Your privacy matters to us. This Privacy Policy explains exactly what personal data mdg188 collects from Indonesian players, why we collect it, how we use it, who we share it with, and what rights you hold over your own information. We encourage every Member to read this document in full before registering an account.
Effective Date: 1 January 2026 | Version 2026.11.1 Identity. The data controller responsible for personal data processed through the mdg188 platform is mdg188 (referred to in this document as "mdg188", "we", "us", or "our"). The platform is accessible at mdg188.bio and its associated subdomains.
1.2 Contact. All data-related enquiries, requests, and complaints should be directed to the mdg188 data team at [email protected] with the subject line "Privacy / Data Request — [your username]". This email address is displayed as plain text and is not a clickable link.
1.3 Scope. This Privacy Policy applies to all personal data collected from individuals who visit, register on, or otherwise interact with the mdg188 platform — including Members resident in Jakarta, Surabaya, Medan, Bandung, Bali, and all other regions across Indonesia.
mdg188 collects personal data across several categories. The table below outlines the specific data types gathered during your use of the platform.
| Category | Examples of Data Collected |
|---|---|
| Identity Data | Full legal name, date of birth, gender, nationality, government-issued ID number (KTP or passport), photographic ID image. |
| Contact Data | Email address, Indonesian mobile number, residential address (including city and province). |
| Financial Data | Bank account details (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, BSI), e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja), transaction history, deposit and withdrawal records denominated in IDR. |
| Gaming Activity Data | Bet history, game session logs, win/loss records, sports markets accessed, slot game activity, live casino session data, wagering totals, and responsible gaming limit settings. |
| Technical Data | IP address, device type and operating system, browser type and version, screen resolution, session timestamps, referral URL, and geolocation data (country/city level). |
| Communications Data | Live chat transcripts, support email correspondence, feedback submissions, and any other written communications sent to mdg188. |
| Marketing Preferences | Opt-in/opt-out status for promotional emails and platform notifications, preferred game categories, bonus history. |
mdg188 does not collect sensitive personal data such as racial or ethnic origin, religious beliefs, health records, or political opinions. We do not collect biometric data beyond what is contained in a photographic ID submitted for KYC purposes.
The majority of personal data we hold is provided directly by you in the course of using the mdg188 platform. This includes data submitted at account registration, during KYC verification, when you make a deposit or withdrawal request, when you contact customer support, or when you update your account profile settings.
Technical Data is collected automatically whenever you access the mdg188 platform. This is gathered via server logs, first-party cookies, and session analytics tools. Automatically collected data allows us to maintain platform security, detect fraudulent access patterns, and improve service performance for Indonesian players across all connection types and devices.
In certain circumstances, mdg188 may receive or verify personal data from third-party sources, including:
mdg188 processes personal data for the following specific purposes. We do not process data for any purpose that is incompatible with the ones listed here without first obtaining your explicit consent or unless required by applicable law.
| Purpose | Description |
|---|---|
| Account Management | Creating, maintaining, and closing your mdg188 Member account; authenticating logins; managing security credentials. |
| Service Delivery | Processing deposits and withdrawals in IDR; settling bets and game outcomes; providing live casino, slots, and sportsbook services. |
| KYC & Compliance | Verifying your identity and age (21+); meeting anti-money-laundering (AML) obligations; conducting ongoing transaction monitoring. |
| Fraud Prevention | Detecting and preventing unauthorized account access, bonus abuse, multi-accounting, and other forms of platform misuse. |
| Responsible Gaming | Monitoring gaming patterns to identify at-risk behavior; enforcing deposit limits, loss limits, and self-exclusion requests; meeting safer gambling obligations. |
| Customer Support | Responding to support queries via live chat and email; resolving disputes; processing KYC document submissions. |
| Platform Improvement | Analyzing aggregated usage data to improve platform performance, navigation, game selection, and payment method availability for Indonesian players. |
| Marketing (opt-in only) | Sending promotional offers, bonus notifications, and seasonal campaign communications — only where you have given explicit consent. You may withdraw consent at any time. |
mdg188 processes your personal data on one or more of the following legal grounds, depending on the specific processing activity involved:
6.1 General Principle. mdg188 does not sell, rent, or trade personal data to third parties for their own commercial purposes. Data is shared externally only to the extent strictly necessary to deliver the services you have requested or to fulfil legal obligations.
mdg188 engages a limited number of carefully selected third-party processors who act on our behalf under binding data processing agreements. These include:
mdg188 may disclose personal data to regulatory bodies, law enforcement agencies, or courts where required to do so by applicable law, court order, or regulatory direction. In such cases, mdg188 will disclose only the minimum data necessary to satisfy the legal requirement and will, where legally permissible, notify the affected Member before disclosure.
In the event of a merger, acquisition, or sale of all or part of mdg188's business assets, personal data held by mdg188 may be transferred to the acquiring entity as part of that transaction. Members will be notified of any such transfer and of any material changes to the way their data is processed as a result, with adequate advance notice before any change takes effect.
7.1 Retention Periods. mdg188 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The principal retention periods applied by mdg188 are as follows:
| Data Category | Retention Period |
|---|---|
| Account & Identity Data | Duration of active membership plus five (5) years following account closure, to meet AML record-keeping obligations. |
| Financial Transaction Records | Seven (7) years from the date of each transaction, in line with financial record-keeping requirements. |
| KYC Documents | Five (5) years following account closure or the last verified transaction, whichever is later. |
| Gaming Activity Data | Three (3) years from the date of the relevant activity, used for dispute resolution and responsible gaming analysis. |
| Support Communications | Two (2) years from the date of the last communication in a support thread. |
| Marketing Preferences | Until you withdraw consent or close your Account, whichever occurs first. |
| Technical / Log Data | Ninety (90) days from collection, unless flagged as part of a security investigation. |
7.2 Deletion. When a retention period expires and no overriding legal obligation exists, mdg188 will securely delete or anonymize the relevant data so that it can no longer be associated with any identifiable individual.
mdg188 takes the security of your personal data seriously. The platform implements a layered set of technical and organizational controls designed to protect data against unauthorized access, accidental loss, destruction, or disclosure. Key measures include:
While mdg188 takes all reasonable technical precautions, no internet transmission or digital storage system is completely impenetrable. Members are also responsible for keeping their own account credentials secure and should contact [email protected] immediately if they suspect unauthorized access to their account.
9.1 What Are Cookies. Cookies are small text files placed on your device by a website. mdg188 uses first-party cookies — set directly by the mdg188 platform — to support essential site functionality and improve your experience. We do not use third-party advertising cookies or cross-site tracking technologies.
You may configure your browser to block or delete cookies at any time. Note that disabling essential cookies will prevent you from logging in or using core platform functions. Browser-level cookie management instructions are available from your browser's help documentation. mdg188 does not operate a cookie consent banner — by using the platform, you accept the use of the essential and functional cookies described above. Analytics cookies may be opted out of by contacting [email protected].
As a Member of the mdg188 platform, you hold the following rights over your personal data. mdg188 is committed to honoring these rights promptly and without unnecessary barriers. To exercise any right, contact [email protected] with the subject line "Data Rights Request — [your username]".
Request a copy of all personal data mdg188 holds about you. We will provide a structured, machine-readable response within 30 days of a verified request.
Request correction of any inaccurate or incomplete personal data we hold. Changes to core identity data may require re-submission of KYC documentation.
Request deletion of your personal data where it is no longer necessary for its original purpose. This right is subject to legal retention obligations — certain financial and KYC records must be retained for the periods specified in Section 7.
Request that mdg188 restrict processing of your data — for example, while a rectification request is under review. Restricted data is retained but not actively processed.
Request your personal data in a structured, commonly used, machine-readable format (JSON or CSV) so that you can transfer it to another service provider if you choose.
Object to processing based on legitimate interests — including profiling for marketing purposes. mdg188 will cease the relevant processing unless compelling legitimate grounds override your objection.
mdg188 targets a response to all data rights requests within 30 calendar days of receiving a verified request. Complex requests may be extended by a further 60 days with notice given to you within the initial 30-day window. There is no charge for exercising your data rights unless requests are manifestly unfounded or excessive.
The mdg188 platform is strictly for adults aged 21 years and over. mdg188 does not knowingly collect personal data from individuals under the age of 21. If mdg188 becomes aware that a Minor has registered an account or provided personal data, the account will be immediately closed, all associated data will be securely deleted, and any funds deposited will be returned to the originating payment source.
If you believe a Minor may have registered on the mdg188 platform, please notify us immediately at [email protected]. We will investigate and act on all such reports within 24 hours of receipt.
12.1 Cross-Border Processing. Some of mdg188's service providers — including certain Game Providers and cloud infrastructure partners — operate servers outside Indonesia. When personal data is transferred internationally, mdg188 ensures that appropriate safeguards are in place to maintain a standard of protection equivalent to that required under the applicable data protection framework.
12.2 Safeguards. Safeguards used for international transfers include contractual data processing agreements with standard data protection clauses, recipient country adequacy assessments, and technical measures such as end-to-end encryption during transit. mdg188 does not transfer personal data to any recipient that cannot demonstrate an adequate level of data protection.
12.3 Indonesian Player Data. mdg188 gives particular weight to the data protection expectations of Indonesian Members. Personal data relating to Indonesian players — including KTP data, BCA/BRI/BNI/Mandiri bank account details, and IDR transaction records — is subject to the same international transfer safeguards described above and is never shared with parties in jurisdictions that lack adequate data protection standards.
mdg188 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or the services we offer. When material changes are made, mdg188 will notify Members via email to the registered address and by posting a prominent notice on the platform for a period of at least seven (7) days before the changes take effect.
The "Effective Date" shown at the top of this document indicates when the current version came into force. The version number is incremented with each update. Archived versions of this Privacy Policy are available on request by contacting [email protected].
Your continued use of the mdg188 platform after the effective date of an updated Privacy Policy constitutes your acknowledgment of the changes. If you do not accept an updated Policy, you may request closure of your Account in accordance with Section 9.2 of the mdg188 Terms & Conditions.
For all privacy and data protection matters — including subject access requests, rectification requests, erasure requests, consent withdrawal, and data breach reports — please contact the mdg188 data team using the details below.
Email: [email protected] — plain text only, not a clickable link
Live Chat: Available 24/7 via the Account dashboard after logging in.
Response Target: Data rights requests handled within 30 calendar days of a verified request.
Coverage: Jakarta, Surabaya, Medan, Bandung, Bali, and all regions of Indonesia.
When submitting a data rights request by email, please include your registered username and a brief description of your request. mdg188 may need to verify your identity before actioning the request to prevent unauthorized disclosure of personal data.
The principles that guide every data processing decision we make at mdg188.
We collect only the personal data that is strictly necessary to operate the mdg188 platform safely. We do not gather data speculatively or in excess of our documented purposes, and we review our data collection practices regularly to ensure continued compliance.
Security controls — including 256-bit SSL encryption, role-based access, and penetration testing — are built into the mdg188 platform architecture from the ground up, not added as an afterthought. Your financial and identity data is protected at every layer.
mdg188 does not sell, rent, or trade your personal data to any third party for commercial gain. External sharing is limited strictly to service providers who need the data to deliver the services you use — and they are bound by the same data protection standards we apply.
Identity verification is a legal requirement, not a hurdle. mdg188 explains clearly what documents are needed, why they are required, how long they will be held, and who has access to them. KYC documents are stored securely and deleted once retention periods expire.
Your data rights — access, rectification, erasure, portability, restriction, and objection — are honored without barriers. Marketing communications are strictly opt-in and can be withdrawn at any time from the Account dashboard or by emailing [email protected].
Every category of personal data has a documented retention period. Data is deleted or anonymized as soon as its purpose is fulfilled and no legal retention obligation applies. mdg188 does not hold data indefinitely — our retention schedule is published in Section 7 of this Policy.
Our support team is available 24/7 to answer data protection questions. You can also explore the platform, review our FAQ, or log in to manage your account preferences and marketing settings.