Privacy Policy

The following definitions apply throughout this Privacy Policy:

• "Platform" — the mdgwin website at https://mdgwin.cam and any associated mobile-optimized interfaces or application programming interfaces (APIs).
• "Personal Data" — any information that identifies or could reasonably be used to identify a natural person, either alone or in combination with other data. Examples include full name, email address, date of birth, national identity number, IP address, and device identifier.
• "Processing" — any operation or set of operations performed on Personal Data, including collection, recording, storage, alteration, retrieval, consultation, use, disclosure, transmission, erasure, or destruction.
• "Data Controller" — the entity that determines the purposes and means of processing Personal Data. For the purposes of this policy, the Data Controller is mdgwin.
• "Data Processor" — any third-party entity that processes Personal Data on behalf of mdgwin under a formal data processing agreement.
• "User" / "You" / "Player" — any natural person who accesses, browses, or holds a registered account on the Platform.
• "KYC" — Know Your Customer, the identity and age verification process required for account activation and withdrawal eligibility.
• "Cookies" — small text files stored on your device by a web browser at the instruction of the Platform to facilitate session continuity, preference retention, and analytics.

mdgwin acts as the Data Controller in respect of all Personal Data collected from users of the Platform. As Data Controller, mdgwin determines the categories of data collected, the purposes for which that data is used, the storage period applied, and the third parties with whom data may be shared.

mdgwin's primary customer base consists of Indonesian players, with the majority of users accessing the Platform from cities including Jakarta, Surabaya, Bandung, Medan, Bali, Yogyakarta, Semarang, and Makassar. Our data practices are designed to meet the expectations and applicable data protection principles relevant to this audience.

For all data protection inquiries, requests, or complaints, please contact us at the details provided in Section 15 of this policy.

mdgwin collects the following categories of Personal Data and non-personal technical data from users of the Platform:

mdgwin does not collect sensitive categories of data — such as racial or ethnic origin, political opinions, religious beliefs, health records (beyond responsible gaming disclosures made voluntarily by the player), or biometric data — unless you explicitly provide this information in a support communication.

mdgwin collects Personal Data through the following channels:

• Direct Provision: Information you actively provide when registering an account, completing KYC, submitting a support request, or updating your account profile.
• Automated Technical Collection: When you visit or interact with the Platform, our servers automatically receive certain technical data including your IP address, browser type, device identifier, and session logs. This data is collected via server logs, cookies, and pixel tags.
• Third-Party Payment Processors: When you make a deposit or withdrawal, our payment partners (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, OVO, DANA, GoPay, and others) share limited transaction confirmation data with us to credit your account or process your payout.
• KYC Verification Providers: We use specialized third-party KYC service providers to verify the authenticity of identity documents you submit. These providers return a verification result and may share metadata about document quality and fraud risk indicators.
• Game Providers: When you play games from studios such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Pocket Games Soft, those providers may share session logs and outcome data with mdgwin for account reconciliation and dispute resolution purposes.

mdgwin processes your Personal Data for the following purposes only:

1. Account Management: Creating, maintaining, and securing your player account, including login authentication and account recovery.
2. Identity Verification & Age Restriction Compliance: Verifying that you are at least 21 years of age and that the identity you provided is accurate and not fraudulent. This is a legal requirement under mdgwin's operating license and responsible gaming commitments.
3. Payment Processing: Facilitating deposits and withdrawals in Indonesian Rupiah (IDR / Rp) via local banks (BCA, BRI, BNI, Mandiri, and others) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja).
4. Game Provision: Delivering casino games, live dealer games, sports betting markets (including football, badminton, MotoGP, e-sports, and togel), and bonus offers.
5. Fraud Prevention & Anti-Money Laundering (AML): Detecting and preventing fraudulent transactions, bonus abuse, multi-accounting, match-fixing, money laundering, and other prohibited activities. This includes monitoring unusual betting patterns, deposit/withdrawal behavior, and IP address consistency.
6. Customer Support: Responding to your inquiries, resolving disputes, and providing 24/7 assistance in both English and Indonesian via live chat and email.
7. Responsible Gaming: Administering self-exclusion requests, enforcing deposit and loss limits you have set, and intervening proactively when we detect patterns of problem gambling behavior.
8. Marketing Communications: Sending you promotional offers, bonus announcements, and newsletters related to mdgwin services. You may opt out of marketing emails at any time by clicking the unsubscribe link in any promotional message or contacting support.
9. Legal Compliance & Regulatory Reporting: Complying with applicable laws, responding to lawful requests from regulatory authorities, courts, and law enforcement, and fulfilling our reporting obligations under our operating license.
10. Platform Improvement & Analytics: Analyzing aggregated and anonymized usage data to improve Platform performance, user experience, and service offerings.

mdgwin relies on the following legal bases to process your Personal Data:

• Contractual Necessity: Processing is necessary to perform the contract between you and mdgwin (the Terms & Conditions you agreed to when registering). This includes account creation, payment processing, game provision, and customer support.
• Legal Obligation: Processing is required to comply with applicable laws and regulations, including KYC and AML obligations imposed by our licensing jurisdiction.
• Legitimate Interest: Processing is necessary for mdgwin's legitimate business interests, including fraud prevention, security monitoring, responsible gaming interventions, and service improvement. These interests are balanced against your privacy rights and do not override your fundamental rights.
• Consent: Where required by law (for example, for marketing communications), we obtain your explicit opt-in consent before processing. You may withdraw consent at any time without affecting the lawfulness of processing based on consent before withdrawal.

mdgwin does not sell, rent, or lease your Personal Data to third parties for their own marketing purposes. We share your data only with the following categories of third parties, under strict contractual obligations to protect your information:

• Payment Service Providers: Banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, Bank Permata) and e-wallet operators (OVO, DANA, GoPay, ShopeePay, LinkAja) receive limited transaction data to process your deposits and withdrawals.
• KYC & Identity Verification Vendors: Specialized third-party services verify the authenticity of the identity documents you submit during KYC. These providers are contractually prohibited from using your data for any purpose other than verification on behalf of mdgwin.
• Game Providers: Studios including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Pocket Games Soft receive your player identifier and session data to deliver live dealer games, slots, and other content. They are contractually prohibited from sharing this data or using it for marketing.
• Cloud Infrastructure Providers: mdgwin uses industry-leading cloud hosting and database services to store your data securely. These providers have no access to the content of your data and act strictly as Data Processors under our instruction.
• Regulatory Authorities & Law Enforcement: We may disclose your Personal Data when required to do so by law, court order, or regulatory directive, or when necessary to protect the rights, property, or safety of mdgwin, our users, or the public.
• Professional Advisors: We may share data with legal counsel, auditors, accountants, and compliance consultants to the extent necessary for them to provide professional services to mdgwin.

mdgwin retains your Personal Data only for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

• Active Accounts: Personal Data associated with active accounts is retained for the duration of your account lifecycle and for a reasonable period following account closure to resolve outstanding disputes, process final withdrawals, and comply with legal obligations.
• Closed Accounts: Following voluntary account closure or termination, we retain identity, financial, and gaming data for a minimum of 5 years to satisfy regulatory record-keeping requirements under AML and gaming license obligations.
• KYC Documents: Copies of identity documents are retained for 7 years following account closure, in accordance with standard financial services record-keeping practices in our licensing jurisdiction.
• Marketing Communications: If you unsubscribe from marketing emails, we retain only the minimum data necessary (email address and opt-out status) to honor your preference indefinitely.
• Technical Logs: Server logs, session data, and anonymized analytics are retained for 24 months for security monitoring and service improvement, after which they are permanently deleted or fully anonymized.

After the applicable retention period expires, your Personal Data is securely and permanently deleted from our systems. Backups containing your data are overwritten on a rolling schedule and do not constitute active retention.

mdgwin employs industry-standard technical and organizational measures to protect your Personal Data from unauthorized access, loss, misuse, alteration, or disclosure:

• 256-bit SSL/TLS Encryption: All data transmitted between your browser and the mdgwin Platform is encrypted using Secure Socket Layer (SSL) or Transport Layer Security (TLS) protocols. This is the same encryption standard used by banks and financial institutions globally.
• Encrypted Storage: All Personal Data stored in mdgwin databases is encrypted at rest using AES-256 encryption. Financial data and KYC documents receive additional encryption layers.
• Access Controls: Access to Personal Data is restricted to mdgwin employees and contractors who require it to perform their job functions. All personnel with data access are bound by confidentiality obligations and receive regular data protection training.
• Regular Security Audits: mdgwin's infrastructure undergoes regular third-party security audits and penetration testing to identify and remediate vulnerabilities.
• Two-Factor Authentication: All mdgwin administrative accounts use mandatory two-factor authentication (2FA) to prevent unauthorized internal access.
• Incident Response Plan: mdgwin maintains a documented data breach response plan. In the event of a security incident affecting your Personal Data, we will notify affected users and relevant authorities within 72 hours as required by applicable law.

While we implement robust security measures, no method of electronic transmission or storage is completely secure. You are responsible for keeping your account credentials confidential and for notifying us immediately if you suspect unauthorized access to your account.

mdgwin uses cookies and similar tracking technologies to enhance your experience on the Platform. Cookies are small text files stored on your device that allow us to recognize you on return visits and remember your preferences.

Types of Cookies We Use:

• Essential Cookies: Required for the Platform to function properly. These include session cookies that keep you logged in, security cookies that protect against fraud, and load balancer cookies that distribute traffic efficiently. Essential cookies cannot be disabled without breaking core functionality.
• Functional Cookies: Remember your language preference, timezone (WIB by default for Indonesian users), currency selection (IDR / Rp), and other personalization settings.
• Analytics Cookies: Collect anonymized data about how visitors use the Platform, including most-viewed pages, session duration, navigation paths, and device types. This helps us improve the user experience. We use aggregated analytics only and do not track individual users for marketing purposes.
• Performance Cookies: Monitor Platform speed, identify bottlenecks, and measure the performance of specific features.

You can control or disable cookies through your browser settings. Note that disabling essential cookies will prevent you from using core features of the Platform, including account login and game play. Most browsers allow you to block third-party cookies while allowing first-party cookies from mdgwin.

You have the following rights with respect to your Personal Data held by mdgwin:

• Right of Access: You may request a copy of all Personal Data we hold about you. We will provide this in a structured, commonly used, and machine-readable format (typically PDF or CSV).
• Right to Rectification: If any Personal Data we hold about you is inaccurate or incomplete, you have the right to have it corrected. You can update most information directly through your account profile page.
• Right to Erasure (Right to Be Forgotten): You may request deletion of your Personal Data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected. Note that we may be legally required to retain certain data (such as KYC documents and transaction records) for regulatory compliance even after you request erasure.
• Right to Restriction of Processing: You may request that we temporarily suspend processing of your Personal Data in specific circumstances, such as when you contest the accuracy of the data or object to processing.
• Right to Data Portability: You have the right to receive your Personal Data in a portable format and to request that we transmit it directly to another service provider where technically feasible.
• Right to Object: You may object to processing of your Personal Data for direct marketing purposes at any time. We will cease such processing immediately upon receiving your objection. You may also object to processing based on legitimate interests in certain circumstances.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing conducted prior to withdrawal.
• Right to Lodge a Complaint: If you believe mdgwin has violated your data protection rights, you have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction.

To exercise any of these rights, please contact us at [email protected] with the subject line "Data Protection Request". We will respond within 30 days of receiving your request. For security purposes, we may require you to verify your identity before processing certain requests.

mdgwin strictly prohibits access by individuals under the age of 21. The Platform is intended exclusively for adults who meet the legal minimum age for gambling in their jurisdiction. We do not knowingly collect or process Personal Data from anyone under the age of 21.

If we become aware that a user is under 21 years of age, we will immediately suspend the account, freeze all funds pending investigation, void any wagers or winnings, and initiate return of deposited funds to the source account. We may also report the incident to relevant authorities where required by law.

If you are a parent or guardian and believe your child has provided Personal Data to mdgwin, please contact us immediately at [email protected] so we can take appropriate action.

mdgwin's primary infrastructure is hosted in secure data centers located outside Indonesia. As a result, your Personal Data may be transferred to, stored in, and processed in countries other than the Republic of Indonesia.

When we transfer Personal Data across borders, we ensure that adequate safeguards are in place to protect your data in accordance with this Privacy Policy and applicable data protection laws. These safeguards include:

• Transferring data only to jurisdictions recognized as providing adequate data protection standards.
• Entering into standard contractual clauses (SCCs) with third-party Data Processors that guarantee equivalent protection to that required under Indonesian and international data protection principles.
• Implementing additional technical measures such as encryption in transit and at rest.

By using the mdgwin Platform, you acknowledge and consent to the transfer of your Personal Data to countries outside Indonesia for the purposes described in this Privacy Policy.

mdgwin reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform functionality. When material changes are made, we will:

• Update the "Last Updated" date at the top of this page.
• Notify registered users via email to the address on file.
• Display a prominent notice on the Platform homepage and at login.

Your continued use of the Platform after the effective date of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the updated policy, you must stop using the Platform and may request account closure in accordance with our Terms & Conditions.

We recommend that you review this Privacy Policy periodically to stay informed of how we are protecting your data. Previous versions of this policy are available upon request.

For any questions, concerns, or requests regarding this Privacy Policy or the processing of your Personal Data, please contact the mdgwin Data Protection Team:

• Email: [email protected] (plain text — not a clickable link)
• Subject Line for Data Protection Requests: "Data Protection Request" or "Privacy Inquiry"
• Response Time: We aim to respond to all privacy-related inquiries within 30 days. Urgent account security matters are prioritized and typically receive a response within 24 hours (WIB, UTC+7).

When contacting us regarding your Personal Data, please include your registered email address and a clear description of your request to help us process it efficiently and securely.