mdg88 Privacy Policy

The following definitions apply throughout this Privacy Policy:

• "mdg88", "we", "us", "our" — refers to the mdg88 online betting and casino platform accessible at mdg88.pro and its operating entity licensed under an international gaming jurisdiction.
• "Player", "you", "your" — refers to any individual who registers an account on, accesses, or interacts with the mdg88 Platform.
• "Personal Data" — any information that identifies or could reasonably identify a natural person, including name, date of birth, residential address, email address, phone number, payment account details, device identifiers, and IP address.
• "Processing" — any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, and deletion.
• "Data Controller" — mdg88, which determines the purposes and means of processing your Personal Data.
• "Data Processor" — a third-party service provider that processes Personal Data on mdg88's behalf under a written data processing agreement.
• "KYC" — Know Your Customer — the identity and age verification process required under mdg88's international gaming licence and anti-money-laundering obligations.
• "Platform" — the mdg88 website, mobile web interface, and all associated products and services available at mdg88.pro.
• "Cookies" — small text files placed on your device by the Platform to recognise returning visitors, maintain session state, and analyse usage patterns.

mdg88 collects the following categories of Personal Data in connection with the operation of the Platform. We apply the principle of data minimisation — we do not collect data beyond what is necessary for the purposes described in this Policy.

mdg88 collects Personal Data through the following channels:

3.1 Directly From You

• When you complete the account registration form on the Platform
• When you submit KYC documents in response to a verification request
• When you make a deposit or submit a withdrawal request via the cashier
• When you contact our customer support team via live chat, WhatsApp, or email
• When you set responsible gaming limits or submit a self-exclusion request via your account dashboard
• When you respond to optional player surveys or promotions

3.2 Automatically During Platform Use

• Technical Data and Usage Data are collected automatically when you log in and interact with the Platform, via server logs, session tracking, and in-platform analytics
• Cookies and similar tracking technologies collect device and behaviour data as described in Section 7
• Geolocation data at the country or city level (not precise GPS) may be inferred from your IP address for compliance and fraud-prevention purposes

3.3 From Third Parties

• KYC Verification Providers: where mdg88 uses a third-party identity verification service to validate the authenticity of documents you submit, that service may return enriched verification data to mdg88
• Payment Processors: transaction confirmation data is returned from local bank transfer networks and e-wallet providers (OVO, GoPay, DANA, ShopeePay, LinkAja) when your deposit is credited or withdrawal is confirmed
• Fraud and AML Screening Services: mdg88 may check account and payment details against sanction lists and fraud databases maintained by its licensing authority's approved screening partners

mdg88 processes your Personal Data under one or more of the following legal bases:

• Contractual Necessity: Processing that is necessary to perform our contract with you — specifically, to operate your account, accept and process bets, credit winnings, execute deposits and withdrawals, and provide customer support. Without this processing, we cannot deliver the mdg88 Platform service to you.
• Legal Obligation: Processing that mdg88 is required to carry out to comply with its international gaming licence conditions, anti-money-laundering (AML) obligations, KYC requirements, and applicable data retention laws. This includes identity verification, transaction monitoring, and regulatory reporting.
• Legitimate Interests: Processing carried out in mdg88's legitimate business interests, where those interests are not overridden by your fundamental rights. This includes fraud detection and prevention, platform security monitoring, responsible gaming analysis, and internal business analytics. We conduct a balancing assessment before relying on this basis.
• Consent: For certain optional processing activities — such as sending promotional communications about bonuses and seasonal offers (e.g., Idul Fitri promotions, Ramadhan cashback campaigns) — we rely on your consent. You may withdraw consent at any time by contacting support or managing your communication preferences in your account settings. Withdrawal of consent does not affect any processing already carried out.

mdg88 uses the Personal Data we hold about you for the following specific purposes:

5.1 Account Management

To create, maintain, and secure your mdg88 account; to verify your identity and age (21+ requirement); to process your login sessions; to enforce the single-account policy; and to apply any responsible gaming limits or self-exclusion instructions you have set.

5.2 Transaction Processing

To credit IDR deposits from your BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata, or Danamon bank account, or from OVO, GoPay, DANA, ShopeePay, or LinkAja e-wallet; to process withdrawal requests to your verified payment method; to maintain accurate and auditable transaction records; and to reconcile and report financial activity under our licensing obligations.

