Privacy Policy

The following definitions apply throughout this Privacy Policy:

• "mdg187" / "Platform" / "We" / "Us" / "Our" — refers to the mdg187 online betting and gaming platform, operated at https://mdg187.cam, together with its operators, parent entities, affiliates, and licensors.
• "You" / "Player" / "User" — refers to any individual who accesses, registers on, or uses the Platform in any capacity.
• "Personal Data" — means any information relating to an identified or identifiable natural person, including but not limited to name, date of birth, address, email address, phone number, payment details, and device identifiers.
• "Processing" — means any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, or deletion.
• "KYC" (Know Your Customer) — refers to the identity and address verification process required before withdrawals are processed or upon reasonable request by the Platform.
• "Cookie" — means a small text file placed on your device by the Platform to recognize your browser across sessions and improve your experience.
• "Third-Party Provider" — means any external service provider engaged by mdg187 to support Platform operations, including payment processors, game studios, analytics vendors, and identity-verification services.
• "Applicable Law" — means all data protection, privacy, and anti-money-laundering legislation applicable in the jurisdiction where mdg187 holds its international gaming license, together with any data rights recognized under Indonesian law that apply to Indonesian residents.

mdg187 acts as the data controller in respect of all Personal Data collected through the Platform. As data controller, mdg187 determines the purposes for which and the means by which Personal Data is processed.

If you have any questions or concerns about how your Personal Data is handled, or wish to exercise any of the rights described in Section 11 of this Policy, please contact our Data Protection team at:

• Email: [email protected] (plain text — not a clickable link)
• Subject line: "Data Privacy Request — [Your Registered Username]"
• Response time: Within 30 calendar days of receipt (WIB, UTC+7)

Where mdg187 engages Third-Party Providers to process Personal Data on its behalf, those providers act as data processors and are contractually bound to process data only on mdg187's documented instructions and in accordance with applicable data protection obligations.

mdg187 collects the following categories of Personal Data:

We do not intentionally collect special-category data (such as health, religious belief, or political opinion data) unless it is directly relevant to processing a responsible gaming or self-exclusion request, in which case it is handled with heightened care and not used for any other purpose.

mdg187 collects Personal Data through the following channels:

• Direct submission: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal request, contacting support, or responding to a promotional offer.
• Automated technologies: Technical Data collected automatically when you access the Platform, including cookies, server logs, and similar tracking technologies as described in Section 8.
• Third-party sources: Identity and address verification data returned by our KYC partners; fraud-risk signals from payment processors; geolocation data from IP-lookup services used for geographic compliance checks.
• In-platform activity: Gaming Data generated as a natural result of using the Platform's betting, casino, slot, and lottery products.

mdg187 processes your Personal Data on the following legal bases:

• Contractual necessity: Processing is necessary to perform our obligations under the Terms & Conditions you accepted when registering, including operating your account, processing deposits and withdrawals, and settling wagers.
• Legal obligation: Processing is required to comply with applicable anti-money-laundering (AML) regulations, KYC requirements, sanctions screening obligations, and any other legal duties imposed on mdg187 as a licensed gaming operator.
• Legitimate interests: Processing is necessary for the legitimate interests of mdg187, including platform security, fraud prevention, responsible gaming monitoring, and improving the quality of our services — provided those interests are not overridden by your fundamental rights.
• Consent: For optional processing activities such as direct marketing communications and the use of non-essential cookies, mdg187 relies on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

mdg187 uses your Personal Data for the following purposes:

