Privacy Policy — mdg128

In this Privacy Policy, the following terms carry the meanings set out below:

• "mdg128", "we", "us", or "our" refers to the online betting platform operating at https://mdg128.cam and its associated services.
• "You", "Player", or "Data Subject" means any individual who accesses, browses, or registers an account on the mdg128 platform.
• "Personal Data" means any information that identifies or can reasonably be used to identify a natural person — directly or indirectly. This includes name, email address, phone number, Indonesian national ID number, IP address, device identifiers, payment account details, and betting history.
• "Processing" means any operation performed on personal data, including collection, recording, storage, use, disclosure, transmission, erasure, or destruction.
• "Controller" means the entity that determines the purposes and means of processing personal data. For the purposes of this Policy, mdg128 is the data controller in respect of all personal data collected from Players.
• "Processor" means a third party that processes personal data on behalf of mdg128 under a written data-processing agreement.
• "KYC" means Know Your Customer identity verification, including the submission and review of Indonesian national identification documents (KTP — Kartu Tanda Penduduk).
• "Cookies" means small text files placed on a device by a website, used to remember user preferences, session state, and to support analytics and advertising functions.

This Privacy Policy applies to all personal data collected by mdg128 in connection with:

• Registration and account management on the mdg128 platform.
• Deposits, withdrawals, and payment processing via BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata, Bank Danamon, OVO, DANA, GoPay, ShopeePay, and LinkAja.
• Participation in sports betting, togel (Indonesia's numbers lottery), live casino, slot games, crash games, and all other Services offered by mdg128.
• KYC identity verification and anti-money laundering (AML) screening.
• Customer support interactions via live chat, WhatsApp, and email.
• Browsing and navigating the mdg128 website.

This Policy applies to Players who are primarily resident in Indonesia, though it covers all users regardless of location who choose to access mdg128's Services. By creating an account or continuing to use mdg128, you acknowledge that you have read and understood this Privacy Policy.

mdg128 collects the following categories of personal data from Players:

mdg128 does not collect sensitive personal data such as racial or ethnic origin, religious beliefs, health data, or biometric data, unless explicitly required for identity verification purposes under applicable regulation.

mdg128 collects personal data through the following means:

• Direct submission: Data you provide when completing the registration form, submitting KYC documents, making a deposit or withdrawal request, contacting support, or updating your account profile.
• Automated collection: Technical and usage data collected automatically via server logs, cookies, and session-tracking technologies when you access and navigate the mdg128 platform.
• Third-party payment providers: Transaction confirmation data received from BCA, BRI, BNI, Mandiri, and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) when you initiate a deposit or withdrawal.
• Third-party identity and fraud screening services: Data returned by KYC verification providers or AML/PEP (Politically Exposed Person) screening services engaged by mdg128 to fulfill its compliance obligations.
• Public sources: In limited circumstances, mdg128 may verify information against publicly available records (e.g., public KTP population databases accessible under applicable Indonesian regulation) to confirm identity accuracy during KYC review.

mdg128 processes your personal data for the following specific purposes:

• Account registration and management: Creating, maintaining, and securing your mdg128 account, including authenticating your identity on each login.
• Service delivery: Enabling you to place bets, access games, claim bonuses, and use all features of the mdg128 platform, including sports betting on BRI Liga 1 and international leagues, togel lottery markets, live casino, and slot games.
• Payment processing: Processing deposits and withdrawals to and from your registered Indonesian bank account or e-wallet, and maintaining accurate financial records associated with your account.
• KYC and AML compliance: Verifying your identity using your Indonesian KTP, confirming that you meet the 21+ age requirement, screening against sanctions and PEP lists, and fulfilling all applicable anti-money laundering obligations.
• Fraud prevention and security: Detecting, investigating, and preventing unauthorized access, fraudulent transactions, multi-accounting, and other prohibited conduct as defined in the Terms & Conditions.
• Responsible gaming: Monitoring gambling patterns to identify potential problem gambling behaviors, enforcing self-exclusion requests and deposit limits, and complying with responsible gaming obligations.
• Customer support: Responding to your inquiries, resolving disputes, processing complaints, and maintaining records of support interactions for quality assurance purposes.
• Platform improvement: Using aggregated and anonymized usage data to improve platform performance, fix bugs, develop new features, and optimize the user experience for Indonesian players.
• Legal compliance: Retaining records as required by applicable law, responding to lawful requests from regulatory or law enforcement authorities, and enforcing mdg128's rights under the Terms & Conditions.
• Marketing communications: Sending you promotional offers, bonus notifications, and platform updates via email or in-app messaging, where you have not opted out. You may withdraw consent to marketing communications at any time by contacting support.

