Privacy Policy

1. Introduction

At mdg138, we are committed to protecting the privacy and security of our players' personal information. This Privacy Policy outlines our practices concerning the collection, use, disclosure, and protection of personal data in accordance with applicable data protection laws and regulations governing online gaming operations serving the Indonesian market.

We recognize that privacy is a fundamental right, and we strive to be transparent about our data handling practices. This policy applies to all personal information collected through our website at mdg138.cam, mobile applications, customer support channels, and any other platforms operated by mdg138.

2. Data Controller

mdg138 acts as the data controller for all personal information collected through our platform. As the data controller, we determine the purposes and means of processing your personal data and are responsible for ensuring compliance with applicable privacy and data protection laws.

For any questions regarding this Privacy Policy or our data processing practices, you may contact our Data Protection Officer using the contact information provided at the end of this document.

3. Information We Collect

3.1 Information You Provide Directly

When you register for an mdg138 account or use our services, we collect the following categories of personal information that you provide directly to us:

• Identity Information: Full legal name (as shown on your Indonesian National Identity Card / KTP), date of birth, gender, nationality, and photograph (for KYC verification purposes)
• Contact Information: Email address, phone number (mobile and/or landline), residential address, and postal code
• Account Credentials: Username, password (stored in encrypted form), and security questions/answers
• Financial Information: Bank account details (bank name, account number, account holder name), e-wallet account information (OVO, DANA, GoPay, ShopeePay, LinkAja), payment card information (processed through secure payment gateways), and transaction history
• Verification Documents: Copies of identity documents (KTP), proof of address (utility bills, bank statements), and selfie photographs holding identification
• Communication Data: Content of correspondence with our customer support team via live chat, email, WhatsApp, or other communication channels

3.2 Information Collected Automatically

When you access and use the mdg138 platform, we automatically collect certain technical and usage information, including:

• Device Information: Device type (desktop, mobile, tablet), operating system and version, browser type and version, device identifiers (IMEI, advertising ID), screen resolution, and hardware specifications
• Log Data: IP address, access times and dates, pages viewed, time spent on pages, clickstream data, referring/exit pages, and error logs
• Location Data: Approximate geographic location derived from your IP address to verify you are accessing our services from within Indonesian territory
• Gaming Data: Betting history, game selections, wagering patterns, win/loss records, bonus utilization, deposit and withdrawal amounts, and gameplay statistics
• Cookie Data: Information collected through cookies and similar tracking technologies (see Section 10 for details)

3.3 Information from Third Parties

In certain circumstances, we may receive information about you from third-party sources, including:

• Payment processors and financial institutions that facilitate your deposits and withdrawals
• Identity verification services that assist in confirming your identity and preventing fraud
• Game providers that supply casino games, slots, and sports betting platforms integrated into our service
• Analytics providers that help us understand how users interact with our platform

4. How We Use Your Information

mdg138 uses your personal information for the following purposes:

4.1 Account Management and Service Provision

• Creating and maintaining your account on the platform
• Verifying your identity and age (21+ requirement) to comply with legal obligations
• Processing deposits, withdrawals, and other financial transactions
• Providing access to sports betting, casino games, slots, and other gaming services
• Calculating and crediting winnings to your account
• Managing your VIP tier status and loyalty program benefits

4.2 Customer Support and Communication

• Responding to your inquiries, complaints, and support requests via live chat, email, or WhatsApp
• Sending you service-related notifications about your account, transactions, and platform updates
• Providing Indonesian-language customer support tailored to your needs
• Conducting customer satisfaction surveys (with your consent)

4.3 Security, Fraud Prevention, and Legal Compliance

• Detecting and preventing fraud, cheating, collusion, money laundering, and other prohibited activities
• Verifying compliance with our Terms & Conditions
• Monitoring for problem gambling behaviors and implementing responsible gaming measures
• Complying with legal obligations, including anti-money laundering (AML) and Know Your Customer (KYC) requirements
• Responding to legal requests from law enforcement or regulatory authorities
• Protecting the rights, property, and safety of mdg138, our users, and the public

4.4 Marketing and Promotions (With Consent)

• Sending you promotional offers, bonus announcements, and marketing communications via email or SMS (only if you have opted in)
• Personalizing promotional offers based on your gaming preferences and activity
• Informing you about new games, features, and platform improvements
• Sending you special promotions for Indonesian holidays (Independence Day, Idul Fitri, Chinese New Year, etc.)

4.5 Platform Improvement and Analytics

• Analyzing user behavior and preferences to improve our platform's functionality and user experience
• Conducting research and statistical analysis to optimize game offerings and betting markets
• Testing new features and services before full deployment
• Troubleshooting technical issues and improving platform performance for Indonesian mobile networks

5. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Contractual Necessity: Processing is necessary to fulfill our contract with you (i.e., providing access to our gaming platform and processing your bets and transactions)
• Legal Obligation: Processing is required to comply with legal and regulatory obligations, including KYC, AML, age verification, and responsible gaming requirements
• Legitimate Interests: Processing is necessary for our legitimate business interests, such as fraud prevention, security, platform improvement, and customer support, provided these interests do not override your fundamental rights and freedoms
• Consent: For marketing communications and certain optional data processing activities, we rely on your explicit consent, which you may withdraw at any time

6. Data Sharing and Disclosure

6.1 When We Share Your Information

mdg138 does not sell your personal information to third parties. However, we may share your data with the following categories of recipients in specific circumstances:

6.2 Data Protection Obligations for Third Parties

All third parties with whom we share your personal data are required by contract to implement appropriate technical and organizational security measures to protect your information. They are prohibited from using your data for any purpose other than the specific services they provide to mdg138, and they must comply with applicable data protection laws.

