Privacy Policy — mdg388

Introduction & Scope

1.1 This Privacy Policy applies to all personal data collected, processed, and stored by mdg388 ("we", "us", "the Platform") in connection with the operation of the online betting and gaming services available at mdg388.cam. It covers data collected when you visit the Platform, register an account, deposit or withdraw funds, place wagers, contact our support team, or interact with any feature of the mdg388 service.

1.2 mdg388 is the data controller responsible for your personal data. We take our data protection obligations seriously and have implemented technical and organizational measures proportionate to the sensitivity of the personal data we process.

1.3 This Policy applies to all Members, regardless of location, though it is specifically designed to address the context of Indonesian players accessing the Platform. Indonesian residents should note that their data may be processed on servers located outside Indonesia in accordance with the provisions of Section 7 (International Data Transfers).

1.4 This Privacy Policy should be read together with the mdg388 Terms & Conditions. In the event of any conflict between these two documents with respect to data privacy matters, this Privacy Policy shall prevail.

Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" — any information that identifies or could reasonably identify a living individual, including name, email address, phone number, date of birth, national identity number, IP address, device identifier, and financial account information.
• "Processing" — any operation performed on personal data, including collection, recording, storage, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" — the entity that determines the purposes and means of processing personal data. For the purposes of this Policy, the Data Controller is mdg388.
• "Data Processor" — a third party that processes personal data on behalf of mdg388 under a written data processing agreement (e.g., payment gateways, KYC verification partners).
• "Member" / "You" — any individual who has registered or is in the process of registering an account on mdg388.cam.
• "Consent" — a freely given, specific, informed, and unambiguous indication of your agreement to the processing of your personal data for a stated purpose.
• "KYC Data" — identity and address verification documents submitted as part of the Know Your Customer process, including copies of government-issued identification, proof of address, and selfie photographs.
• "Transaction Data" — records of deposits, withdrawals, wagers, and other financial activity associated with your mdg388 Account.

Data We Collect

3.1 Registration Data. When you create an account on mdg388, we collect: full legal name, date of birth, email address, mobile phone number, and the country or city of residence you provide (e.g., Jakarta, Surabaya, Bandung, Medan, Bali). This data is required to create and maintain your account and is not optional.

3.2 Identity Verification (KYC) Data. To comply with our licensing obligations and anti-money-laundering requirements, we collect: copies of government-issued identification (Indonesian KTP or equivalent), proof of residential address, selfie photographs, and in some cases, proof of payment method ownership. KYC data is processed under strict confidentiality and access controls.

3.3 Financial & Transaction Data. We collect records of all financial transactions on your Account, including deposit amounts, payment method details (bank name, partial account number, e-wallet identifier), withdrawal requests, bet placements, winnings, and bonus transactions. Full financial account numbers are not retained — only the minimum identifiers necessary to process transactions.

3.4 Technical & Usage Data. When you access mdg388, our servers automatically collect: IP address, device type and model, operating system, browser type and version, session timestamps, pages and features accessed, and error logs. This data is used for platform security, fraud detection, and aggregate performance analytics.

3.5 Communications Data. When you contact mdg388 support via email, live chat, or WhatsApp, we retain records of the communication including the content of your messages, the date and time, and the resolution outcome. This data is used to manage your support history and improve our service quality.

3.6 Voluntarily Submitted Data. Any additional personal data you choose to provide — for example, in free-text support fields — is collected and processed on the basis of your voluntary submission.

How We Use Your Data

4.1 mdg388 uses your personal data for the following purposes:

• Account Creation and Management: To register your account, verify your identity, and maintain your profile on the Platform.
• Payment Processing: To process deposits and withdrawals via Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, and others) and supported e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja), and to maintain accurate financial records.
• Regulatory Compliance: To fulfill our obligations under our international gaming license, including KYC identity verification and anti-money-laundering (AML) requirements.
• Fraud Prevention and Platform Security: To detect and prevent unauthorized account access, collusion, bonus abuse, and other prohibited activities described in our Terms & Conditions.
• Customer Support: To respond to your queries, resolve disputes, and maintain a history of your support interactions for service continuity.
• Platform Improvement: To analyze aggregate usage patterns and optimize the Platform's performance, design, and product offerings. This analysis uses anonymized or pseudonymized data wherever possible.
• Responsible Gaming: To monitor for indicators of problem gambling behavior and to reach out proactively to Members who may be experiencing difficulties, in accordance with our Responsible Gaming policy.
• Service Communications: To send you transactional notifications (deposit confirmations, withdrawal updates, security alerts). We do not send unsolicited marketing emails; any promotional communications require your explicit opt-in consent.

Legal Basis for Processing

5.1 mdg388 processes your personal data on the following legal grounds:

• Contractual Necessity: Processing of registration data, transaction data, and KYC data is necessary for the performance of our contract with you (the mdg388 account agreement, governed by our Terms & Conditions).
• Legal Obligation: Processing of KYC and AML-related data is required to comply with our licensing obligations and applicable financial regulations.
• Legitimate Interests: Processing of technical data and communications data is conducted on the basis of mdg388's legitimate interest in operating a secure, stable, and fraud-free platform. This interest does not override your fundamental privacy rights.
• Consent: Where we send optional promotional communications or deploy non-essential cookies, we rely on your explicit, freely given consent, which you may withdraw at any time without detriment.

Data Sharing & Disclosure

6.1 mdg388 does not sell your personal data to any third party. We share your data only in the circumstances described below:

• Payment Processors: We share the minimum necessary financial data with our payment processing partners (Indonesian bank gateways, OVO, DANA, GoPay, ShopeePay, and LinkAja) to execute deposit and withdrawal transactions.
• KYC Verification Partners: Identity documents submitted during the KYC process are shared with our licensed third-party identity verification provider under a data processing agreement with equivalent security standards to our own.
• Regulatory and Law Enforcement Authorities: We will disclose personal data to competent authorities when required to do so by law, court order, or at the direction of our licensing regulator.
• Fraud Prevention Services: We may share technical identifiers (IP addresses, device fingerprints) with industry-standard fraud prevention networks to protect both the Platform and its Members from fraudulent activity.
• Group Companies: Personal data may be shared within the mdg388 corporate group for internal administrative purposes, subject to the same data protection standards set out in this Policy.

6.2 All third parties with whom mdg388 shares personal data are required to process that data solely for the purpose for which it was shared and in accordance with a data processing agreement that imposes security and confidentiality obligations equivalent to those described in this Policy.

International Data Transfers

7.1 mdg388's servers and data processing infrastructure may be located outside Indonesia. By using the Platform, you acknowledge that your personal data may be transferred to, stored in, and processed in countries other than Indonesia, including countries whose data protection laws may differ from those applicable in Indonesia.

7.2 Where such transfers occur, mdg388 takes appropriate safeguards to ensure that your personal data receives an equivalent level of protection to that provided under this Policy. These safeguards include data processing agreements incorporating internationally recognized standard contractual clauses and, where applicable, reliance on adequacy decisions of the relevant supervisory authority.

7.3 If you have questions about the specific countries to which your data may be transferred, please contact us at [email protected].

Data Retention

8.1 mdg388 retains your personal data for as long as is necessary to fulfill the purposes set out in this Privacy Policy, unless a longer retention period is required or permitted by our licensing authority, applicable anti-money-laundering regulations, or other applicable law.

8.2 As a general guide, our standard retention periods are as follows:

• Account and registration data: Retained for the duration of your account plus five (5) years following account closure, to comply with financial record-keeping requirements.
• KYC / identity documents: Retained for five (5) years from the date of submission, or for five (5) years following the closure of your account, whichever is later.
• Transaction records: Retained for five (5) years from the date of each transaction.
• Communications / support records: Retained for three (3) years from the date of the last interaction.
• Technical / server logs: Retained for ninety (90) days in standard log storage, then archived or deleted.

8.3 Upon expiry of the applicable retention period, personal data will be securely deleted or irreversibly anonymized so that it can no longer be associated with an identified or identifiable individual.

Security Measures

9.1 mdg388 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, loss, destruction, or alteration. These include:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers;
• AES-256 encryption for all personal data and financial records stored at rest;
• Role-based access controls ensuring that employees can access only the data necessary for their specific operational function;
• Regular independent security audits and penetration testing of the Platform;
• Two-factor authentication options for Member accounts;
• Automatic session timeouts following periods of inactivity;
• Secure development practices and regular patching of all Platform software components.

9.2 Despite these measures, no system is entirely immune to security threats. In the event of a data breach that poses a significant risk to your rights and freedoms, mdg388 will notify you and the relevant supervisory authority in accordance with our legal obligations.