mdg128 processes your personal data on one or more of the following legal bases:

• Performance of a contract: Processing is necessary to provide the Services you have requested — including account management, bet settlement, and payment processing.
• Legal obligation: Processing is required to comply with applicable KYC, AML, data retention, and regulatory reporting obligations.
• Legitimate interests: Processing is necessary for mdg128's legitimate interests, including fraud prevention, platform security, responsible gaming monitoring, and business analytics — provided those interests are not overridden by your rights and freedoms.
• Consent: Where we process data for marketing communications or for optional platform features, we rely on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

mdg128 does not sell, rent, or trade your personal data to any third party for commercial purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data-protection safeguards:

• Payment processors: BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, OVO, DANA, GoPay, ShopeePay, LinkAja, and other payment partners, to process deposit and withdrawal transactions associated with your account.
• KYC and identity verification providers: Third-party services engaged to verify the authenticity of your Indonesian KTP and to perform AML screening and PEP checks.
• Fraud prevention and security services: Specialized providers that assist mdg128 in detecting and preventing unauthorized access, fraudulent accounts, and prohibited conduct.
• Game studios and software providers: Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and other content partners who supply games to the mdg128 platform. These providers receive only the minimum technical data necessary to deliver their services (e.g., session tokens, game outcomes).
• Regulatory and law enforcement authorities: Government bodies, regulators, courts, and law enforcement agencies, where disclosure is required by law or by a binding legal order.
• Professional advisors: Legal counsel, auditors, and compliance advisors, where necessary to protect mdg128's legal rights or to obtain professional advice.
• Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of mdg128's business assets, your personal data may be transferred as part of that transaction. You will be notified in advance if your data is to be subject to a materially different privacy policy as a result.

mdg128 operates as an international platform and may process or store personal data in countries outside Indonesia. Where personal data is transferred internationally, mdg128 takes appropriate steps to ensure that the transfer is lawful and that the receiving jurisdiction provides an adequate level of data protection, including through:

• Binding contractual clauses with data processors located outside Indonesia.
• Transfers to jurisdictions that maintain data protection standards recognized as adequate under applicable international frameworks.
• Technical measures including encryption to protect data in transit and at rest.

If you have questions about the safeguards applied to international transfers of your personal data, please contact us using the details in Section 16.

mdg128 retains personal data only for as long as necessary to fulfill the purposes for which it was collected, including legal, regulatory, and compliance obligations. The following general retention periods apply:

At the end of the applicable retention period, personal data is securely deleted or anonymized in accordance with mdg128's internal data-disposal procedures.

mdg128 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption: All data transmitted between your device and mdg128 servers is encrypted using the same standard applied by major Indonesian banks such as BCA and Mandiri.
• Two-factor authentication (2FA): Available and strongly recommended for all Player accounts to prevent unauthorized login.
• Access controls: Internal access to personal data is restricted to mdg128 personnel who require it to perform their job functions. All staff with data access are subject to confidentiality obligations and regular security training.
• Intrusion detection and monitoring: Real-time monitoring systems are in place to detect and respond to unauthorized access attempts, DDoS attacks, and other security threats.
• Data segregation: Player funds and personal data are held in systems segregated from mdg128's operational infrastructure.
• Regular security assessments: mdg128 conducts periodic vulnerability assessments and penetration testing to identify and remediate security weaknesses.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, mdg128 will notify you without undue delay and will take all reasonable steps to mitigate the impact of the breach.