7. Data Retention

mdg138 retains your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

7.1 Account Data

While your account is active, we retain all personal information necessary to provide our services. If you close your account, we will retain your data for a minimum of 5 years to comply with legal obligations related to financial record-keeping, anti-money laundering regulations, and dispute resolution. After this period, data will be securely deleted or anonymized.

7.2 Transaction Records

Financial transaction records (deposits, withdrawals, bets, winnings) are retained for 7 years from the date of the transaction to comply with Indonesian financial regulations and tax requirements.

7.3 Marketing Data

If you have consented to receive marketing communications, we will retain your contact information and marketing preferences until you withdraw consent or for 3 years of inactivity, whichever comes first.

8. Data Security Measures

mdg138 takes the security of your personal information seriously and implements industry-standard technical and organizational measures to protect your data from unauthorized access, disclosure, alteration, or destruction.

8.1 Technical Security

• Encryption: All data transmitted between your device and our servers is protected by 256-bit SSL/TLS encryption
• Secure Storage: Personal data is stored on encrypted servers hosted in secure data centers with physical and electronic access controls
• Password Protection: User passwords are hashed using strong cryptographic algorithms (bcrypt) and are never stored in plain text
• Firewall Protection: Our infrastructure is protected by advanced firewalls and intrusion detection systems
• Regular Security Audits: We conduct periodic security assessments and penetration testing to identify and address vulnerabilities

8.2 Organizational Security

• Access to personal data is restricted to authorized employees and contractors on a need-to-know basis
• All staff members with access to personal data receive regular data protection and security training
• We maintain incident response procedures to quickly address any security breaches
• Third-party service providers are carefully vetted and contractually obligated to maintain data security

8.3 Your Security Responsibilities

While we implement robust security measures, you also play a crucial role in protecting your account:

• Choose a strong, unique password and do not share it with anyone
• Enable two-factor authentication if available
• Log out of your account when using shared or public devices
• Report any suspicious activity or unauthorized access immediately to our support team

9. Your Privacy Rights

Under applicable data protection laws, you have the following rights regarding your personal information:

9.1 Right of Access

You have the right to request a copy of the personal data we hold about you. You can access most of your information directly through your account dashboard. For additional data, contact our Data Protection Officer.

9.2 Right to Rectification

If any personal information we hold about you is inaccurate or incomplete, you have the right to request correction. You can update your contact details, address, and other information through your account settings or by contacting customer support.

9.3 Right to Erasure ("Right to be Forgotten")

You may request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected or when you withdraw consent. However, we may be required to retain certain information to comply with legal obligations (e.g., financial record-keeping requirements).

9.4 Right to Restrict Processing

You may request that we limit the processing of your personal data in certain situations, such as when you contest the accuracy of the data or object to processing based on legitimate interests.

9.5 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another service provider where technically feasible.

9.6 Right to Object

You have the right to object to processing of your personal data based on our legitimate interests or for direct marketing purposes. You can opt out of marketing communications at any time by clicking the "unsubscribe" link in our emails or contacting customer support.

9.7 Right to Withdraw Consent

Where we process your data based on consent (e.g., marketing communications), you may withdraw your consent at any time. This will not affect the lawfulness of processing based on consent before its withdrawal.

10. Cookies and Tracking Technologies

mdg138 uses cookies, web beacons, and similar tracking technologies to enhance your experience on our platform, analyze usage patterns, and deliver personalized content.

10.1 What Are Cookies?

Cookies are small text files stored on your device when you visit our website. They help us recognize your device on subsequent visits and remember your preferences.

10.2 Types of Cookies We Use

• Essential Cookies: Necessary for the platform to function properly, including authentication, security, and load balancing. These cannot be disabled.
• Performance Cookies: Collect anonymous information about how visitors use our site, helping us improve functionality and user experience.
• Functionality Cookies: Remember your preferences (e.g., language, region) and provide enhanced features.
• Targeting/Advertising Cookies: Used to deliver relevant promotional content and measure the effectiveness of advertising campaigns (requires your consent).

10.3 Managing Cookies

You can manage cookie preferences through your browser settings. Most browsers allow you to block or delete cookies, though this may affect your ability to use certain features of the platform. Disabling essential cookies may prevent you from accessing your account.

11. International Data Transfers

Your personal information may be transferred to and processed in countries outside Indonesia, including jurisdictions where mdg138 operates servers and where our third-party service providers are located. These countries may have data protection laws that differ from Indonesian regulations.

When we transfer your data internationally, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by data protection authorities, to protect your information in accordance with this Privacy Policy.

12. Children's Privacy

mdg138's services are strictly intended for individuals aged 21 years and older. We do not knowingly collect personal information from anyone under the age of 21. If we become aware that we have inadvertently collected data from a person under 21, we will take immediate steps to delete that information and close the associated account.

If you believe a minor has created an account on mdg138, please contact us immediately at [email protected] so we can take appropriate action.

13. Changes to This Privacy Policy

mdg138 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or business operations. When we make material changes, we will notify you by:

• Posting a prominent notice on our website
• Sending an email notification to your registered email address
• Displaying an in-platform notification upon your next login

The "Last Updated" date at the top of this policy indicates when the most recent changes were made. Your continued use of the platform after changes are posted constitutes your acceptance of the revised Privacy Policy. We encourage you to review this policy periodically to stay informed about how we protect your information.

14. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data processing practices, please contact our Data Protection Officer: