Privacy Policy — mgd188

mgd188 operates the online gaming platform accessible at mgd188.app (the "Platform"). The Platform offers casino games, live dealer tables including baccarat and Live Dragon Tiger, a full sportsbook covering leagues such as BRI Liga 1, the EPL, and the Champions League, as well as a comprehensive slots lobby powered by studios including Pragmatic Play, Microgaming, and Pocket Games Soft.

As the operator of the Platform, mgd188 acts as the data controller for the personal information of Members and visitors. This Privacy Policy has been prepared in accordance with internationally recognized data protection principles and is intended to give you clear, transparent information about how your personal data is handled throughout your relationship with mgd188.

This Policy applies to all individuals who: (a) visit the mgd188 website, regardless of whether they create an account; (b) register a member account on the Platform; (c) deposit funds, place wagers, or claim bonuses; or (d) contact mgd188 customer support by any channel.

In this Privacy Policy, the following terms carry the meanings assigned to them below:

• "Personal Data" means any information that identifies or could reasonably be used to identify a natural person, including name, national identity number, email address, IP address, device identifiers, and financial account details.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, and deletion.
• "Member" means any individual who has completed registration and holds an active or suspended account on the mgd188 Platform.
• "Visitor" means any individual who accesses mgd188.app without having completed account registration.
• "Third-Party Service Provider" means any external company or individual engaged by mgd188 to perform services that require access to Personal Data, including payment processors, game studios, KYC verification partners, and cloud infrastructure providers.
• "Cookies" means small text files placed on your device by the mgd188 Platform to support session management, preferences storage, and aggregate usage analytics.

mgd188 collects the following categories of Personal Data from Members and, to a limited extent, from Visitors:

mgd188 does not intentionally collect any special categories of sensitive Personal Data (such as racial or ethnic origin, religious beliefs, health data, or political opinions). If any such data is incidentally disclosed during a support interaction, it will not be recorded, processed, or retained beyond the resolution of that interaction.

mgd188 collects Personal Data through the following channels and mechanisms:

• Direct submission: When you complete the member registration form, submit KYC identity documents, make a deposit or withdrawal request, contact our support team via live chat or email, or respond to a promotional survey, you provide Personal Data directly to mgd188.
• Automated collection: When you visit mgd188.app or use the Platform, our servers automatically record Technical Data including your IP address, device identifiers, browser information, and session activity logs. This collection occurs whether or not you are logged into an account.
• Cookies and similar technologies: The Platform places cookies on your device to maintain your login session, remember your language preferences, and generate aggregate analytics about how the Platform is used. Full details are provided in Clause 9 (Cookies & Tracking).
• Third-party verification partners: Where mgd188 uses a third-party KYC verification service to confirm your identity and age, that provider may return identity verification results and risk scores to mgd188 as part of the verification workflow. mgd188 receives only the outcome and necessary reference data — not the provider's internal processing records.
• Payment processors: When a deposit or withdrawal is processed via a local Indonesian bank (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata) or an e-wallet (OVO, DANA, GoPay, ShopeePay, LinkAja), the payment processor confirms transaction completion to mgd188 and provides a transaction reference. mgd188 does not receive or store your full bank account password or full card number.

mgd188 processes your Personal Data only where there is a lawful basis for doing so. The following table sets out the primary purposes for which we process Personal Data and the corresponding legal basis for each:

mgd188 does not sell, rent, or trade your Personal Data to any third party for their own marketing purposes. We share your Personal Data only in the following limited circumstances:

