Privacy Policy

1 Introduction

mdg198 ("we", "us", "our", "the Company") is committed to protecting the privacy and personal data of all registered players ("you", "your", "the Player"). This Privacy Policy explains what personal information we collect, how we use it, who we share it with, how we protect it, and what rights you have regarding your data.

This policy is designed to comply with Indonesian data protection standards and international best practices. We are transparent about our data practices and encourage all players to read this policy carefully before using the mdg198 platform.

If you have any questions or concerns about how your personal data is handled, please contact our Data Protection team at [email protected].

2 Definitions

For the purposes of this Privacy Policy, the following terms have the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, email address, telephone number, date of birth, identity document number, payment information, and IP address.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" means the entity that determines the purposes and means of Processing Personal Data. mdg198 acts as the Data Controller for all data collected through the platform.
• "Data Processor" means a third-party service provider that Processes Personal Data on behalf of the Data Controller, such as payment processors, hosting providers, and customer support tools.
• "Cookies" means small text files placed on your device by a website to store preferences, track activity, and enable certain functionality.
• "Anonymised Data" means data that has been processed in such a way that it can no longer be attributed to a specific individual without the use of additional information, which is kept separately and secured.

3 Data Controller

mdg198, operating at mdg198.cam, is the Data Controller responsible for your Personal Data collected and processed through the platform. All questions, requests, or complaints regarding data protection should be directed to:

Data Protection Contact:
Email: [email protected]
Response Time: Within 14 business days

4 Personal Data We Collect

mdg198 collects the following categories of Personal Data:

4.1 Registration Information

• Full name (as it appears on your identity document)
• Date of birth (to verify you are 21 years of age or older)
• Email address
• Mobile telephone number
• Residential address (city and province are sufficient for registration; full address may be required for KYC verification)
• Username and password (password is stored in hashed, encrypted form and is not readable by mdg198 staff)

4.2 Identity Verification (KYC) Documents

• Government-issued identity document: Indonesian National Identity Card (KTP), passport, or driver's licence (SIM)
• Proof of payment method ownership: bank statement, e-wallet screenshot, or card photograph
• Selfie photograph alongside identity document (where requested to confirm identity)

4.3 Financial Information

• Bank account details (bank name, account number, account holder name) for BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, or Bank Permata
• E-wallet account details for OVO, DANA, GoPay, ShopeePay, or LinkAja
• Transaction history (deposits, withdrawals, wagers, winnings)
• Bonus claims and wagering requirement progress

4.4 Technical & Usage Data

• IP address and geolocation data (to verify you are accessing the platform from within Indonesia)
• Device information (operating system, browser type, device model)
• Login timestamps and session duration
• Game play history (games played, bets placed, outcomes)
• Customer support interactions (chat logs, email correspondence)

4.5 Marketing Preferences

• Consent to receive promotional emails, SMS messages, or push notifications
• Preferred communication channels and frequency

5 How We Collect Personal Data

mdg198 collects Personal Data through the following methods:

• Direct Submission: When you register an account, submit KYC documents, make a deposit or withdrawal, contact customer support, or update your account settings.
• Automated Technologies: Through cookies, web beacons, and similar tracking technologies that record your interactions with the platform (see Section 12 for details).
• Third-Party Payment Processors: When you make a deposit or request a withdrawal, your payment information is collected by our authorised payment processors (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja) and shared with mdg198 only to the extent necessary to complete the transaction.
• Public Sources: In limited cases, we may verify information you provide against publicly available databases or government registries to comply with anti-money laundering (AML) and fraud prevention obligations.

6 How We Use Your Personal Data

mdg198 uses your Personal Data for the following purposes:

6.1 Account Management & Service Delivery

• To create, maintain, and authenticate your player account
• To process deposits, withdrawals, and other financial transactions
• To provide access to games, betting markets, and live dealer tables
• To track wagers, calculate winnings, and update your account balance
• To award bonuses and track wagering requirement progress

6.2 Legal & Regulatory Compliance

• To verify your identity and age (21+ requirement)
• To comply with Know Your Customer (KYC) and anti-money laundering (AML) regulations
• To prevent fraud, collusion, bonus abuse, and other prohibited conduct
• To respond to legal requests from government authorities or law enforcement where required by law
• To maintain records as required by Indonesian gaming and financial regulations

6.3 Customer Support

• To respond to your inquiries, complaints, and support requests
• To troubleshoot technical issues and improve platform performance
• To investigate disputes related to wagers, payouts, or account access

