Privacy Policy

1. Introduction and Scope

This Privacy Policy applies to all personal information collected by mdg99 through our website (https://mdg99.cam), mobile-optimized platform, customer support channels, and any other services we provide. This policy covers all users of the mdg99 platform, including registered players, visitors who browse our website without creating accounts, and individuals who contact our customer support team.

mdg99 operates as a data controller with respect to your personal information, meaning we determine the purposes and means of processing your data. We take data protection seriously and have implemented technical and organizational measures to ensure your information is processed lawfully, fairly, and transparently in accordance with applicable data protection laws.

If you have any questions about this Privacy Policy or how we handle your personal data, please contact our Data Protection Officer at [email protected] or via our 24/7 live chat support.

2. Information We Collect

mdg99 collects several types of personal information to provide, maintain, and improve our services, comply with legal obligations, and ensure platform security. The information we collect falls into three main categories:

2.1 Information You Provide Directly

When you register an account with mdg99, we collect the following information that you provide voluntarily:

• Account Registration Data: Full legal name, date of birth, email address, mobile phone number, residential address, nationality, and preferred username.
• Identity Verification Documents (KYC): Government-issued identification (Indonesian National ID / KTP, or passport for expatriates), proof of address documents (utility bills, bank statements), and selfie photographs holding your ID. These documents are required to verify your identity, confirm you are 21+ years of age, and comply with anti-money-laundering (AML) regulations.
• Financial Information: Bank account details (bank name, account number, account holder name) or e-wallet information (OVO, DANA, GoPay, ShopeePay account details) for processing deposits and withdrawals. We do not store complete credit card numbers or CVV codes—all card payments are processed through PCI-DSS compliant third-party payment processors.
• Communication Records: Content of emails, live chat messages, WhatsApp conversations, and phone calls with our customer support team. These records are retained to resolve disputes, improve service quality, and comply with legal record-keeping requirements.
• Optional Profile Information: Profile picture, gaming preferences, favorite games, communication preferences (email/SMS marketing opt-in), and other voluntary profile details.

2.2 Information We Collect Automatically

When you access the mdg99 platform, we automatically collect certain technical information through cookies, log files, and similar technologies:

• Device Information: Device type (smartphone, tablet, desktop), operating system (Android, iOS, Windows, macOS), browser type and version, screen resolution, device identifiers (IP address, MAC address), and mobile network information.
• Usage Data: Pages visited, time spent on each page, referral source (how you found mdg99—search engine, direct link, affiliate), clickstream data, search queries within the platform, game launch records, and navigation patterns.
• Location Data: IP address-based geolocation to verify you are accessing the platform from Indonesia or another permitted jurisdiction. We do not collect precise GPS location data unless you explicitly grant permission through your device settings.
• Gaming Activity: Detailed records of all bets placed, games played, deposit and withdrawal transactions, bonus claims, wins and losses, and account balance history. This data is necessary for providing services, resolving disputes, detecting fraud, and complying with gambling regulations.

2.3 Information from Third Parties

In limited circumstances, we may receive information about you from third-party sources:

• Payment Processors: Transaction confirmations, payment success/failure status, and fraud risk assessments from banks, e-wallet providers, and payment gateway partners.
• Identity Verification Services: Electronic identity verification results from third-party KYC service providers that cross-reference your submitted documents against government databases.
• Affiliate Partners: If you registered through an affiliate link, we may receive referral information (but not your personal details) to credit the appropriate affiliate partner.
• Public Sources: Information from publicly accessible databases or sanctions lists to screen for politically exposed persons (PEPs), individuals on financial crime watchlists, or players previously excluded from gambling activities.

3. How We Use Your Information

mdg99 processes your personal data for the following purposes, each grounded in a lawful basis under data protection law:

3.1 Service Provision and Account Management (Contractual Necessity)

• Creating and maintaining your mdg99 account
• Processing deposits and withdrawals to/from your account
• Enabling you to place bets and play casino games, sports betting markets, lottery products including togel, and other gambling services
• Calculating and crediting winnings, deducting losses, and maintaining accurate account balance records
• Processing bonus claims and tracking wagering requirement progress
• Providing customer support and resolving technical issues or disputes
• Communicating important account notifications (deposit confirmations, withdrawal approvals, password resets, account verification status updates)

3.2 Legal and Regulatory Compliance (Legal Obligation)

• Verifying your age to ensure compliance with the 21+ age restriction for gambling in Indonesia
• Conducting Know Your Customer (KYC) and anti-money-laundering (AML) checks as required by our gaming licenses and financial regulations
• Maintaining transaction records for the legally mandated retention period (typically 5-7 years depending on jurisdiction)
• Reporting suspicious transactions to relevant financial intelligence units if required by law
• Responding to lawful requests from law enforcement, regulatory authorities, or courts
• Complying with responsible gaming regulations by enforcing self-exclusion requests, deposit limits, and other player protection measures

3.3 Security and Fraud Prevention (Legitimate Interest)

• Detecting and preventing fraud, money laundering, collusion, bonus abuse, and other prohibited activities
• Monitoring for duplicate accounts (multiple accounts created by the same individual to circumvent restrictions)
• Identifying and blocking access from restricted jurisdictions or sanctioned individuals
• Protecting against unauthorized account access, hacking attempts, and cyberattacks
• Investigating suspected terms violations and taking appropriate enforcement action (account suspension, fund confiscation, reporting to authorities)

3.4 Marketing and Personalization (Consent or Legitimate Interest)

• Sending promotional emails about new games, bonuses, tournaments, and special offers (only if you have opted in to marketing communications—you can opt out at any time)
• Displaying personalized game recommendations based on your playing history and preferences
• Conducting market research and player satisfaction surveys to improve our services
• Running targeted advertising campaigns on social media and third-party websites (using anonymized or aggregated data to comply with privacy standards)

3.5 Platform Improvement and Analytics (Legitimate Interest)

• Analyzing usage patterns to identify popular games, optimize website performance, and improve user experience
• Conducting A/B testing to evaluate new features or design changes
• Troubleshooting technical issues and fixing bugs
• Generating anonymized statistical reports for internal business intelligence

4. How We Share Your Information

mdg99 does not sell your personal information to third parties. We share your data only in the following limited circumstances:

4.1 Service Providers and Business Partners

We engage trusted third-party service providers to help us operate the mdg99 platform. These providers have access to your personal information only to the extent necessary to perform their functions and are contractually obligated to protect your data:

• Payment Processors: Banks, e-wallet providers (OVO, DANA, GoPay, ShopeePay), and payment gateway companies process your deposits and withdrawals. They receive your financial information (bank account details, transaction amounts) but do not have access to your full mdg99 account history.
• KYC Verification Partners: Third-party identity verification services may process your ID documents and personal details to confirm your identity and age. These providers are bound by strict confidentiality agreements and data protection standards.
• Customer Support Tools: Live chat software, helpdesk ticketing systems, and communication platforms store conversation records to help our support team assist you efficiently.
• Cloud Hosting Providers: Secure cloud infrastructure providers host mdg99's servers and databases. Data is stored in encrypted format on servers located in jurisdictions with strong data protection laws.
• Analytics Services: Website analytics platforms (e.g., Google Analytics) collect anonymized or pseudonymized usage data to help us understand traffic patterns and improve the platform. We configure these tools to respect user privacy and do not share personally identifiable information.

4.2 Legal Requirements and Law Enforcement

We may disclose your personal information to government authorities, regulators, law enforcement agencies, or courts when required by law or when we believe in good faith that disclosure is necessary to:

• Comply with a legal obligation, court order, subpoena, or regulatory request
• Enforce our Terms and Conditions or investigate potential violations
• Detect, prevent, or address fraud, security issues, or technical problems
• Protect the rights, property, or safety of mdg99, our users, or the public

4.3 Business Transfers

In the event that mdg99 undergoes a merger, acquisition, reorganization, or sale of assets, your personal information may be transferred to the acquiring entity. We will notify affected users via email or prominent website notice before any such transfer, and the new entity will be bound by this Privacy Policy unless you consent to a revised policy.

5. Data Security

mdg99 employs industry-standard security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction:

• Encryption: All data transmitted between your device and mdg99 servers is encrypted using 256-bit SSL/TLS encryption (the same standard used by banks). Sensitive data stored in our databases is encrypted at rest.
• Access Controls: Access to personal data is restricted to authorized mdg99 employees and contractors who need the information to perform their job functions. All personnel are bound by confidentiality agreements and receive data protection training.
• Secure Infrastructure: Our servers are hosted in secure, access-controlled data centers with redundant backups, firewalls, intrusion detection systems, and 24/7 monitoring.
• Regular Audits: We conduct regular security audits, vulnerability assessments, and penetration testing to identify and address potential weaknesses.
• Account Security Features: Players are encouraged to use strong, unique passwords and enable two-factor authentication (2FA) where available. We monitor login activity for suspicious patterns (logins from unusual locations, multiple failed login attempts) and may temporarily lock accounts for verification.

Despite these measures, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and should notify us immediately if you suspect unauthorized access to your account.

6. Data Retention

mdg99 retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law:

• Active Accounts: Account data, transaction history, and gaming records are retained for the duration of your account's active status and for a period after account closure as required by gambling regulations (typically 5-7 years).
• KYC Documents: Identity verification documents are retained for at least 5 years after your last transaction or account closure, as mandated by anti-money-laundering laws.
• Communication Records: Customer support conversations are retained for 3 years to resolve disputes and improve service quality.
• Marketing Data: If you opt out of marketing communications, your email address is retained on a suppression list to ensure we do not contact you again, but other marketing data is deleted.
• Closed or Dormant Accounts: If your account remains inactive for 24 consecutive months with a zero balance, we may close it and delete or anonymize your personal data (except where retention is legally required).

7. Your Privacy Rights

Under applicable data protection laws, you have the following rights regarding your personal information. To exercise any of these rights, please contact [email protected] with your account details and a description of your request:

• Right of Access: You can request a copy of all personal information mdg99 holds about you. We will provide this information in a structured, commonly used, machine-readable format within 30 days of your request.
• Right to Rectification: If you believe any of your personal information is inaccurate or incomplete, you can request that we correct or update it. Most account information can be updated directly through your mdg99 account settings.
• Right to Erasure (Right to be Forgotten): You can request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected, or you withdraw consent (where consent is the lawful basis for processing). Note that we may be required to retain certain data for legal or regulatory reasons (e.g., transaction records for AML compliance).
• Right to Restrict Processing: You can request that we temporarily suspend processing of your personal data in specific situations, such as when you contest the accuracy of the data or object to processing based on legitimate interests.
• Right to Data Portability: You have the right to receive your personal data in a portable format and transmit it to another service provider, where technically feasible.
• Right to Object: You can object to processing of your personal data for direct marketing purposes at any time (simply click "unsubscribe" in any marketing email or adjust your account preferences). You can also object to processing based on legitimate interests.
• Right to Withdraw Consent: Where we rely on your consent as the lawful basis for processing (e.g., marketing communications), you can withdraw consent at any time. This does not affect the lawfulness of processing based on consent before its withdrawal.
• Right to Lodge a Complaint: If you believe mdg99 has violated your data protection rights, you can lodge a complaint with your local data protection authority or supervisory body.

8. Cookies and Tracking Technologies

mdg99 uses cookies and similar technologies (web beacons, pixel tags, local storage) to enhance your browsing experience, analyze website traffic, and deliver personalized content. Cookies are small text files stored on your device that allow us to recognize you on subsequent visits.

We use the following types of cookies:

• Essential Cookies: Necessary for the platform to function properly (login authentication, session management, security features). You cannot opt out of these cookies without disabling core functionality.
• Performance Cookies: Collect anonymized data about how visitors use the website (pages visited, time spent, error messages) to help us improve performance.
• Functionality Cookies: Remember your preferences (language, currency, game filters) to provide a personalized experience.
• Marketing Cookies: Track your browsing activity across websites to deliver targeted advertising. These cookies are set with your consent and can be disabled through your browser settings or our cookie consent manager.

You can control cookie settings through your browser preferences. Most browsers allow you to block or delete cookies, though doing so may impair some website functionality. For more information about cookies and how to manage them, visit your browser's help section.

9. International Data Transfers

mdg99 primarily serves players in Indonesia, and your personal data is processed on servers located in secure data centers within or outside Indonesia, depending on operational needs. When we transfer personal data internationally, we ensure that appropriate safeguards are in place to protect your information in accordance with applicable data protection laws, such as:

• Standard contractual clauses (SCCs) approved by data protection authorities
• Adequacy decisions confirming that the destination country provides an adequate level of data protection
• Binding corporate rules or other recognized compliance mechanisms

10. Children's Privacy

mdg99 services are strictly intended for individuals aged 21 years or older. We do not knowingly collect personal information from anyone under the age of 21. If we discover that we have inadvertently collected data from a minor, we will delete that information immediately and close the associated account without refund of any deposited funds. Parents or guardians who believe their child has created an mdg99 account should contact us immediately at [email protected].

11. Changes to This Privacy Policy

mdg99 reserves the right to modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes, we will notify you by:

• Posting the updated policy on this page with a new "Last Updated" date
• Sending an email notification to your registered email address (for significant changes that affect your rights)
• Displaying a prominent notice on the mdg99 homepage or within your account dashboard

We encourage you to review this Privacy Policy periodically. Your continued use of mdg99 services after changes are posted constitutes your acceptance of the revised policy. If you do not agree with any changes, you must stop using the platform and may request account closure.

12. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or mdg99's data protection practices, please contact us:

• Email: [email protected] (Data Protection Officer)
• Live Chat: Available 24/7 via the mdg99 website
• Response Time: We aim to respond to all privacy-related inquiries within 5 business days. Complex requests (e.g., data access requests) may take up to 30 days as permitted by law.