• Third-Party Service Providers: mgd188 engages carefully selected Third-Party Service Providers to support the operation of the Platform, including: KYC and identity verification services; payment processing partners (Indonesian local banks and e-wallet operators); cloud hosting and data storage providers; game content providers (Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, Pocket Games Soft, Asia Gaming, SA Gaming); and fraud detection and anti-money-laundering compliance services. Each provider is contractually bound to process your Personal Data only for the specified purpose, to maintain appropriate security standards, and not to use your data for their own unrelated purposes.
• Legal and Regulatory Obligations: mgd188 may disclose Personal Data to government authorities, law enforcement agencies, financial regulators, or courts where required to do so by applicable law, a valid court order, or a lawful request from a competent authority. Where legally permitted, mgd188 will notify you of such a request.
• Business Transfers: In the event of a merger, acquisition, sale of business assets, or corporate restructuring involving mgd188, your Personal Data may be transferred to the successor entity as part of that transaction. You will be notified via a prominent notice on the Platform if such a transfer occurs, and your rights in relation to your Personal Data will not be diminished.
• Fraud Prevention and Cross-Platform Self-Exclusion: Where you have requested self-exclusion from the mgd188 Platform and mgd188 participates in a cross-platform responsible gaming network, limited identity data (typically a hashed identifier) may be shared with that network to give effect to your exclusion request across participating operators.

mgd188 operates internationally and some of the Third-Party Service Providers engaged by mgd188 — including cloud infrastructure providers and game studio partners — may process Personal Data on servers located outside Indonesia. Where such international transfers occur, mgd188 takes the following steps to ensure your data remains protected:

• Transfers are made only to countries or organizations that provide an adequate level of data protection, or where appropriate contractual safeguards (such as standard data protection clauses) have been implemented between mgd188 and the receiving party.
• All game providers who may receive limited session data (such as a tokenized player identifier and bet amounts) are contractually prohibited from linking that data to your real-world identity or using it for purposes beyond game delivery and fairness verification.
• Payment data processed by Indonesian bank partners (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) remains within Indonesian financial infrastructure, subject to those providers' own regulatory obligations under Indonesian law.

mgd188 retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The following retention standards apply:

• Active account data: Personal Data associated with an active member account is retained for the duration of the membership and for a period of five (5) years following permanent account closure, to satisfy anti-money-laundering record-keeping obligations.
• KYC identity documents: Copies of identity documents submitted during KYC verification are retained for a minimum of five (5) years from the date of submission or from the date of account closure, whichever is later.
• Transaction records: Deposit, withdrawal, and wagering transaction records are retained for a minimum of five (5) years to support financial reporting and regulatory compliance obligations.
• Support communications: Live chat transcripts and email correspondence are retained for a period of two (2) years from the date of the interaction to support quality assurance, dispute resolution, and fraud investigation.
• Visitor Technical Data: IP address logs and session data collected from non-registered Visitors are retained for a maximum of twelve (12) months and then deleted or anonymized.
• Marketing consent records: Records of your consent to receive marketing communications, and any subsequent withdrawal of that consent, are retained for the duration of your membership and five (5) years thereafter.

Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymized. Anonymized aggregate data (from which no individual can be identified) may be retained indefinitely for statistical and platform improvement purposes.

mgd188 uses cookies and similar client-side technologies on the Platform. The cookies deployed by mgd188 fall into the following categories:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function. They maintain your authenticated login session, remember your active game state, and ensure that the Platform responds correctly to your device. These cookies cannot be disabled without rendering the Platform non-functional.
• Functional Cookies: These cookies remember your preferences, such as your selected language and display settings, so that you do not need to re-enter them on each visit. They are set only upon your first login and expire at the end of your browser session or after 30 days of inactivity, whichever is sooner.
• Analytics Cookies: mgd188 uses first-party analytics tools that generate aggregated, anonymized reports about how different sections of the Platform are used — for example, which game categories are most frequently visited, which deposit methods are most commonly selected, and how long Members typically spend in a session. These analytics are used exclusively to improve the Platform and are not linked to your individual profile.

Most web browsers allow you to control cookies through the browser settings. Blocking strictly necessary cookies will prevent you from logging in to your mgd188 account. Blocking functional or analytics cookies will not affect your ability to use the Platform's core features but may result in your preferences not being remembered between sessions.