6.4 Marketing & Communications (with your consent)

• To send promotional offers, bonus announcements, and game updates via email or SMS
• To personalise marketing content based on your gaming preferences and activity
• To conduct surveys and gather feedback on your experience with mdg198

6.5 Responsible Gaming

• To monitor for signs of problem gambling behaviour and offer intervention
• To enforce deposit limits, session reminders, and self-exclusion requests
• To maintain records of responsible gaming interventions for regulatory and ethical purposes

6.6 Analytics & Platform Improvement

• To analyse usage patterns and identify popular games and features
• To optimise website performance, loading times, and mobile responsiveness
• To conduct A/B testing of user interface designs and promotional campaigns
• To generate aggregated, anonymised reports for business intelligence purposes

7 Legal Basis for Processing

mdg198 processes your Personal Data on the following legal grounds:

• Contractual Necessity: Processing is necessary to perform the services you have requested (account creation, game access, payment processing) under our Terms & Conditions.
• Legal Obligation: Processing is required to comply with Indonesian laws and regulations, including age verification, KYC, AML, and tax reporting requirements.
• Consent: You have provided explicit, informed consent for marketing communications, cookies, or other optional data uses.
• Legitimate Interests: Processing is necessary for legitimate business purposes such as fraud prevention, security monitoring, platform improvement, and customer support, provided these interests do not override your fundamental rights.

8 Data Sharing & Third-Party Disclosure

mdg198 does not sell, rent, or trade your Personal Data to third parties for their own marketing purposes. However, we do share Personal Data with the following categories of third parties under strict confidentiality agreements:

8.1 Payment Processors

Your financial information is shared with authorised payment processors (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, Bank Permata, OVO, DANA, GoPay, ShopeePay, LinkAja, Visa, Mastercard) to process deposits and withdrawals. These processors operate under PCI-DSS compliance standards and use your data solely to execute transactions.

8.2 Game Providers

Anonymised gameplay data (but not your name, contact details, or financial information) may be shared with game studios (Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, Pocket Games Soft) to enable game functionality, calculate RTP, and detect technical issues.

8.3 Cloud Hosting & IT Infrastructure Providers

mdg198 uses third-party cloud hosting services to store encrypted data securely. These providers have access to data only to the extent necessary to perform hosting and maintenance services and are contractually prohibited from using it for any other purpose.

8.4 Customer Support Tools

Live chat logs and support tickets are processed through third-party customer support platforms to enable efficient assistance. These platforms operate under strict data protection agreements.

8.5 Legal & Regulatory Authorities

mdg198 may disclose Personal Data to government authorities, law enforcement, or regulators when required by Indonesian law, court order, or regulatory investigation. Such disclosures are limited to the minimum information necessary to comply with the legal obligation.

8.6 Business Transfers

In the event of a merger, acquisition, or sale of assets, your Personal Data may be transferred to the acquiring entity, provided that entity agrees to honour this Privacy Policy.

9 Data Security Measures

mdg198 employs industry-standard technical and organisational measures to protect your Personal Data against unauthorised access, disclosure, alteration, or destruction:

• 256-Bit SSL Encryption: All data transmitted between your device and mdg198 servers is encrypted using TLS 1.3 protocol.
• Secure Data Storage: Personal Data is stored on encrypted servers located in secure data centres with 24/7 monitoring, fire suppression systems, and restricted physical access.
• Password Hashing: User passwords are hashed using bcrypt or Argon2 algorithms and are never stored in plain text.
• Access Controls: Personal Data is accessible only to authorised mdg198 personnel who require it to perform their job functions. All staff undergo data protection training and sign confidentiality agreements.
• Regular Security Audits: mdg198 conducts regular penetration testing, vulnerability assessments, and code reviews to identify and remediate security risks.
• Two-Factor Authentication (2FA): Players are encouraged to enable 2FA on their accounts for an additional layer of security.

While mdg198 uses all reasonable efforts to protect your Personal Data, no internet-based platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your login credentials and notifying mdg198 immediately if you suspect unauthorised account access.

10 Data Retention Period

mdg198 retains your Personal Data only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, and resolve disputes:

• Active Accounts: Personal Data is retained for the duration of your active account relationship with mdg198.
• Closed Accounts: Following account closure, Personal Data is retained for 5 years to comply with Indonesian financial record-keeping requirements, resolve outstanding disputes, and prevent fraud through duplicate account creation.
• Transaction Records: Financial transaction data (deposits, withdrawals, wagers) is retained for 7 years in accordance with Indonesian tax and accounting regulations.
• Marketing Data: If you unsubscribe from marketing communications, your contact information is retained in a suppression list to ensure you do not receive further marketing but is not used for any other purpose.
• Anonymisation: After the retention period expires, Personal Data is either securely deleted or anonymised such that it can no longer be attributed to you.