mdg128 uses cookies and similar tracking technologies to operate the platform, remember your session preferences, and gather usage analytics. The following categories of cookies are used:

• Strictly necessary cookies: Essential for the platform to function. These include session cookies that maintain your login state and security tokens. These cookies cannot be disabled without affecting platform functionality.
• Performance and analytics cookies: Used to collect aggregated, anonymized data on how Players interact with the platform — such as pages visited, features used, and session duration. This data is used solely to improve platform performance and user experience.
• Functional cookies: Used to remember your preferences, such as language settings, display options, and last-visited game sections, so you do not need to reconfigure them on each visit.
• Fraud prevention cookies: Used to detect and prevent unauthorized or fraudulent account activity, including multi-accounting and bot traffic.

mdg128 does not use cookies to serve third-party advertising or to track your behavior across external websites not operated by mdg128.

You can manage or disable cookies through your browser settings; however, disabling strictly necessary cookies may impair your ability to use the mdg128 platform. Session cookies are automatically deleted when you close your browser.

As a Player whose personal data is processed by mdg128, you have the following rights, subject to applicable legal limitations:

• Right of access: You may request a copy of the personal data we hold about you and information about how it is processed.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data we hold about you.
• Right to erasure ("right to be forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing is unlawful. Note that this right is subject to mdg128's legal obligations to retain certain data (see Section 9).
• Right to restriction of processing: You may request that we limit the processing of your personal data in certain circumstances — for example, while the accuracy of data you have contested is being verified.
• Right to data portability: You may request a copy of your personal data in a structured, commonly used, machine-readable format and have it transferred to another controller, where technically feasible.
• Right to object: You may object to the processing of your personal data where we rely on legitimate interests as our legal basis, or where your data is used for direct marketing purposes. You may opt out of marketing communications at any time.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing conducted prior to withdrawal.

To exercise any of the above rights, please contact mdg128 support using the details set out in Section 16. We will respond to all verifiable requests within 30 days of receipt. In complex cases, we may extend this period by a further 30 days, and you will be notified accordingly.

mdg128 is a strictly adults-only platform. We do not knowingly collect personal data from individuals under the age of 21. The 21+ age requirement is enforced through mandatory KYC identity verification using Indonesian KTP prior to the processing of any withdrawal.

If mdg128 becomes aware that personal data has been collected from an individual who is under 21 years of age, we will promptly close the associated account, void any associated transactions, and securely delete the personal data, retaining only the minimum records required by applicable legal obligation.

Parents or guardians who believe that a minor has registered on mdg128 are encouraged to contact us immediately using the support details in Section 16.

The mdg128 platform integrates with third-party services — including payment providers, game studios, and fraud-prevention tools — whose data practices are governed by their own privacy policies. mdg128 is not responsible for the privacy practices of any third-party service provider, and Players are encouraged to review the relevant privacy policies of those services.

The mdg128 platform does not contain links to external third-party websites for general browsing or commercial purposes. All links within the platform point to mdg128's own pages or to the payment provider interfaces necessary to complete transactions.

mdg128 reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, platform practices, or data processing activities. When material changes are made, we will notify registered Players via their registered email address and will display a prominent notice on the platform at least seven days before the changes take effect.

The "Last Updated" date at the top of this page indicates when the most recent revision was made. Continued use of the mdg128 platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree to the updated Privacy Policy, you should discontinue use of the platform and request account closure before the effective date.

If you have any questions, concerns, or complaints regarding this Privacy Policy or mdg128's data-processing practices, please contact our Data Protection team using the details below:

Email: [email protected] (plain text — not a clickable link)

Live Chat: Available within the mdg128 platform after login. Our Indonesian-speaking support agents are available 24 hours a day, seven days a week, and can direct your inquiry to the appropriate team.

We will acknowledge all privacy-related inquiries within two business days (WIB) and will aim to resolve them within 30 calendar days. If your request is particularly complex, we will notify you of the extended timeline.

If you are not satisfied with mdg128's response to a privacy complaint, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction. Indonesian residents may also seek guidance from Kominfo (Ministry of Communication and Information Technology) regarding their data protection rights under Indonesian law.