Privacy Policy

1. Introduction

mdg189 ("we," "us," "our") is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your data when you visit our website at https://mdg189.cam or use our online gaming services. We understand that privacy is paramount, especially in the online gaming industry, and we have implemented comprehensive measures to ensure your personal information remains secure and confidential.

This Privacy Policy applies to all personal data collected through our platform, including information provided during account registration, financial transactions, customer support interactions, and gameplay activities. By accessing mdg189 services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your information as described herein. If you do not agree with any provision of this Privacy Policy, please discontinue use of our services immediately.

mdg189 operates in accordance with international data protection standards and best practices within the online gaming industry. We regularly review and update our privacy practices to ensure compliance with evolving regulatory requirements and to incorporate technological advancements that enhance data security. Our commitment to privacy extends beyond mere legal compliance—we view data protection as a fundamental aspect of our relationship with players and a cornerstone of trust that underpins our operations.

2. Information We Collect

2.1 Personal Information Provided by You

When you register an account with mdg189, we collect personal information necessary to establish your identity, verify your eligibility to use our services, and comply with regulatory obligations. This information includes:

• Identity Information: Full legal name, date of birth, gender, nationality, and government-issued identification documents (such as KTP for Indonesian residents, passport, or driver's license)
• Contact Information: Email address, phone number, residential address, and postal code
• Financial Information: Bank account details, e-wallet information (OVO, DANA, GoPay account identifiers), payment card details (when applicable), transaction history, and banking institution names (BCA, BRI, BNI, Mandiri, CIMB Niaga, etc.)
• Account Credentials: Username, password (stored in encrypted format), security questions and answers, and two-factor authentication details
• Communication Data: Records of correspondence with customer support, feedback submissions, survey responses, and promotional communications preferences

2.2 Information Collected Automatically

When you access mdg189 services, certain technical and behavioral data is collected automatically through cookies, log files, and similar tracking technologies:

• Device Information: Device type (smartphone, tablet, desktop), operating system, browser type and version, screen resolution, device identifiers (IMEI, MAC address)
• Usage Data: Pages visited, time spent on pages, navigation paths, games played, bet amounts and frequencies, session duration, and interaction patterns
• Connection Data: IP address, Internet Service Provider (ISP), geographic location (city and region level, not precise GPS coordinates), time zone settings, and referral sources
• Gaming Activity: Betting history, win/loss records, game preferences, bonus claims and usage, loyalty program participation, and responsible gaming tool interactions (deposit limits, self-exclusion requests)

2.3 Information from Third Parties

In certain circumstances, we may receive information about you from third-party sources, including payment processors, identity verification services, fraud prevention agencies, and regulatory authorities. This information is used to verify your identity, prevent fraudulent activity, and ensure compliance with anti-money laundering (AML) and know-your-customer (KYC) regulations.

3. How We Use Your Information

mdg189 uses your personal information for the following purposes, each of which is grounded in legitimate business interests or legal obligations:

3.1 Service Provision and Account Management

• Creating and maintaining your player account
• Processing deposits, withdrawals, and other financial transactions
• Providing access to casino games, sports betting markets, live dealer tables, and togel lottery draws
• Administering bonuses, promotions, and VIP loyalty program benefits
• Responding to customer support inquiries and resolving technical issues
• Facilitating communication regarding account activity, platform updates, and service announcements

3.2 Legal and Regulatory Compliance

• Verifying your identity and age (ensuring compliance with 21+ age restriction)
• Conducting KYC and AML checks as required by gaming regulations
• Detecting and preventing fraudulent activity, money laundering, and other illegal conduct
• Responding to legal requests from law enforcement, regulatory bodies, and judicial authorities
• Maintaining records for audit purposes and regulatory reporting
• Implementing responsible gaming measures and identifying problem gambling patterns

3.3 Platform Security and Fraud Prevention

• Monitoring for unauthorized account access and suspicious activity
• Detecting duplicate accounts and bonus abuse
• Preventing cheating, collusion, and other forms of gaming manipulation
• Protecting against distributed denial-of-service (DDoS) attacks and other cybersecurity threats
• Verifying the legitimacy of payment methods and preventing chargebacks

3.4 Service Improvement and Analytics

• Analyzing user behavior to optimize website navigation and game offerings
• Conducting market research to understand player preferences
• Testing new features and functionalities
• Personalizing your gaming experience based on preferences and playing history
• Improving customer support quality through interaction analysis

3.5 Marketing and Communications

• Sending promotional offers, bonus opportunities, and special event notifications (only with your consent)
• Delivering personalized recommendations for games and betting markets
• Communicating about new product launches and platform enhancements
• Conducting customer satisfaction surveys
• Managing loyalty program communications and VIP tier benefits

Marketing Opt-Out: You may withdraw consent for marketing communications at any time by adjusting your account preferences or by contacting our customer support team. Please note that even if you opt out of marketing emails, we will still send transactional communications related to your account (deposit confirmations, withdrawal notifications, security alerts).