• Account management: Creating and maintaining your player account; authenticating your identity at login; processing account changes and closures.
• Transaction processing: Handling deposits and withdrawals via BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and other supported payment methods; recording transaction history in IDR; resolving payment disputes.
• KYC & compliance: Verifying your identity and age (21+ requirement); conducting sanctions and politically exposed person (PEP) screening; filing required reports to regulatory authorities.
• Platform security & fraud prevention: Detecting and preventing unauthorized account access, bot activity, multi-accounting, bonus abuse, and money laundering through the Platform.
• Responsible gaming: Monitoring gaming patterns for signs of problem gambling; enforcing deposit limits, session time limits, and self-exclusion requests; providing responsible gaming tools to players who request them.
• Customer support: Responding to your inquiries, resolving disputes, and providing assistance through live chat and email in both English and Bahasa Indonesia.
• Marketing & promotions: Sending you information about relevant bonuses, promotions, and new features — only if you have consented to receive marketing communications. You may opt out at any time.
• Platform improvement: Analyzing aggregated and anonymized usage data to improve the performance, design, and game selection of the Platform.
• Legal proceedings: Establishing, exercising, or defending legal claims, including in the context of regulatory investigations or player disputes.

mdg187 will not use your Personal Data for any purpose incompatible with the purposes listed above without first notifying you and, where required, obtaining your consent.

mdg187 may share your Personal Data with the following categories of recipients, strictly on a need-to-know basis:

• Payment processors: Banks and e-wallet operators (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja) to facilitate your deposit and withdrawal transactions.
• KYC & identity verification providers: Third-party services that assist with document verification, liveness checks, and sanctions screening to fulfill our regulatory obligations.
• Game content providers: Studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft may receive session-level data necessary to deliver their games within the Platform environment.
• Analytics providers: Aggregated and pseudonymized data may be shared with web analytics platforms to help us understand Platform usage patterns and improve our services. Raw Personal Data is not shared with analytics vendors.
• Regulatory & law enforcement authorities: mdg187 will disclose Personal Data to relevant authorities where required by law, court order, or as necessary to prevent fraud or financial crime. Such disclosures may be made without prior notice to the Player where legally required.
• Group companies: mdg187 may share data within its corporate group for internal administrative, compliance, and audit purposes.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of the Platform, player data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy.

mdg187 uses cookies and similar tracking technologies to operate, secure, and improve the Platform. The categories of cookies we use are as follows:

• Strictly necessary cookies: Essential for core Platform functionality, including maintaining your login session, remembering your account preferences, and securing your connection. These cookies cannot be disabled without impairing Platform functionality.
• Performance & analytics cookies: Used to collect aggregated information about how players navigate the Platform, which pages are most visited, and where errors occur. This data helps us continuously improve the player experience.
• Functional cookies: Used to remember your preferences (such as preferred currency display format, game category, and responsible gaming settings) across sessions.
• Marketing cookies: Used, with your consent, to track responses to promotional campaigns and to avoid showing you the same offer repeatedly. These cookies are only placed if you have opted in to marketing communications.

You can manage your cookie preferences through your browser settings. Please note that disabling certain categories of cookies may affect the availability and performance of some Platform features. Most modern browsers allow you to view, delete, and block cookies on a per-site basis — refer to your browser's help documentation for instructions.

mdg187 does not use cookies to collect Personal Data beyond what is described in this Policy, and does not share cookie data with unauthorized third parties.

mdg187 retains your Personal Data for the periods set out below, or for longer where required by applicable law or a legitimate business purpose:

When the applicable retention period expires, Personal Data is securely deleted or anonymized so that it can no longer be associated with any individual. Anonymized aggregated data may be retained indefinitely for statistical and analytical purposes.

mdg187 implements a range of technical and organizational security measures to protect Personal Data against unauthorized access, loss, destruction, or disclosure:

• Transport Layer Security (TLS/SSL): All data in transit between your device and our servers is encrypted using current industry-standard TLS protocols.
• Encryption at rest: Sensitive data fields (including payment details and identity document scans) are encrypted at the database level using AES-256 or equivalent encryption standards.
• Access control: Internal access to Personal Data is restricted by role-based access controls. Staff are granted only the minimum level of access required for their specific job function.
• Two-factor authentication (2FA): Players are encouraged to enable 2FA on their accounts. All mdg187 internal staff with access to production systems are required to use 2FA.
• Regular security audits: mdg187 conducts periodic penetration testing and vulnerability assessments of Platform infrastructure, and reviews security controls in line with evolving industry standards.
• Incident response: In the event of a confirmed data breach affecting your Personal Data, mdg187 will notify affected Players and relevant regulatory authorities in accordance with applicable law, within the timeframes required.

