Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how mdg118 ("mdg118", "we", "us", or "our") collects, uses, discloses, and protects personal information submitted by users ("you", "User", "Player") when you visit https://mdg118.cam, register an account, make deposits or withdrawals, place bets, or otherwise interact with our services. mdg118 serves Indonesian players alongside an international audience and processes personal data in accordance with internationally recognised data-protection principles.

By creating an account or using any part of the mdg118 platform, you acknowledge that you have read and understood this Policy and consent to the data practices described herein. If you do not consent, please do not use our services. We may update this Policy periodically; continued use after any revision constitutes acceptance of the revised terms.

2. Definitions

• "Personal Data" — any information that identifies or can reasonably be used to identify a natural person, including names, identification numbers, contact details, and financial information.
• "Processing" — any operation performed on Personal Data, including collection, storage, use, disclosure, or deletion.
• "Controller" — mdg118, the entity that determines the purposes and means of processing your Personal Data.
• "KYC" — Know Your Customer, the identity-verification process requiring submission of government-issued identification such as the Indonesian National ID (KTP), proof of address, and selfie verification.
• "Cookies" — small text files placed on your device by our website to support functionality, analytics, and personalisation.
• "Third-Party Service Providers" — companies engaged by mdg118 to deliver specific services (payment processing, fraud detection, analytics) who receive limited Personal Data solely to perform those services.

3. Information We Collect

3.1 Information You Provide Directly

When you register, verify your identity, or contact our support team, you provide us with information including:

• Identity Data: Full legal name, date of birth, nationality, and government-issued ID details (KTP number, passport number).
• Contact Data: Email address, mobile phone number, and residential address (required for KYC and correspondence).
• Financial Data: Bank account numbers, e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja), and transaction history necessary for deposits and withdrawals via BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, and Bank Permata.
• Account Credentials: Username and encrypted password. We never store passwords in plain text.
• Verification Documents: Photographs of your KTP, proof-of-address documents, and selfie images submitted during the KYC process.
• Support Communications: Records of live chat, WhatsApp, or email interactions with our customer service team.

3.2 Information Collected Automatically

When you visit or use mdg118, we automatically collect certain technical data, including:

• Device and Browser Data: IP address, device type, operating system version, browser type, screen resolution, and language settings.
• Usage Data: Pages visited, features used, bets placed, games played, session durations, and click-stream data.
• Location Data: General geographic location inferred from your IP address (city and country level). We do not collect precise GPS coordinates unless you explicitly permit it via your device settings.
• Cookie Data: Information stored in cookies and similar tracking technologies as described in Section 8 below.

3.3 Information from Third Parties

We may receive information about you from:

• Payment Processors: Transaction status confirmations and fraud-screening results from our banking and e-wallet partners.
• Identity Verification Services: KYC and AML screening results from accredited third-party verification providers.
• Game Providers: Aggregated game-session data from providers such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Pocket Games Soft, necessary for bet settlement and dispute resolution.

4. How We Use Your Information

mdg118 processes your Personal Data for the following purposes, each resting on a recognised legal basis:

We do not use your Personal Data for any purpose incompatible with those listed above. If we intend to process your data for a materially new purpose, we will notify you and, where required, seek your consent before doing so.

5. Disclosure of Your Information

5.1 Service Providers

We share limited Personal Data with trusted third-party service providers engaged to support our operations. These parties are contractually obligated to process your data only on our instructions, to maintain adequate security measures, and not to use your data for their own purposes. Categories of providers include:

• Payment processors and banking partners (BCA, BRI, BNI, Mandiri, and e-wallet providers) for transaction execution.
• KYC and AML screening providers for identity verification and fraud prevention.
• Game studios and content aggregators for bet settlement and game-history records.
• Cloud infrastructure and hosting providers for secure data storage.
• Analytics platforms for aggregated, anonymised site-performance data.
• Customer communications platforms supporting our live chat, WhatsApp, and email support channels.

5.2 Legal and Regulatory Disclosure

We may disclose Personal Data when required to do so by applicable law, court order, regulatory authority, or in response to a lawful request from law-enforcement agencies. We may also disclose data where necessary to protect the rights, property, or safety of mdg118, our users, or the public.

5.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of assets involving mdg118, your Personal Data may be transferred to the acquiring entity as part of that transaction. We will notify affected users via email or a prominent notice on our website before any such transfer takes effect, and the acquiring entity will be required to honour the commitments made in this Policy.

5.4 No Sale of Personal Data

mdg118 does not sell, rent, lease, or otherwise commercially exploit your Personal Data to unaffiliated third parties for their own marketing or commercial purposes. This prohibition applies regardless of any financial consideration offered.

6. Data Retention

We retain your Personal Data for as long as your account is active and for a defined period thereafter, in accordance with our legal obligations and operational needs:

• Account and Identity Data: Retained for the duration of your account and for a minimum of 5 years following account closure, as required by anti-money laundering regulations.
• Transaction Records: Retained for a minimum of 5 years from the date of each transaction, in accordance with financial record-keeping obligations.
• KYC Documents: Retained for 5 years after the end of the business relationship, or longer if required by applicable law.
• Support Communications: Retained for 2 years from the date of the last interaction, unless the matter relates to an ongoing dispute or legal proceeding.
• Cookie and Usage Data: Retained for up to 13 months from the date of collection, after which it is anonymised or deleted.
• Marketing Preferences: Retained until you withdraw consent or request deletion, whichever occurs first.

Once the applicable retention period expires, we securely delete or irreversibly anonymise your Personal Data so that it can no longer be associated with you.

7. Your Rights and Choices

Subject to applicable law, you have the following rights regarding your Personal Data held by mdg118:

• Right of Access: You may request a copy of the Personal Data we hold about you, along with information about how it is processed.
• Right to Rectification: If any Personal Data we hold is inaccurate or incomplete, you may request that we correct or update it.
• Right to Erasure: You may request deletion of your Personal Data where we no longer have a lawful basis for processing it. Note that certain data must be retained to comply with legal obligations and cannot be deleted on request.
• Right to Restriction: You may request that we restrict processing of your Personal Data in certain circumstances, for example while a rectification request is pending.
• Right to Data Portability: Where technically feasible and legally applicable, you may request that we provide your Personal Data in a structured, machine-readable format.
• Right to Object: You may object to processing based on legitimate interest, including direct marketing. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, please contact us at [email protected]. We will acknowledge your request within 5 business days and respond fully within 30 calendar days. We may need to verify your identity before processing any request to protect against unauthorised access.

8. Cookies and Tracking Technologies

8.1 What We Use

mdg118 uses cookies, web beacons, pixel tags, and similar technologies to operate the platform, analyse usage patterns, and deliver a personalised experience. The categories of cookies we deploy are:

• Strictly Necessary Cookies: Essential for the platform to function — they enable login sessions, security tokens, and core navigation. These cannot be disabled without materially impairing your use of the site.
• Performance and Analytics Cookies: Collect anonymised data about page visits, load times, error events, and user flows so we can improve platform performance. No personally identifiable information is included.
• Functional Cookies: Remember your preferences such as language settings, preferred sports leagues, and last-visited game category to provide a more tailored experience.
• Targeting and Marketing Cookies: Used, with your consent, to present relevant promotions and offers based on your activity on the platform. These are not shared with unaffiliated advertisers.

8.2 Managing Your Cookie Preferences

You can control non-essential cookies through your browser settings at any time. Most modern browsers allow you to block, delete, or receive notifications before cookies are placed. Please note that disabling certain cookies may affect platform functionality. Detailed guidance on managing cookies is available in your specific browser's help documentation.

9. International Data Transfers

mdg118 operates internationally, and your Personal Data may be transferred to and processed in countries outside Indonesia. Where such transfers occur, we implement appropriate safeguards to ensure your data receives a level of protection equivalent to that provided within Indonesia, including:

• Standard contractual clauses approved by recognised data-protection authorities.
• Binding corporate rules for intra-group transfers.
• Transfers only to jurisdictions that maintain adequate data-protection frameworks as recognised by relevant authorities.

10. Security Measures

mdg118 implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, destruction, or disclosure:

• Encryption: All data in transit is secured via TLS 1.2 or higher. Sensitive data at rest (including financial records and KYC documents) is encrypted using AES-256.
• Access Controls: Personal Data is accessible only to authorised employees and contractors who require it to perform their duties. Access is governed by role-based permissions with multi-factor authentication.
• Security Audits: We conduct regular internal and third-party penetration tests and security audits to identify and remediate vulnerabilities.
• Incident Response: We maintain a documented data-breach response procedure. In the event of a breach affecting your rights and freedoms, we will notify affected users without undue delay and, where required, report the incident to the relevant supervisory authority.
• Staff Training: All personnel with access to Personal Data receive regular data-protection and security awareness training.

While we take every reasonable precaution to protect your data, no system is completely immune to risk. You also play a role in keeping your account secure — use a strong, unique password, enable any available two-factor authentication, and never share your login credentials with anyone.

11. Children's Privacy

mdg118 services are strictly restricted to individuals aged 21 years and older. We do not knowingly collect Personal Data from persons under the age of 21. If we become aware that a person under 21 has provided us with Personal Data, we will immediately suspend the associated account and delete the data in question. If you believe a minor has accessed or registered on our platform, please contact us at [email protected] so we can investigate and take prompt action.

12. Links to Third-Party Sites and Services

Our platform integrates with third-party services including payment processors (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja) and game providers (Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, Pocket Games Soft). When you interact with these third-party services, their own privacy policies apply to data collected by them. mdg118 is not responsible for the privacy practices of any third party and recommends that you review their policies directly.

13. Responsible Gaming and Data

As part of our commitment to responsible gaming, we monitor account activity to identify signs of problem gambling behaviour, including unusual betting patterns, rapid successive deposits, and interactions with our self-exclusion or deposit-limit tools. This monitoring is conducted in your interest and in fulfilment of our duty of care obligations. Data collected for responsible gaming purposes is processed with strict access controls and is not used for commercial profiling. If you wish to learn more about the tools available to help you manage your gaming, please visit our Responsible Gaming page.

14. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our data practices, regulatory requirements, or the services we offer. When we make material changes, we will post the revised Policy on this page with an updated effective date and, where appropriate, notify registered users via email. We encourage you to review this page regularly. Your continued use of mdg118 services following any update constitutes your acknowledgement of the revised Policy.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your Personal Data, please reach out to our team:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24 hours a day, 7 days a week through the platform
• WhatsApp: Available daily 08:00–22:00 WIB (Western Indonesia Time, UTC+7)

We aim to acknowledge all privacy-related enquiries within 2 business days and to resolve them fully within 30 calendar days of receipt.