1 Definitions
For the purposes of this Privacy Policy, the following terms have the meanings set out below:
- "mdg187" / "Platform" / "we" / "us" / "our" refers to the mdg187 online gambling platform accessible at mdg187.pro.
- "Player" / "User" / "you" / "your" refers to any natural person who has registered an account with mdg187 or who accesses the Platform in any capacity, including as a visitor without an account.
- "Personal Data" refers to any information that identifies or can reasonably be used to identify a living natural person, either directly (e.g., full name, email address) or indirectly (e.g., IP address combined with device fingerprint).
- "Processing" refers to any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, restriction, erasure, or destruction.
- "Data Controller" refers to the entity that determines the purposes and means of processing Personal Data — in this context, mdg187.
- "Data Processor" refers to a third party that processes Personal Data on behalf of the Data Controller under a documented instruction, such as a payment provider or KYC verification service.
- "KYC" refers to the Know Your Customer identity and age verification process conducted by mdg187 as described in these terms and in the mdg187 Terms & Conditions.
- "Cookies" refers to small text files stored on your device by your web browser when you visit the Platform, used to remember preferences, session state, and analytical data.
2 Data Controller
mdg187 acts as the Data Controller in respect of all Personal Data collected through the Platform and through any communications you initiate with us (including live chat, email, and support tickets). As Data Controller, mdg187 is responsible for ensuring that your Personal Data is processed lawfully, fairly, and transparently in accordance with this Privacy Policy and applicable data protection principles.
mdg187 operates as an international entertainment platform primarily serving players located in Indonesia. By registering an Account and using the Platform, you acknowledge that your Personal Data will be processed by mdg187 in accordance with this Policy, and that such processing may involve the transfer of data to servers located outside Indonesia as described in Clause 8.
3 Personal Data We Collect
mdg187 collects the following categories of Personal Data, depending on your interaction with the Platform:
| Category |
Examples |
Collected When |
| Identity Data |
Full legal name, date of birth, gender, national ID number |
Registration and KYC verification |
| Contact Data |
Email address, phone number (if provided), city of residence (e.g., Jakarta, Surabaya, Bandung, Medan) |
Registration and account updates |
| Identity Documents |
Scanned or photographed government-issued ID, passport, driving license, proof of address |
KYC verification (prior to first withdrawal) |
| Financial Data |
Bank account name and number (BCA, BRI, BNI, Mandiri, CIMB Niaga), e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja), cryptocurrency wallet addresses (USDT, BTC, ETH), transaction amounts and timestamps |
Deposits, withdrawals, and KYC |
| Technical Data |
IP address, device type, operating system, browser type and version, screen resolution, timezone (WIB/WITA/WIT) |
Any Platform visit |
| Usage Data |
Pages visited, session duration, games played, bets placed, game history, bonus activity |
Any authenticated session |
| Communications Data |
Live chat transcripts, support ticket content, email correspondence with mdg187 |
Customer support interactions |
| Responsible Gaming Data |
Self-exclusion status, deposit limits, cool-off activation records, session reminder settings |
Use of responsible gaming tools |
mdg187 does not collect or store full payment card numbers. If card-based payments are supported in future, all card data will be handled exclusively by a certified PCI-DSS compliant payment processor acting as a Data Processor under a separate data processing agreement.
4 How Personal Data Is Collected
mdg187 collects Personal Data through the following channels:
- Directly from you: When you complete the registration form, submit KYC documents, initiate a deposit or withdrawal, contact customer support, or update your account profile.
- Automatically: Through cookies, web beacons, and server logs that record Technical Data and Usage Data when you visit or interact with the Platform — including as a non-registered visitor browsing game previews or promotional pages.
- From third-party providers: Identity verification results from KYC service providers, fraud-score signals from anti-fraud partners, and transaction verification data from payment processors. These providers act as Data Processors under contracts that bind them to confidentiality and data security obligations consistent with this Policy.
- From game providers: Aggregated game activity data (rounds played, wager amounts, bonus participation) is received from licensed game studios including Evolution Gaming, Pragmatic Play, PG Soft, Spribe, and others in the mdg187 game library. This data is used for account management, dispute resolution, and responsible gaming monitoring.
5 Purposes of Processing
mdg187 processes your Personal Data for the following specific purposes:
- Account administration: Creating and managing your player account, authenticating your identity at login, and enabling access to Platform Services.
- KYC and age verification: Verifying that you are at least 21 years of age and that your identity matches the account details you have provided, in compliance with responsible gaming obligations.
- Payment processing: Executing deposits and withdrawals via approved local Indonesian payment methods (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja) and cryptocurrency channels (USDT, BTC, ETH).
- Anti-fraud and AML compliance: Detecting and preventing fraud, money laundering, and other financial crimes, including through automated risk scoring and manual review processes.