While mdg187 takes all reasonable steps to protect your data, no method of electronic transmission or storage is 100% secure. You are responsible for maintaining the confidentiality of your own account credentials. If you suspect your account has been compromised, contact support immediately at [email protected].

Subject to applicable law and certain exceptions, you have the following rights in relation to your Personal Data held by mdg187:

• Right of access: You may request a copy of the Personal Data we hold about you, along with information about how it is processed.
• Right to rectification: You may ask us to correct inaccurate Personal Data or complete incomplete data we hold about you.
• Right to erasure: You may request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, or where you have withdrawn consent — subject to our retention obligations under applicable law.
• Right to restrict processing: You may ask us to pause processing of your Personal Data in certain circumstances, such as while we verify the accuracy of data you have contested.
• Right to data portability: Where processing is based on your consent or contractual necessity, you may request that we provide your Personal Data in a structured, commonly used, machine-readable format.
• Right to object: You may object to processing based on legitimate interests, including profiling, or to direct marketing at any time.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of prior processing.

To exercise any of the above rights, submit a written request to [email protected] with the subject line "Data Rights Request" and your registered username. We will respond within 30 calendar days. We may require identity verification before fulfilling a request to protect against unauthorized access to your data.

The Platform is strictly for adults aged 21 and over. mdg187 does not knowingly collect Personal Data from individuals under 21 years of age. Registration is prohibited for any person under the age of 21, regardless of jurisdiction.

If mdg187 discovers or reasonably suspects that an account holder is under 21, the account will be immediately suspended, all associated balances will be withheld pending investigation, and all Personal Data collected in connection with the minor's account will be deleted as soon as it is no longer required for regulatory or investigative purposes.

If you are a parent or guardian and you believe your child has created an account on the Platform, please contact us immediately at [email protected]. We will act promptly to investigate and, where confirmed, close the account and delete the data.

We also recommend that parents and guardians who share devices with minors install parental control software to block access to online gambling sites. Free parental control tools are available from a number of reputable third-party providers.

As an internationally operated platform serving players primarily in Indonesia, mdg187 may transfer Personal Data to servers and service providers located outside Indonesia. Where such transfers occur, mdg187 ensures that appropriate safeguards are in place to protect your data, including:

• Transfers to countries recognized as providing an adequate level of data protection under applicable law;
• Use of standard contractual clauses or equivalent legal mechanisms with data processors in jurisdictions that do not have an adequacy determination;
• Contractual obligations on all Third-Party Providers to maintain security standards equivalent to those described in this Policy.

You may request information about the specific safeguards in place for any international transfer of your Personal Data by contacting our Data Protection team.

mdg187 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform features. When material changes are made, we will notify registered Players by email to the address on file and/or by a prominent notice displayed on the Platform.

The "Last Updated" date at the top of this page indicates when the current version was published. The most current version of this Policy will always be available at https://mdg187.cam/privacy-policy.

Your continued use of the Platform following publication of an updated Privacy Policy constitutes your acknowledgment of the changes. If you disagree with any amendment, you must stop using the Platform and may request account closure by contacting support.

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way mdg187 handles your Personal Data, please contact us through the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Subject line for data requests: "Data Privacy Request — [Your Registered Username]"
• Live Chat: Available 24/7 via the Platform interface
• Response time: Within 30 calendar days for formal data rights requests; within 24 hours (WIB, UTC+7) for general privacy inquiries

If you are not satisfied with mdg187's response to your privacy complaint, you may have the right to lodge a complaint with the relevant data protection supervisory authority in the jurisdiction governing your data rights. Details of the applicable authority are available from our support team upon request.