Privacy Policy

1. Introduction and Scope

md888 ("we", "us", "our", "the Company") is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, store, share, and protect personal data when you use our website located at https://md888.cam and associated services including online casino games, sports betting, togel (Indonesian traditional numbers lottery), sabung ayam (online cockfighting), and all other gaming products (collectively, "the Services").

This Privacy Policy applies to all users of md888 Services, including visitors to our website, registered players with active accounts, and individuals who have voluntarily self-excluded. By accessing our website, creating an account, or using any md888 Services, you acknowledge that you have read, understood, and consent to the data practices described in this Privacy Policy. If you do not agree with any aspect of our privacy practices, you must immediately discontinue use of all md888 Services.

md888 operates under international data protection principles and implements technical and organizational measures consistent with global privacy standards including GDPR (General Data Protection Regulation) principles, even though we are not directly subject to EU jurisdiction. We recognize that Indonesian players value privacy and expect their personal information to be handled with the same care and security standards as their banks employ for financial data.

2. Information We Collect

2.1 Personal Information You Provide

When you register an account with md888, we collect the following personal information directly from you:

• Identity Information: Full legal name (as shown on your Indonesian National ID/KTP), date of birth, gender, nationality (Indonesian citizenship required for compliance)
• Contact Information: Email address, Indonesian mobile phone number (required for SMS verification), residential address including province and city
• Account Credentials: Username, password (stored in encrypted form—we cannot view your actual password)
• Financial Information: Indonesian bank account details (bank name, account number, account holder name) for deposits and withdrawals—we do not store CVV numbers or full card details
• Verification Documents: Photographs of your Indonesian National ID (KTP), selfie verification photo holding your ID, proof of address documents if requested (utility bills, bank statements)
• Communication Records: Contents of your emails, live chat conversations, and phone calls with customer support (recorded for quality assurance and dispute resolution)

2.2 Information Automatically Collected

When you access md888 Services, we automatically collect certain technical and behavioral information:

• Device Information: IP address, device type (mobile/desktop/tablet), operating system (Windows, MacOS, Android, iOS), browser type and version, screen resolution
• Usage Data: Pages visited, time spent on each page, click patterns, games played, bets placed (amount, type, outcome), deposit and withdrawal history, login timestamps
• Location Data: Approximate geographic location based on IP address to verify Indonesian residency and comply with geographic restrictions
• Cookies and Tracking: Session cookies to maintain login state, preference cookies to remember language and display settings, analytics cookies to measure site performance (see Section 8 for detailed cookie information)

2.3 Information From Third Parties

md888 may receive limited information from third-party service providers:

• Payment Processors: Transaction confirmations, payment success/failure status from Indonesian bank transfer gateways (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon)
• Fraud Prevention Services: Risk scores and fraud indicators from specialized security vendors to protect against identity theft and account takeover
• Game Providers: Game session data, RTP (Return to Player) statistics, and jackpot information from third-party game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming)

3. How We Use Your Information

md888 uses your personal information for the following specific purposes:

3.1 Service Provision and Account Management

• Create and maintain your md888 account
• Process your deposits, withdrawals, and all financial transactions
• Provide access to casino games, sports betting markets, togel draws, and sabung ayam streaming
• Authenticate your identity through KYC (Know Your Customer) verification
• Calculate and credit bonuses, cashback, and promotional rewards
• Maintain accurate betting and transaction history records
• Send service-related communications (transaction confirmations, withdrawal notifications, account alerts)

3.2 Security and Fraud Prevention

• Verify you are at least 21 years of age and legally eligible to gamble
• Detect and prevent fraudulent account creation, collusion, bonus abuse, and money laundering
• Monitor for suspicious betting patterns that may indicate match-fixing or insider trading
• Protect against unauthorized account access, identity theft, and payment fraud
• Comply with anti-money laundering (AML) regulations and report suspicious transactions as required by law
• Enforce our Terms and Conditions and investigate Terms violations

3.3 Customer Support and Dispute Resolution

• Respond to your inquiries, questions, and technical support requests via live chat, email, and phone
• Investigate and resolve payment disputes, bet settlement queries, and account issues
• Maintain records of support interactions for quality assurance and training purposes

3.4 Marketing and Communications (With Your Consent)

• Send promotional emails about new games, special offers, and exclusive bonuses (you may opt out at any time)
• Display personalized game recommendations based on your play history
• Send SMS notifications about time-sensitive promotions (requires explicit opt-in)
• Conduct satisfaction surveys and request feedback on our Services

3.5 Analytics and Service Improvement

• Analyze website traffic patterns and user behavior to optimize site performance
• Test new features and game offerings to improve user experience
• Identify and fix technical bugs, server errors, and compatibility issues
• Generate aggregate statistics (total players, daily payouts, popular games) for business planning—these statistics never identify individual users

3.6 Legal and Regulatory Compliance

• Comply with our licensing jurisdiction's regulatory requirements
• Respond to lawful requests from government authorities, law enforcement, or courts
• Maintain records required by gaming regulations and financial reporting standards
• Enforce responsible gaming policies including self-exclusion, deposit limits, and underage gambling prevention

4. How We Protect Your Information

md888 implements comprehensive technical, organizational, and administrative security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction:

4.1 Encryption and Technical Safeguards

• 256-bit SSL/TLS Encryption: All data transmitted between your device and our servers is encrypted using bank-grade SSL (Secure Sockets Layer) technology—the same standard used by BCA, BRI, BNI, and Mandiri for online banking
• Password Hashing: Your password is never stored in plain text. We use industry-standard bcrypt hashing with salt, making it computationally infeasible to reverse-engineer your password even if our database were compromised
• Secure Data Storage: Personal information is stored on encrypted servers located in secure data centers with 24/7 physical security, biometric access controls, and redundant power and network infrastructure
• Database Segregation: Sensitive data (KYC documents, financial information) is stored separately from general account data with restricted access privileges
• Regular Security Audits: We conduct quarterly penetration testing and vulnerability assessments by independent security firms to identify and remediate potential weaknesses

4.2 Access Controls and Authentication

• Two-Factor Authentication: All withdrawal requests require SMS verification code sent to your registered Indonesian mobile phone number
• Role-Based Access: Only authorized md888 employees with legitimate business needs can access personal data, and all access is logged and audited
• Employee Background Checks: Staff with data access undergo background verification and sign strict confidentiality agreements
• Session Management: Automatic logout after 30 minutes of inactivity; you must re-authenticate to access account features

4.3 Monitoring and Incident Response

• 24/7 Security Monitoring: Automated systems detect and alert on suspicious login attempts, unusual transaction patterns, and potential security breaches
• DDoS Protection: Enterprise-grade DDoS mitigation protects against distributed denial-of-service attacks
• Data Breach Protocol: In the unlikely event of a data breach affecting your personal information, we will notify affected users within 72 hours via email and prominently display a notice on our website, as required by international best practices

5. When We Share Your Information

md888 does not sell your personal data. We share your information only in the following limited circumstances:

5.1 Service Providers and Business Partners

We share limited data with trusted third-party service providers who perform services on our behalf:

• Payment Processors: Indonesian bank transfer gateway providers receive your bank account details solely to process deposits and withdrawals
• Game Providers: Studios like Pragmatic Play and Evolution Gaming receive your username and session token to deliver game content—they do not receive your full name, ID documents, or financial information
• Customer Support Tools: Live chat and ticketing platforms store conversation history to maintain support continuity
• Analytics Providers: Aggregate, anonymized usage data is shared with analytics platforms (e.g., Google Analytics) to measure site performance—this data cannot identify individual users

All service providers are contractually obligated to maintain data confidentiality, use data only for specified purposes, and implement appropriate security measures.

5.2 Legal Obligations and Law Enforcement

We may disclose personal information if required by law or in good faith belief that disclosure is necessary to:

• Comply with lawful court orders, subpoenas, or legal processes
• Respond to requests from government authorities, regulators, or law enforcement agencies
• Report suspicious transactions to anti-money laundering (AML) authorities as required by financial regulations
• Enforce our Terms and Conditions and protect md888's legal rights
• Protect the safety, rights, or property of md888, our users, or the public

5.3 Business Transfers

If md888 undergoes a merger, acquisition, bankruptcy, or sale of assets, your personal information may be transferred to the acquiring entity. We will notify affected users via email at least 30 days before any transfer and provide options for account closure if you do not consent to the transfer.

5.4 With Your Explicit Consent

In any circumstance not covered above, we will obtain your explicit consent before sharing your personal information with third parties. You have the right to refuse consent or withdraw previously granted consent at any time.

6. Data Retention and Deletion

6.1 Retention Periods

md888 retains your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy and to comply with legal obligations:

Data Type	Retention Period	Reason
Account Information (Name, Email, Phone)	Duration of account + 7 years	Legal requirement for financial record-keeping and potential dispute resolution
KYC Documents (ID, Selfie, Address Proof)	Duration of account + 7 years	Anti-money laundering (AML) regulations require retention for audit purposes
Transaction History (Deposits, Withdrawals, Bets)	Duration of account + 7 years	Financial auditing, tax compliance, and regulatory reporting requirements
Customer Support Communications	3 years	Quality assurance, training, and potential dispute evidence
Marketing Consent Records	Until consent is withdrawn + 1 year	Proof of consent for regulatory compliance
Website Access Logs (IP Address, Device Info)	90 days	Security monitoring and fraud detection

6.2 Right to Deletion

You have the right to request deletion of your personal data under certain circumstances. However, we may refuse deletion requests if retention is required for:

• Compliance with legal obligations (financial record-keeping laws require 7-year retention)
• Resolution of ongoing disputes or legal claims
• Detection and prevention of fraud or Terms violations
• Exercise of free speech or other legal rights

To request account closure and data deletion (subject to legal retention requirements), email [email protected] with the subject line "Data Deletion Request" from your registered email address. We will confirm receipt within 72 hours and complete the deletion within 30 days, after verifying your identity and withdrawing any remaining account balance.

7. Your Privacy Rights

As an md888 user, you have the following rights regarding your personal information:

7.1 Right to Access

You have the right to access your personal data held by md888. You can view your account information, transaction history, and KYC documents at any time by logging into your account. For a comprehensive data export, email [email protected] with the subject line "Data Access Request." We will provide a machine-readable copy of your data within 30 days.

7.2 Right to Rectification

You have the right to correct inaccurate or incomplete personal information. You can update your email address, phone number, and residential address directly through your account settings. For name changes or corrections requiring new KYC verification, contact customer support with supporting documentation.

7.3 Right to Opt-Out of Marketing

You have the right to opt out of marketing communications at any time. Click the "Unsubscribe" link at the bottom of any promotional email, or adjust your communication preferences in account settings. You will continue to receive essential service-related emails (transaction confirmations, security alerts) even after opting out of marketing.

7.4 Right to Restrict Processing

You have the right to request restriction of data processing under certain circumstances, such as while we investigate a complaint you've raised about data accuracy. Contact [email protected] to exercise this right.

7.5 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, machine-readable format (CSV or JSON) and transmit it to another service provider without hindrance from md888.

7.6 Right to Object

You have the right to object to data processing based on legitimate interests or for direct marketing purposes. Note that objecting to essential processing (e.g., KYC verification, fraud monitoring) may prevent us from providing Services to you.

To exercise any of these rights, email [email protected] with your request. We will respond within 30 days and verify your identity before processing requests involving sensitive data access, modification, or deletion.

8. Cookies and Tracking Technologies

8.1 What Are Cookies

Cookies are small text files placed on your device by websites you visit. They enable websites to recognize your device, remember your preferences, and provide personalized experiences. md888 uses cookies and similar tracking technologies (web beacons, pixels, local storage) to improve our Services.

8.2 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for website functionality—maintain your login session, remember your selected language, and enable secure account access. These cannot be disabled as the site would not function properly without them.
• Performance Cookies: Collect anonymous information about how visitors use our site (most visited pages, error messages, load times) to help us improve performance. These do not identify individual users.
• Functional Cookies: Remember your preferences (display settings, favorite games, collapsed/expanded sections) to provide enhanced, personalized features.
• Targeting/Advertising Cookies: Track your browsing activity to display relevant game recommendations and promotional offers. You can disable these through your account privacy settings.

8.3 Managing Cookies

You can control cookies through your browser settings. Most browsers allow you to refuse cookies or delete existing cookies. Note that disabling strictly necessary cookies may impair site functionality (e.g., you may be logged out repeatedly). For instructions on managing cookies in popular browsers:

• Google Chrome: Settings → Privacy and security → Cookies and other site data
• Mozilla Firefox: Options → Privacy & Security → Cookies and Site Data
• Safari (iOS/MacOS): Preferences → Privacy → Manage Website Data
• Microsoft Edge: Settings → Cookies and site permissions

9. Children's Privacy

md888 Services are intended exclusively for adults aged 21 and above. We do not knowingly collect, store, or process personal information from individuals under 21 years of age. Our KYC verification process is designed to prevent underage account creation.

If we discover that we have inadvertently collected personal information from a person under 21, we will immediately delete that information, close the account, forfeit any funds, and take steps to prevent future access. If you believe a minor has accessed md888 or provided us with personal information, please contact [email protected] immediately so we can investigate and take appropriate action.

Parents and guardians are encouraged to monitor their children's internet usage and discuss the risks of underage gambling. We recommend using parental control software to block access to gambling websites.

10. International Data Transfers

md888 operates internationally and may transfer your personal information to servers located outside Indonesia. When we transfer data internationally, we implement appropriate safeguards to ensure your data receives equivalent protection:

• Encryption in Transit: All cross-border data transfers use encrypted channels (TLS/SSL)
• Data Processing Agreements: Third-party service providers in other countries sign contracts requiring them to maintain data security standards equivalent to those described in this Privacy Policy
• Standard Contractual Clauses: Where applicable, we use standard contractual clauses approved by data protection authorities to govern international transfers

By using md888 Services, you acknowledge and consent to the transfer of your personal information to servers and third-party providers located outside Indonesia for the purposes described in this Privacy Policy.

11. Changes to This Privacy Policy

md888 reserves the right to modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes (those that significantly affect your rights or how we use your data), we will:

• Notify you via email sent to your registered address at least 30 days before changes take effect
• Display a prominent notice on our website homepage and login page
• Update the "Last Updated" date at the top of this Privacy Policy
• Provide a summary of key changes in the notification

Your continued use of md888 Services after the effective date of Privacy Policy changes constitutes acceptance of those changes. If you do not agree with updated terms, you must close your account before the effective date. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

12. Contact Us About Privacy

If you have questions, concerns, or complaints about this Privacy Policy or our data practices, we want to hear from you. Contact our Data Protection team:

Email: [email protected] (Subject: Privacy Inquiry)
Customer Support: 24/7 live chat available after login
Response Time: We will respond to privacy inquiries within 72 hours

For other policy information, visit our Terms & Conditions and Responsible Gaming pages. For general account questions, see our FAQ.

Our Privacy Principles in Action