within 30 days and may require identity verification to protect against unauthorized disclosure.

Children & Minors

The Platform is strictly for use by adults aged 21 years or older. mostfm does not knowingly collect personal data from individuals under the age of 21. Account registration requires date-of-birth entry, and KYC verification includes mandatory age confirmation via government-issued identity documents.

If mostfm becomes aware that a Member is under 21 years of age, the account will be immediately suspended, all funds will be returned to the originating payment method (net of any withdrawal processing fees), and all personal data will be deleted in accordance with our data retention obligations for compliance records.

Parents or guardians who believe their child has registered an account on mostfm should contact [email protected] immediately.

Marketing Communications

mostfm may send promotional communications (including bonus offers, tournament announcements, and seasonal campaigns tied to events such as Idul Fitri, Ramadhan, and Indonesian Independence Day on 17 August) to Members via email, SMS, or in-platform notification. All marketing communications are sent only to Members who have consented to receive them during registration or through subsequent opt-in.

You may opt out of marketing communications at any time by:

• Clicking the "Unsubscribe" link at the bottom of any promotional email;
• Adjusting your communication preferences in the account settings dashboard;
• Replying STOP to any promotional SMS message; or
• Contacting support at [email protected] with your opt-out request.

Opting out of marketing communications does not affect transactional messages (such as deposit confirmations, withdrawal approvals, KYC verification requests, or responsible gaming notifications), which are sent as part of the Platform's core service.

Third-Party Links

The Platform may contain links to third-party websites operated by game studios (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft), payment processors, or partner services. mostfm is not responsible for the privacy practices or content of such third-party sites.

When you click a link to a third-party site, you leave the mostfm Platform and become subject to the privacy policy of that external site. We encourage you to review the privacy policies of any third-party sites you visit.

Policy Amendments

mostfm reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, technological developments, or legal requirements. Where a material change is made, mostfm will provide at least 14 days' notice via prominent on-site notification and email to your registered address.

Your continued use of the Platform following the effective date of any amendment constitutes acceptance of the revised Policy. If you do not agree with the revised terms, you may request account closure and withdrawal of remaining balance before the effective date.

The most current version of this Privacy Policy will always be accessible at https://mostfm.cam/privacy-policy. The "Last Updated" date at the top of this page indicates when the Policy was last revised.

Contact & Complaints

If you have questions, concerns, or complaints regarding this Privacy Policy or the handling of your personal data by mostfm, please contact our Data Protection team using the following channel:

• Email: [email protected] (plain text — not a clickable link)
• Response time: All privacy-related enquiries receive a guaranteed response within 48 hours (WIB).

mostfm is committed to resolving all data protection complaints fairly and promptly. If you are not satisfied with our response, you have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction.