mdg128 is committed to protecting your personal data. This Privacy Policy explains what information we collect, how we use it, who we share it with, and what rights you hold as a member of our platform.
A plain-language overview of how mdg128 handles your personal information. These highlights summarize the full policy below — the complete clauses govern in all cases.
Every connection to mdg128 is secured with industry-standard 256-bit SSL encryption. All data transmitted between your device and our servers — including login credentials, payment details, and personal information — is fully encrypted in transit.
mdg128 does not sell, rent, or trade your personal information to third parties for their own marketing purposes. Data shared with service providers is strictly limited to what is necessary to deliver the platform's services to you.
As an mdg128 member, you have the right to access, correct, delete, and restrict the processing of your personal data at any time. Requests are handled through our support team and processed within 30 days of receipt.
mdg128 processes payment data for Indonesian bank transfer and e-wallet transactions through payment processors operating within or connected to Indonesia's banking infrastructure — BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and LinkAja.
mdg128 retains personal data only for as long as it is necessary to provide services, fulfil legal obligations, and resolve disputes. Account data is held for a defined period following account closure, after which it is securely deleted or anonymized.
mdg128 uses cookies and similar tracking technologies solely to deliver the platform's functionality, maintain session security, and analyze aggregate platform performance. We do not use third-party advertising cookies or behavioral tracking networks.
Throughout this Privacy Policy, the following terms carry the meanings set out below. Where the context permits, the singular includes the plural and vice versa.
| Term | Meaning |
|---|---|
| "mdg128" / "We" / "Us" | The company operating the mdg128 online gaming platform at https://mdg128.pro and all associated services. |
| "You" / "User" / "Member" | Any individual who accesses, browses, or holds a registered account on the mdg128 platform. |
| "Personal Data" | Any information relating to an identified or identifiable natural person, including name, national ID number, email address, device identifiers, and financial account details. |
| "Processing" | Any operation performed on Personal Data, including collection, recording, storage, use, disclosure, transfer, deletion, or destruction. |
| "Data Controller" | The entity that determines the purposes and means by which Personal Data is processed. For the purposes of this policy, mdg128 is the Data Controller. |
| "Data Processor" | A third party that processes Personal Data on behalf of mdg128 under documented instructions and subject to appropriate contractual safeguards. |
| "KYC" | Know Your Customer — the identity verification and age confirmation process conducted before withdrawal processing or upon reaching specified deposit thresholds. |
| "Cookie" | A small text file placed on your device by a website server to store session state, preferences, and usage analytics data. |
2.1 mdg128 acts as the Data Controller for all Personal Data collected through the mdg128 platform at https://mdg128.pro. As Data Controller, mdg128 is responsible for determining how and why your Personal Data is processed, and for ensuring that processing is carried out in accordance with applicable data-protection standards.
2.2 mdg128 operates as an internationally licensed online gaming platform primarily serving English-preference players in Indonesia. Our data practices are designed to meet internationally recognized privacy principles, including purpose limitation, data minimization, storage limitation, integrity, and confidentiality.
2.3 For any queries about this Privacy Policy or the exercise of your data-subject rights, please contact our Data Protection team using the details in Clause 14 of this document.