11 Your Privacy Rights

As a player on the mdg198 platform, you have the following rights regarding your Personal Data:

11.1 Right of Access

You have the right to request a copy of all Personal Data mdg198 holds about you. Submit a data access request to [email protected] and you will receive a response within 14 business days.

11.2 Right to Rectification

If any Personal Data we hold is inaccurate or incomplete, you have the right to request correction. You can update most information directly through your account dashboard or by contacting customer support.

11.3 Right to Erasure ("Right to be Forgotten")

You may request deletion of your Personal Data in the following circumstances: (a) the data is no longer necessary for the purposes for which it was collected; (b) you withdraw consent and there is no other legal basis for processing; (c) you object to processing and there are no overriding legitimate grounds; or (d) the data has been unlawfully processed. Note that mdg198 may be required to retain certain data to comply with legal obligations.

11.4 Right to Data Portability

You have the right to receive your Personal Data in a structured, commonly used, machine-readable format (e.g., CSV or JSON) and to transmit that data to another service provider.

11.5 Right to Object

You may object to processing of your Personal Data for direct marketing purposes at any time by unsubscribing from emails, disabling SMS notifications in your account settings, or contacting [email protected].

11.6 Right to Withdraw Consent

Where processing is based on your consent (e.g., marketing communications, optional cookies), you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

12 Cookies & Tracking Technologies

mdg198 uses cookies and similar tracking technologies to enhance your experience on the platform, analyse usage patterns, and deliver personalised content. The following types of cookies are used:

12.1 Essential Cookies

These cookies are necessary for the platform to function properly. They enable core features such as account login, session management, and secure payment processing. Essential cookies cannot be disabled as the platform would not operate without them.

12.2 Functional Cookies

These cookies remember your preferences (e.g., language selection, time zone, display settings) to provide a more personalised experience. They do not track your activity on other websites.

12.3 Analytics Cookies

mdg198 uses analytics cookies to understand how players interact with the platform, which pages are most visited, and where users encounter difficulties. This data is aggregated and anonymised and is used solely to improve platform performance.

12.4 Marketing Cookies

With your consent, mdg198 may use marketing cookies to deliver personalised promotional offers based on your gaming activity and preferences. You can opt out of marketing cookies through your browser settings or account preferences.

You can manage or disable cookies through your browser settings. Note that disabling essential cookies will prevent you from accessing certain features of the platform. For more information on managing cookies, visit your browser's help documentation.

13 Children's Privacy

mdg198 does not knowingly collect Personal Data from individuals under the age of 21. All players must be at least 21 years of age to register an account, as verified through our age-verification procedures.

If we become aware that we have inadvertently collected Personal Data from a person under 21, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered on mdg198, please contact [email protected] immediately.

14 International Data Transfers

mdg198 primarily operates within Indonesia and stores Personal Data on servers located within secure data centres. However, some third-party service providers (e.g., cloud hosting, payment processors, game studios) may be located outside Indonesia.

When Personal Data is transferred internationally, mdg198 ensures that appropriate safeguards are in place, including:

• Standard contractual clauses approved by international data protection authorities
• Verification that the recipient country provides adequate data protection standards
• Binding corporate rules for intra-group transfers

All international transfers comply with Indonesian data protection regulations and are conducted only when necessary to provide the services you have requested.

15 Amendments to This Privacy Policy

mdg198 reserves the right to amend this Privacy Policy at any time to reflect changes in legal requirements, business practices, or data processing activities. Material changes will be communicated to players via email to the registered address on file and by prominent notice on the platform homepage.

The "Last Updated" date at the top of this policy indicates when the most recent revision was made. Your continued use of the mdg198 platform following publication of an amended Privacy Policy constitutes acceptance of those changes.

We encourage you to review this Privacy Policy periodically to stay informed about how your Personal Data is protected.

16 Contact & Data Protection Complaints

If you have any questions, concerns, or complaints regarding this Privacy Policy or how mdg198 handles your Personal Data, please contact our Data Protection team:

Email: [email protected]
Subject Line: Data Protection Inquiry
Response Time: Within 14 business days

If you are not satisfied with mdg198's response to your data protection complaint, you have the right to lodge a complaint with the Indonesian data protection authority or relevant supervisory body in your jurisdiction.