5.3 Compliance & Fraud Prevention

To perform KYC identity and age verification; to screen accounts and transactions against AML watchlists and fraud databases; to investigate suspicious activity; to enforce our Terms & Conditions including the prohibition on multiple accounts and automated betting tools; and to cooperate with our licensing authority's compliance audits.

5.4 Customer Support

To respond to your enquiries via live chat, WhatsApp (+62 811 0000 8888), and email; to maintain a record of support interactions for dispute resolution; to provide Indonesian-speaking support agents who can assist players from Jakarta, Surabaya, Medan, Bali, Bandung, and across Indonesia; and to monitor support quality.

5.5 Responsible Gaming

To monitor betting and gaming patterns that may indicate problematic gambling behaviour; to proactively contact players who display at-risk indicators; to enforce deposit limits, loss limits, session time limits, cooling-off periods, and self-exclusion instructions; and to maintain records of responsible gaming interactions as required by our licensing authority. Full details are available on our Responsible Gaming page.

5.6 Platform Improvement & Analytics

To analyse aggregated and anonymised usage patterns to improve Platform performance, game selection, and user experience; to conduct A/B testing of new features; and to identify and resolve technical issues. Where possible, analytics are conducted on anonymised or pseudonymised data sets rather than directly identifiable Personal Data.

5.7 Marketing Communications (Consent-Based)

Where you have consented, to send you information about mdg88 promotions, bonus offers, new game releases, and seasonal campaigns. We do not engage in bulk unsolicited marketing. You may opt out at any time. mdg88 does not share your Personal Data with third-party marketers.

mdg88 does not sell your Personal Data to any third party. We share data only in the circumstances described below, and only with parties who are contractually required to protect it to the same standard as mdg88.

6.1 Service Providers (Data Processors)

mdg88 engages the following categories of Data Processors who access Personal Data solely to perform services on our behalf:

• Payment Processing Partners: local bank transfer networks and e-wallet operators (OVO, GoPay, DANA, ShopeePay, LinkAja) receive the minimum data necessary to route and confirm your IDR transactions
• KYC & Identity Verification Providers: specialist third-party services that validate identity documents against government databases and fraud registries
• Game Studios: providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft receive session tokens and anonymised player identifiers to deliver their game software; they do not receive your full identity or financial data
• Cloud Infrastructure & Hosting Providers: the servers and databases on which mdg88 operates are hosted by internationally certified cloud infrastructure providers with appropriate security certifications
• Customer Support Platform: the live chat and ticketing software used by our support team processes communication content and basic account identifiers

6.2 Regulatory & Legal Disclosures

mdg88 may disclose Personal Data to its licensing authority, to law enforcement agencies, or to other regulatory bodies where required to do so by law, by a valid court order, or to fulfil AML reporting obligations. In such cases, mdg88 will disclose only the minimum data required and will inform you of the disclosure where legally permitted to do so.

6.3 Business Transfers

In the event of a merger, acquisition, sale of assets, or change of control of mdg88, Personal Data held by mdg88 may be transferred to the acquiring entity as part of that transaction. mdg88 will provide advance notice of any such transfer via the Platform and will ensure that the receiving entity is bound by privacy obligations no less protective than those described in this Policy.

mdg88 uses cookies and similar tracking technologies (including local storage and session storage) to operate the Platform and enhance your experience. The following categories of cookies are used:

You may manage your cookie preferences through your browser settings. Note that disabling strictly necessary or security cookies will impair your ability to log in and use the Platform. mdg88 does not use third-party advertising cookies or cross-site tracking networks.

mdg88 retains your Personal Data only for as long as necessary for the purposes described in this Policy, or as required by our licensing authority and applicable law. The following retention periods apply as a general guide:

• Active Account Data: retained for the lifetime of your account plus a minimum of 5 years following account closure, as required by AML and gaming licence record-keeping obligations
• KYC Documents: retained for a minimum of 5 years from the date of submission or account closure (whichever is later), in compliance with international AML standards
• Transaction Records: retained for a minimum of 5 years from the date of each transaction, for financial audit and regulatory compliance purposes
• Customer Support Records: retained for 3 years from the date of the final interaction, for dispute resolution and quality assurance purposes
• Marketing Consent Records: retained for 3 years from the date consent was given or withdrawn, to demonstrate compliance with consent obligations
• Technical & Log Data: server logs and security event records are retained for 12 months, after which they are deleted or anonymised

Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised. Where anonymisation is used, the resulting data sets are no longer considered Personal Data and may be retained indefinitely for statistical purposes.

mdg88 implements a multi-layered security architecture to protect your Personal Data against unauthorised access, loss, theft, or misuse. Our security controls include:

• 256-Bit SSL/TLS Encryption: all data transmitted between your device and the mdg88 Platform is encrypted in transit using the same standard applied by major Indonesian banks including BCA and Mandiri for their internet banking services
• Encryption at Rest: sensitive Personal Data and financial records stored in mdg88's databases are encrypted at rest using AES-256 encryption
• Access Controls: access to Personal Data is strictly limited to mdg88 staff and Data Processors who require it to perform their authorised functions; access is governed by role-based permissions and is logged and audited regularly
• Two-Factor Authentication (2FA): mdg88 internal systems that process Personal Data require 2FA for all staff access; players are also offered 2FA for their own account security
• Penetration Testing: the Platform undergoes regular security penetration testing by independent third-party security specialists to identify and remediate vulnerabilities
• Incident Response: mdg88 maintains a documented data breach response plan; in the event of a breach affecting your Personal Data, we will notify you and the relevant regulatory authority within the timeframes required by our licensing obligations

As a Player on the mdg88 Platform, you have the following rights in relation to your Personal Data. You may exercise any of these rights by contacting the mdg88 support team at [email protected] with the subject line "Data Rights Request". mdg88 will respond within 30 days of receiving a valid request.

mdg88 will not charge a fee for handling data rights requests unless a request is manifestly unfounded or excessive. In such cases, mdg88 may charge a reasonable administrative fee or decline to act on the request, with written explanation.

mdg88 operates as an international platform and your Personal Data may be processed on servers located outside Indonesia. Specifically, data may be transferred to the jurisdiction in which mdg88 holds its international gaming licence and to the locations of our Data Processors (including cloud infrastructure providers and KYC verification services).

Where Personal Data is transferred internationally, mdg88 ensures that appropriate safeguards are in place, including:

• Written data processing agreements with all Data Processors that impose data protection obligations equivalent to those in this Policy
• Use of Data Processors that are certified under internationally recognised security standards (e.g., ISO 27001, SOC 2)
• Contractual clauses requiring Data Processors to process data only on mdg88's documented instructions and to notify mdg88 immediately of any security incidents affecting transferred data

By registering an account with mdg88, you acknowledge that your Personal Data may be transferred to and processed in jurisdictions outside Indonesia. These transfers are necessary to deliver the mdg88 Platform service to you and are governed by the safeguards described above.

The mdg88 Platform is strictly for adults aged 21 and over. mdg88 does not knowingly collect Personal Data from persons under 21 years of age. Account registration requires you to confirm your date of birth, and KYC verification will confirm your age before withdrawals are permitted. If mdg88 discovers that it has inadvertently collected Personal Data from an individual under the age of 21, that account will be immediately suspended, all funds will be returned to the source payment method, and the associated Personal Data will be securely deleted within 30 days.

mdg88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, technology, legal obligations, or regulatory requirements. Where changes are material — for example, where we introduce a new category of data collection or a new sharing arrangement — mdg88 will provide at least 7 days' advance notice by posting a prominent notice on the Platform and, where we hold a valid email address for your account, by sending a notification to that address.

Your continued use of the mdg88 Platform following the effective date of any updated Privacy Policy constitutes your acknowledgement of and agreement to the revised Policy. The most current version of this Privacy Policy is always available at mdg88.pro/privacy-policy. The "Last Updated" date at the top of this page reflects when the most recent changes were made.

If you do not agree with a material change to this Policy, you should cease using the Platform and request account closure by contacting customer support. Your outstanding balance (subject to KYC and AML clearance) will be returned to your verified payment method.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a privacy-related complaint, please contact the mdg88 Data Protection team through the following channels:

• Email: [email protected] — subject line: "Privacy Enquiry" or "Data Rights Request"
• Live Chat: available 24/7 via the mdg88 Platform (WIB, UTC+7)
• WhatsApp: +62 811 0000 8888

mdg88 aims to acknowledge all privacy enquiries within 48 hours and to provide a full response within 30 days. Our customer support team includes Indonesian-speaking agents available around the clock, ensuring players from Jakarta, Surabaya, Medan, Bandung, Bali, and across Indonesia can raise privacy concerns in a language they are comfortable with, even though the Platform itself is in English.