3.1 Data You Provide Directly. When you register an account, complete KYC verification, make a deposit or withdrawal, or contact our support team, you provide us with the following categories of Personal Data:
| Category | Examples |
|---|---|
| Identity Data | Full legal name, date of birth, nationality, government-issued ID number (KTP / passport / driving license), selfie photograph. |
| Contact Data | Email address, mobile phone number, city and province of residence (e.g., Jakarta, Surabaya, Bandung, Bali). |
| Financial Data | Bank account number and bank name (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, BSI), e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja), deposit and withdrawal transaction records. |
| Account Data | Username, encrypted password hash, account balance, betting history, bonus claims, session timestamps. |
| Communications Data | Live-chat transcripts, email correspondence, and support ticket records exchanged with mdg128 staff. |
3.2 Data Collected Automatically. When you access the mdg128 platform, our systems automatically collect the following technical data:
3.3 Data from Third Parties. mdg128 may receive Personal Data from the following third-party sources:
4.1 mdg128 uses the Personal Data it collects for the following specific purposes:
| Purpose | Data Categories Used |
|---|---|
| Account creation and management | Identity Data, Contact Data, Account Data |
| Processing deposits and withdrawals | Identity Data, Financial Data, Account Data |
| Age and identity verification (KYC) | Identity Data, Contact Data |
| Fraud prevention and AML compliance | Identity Data, Financial Data, Technical Data |
| Providing customer support | Identity Data, Contact Data, Communications Data, Account Data |
| Personalizing the gaming experience | Account Data, Technical Data |
| Sending service notifications and transactional emails | Contact Data, Account Data |
| Responsible gaming monitoring and enforcement | Account Data, Financial Data, Technical Data |
| Platform analytics and performance improvement | Technical Data (aggregated and anonymized) |
| Legal and regulatory compliance | All categories as required |
4.2 Marketing Communications. With your explicit consent, mdg128 may send you promotional emails or platform notifications about bonuses, new game releases, and seasonal offers — including promotions tied to events such as Idul Fitri, Ramadhan, and Indonesian Independence Day (17 August). You may withdraw consent at any time by contacting support or using the unsubscribe link in any marketing email.
4.3 No Automated Decision-Making with Legal Effects. mdg128 does not make decisions that produce legal or similarly significant effects on you solely through automated processing, without human review, except where such processing is strictly necessary for fraud detection or AML screening — in which case you have the right to request human review of any adverse decision.
5.1 mdg128 processes your Personal Data under the following legal bases:
6.1 mdg128 does not sell, rent, or otherwise transfer your Personal Data to third parties for their own independent commercial use. We share Personal Data only in the following limited circumstances and only to the extent necessary for the stated purpose:
7.1 As an internationally operated platform, mdg128 may transfer your Personal Data to servers and service providers located outside Indonesia. Where such transfers occur, mdg128 takes appropriate steps to ensure that your data receives a level of protection equivalent to the standards applied within Indonesia.
7.2 Safeguards used for international data transfers include:
7.3 Where Personal Data relating to Indonesian residents is transferred internationally, mdg128 ensures that such transfers comply with applicable Indonesian data-protection legislation and any sector-specific requirements that apply to online gaming and financial-services data.
8.1 mdg128 uses cookies and similar technologies — including local storage tokens and session identifiers — to operate the platform securely and efficiently. The cookies we use fall into the following categories:
| Cookie Type | Purpose | Can Be Disabled? |
|---|---|---|
| Strictly Necessary | Maintain your logged-in session, store security tokens, prevent cross-site request forgery (CSRF). | No — disabling these will prevent login. |
| Functional | Remember your platform preferences such as language selection and lobby layout. | Yes — but preferences will not be saved. |
| Analytics | Aggregate, anonymized data on page load times, error rates, and feature usage to guide platform improvements. | Yes — without affecting core functionality. |
8.2 mdg128 does not use third-party advertising cookies, retargeting pixels, or cross-site behavioral tracking networks. No cookie data is shared with advertising platforms or social media networks.
8.3 Managing Cookies. You may control cookie settings through your browser's privacy settings. Please note that disabling strictly necessary cookies will impair or prevent your ability to access the mdg128 platform. Browser-level cookie controls are provided by your browser vendor and are independent of mdg128.
9.1 mdg128 retains Personal Data for no longer than is necessary to fulfil the purposes for which it was collected, subject to any legal or regulatory obligations that require longer retention periods. The following retention guidelines apply:
| Data Category | Retention Period |
|---|---|
| Account and identity records | Duration of account plus 5 years following closure, in accordance with AML record-keeping standards. |
| Transaction and financial records | 7 years from the date of the transaction, as required by applicable financial regulations. |
| KYC documentation | Duration of account plus 5 years following closure, or longer if required by the relevant licensing authority. |
| Customer support communications | 3 years from the date of the last interaction, unless part of an ongoing dispute or legal proceeding. |
| Marketing consent records | Until consent is withdrawn, plus 1 year thereafter for audit purposes. |
| Anonymized analytics data | Indefinitely, as it no longer constitutes Personal Data once anonymized. |
9.2 Upon expiry of the applicable retention period, Personal Data is either securely deleted from mdg128's systems or irreversibly anonymized so that it can no longer be associated with any identifiable individual.
10.1 As a member of the mdg128 platform, you hold the following rights with respect to your Personal Data. To exercise any of these rights, please contact us using the details in Clause 14. We will respond within 30 days of receiving a valid request.
Request a copy of the Personal Data mdg128 holds about you, along with information about how it is used and with whom it is shared.
Request correction of any inaccurate or incomplete Personal Data held in your mdg128 account at any time.
Request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations.
Request that mdg128 limit how it uses your data while a dispute about accuracy or lawfulness is being resolved.
Receive a structured, machine-readable copy of Personal Data you provided to mdg128, where processing is based on consent or contractual necessity.
Object to processing based on legitimate interests — including direct marketing — at any time. mdg128 will cease such processing unless compelling legitimate grounds exist.
11.1 mdg128 implements a comprehensive set of technical and organizational security measures to protect your Personal Data against unauthorized access, accidental loss, destruction, or disclosure. These measures include:
11.2 Your Responsibility. While mdg128 takes robust measures to protect your data on the platform side, you are responsible for keeping your login credentials secure. We strongly recommend using a unique, strong password for your mdg128 account and enabling any two-factor authentication options available in your account settings.
12.1 The mdg128 platform is strictly intended for adults aged 21 and over. 21+ mdg128 does not knowingly collect, use, or retain Personal Data from any individual under the age of 21.
12.2 If mdg128 discovers or is notified that Personal Data belonging to an individual under 21 years of age has been collected — whether through fraudulent registration or any other means — we will immediately suspend the associated account, delete all related Personal Data, and reverse any financial transactions where legally permissible.
12.3 If you are the parent or legal guardian of a minor and believe that your child has registered on or interacted with the mdg128 platform, please contact us immediately using the details in Clause 14 so that we can investigate and take corrective action promptly.
13.1 mdg128 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data-processing practices, applicable legal requirements, or the services we offer. The current version of this policy, with its effective date, is always published on this page.
13.2 Where changes are material — for example, where we introduce a new category of data processing or a new category of third-party recipient — mdg128 will notify registered members via a platform notification or email to their registered address at least 7 days before the changes take effect.
13.3 Your continued use of the mdg128 platform following the effective date of any amendment constitutes your acknowledgment of and agreement to the revised Privacy Policy. If you do not agree to the changes, you should close your account before the effective date and contact support to exercise your erasure rights where applicable.
14.1 Data Protection Inquiries. For any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data, please contact the mdg128 Data Protection team through the following channel:
14.2 Complaints. If you are dissatisfied with how mdg128 has handled your Personal Data or responded to a data-subject request, you have the right to escalate your complaint to the relevant data-protection supervisory authority in your jurisdiction. mdg128 encourages members to contact us directly in the first instance so that we have the opportunity to resolve your concern promptly and fairly.
14.3 Language. All formal privacy correspondence and data-subject request responses will be issued in English, which is the authoritative language of this Privacy Policy. Our support team includes Indonesian-speaking agents who can assist you in understanding the process if needed; however, formal written decisions will be provided in English.
Have questions about how mdg128 uses your personal information? Our support team is available around the clock. You can also explore our full platform with confidence, knowing your data is protected.