- Customer support: Responding to your queries, resolving disputes, and maintaining a record of communications for quality assurance and dispute resolution purposes.
- Responsible gaming: Monitoring gameplay patterns that may indicate problem gambling behavior, enforcing self-exclusions and deposit limits, and communicating responsible gaming resources to at-risk players.
- Platform improvement: Analysing Usage Data and Technical Data in aggregate to improve Platform performance, game lobby curation, and the overall player experience.
- Marketing communications: Sending promotional offers, bonus notifications, and platform news to players who have not opted out of marketing communications. You may opt out at any time via the account settings page or by contacting support.
- Legal compliance: Complying with any applicable legal obligation, court order, or regulatory requirement that requires mdg187 to retain or disclose Personal Data.
6 Legal Basis for Processing
mdg187 processes your Personal Data on the following legal bases:
- Performance of a contract: Processing necessary to deliver the Services you have requested — including account management, payment processing, and game access — is carried out on the basis that it is necessary to perform the contract between you and mdg187 (as set out in the mdg187 Terms & Conditions).
- Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and internal analytics is carried out on the basis of mdg187's legitimate interest in operating a secure and sustainable platform, provided that such interests are not overridden by your fundamental rights and freedoms.
- Legal obligation: Processing necessary to comply with anti-money-laundering obligations, age verification requirements, or a lawful disclosure request from a competent authority.
- Consent: Marketing communications are sent only where you have provided consent or where a soft opt-in is applicable. You may withdraw consent at any time without affecting the lawfulness of prior processing.
7 Data Sharing with Third Parties
mdg187 does not sell, rent, or trade your Personal Data to any third party for their own marketing or commercial purposes. Personal Data is shared with third parties only in the following circumstances:
- Payment processors: Your financial data (bank account details, e-wallet identifiers, or cryptocurrency addresses) is shared with the relevant payment service provider solely to execute the transaction you have requested. Payment providers operate under contractual data protection obligations.
- KYC and identity verification providers: Your Identity Data and Identity Document scans are shared with certified third-party KYC providers to perform age and identity verification. These providers do not retain your data beyond the period required for verification.
- Anti-fraud and AML service providers: Transaction data and device fingerprint information may be shared with fraud prevention partners to assess transaction risk. No unnecessary Personal Data is shared beyond what is required for the risk assessment.
- Game studios: Certain gameplay data (such as session identifiers and bet references) is exchanged with the relevant game studio (e.g., Evolution Gaming, Pragmatic Play, PG Soft, Spribe) for the purpose of game delivery, dispute resolution, and jackpot processing.
- Legal authorities: mdg187 may disclose Personal Data to law enforcement agencies, regulatory bodies, or courts where required by law, court order, or to protect the rights, property, or safety of mdg187, its players, or the public.
- Business transfers: In the event of a merger, acquisition, or sale of all or part of mdg187's business, your Personal Data may be transferred to the acquiring entity as part of the transaction. Players will be notified of any such transfer and any change to the applicable Privacy Policy in advance.
mdg187 requires all third-party Data Processors to maintain data security standards consistent with this Privacy Policy and to process Personal Data only for the specific purpose for which it was disclosed. All Data Processor relationships are governed by written data processing agreements.
8 International Data Transfers
mdg187 is an internationally operated platform. As a result, your Personal Data may be transferred to and stored on servers located in countries outside Indonesia. These countries may have data protection laws that differ from those in Indonesia.
Where Personal Data is transferred internationally, mdg187 takes reasonable steps to ensure that an adequate level of protection is applied to that data. This includes implementing contractual safeguards with the receiving entity and, where applicable, applying recognized data transfer mechanisms.
By using the mdg187 Platform and accepting this Privacy Policy, you consent to the international transfer of your Personal Data as described in this clause.
9 Data Retention
mdg187 retains your Personal Data only for as long as is necessary for the purposes described in this Policy, and no longer than is required by applicable legal or regulatory obligations. The following general retention periods apply:
- Active Account data: Retained for the duration of your active Account with mdg187, plus a minimum of five years from the date of Account closure to satisfy AML record-keeping obligations.
- KYC documents: Retained for a minimum of five years from the date of verification or Account closure, whichever is later, in compliance with anti-money-laundering standards.
- Transaction records: Retained for a minimum of five years from the transaction date.
- Support communications: Retained for up to three years from the date of the last interaction, for dispute resolution and quality assurance purposes.
- Marketing data: Retained until you withdraw consent or opt out of marketing communications, at which point marketing-specific data is promptly deleted or suppressed.
- Technical and Usage Data: Aggregated or pseudonymised data may be retained indefinitely for platform analytics. Identifiable Technical Data is retained for up to 12 months from collection.
Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised so that it can no longer be attributed to any individual.
10 Security Measures
mdg187 implements a range of technical and organisational security measures to protect your Personal Data against unauthorised access, disclosure, alteration, or destruction:
- All data transmitted between your browser and the mdg187 Platform is encrypted using 256-bit TLS/SSL encryption.