4. How We Protect Your Information

mdg189 implements comprehensive technical, organizational, and administrative safeguards to protect your personal information against unauthorized access, alteration, disclosure, or destruction. Our security measures include:

4.1 Technical Security Measures

• Encryption: All data transmitted between your device and our servers is protected using industry-standard SSL/TLS encryption protocols (minimum 256-bit encryption). Sensitive data stored in our databases, including passwords and financial information, is encrypted at rest using advanced encryption algorithms.
• Secure Payment Processing: Financial transactions are processed through PCI DSS (Payment Card Industry Data Security Standard) compliant payment gateways. We do not store complete credit card numbers or CVV codes on our servers.
• Firewall Protection: Our infrastructure is protected by enterprise-grade firewalls that monitor and filter incoming and outgoing network traffic to prevent unauthorized access.
• Intrusion Detection Systems: Real-time monitoring systems detect and respond to potential security breaches, suspicious activity patterns, and cyber attacks.
• Regular Security Audits: Independent third-party security experts conduct periodic penetration testing and vulnerability assessments to identify and remediate potential weaknesses.

4.2 Organizational Security Measures

• Access Controls: Employee access to personal data is restricted on a need-to-know basis. Only authorized personnel with legitimate business reasons may access player information, and all access is logged and audited.
• Staff Training: All employees undergo comprehensive data protection and security awareness training to ensure they understand their responsibilities regarding personal information handling.
• Data Backup: Regular automated backups of player data are maintained in secure, geographically distributed data centers to ensure business continuity and data recovery in case of system failures.
• Vendor Management: Third-party service providers who process personal data on our behalf are carefully vetted and contractually obligated to maintain equivalent security standards.

4.3 Player Security Responsibilities

While mdg189 implements robust security measures, you also play a critical role in protecting your account:

• Create strong, unique passwords combining letters, numbers, and special characters
• Enable two-factor authentication (2FA) for additional account security
• Never share your login credentials with anyone, including individuals claiming to be mdg189 staff
• Log out of your account when using shared or public devices
• Keep your email account secure, as password resets are sent via email
• Report any suspicious account activity immediately to our customer support team

5. How We Share Your Information

mdg189 does not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we may share your data with trusted partners and service providers in the following limited circumstances:

5.1 Service Providers and Business Partners

• Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Syariah Indonesia, Bank Permata) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) process deposits and withdrawals on our behalf.
• Game Providers: Third-party gaming software suppliers (Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, etc.) may receive limited player data necessary to deliver gaming services and track gameplay sessions.
• Identity Verification Services: Specialized KYC and AML compliance providers assist in verifying player identities and detecting fraudulent documents.
• Customer Support Platforms: Cloud-based customer relationship management (CRM) systems store communication records to facilitate efficient support services.
• Analytics Providers: Website analytics tools help us understand user behavior and improve platform performance.

5.2 Legal and Regulatory Requirements

We may disclose your personal information when required by law or when we believe disclosure is necessary to:

• Comply with legal obligations, court orders, or regulatory requests
• Cooperate with law enforcement investigations
• Enforce our Terms and Conditions and other agreements
• Protect the rights, property, or safety of mdg189, our players, or the public
• Respond to claims of illegal activity or intellectual property infringement

5.3 Business Transfers

In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy, your personal information may be transferred to the successor entity as part of the business transaction. We will notify you via email or prominent website notice before your information becomes subject to a different privacy policy.

5.4 Data Processing Agreements

All third parties with whom we share personal information are contractually bound by data processing agreements that require them to maintain appropriate security measures, process data only for specified purposes, and comply with applicable data protection laws.