9.3 You are also responsible for the security of your own account credentials. Never share your mdg388 password with anyone, and contact [email protected] immediately if you suspect unauthorized access to your account.

Cookies & Tracking Technologies

10.1 mdg388 uses cookies and similar tracking technologies (such as local storage and session tokens) to operate the Platform. A cookie is a small text file placed on your device by a web server. Cookies allow the Platform to recognize your browser, maintain your login session, and remember your preferences between visits.

10.2 mdg388 uses the following categories of cookies:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication tokens, anti-CSRF security tokens, and load-balancing cookies. These cookies cannot be disabled without impairing your ability to use the Platform.
• Functional Cookies: Used to remember your language preference, display settings, and recent navigation history within the Platform. Disabling these may reduce Platform convenience.
• Analytics Cookies: Used to collect aggregate, anonymized data about Platform usage (page load times, feature popularity, error rates). This data is used internally to improve the Platform and is not shared with advertising networks.

10.3 mdg388 does not deploy advertising cookies, retargeting pixels, or third-party behavioral tracking technologies. We do not share cookie-derived data with external advertisers or data brokers.

10.4 You can manage your cookie preferences through your browser settings. Instructions vary by browser; consult your browser's help documentation for guidance. Note that disabling strictly necessary cookies will impair the functionality of the Platform.

Your Data Rights

11.1 mdg388 respects your rights over your personal data. The following rights are available to you as a Member:

11.2 To exercise any of the rights listed above, submit a written request to [email protected]. We will acknowledge your request within five (5) business days and respond in full within thirty (30) calendar days. Where a request is complex, we may extend this period by a further thirty (30) days with prior notice to you.

11.3 We may request proof of identity before processing a data rights request to ensure that personal data is not disclosed to unauthorized parties. This is a standard security precaution and does not imply any doubt about the legitimacy of your request.

11.4 Withdrawal of Consent. Where processing is based on your consent, you may withdraw that consent at any time by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal.

Minors & Age Restriction

12.1 mdg388 enforces a strict minimum age of twenty-one (21) years for all Members. The Platform is not directed at, and does not knowingly collect personal data from, individuals under the age of 21.

12.2 If mdg388 becomes aware that personal data has been collected from an individual who is under 21 years of age, we will take immediate steps to close the associated Account and delete all related personal data from our systems, unless retention is required by law for anti-fraud or regulatory purposes.

12.3 If you believe that a minor may have created an account on mdg388, please contact us immediately at [email protected]. We will investigate and act promptly.

Third-Party Services

13.1 The mdg388 Platform integrates with certain third-party services necessary for its operation, including payment gateway providers, KYC verification partners, and fraud detection services. Each of these third parties processes personal data only as instructed by mdg388 and under written data processing agreements.

13.2 mdg388's Privacy Policy does not apply to any third-party websites, services, or applications that may be referenced in our Platform content. We are not responsible for the privacy practices of any third party. You should review the privacy policy of any third-party service before submitting personal data to them.

13.3 mdg388 does not embed social media tracking pixels, external advertising networks, or affiliate tracking scripts that would allow third parties to build behavioral profiles of our Members.

Changes to This Privacy Policy

14.1 mdg388 reserves the right to update this Privacy Policy at any time. Material changes will be communicated to Members via email and/or a prominent notice on the Platform no fewer than seven (7) calendar days before the updated Policy takes effect.

14.2 For non-material changes (such as typographical corrections or clarifications that do not affect your rights), we will update the "Last Updated" date at the top of this page without individual notice.

14.3 Your continued use of the mdg388 Platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree to the revised Policy, you must discontinue use of the Platform and may request account closure in accordance with our Terms & Conditions.

Contact & Complaints

15.1 For any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact the mdg388 data protection team using the details below:

• Email: [email protected]
• Subject Line for Data Requests: "Privacy / Data Request – [Your Username]"
• Response Commitment: Initial acknowledgment within 5 business days; full response within 30 days.
• Support Hours: 24 hours a day, 7 days a week (WIB, UTC+7)

15.2 If you are not satisfied with mdg388's response to a data protection concern, you have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction. For Indonesian residents, the relevant authority is the Ministry of Communication and Information Technology (Kominfo) of the Republic of Indonesia, though mdg388 encourages direct resolution in the first instance.