- Personal Data at rest is stored in encrypted, access-controlled server environments. Access is restricted to authorised mdg187 personnel and Data Processors on a strict need-to-know basis.
- mdg187 conducts regular internal security reviews and vulnerability assessments of Platform infrastructure.
- All mdg187 employees and contractors who handle Personal Data are subject to confidentiality obligations and receive data protection training appropriate to their role.
- In the event of a data breach that is likely to result in a risk to your rights and freedoms, mdg187 will notify affected players without undue delay and will take immediate remediation steps.
While mdg187 takes data security seriously and implements industry-standard protections, no online platform can guarantee absolute security. You are responsible for maintaining the security of your Account login credentials and for notifying mdg187 support immediately if you suspect unauthorized access to your Account.
11 Cookies & Tracking Technologies
mdg187 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, and gather analytical data. The following types of cookies are in use:
- Strictly necessary cookies: Required for the Platform to function, including session management, authentication state, and security tokens. These cookies cannot be disabled without affecting Platform functionality.
- Functional cookies: Used to remember your preferences (e.g., language settings, game lobby filters, last visited game) to provide a more personalised experience. These are set for the duration of your session or for up to 12 months for persistent preferences.
- Analytical cookies: Used to collect aggregated data about how players navigate the Platform, which games are most played, and how long sessions last. This data is used solely to improve Platform performance and is not linked to your personal identity.
- Marketing cookies: Where you have consented, marketing cookies may be used to deliver relevant promotional content. You may withdraw this consent at any time via your browser settings or by contacting mdg187 support.
You can manage or disable non-essential cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the Platform, including the ability to maintain a logged-in session.
12 Your Data Rights
As a data subject, you have the following rights in relation to the Personal Data that mdg187 holds about you. To exercise any of these rights, contact mdg187 support via live chat or at [email protected] (plain text — not a mailto link).
Right of Access
You have the right to request a copy of the Personal Data mdg187 holds about you. mdg187 will provide this within 30 days of a verified request, in a structured and readable format.
Right to Rectification
If any Personal Data mdg187 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update most account details directly via the account settings page.
Right to Erasure
You may request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where processing is unlawful. Note that mdg187 may be required to retain certain data under legal or regulatory obligations (see Clause 9), which will take precedence over erasure requests.
Right to Restriction
You may request that mdg187 restrict the processing of your Personal Data in certain circumstances — for example, while the accuracy of your data is being contested, or while an objection to processing is being assessed.
Right to Data Portability
Where processing is based on your consent or on a contract, and is carried out by automated means, you have the right to receive your Personal Data in a structured, commonly used, machine-readable format, and to transmit that data to another data controller.
Right to Object
You may object to processing carried out on the basis of legitimate interests — including profiling for fraud prevention or marketing purposes. mdg187 will cease the relevant processing unless it can demonstrate compelling legitimate grounds that override your interests.
Right to Withdraw Consent
Where processing is based on your consent (e.g., marketing communications), you may withdraw consent at any time without affecting the lawfulness of processing carried out before the withdrawal. Use the unsubscribe link in any marketing email or contact support to opt out.
13 Protection of Minors
mdg187 does not knowingly collect Personal Data from individuals under the age of 21. The Platform is strictly for adults aged 21 and above. Age verification is a mandatory step in the KYC process, and mdg187 reserves the right to close any Account and return deposited funds where it is established that the Account holder is under 21.
If you have reason to believe that a minor has registered an Account on mdg187 or has provided Personal Data to the Platform, please contact support immediately at [email protected] (plain text). mdg187 will investigate and take prompt action, including deletion of the minor's Personal Data where required by applicable law.
Parents and guardians are encouraged to use device-level parental controls to prevent minors from accessing online gambling platforms. mdg187 supports a responsible approach to underage gambling prevention as part of its wider responsible gaming commitment.
14 Third-Party Links
The mdg187 Platform does not contain links to third-party websites beyond the game providers integrated within the casino lobby. Game interfaces delivered by third-party studios (Evolution Gaming, Pragmatic Play, PG Soft, Spribe, NetEnt, and others) are subject to those studios' own privacy policies in respect of data collected directly within their game environments.
mdg187 is not responsible for the privacy practices or data handling of any third-party game studio or payment provider. We recommend reviewing the privacy policies of any third-party service with which you interact through the Platform.
15 Changes to This Privacy Policy
mdg187 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or Platform operations. When material changes are made, mdg187 will notify active Players via the registered email address on file and/or by displaying a notice on the Platform at the time of the next login.
The date of the most recent revision is shown at the top of this page. We encourage you to review this Privacy Policy periodically to stay informed about how mdg187 handles your Personal Data. Continued use of the Platform following publication of a revised Policy constitutes your acceptance of the updated terms.