6. Data Retention

mdg189 retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods vary depending on the type of data and applicable legal requirements:

Data Category	Retention Period	Justification
Account Information	Duration of active account plus 7 years after closure	Regulatory compliance, fraud prevention, dispute resolution
Transaction Records	7 years from transaction date	AML/KYC compliance, tax regulations, audit requirements
Gaming Activity	5 years from last activity	Regulatory reporting, dispute resolution, responsible gaming monitoring
Marketing Consents	Until consent is withdrawn or account is closed	Legitimate marketing interests, consent management
Customer Support Records	3 years from interaction date	Service quality improvement, dispute resolution
Website Usage Data	2 years from collection	Analytics, service improvement

Upon expiration of the retention period, personal information is securely deleted or anonymized such that it can no longer be attributed to an individual. In cases where legal holds or ongoing investigations require extended retention, data may be preserved beyond standard periods until such obligations are satisfied.

7. Your Privacy Rights

As a player with mdg189, you have the following rights regarding your personal information. To exercise any of these rights, please contact our Data Protection Officer using the contact information provided in Section 9.

7.1 Right to Access

You have the right to request confirmation as to whether we are processing your personal information and, if so, to receive a copy of that information. We will provide this information in a commonly used electronic format within 30 days of your request.

7.2 Right to Rectification

If you believe any personal information we hold about you is inaccurate or incomplete, you have the right to request correction or completion. You can update most account information directly through your account settings, or contact customer support for assistance.

7.3 Right to Erasure (Right to be Forgotten)

You may request deletion of your personal information under certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected, or when you withdraw consent. However, this right is not absolute—we may be required to retain certain information for legal, regulatory, or legitimate business purposes (fraud prevention, dispute resolution, compliance with financial record-keeping requirements).

7.4 Right to Restriction of Processing

You have the right to request that we limit the processing of your personal information in specific situations, such as when you contest the accuracy of the data or when processing is unlawful but you prefer restriction over deletion.

7.5 Right to Data Portability

You may request to receive your personal information in a structured, commonly used, and machine-readable format, and have the right to transmit that data to another service provider where technically feasible.

7.6 Right to Object

You have the right to object to processing of your personal information for direct marketing purposes at any time. You may also object to processing based on legitimate interests, though we may continue processing if we can demonstrate compelling legitimate grounds that override your interests.

7.7 Right to Withdraw Consent

Where processing is based on consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing conducted prior to withdrawal.

7.8 Right to Lodge a Complaint

If you believe your privacy rights have been violated, you have the right to lodge a complaint with a supervisory authority in your jurisdiction. However, we encourage you to contact us first so we can attempt to resolve your concerns directly.

8. Cookies and Tracking Technologies

mdg189 uses cookies, web beacons, and similar tracking technologies to enhance your experience, analyze usage patterns, and deliver personalized content. A cookie is a small text file stored on your device that helps us recognize your browser and remember certain information.

8.1 Types of Cookies We Use

• Essential Cookies: Required for basic platform functionality, including account login, session management, and security features. These cookies cannot be disabled without impairing core services.
• Performance Cookies: Collect anonymous information about how visitors use our website, including most visited pages, navigation paths, and error messages. This data helps us improve platform performance.
• Functionality Cookies: Remember your preferences (language selection, display settings) to provide a more personalized experience.
• Targeting/Advertising Cookies: Track your browsing activity to deliver relevant promotional content and measure advertising effectiveness.

8.2 Managing Cookie Preferences

Most web browsers automatically accept cookies, but you can modify your browser settings to decline cookies if you prefer. However, disabling cookies may limit your ability to use certain features of the mdg189 platform. You can manage cookie preferences through your browser settings or by using our cookie consent management tool available on the website.

9. Contact Information and Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or our data processing practices, please contact our Data Protection Officer:

10. Changes to This Privacy Policy

mdg189 reserves the right to modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or business operations. We will notify you of material changes through prominent notice on our website or via email to your registered address. The "Last Updated" date at the top of this policy indicates when revisions were last made. Your continued use of mdg189 services following notification of changes constitutes your acceptance of the revised Privacy Policy. We encourage you to review this page periodically to stay informed about how we protect your information.

11. International Data Transfers

mdg189 primarily operates to serve Indonesian residents, and your personal information is processed and stored within secure data centers. However, some of our service providers and business partners may be located in other countries. When personal information is transferred internationally, we ensure appropriate safeguards are in place through standard contractual clauses, adequacy decisions, or other legally recognized transfer mechanisms to protect your data in accordance with this Privacy Policy.

12. Children's Privacy

mdg189 services are strictly intended for individuals aged 21 and older. We do not knowingly collect personal information from anyone under the age of 21. If we become aware that we have inadvertently collected data from a minor, we will take immediate steps to delete that information from our systems. If you believe we may have information from or about a person under 21, please contact us immediately at [email protected].