As a Member or Visitor whose Personal Data is processed by mgd188, you hold the following rights in relation to that data. To exercise any of these rights, contact our support team via live chat or at [email protected]. mgd188 will respond to a verifiable request within thirty (30) days:

mgd188 implements a comprehensive set of technical and organizational security measures to protect your Personal Data against unauthorized access, accidental loss, destruction, or disclosure:

• Transport Encryption: All data transmitted between your device and mgd188.app is encrypted using TLS 1.2 or higher (256-bit SSL). This protects your login credentials, financial data, and gaming activity from interception in transit.
• Data-at-Rest Encryption: Sensitive Personal Data stored on mgd188 servers — including KYC documents, financial records, and hashed passwords — is encrypted at rest using industry-standard encryption protocols.
• Access Controls: Access to Member Personal Data within mgd188's internal systems is restricted to staff who require that access to perform their defined job functions. Access rights are reviewed periodically and revoked immediately upon change of role or employment termination.
• Password Security: Member account passwords are stored as salted, one-way cryptographic hashes. mgd188 staff cannot retrieve your plaintext password and will never ask you to share it.
• Fraud and Intrusion Monitoring: mgd188 operates continuous monitoring of platform activity to detect and respond to anomalous access patterns, account takeover attempts, and potentially fraudulent transactions.
• Incident Response: In the event of a data security incident that poses a risk to your rights and freedoms, mgd188 will notify affected Members promptly and take immediate remediation action.

While mgd188 takes all reasonable precautions to protect your Personal Data, no system connected to the internet can be guaranteed to be entirely immune from security threats. You are responsible for maintaining the security of your account credentials on your own devices.

The mgd188 Platform is strictly intended for adults aged 21 years or older. mgd188 does not knowingly collect, store, or process Personal Data belonging to individuals under the age of 21.

During the registration process, all prospective Members are required to confirm that they are at least 21 years of age. mgd188 conducts KYC age verification checks and will suspend any account where there is a reasonable suspicion that the account holder may be under 21, pending submission of satisfactory identity documentation.

If mgd188 becomes aware that Personal Data has been collected from an individual who is under 21 years of age without the knowledge or consent of a parent or guardian, that data will be deleted without undue delay and the associated account will be permanently closed.

The mgd188 Platform may contain links to websites or services operated by third parties — for example, links to the websites of game providers or payment partners. These third-party websites operate under their own privacy policies, which are entirely independent of this Privacy Policy.

mgd188 does not control, endorse, or assume responsibility for the privacy practices of any third-party website. When you leave the mgd188 Platform by following a third-party link, we encourage you to review the privacy policy of the destination website before providing any Personal Data to that site.

mgd188 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, our data processing practices, or the services we offer. When a material change is made to this Policy, mgd188 will:

• Update the "Last updated" date at the top of this page to reflect the date of revision.
• Post a notice on the mgd188 Platform informing Members that the Privacy Policy has been updated, where practicable.
• Where the change materially affects how we process Personal Data that is already held, seek fresh consent from affected Members where consent is the applicable legal basis.

Your continued use of the mgd188 Platform following publication of an amended Privacy Policy constitutes your acceptance of the revised terms. It is your responsibility to review this Privacy Policy periodically. If you do not agree with any amendment, you should stop using the Platform and contact our support team to arrange closure of your account and deletion of your data.

If you have any questions about this Privacy Policy, wish to exercise your data protection rights, or want to report a concern regarding the handling of your Personal Data, please contact the mgd188 data protection team through any of the following channels:

• Live Chat: Available 24/7 directly through the mgd188 Platform. Identify your inquiry as a "Privacy" or "Data Rights" request for prioritized routing.
• Email: [email protected] (plain text — not a clickable link). Please include "Privacy Policy Request" in your subject line. Responses within 24 hours.
• WhatsApp: +62 811 0188 188 (plain text — not a clickable link). Available 24/7 with Indonesian-speaking support agents.

All data rights requests will be acknowledged within 72 hours and resolved within 30 days, in accordance with applicable data protection standards. For requests involving deletion or portability of large data sets, mgd188 may extend this period by a further 30 days where technically necessary, with prior notice to you.