Data Protection
At mdg89, protecting your personal data is not an afterthought — it is a core operating principle. This Privacy Policy explains precisely what information we collect, why we collect it, how we safeguard it, and what rights you hold as a Member of Indonesia's trusted online betting platform.
Identity, contact & transaction data
Account services, fraud prevention & support
Only regulated, necessary partners
SSL encryption & access controls
Access, correct, delete & object
Reach us at [email protected]
In this Privacy Policy, the following terms carry the meanings set out below unless the context requires otherwise:
| Term | Meaning |
|---|---|
| "Platform" | The mdg89 website at mdg89.bet and all associated services, mobile interfaces, applications, and content operated by mdg89. |
| "Personal Data" | Any information relating to an identified or identifiable natural person ("data subject"), including name, email address, phone number, IP address, payment details, and betting history. |
| "Processing" | Any operation performed on Personal Data, including collection, recording, storage, use, disclosure, transfer, or deletion. |
| "Controller" | mdg89 — the entity that determines the purposes and means of processing Personal Data collected through the Platform. |
| "Processor" | A third-party service provider that processes Personal Data on behalf of mdg89 under a data processing agreement, such as KYC verification providers, payment processors, and game studios. |
| "Member" / "You" | Any natural person who registers an Account on the Platform or accesses mdg89 services. |
| "Cookies" | Small text files placed on your device by the Platform to enable functionality, remember preferences, and collect anonymised usage statistics. |
mdg89 collects only the data that is necessary to provide you with a safe, reliable, and personalised betting experience. The categories of Personal Data we collect include:
Full legal name, date of birth, nationality, and a copy of your government-issued photo identification (Indonesian National Identity Card / KTP, passport, or driver's licence / SIM). This data is collected during the KYC verification process and is required before withdrawal privileges are activated on your Account.
Email address, Indonesian mobile phone number, and residential address. Contact data is used to communicate account confirmations, deposit and withdrawal notifications, promotional offers (where you have opted in), and important service updates.
Bank account details for the Indonesian banking channels you use to transact with mdg89 — including BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI (Bank Syariah Indonesia), and Bank Permata — as well as e-wallet identifiers for OVO, DANA, GoPay, ShopeePay, and LinkAja. We do not store full bank account numbers on our servers; tokenised references are retained solely to validate that withdrawals are returned to the same payment method used for deposits.
A complete record of all deposits, withdrawals, wagers, game sessions, bonus activations, and promotional participation associated with your Account. Transaction data is retained for regulatory compliance, dispute resolution, and responsible gaming monitoring purposes.
IP address, device type, browser type and version, operating system, screen resolution, referring URL, session timestamps, and geolocation data (country and city level only). Technical data is used to detect fraudulent activity, enforce geographic access restrictions, and optimise the Platform's performance across devices commonly used in Indonesia.
Pages visited, features accessed, game titles launched, time spent per session, clicks, and navigation paths within the Platform. Usage data is processed in aggregated or pseudonymised form to improve the user experience and inform product development decisions.
The content of messages exchanged with mdg89 customer support through live chat, email, or any other contact channel. Communications data is retained for quality assurance, staff training, and as an evidence record in the event of a dispute.
mdg89 collects Personal Data through the following means:
mdg89 uses your Personal Data for the following purposes:
| Purpose | Data Categories Used |
|---|---|
| Account registration & management | Identity, Contact |
| KYC identity verification | Identity, Financial |
| Processing deposits & withdrawals | Financial, Transaction |
| Fraud detection & AML compliance | Identity, Financial, Technical, Transaction |
| Customer support & dispute resolution | Identity, Communications, Transaction |
| Responsible gaming monitoring | Transaction, Usage |
| Platform security & abuse prevention | Technical, Usage |
| Promotional communications (opt-in) | Contact, Transaction |
| Platform performance & analytics | Usage, Technical (aggregated) |
| Legal & regulatory obligations | All categories as required |
mdg89 does not use your Personal Data to make fully automated decisions that produce significant legal effects without human review. Where automated tools are used in fraud detection or responsible gaming monitoring, a qualified member of our compliance team reviews any flag before a material account action is taken.
mdg89 relies on the following legal bases when processing your Personal Data:
mdg89 does not sell, rent, or trade your Personal Data to third parties for their own marketing purposes under any circumstances. We share Personal Data with third parties only in the following limited, controlled circumstances:
We engage regulated third-party processors who handle data strictly on our instructions under binding data processing agreements. These include: KYC and identity verification providers; payment gateway operators connecting to BCA, BRI, BNI, Mandiri, and Indonesian e-wallet networks; fraud analytics platforms; cloud hosting and content delivery providers; and customer support tooling vendors. All processors are contractually required to implement security standards equivalent to those mdg89 applies internally.
When you launch a game hosted by a third-party studio — such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Pocket Games Soft — your Member ID and session token are transmitted to that studio's servers to initialise and validate the game session. Studios receive no more data than is strictly necessary to deliver the game and record the outcome. All studio partners are required to hold valid international gaming certifications.
mdg89 will disclose Personal Data to competent regulatory, tax, or law enforcement authorities where required to do so by applicable law, court order, or binding regulatory direction. Where legally permissible, we will notify the affected Member of any such disclosure request before complying.
In the event of a merger, acquisition, or sale of all or a material portion of mdg89's assets, Personal Data held by mdg89 may be transferred to the acquiring entity as part of the transaction. Members will be notified of any such transfer and any material change to the privacy terms that results from it, with a minimum of 30 days' prior notice.
mdg89 operates infrastructure hosted across multiple jurisdictions to ensure platform resilience and low-latency access for Members across Indonesia, including Jakarta, Surabaya, Bandung, Medan, Bali, Semarang, and Makassar. As a result, your Personal Data may be transferred to and processed in countries outside Indonesia.
Where such international transfers occur, mdg89 ensures that adequate safeguards are in place — including standard contractual clauses, binding corporate rules, or reliance on adequacy determinations issued by the relevant regulatory authority — so that your data receives a level of protection equivalent to that applied within Indonesia's personal data protection framework.
Game session data transmitted to studio servers (see Section 6.2) may be processed in the studio's primary server jurisdiction. All studios engaged by mdg89 are required to maintain data processing agreements that include international transfer safeguards.
mdg89 retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention schedule applies:
| Data Category | Retention Period | Basis |
|---|---|---|
| Identity & KYC documents | 5 years from account closure | AML / regulatory obligation |
| Transaction records | 5 years from transaction date | AML / regulatory obligation |
| Contact data | Duration of account + 2 years | Contractual / legitimate interests |
| Technical & usage logs | 13 months from collection | Legitimate interests (security) |
| Support communications | 3 years from last interaction | Legitimate interests (disputes) |
| Marketing consent records | 3 years from consent withdrawal | Legal obligation (consent proof) |
At the end of the applicable retention period, Personal Data is securely deleted or anonymised in a manner that prevents reconstruction of the original data subject's identity.
mdg89 applies industry-standard technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes:
The mdg89 Platform uses cookies and similar tracking technologies to ensure the Platform functions correctly, to remember your preferences, and to collect anonymised analytics that help us improve the user experience for Members across Indonesia.
You can control non-essential cookies through your browser settings. Most modern browsers allow you to view, block, or delete cookies at any time. Please note that disabling strictly necessary or security cookies will impair your ability to log in and use the Platform. For detailed guidance on managing cookies in your specific browser, refer to the browser's official support documentation.
mdg89 does not use third-party advertising cookies or cross-site tracking technologies to build advertising profiles or serve targeted ads on external platforms.
As a data subject, you hold the following rights in relation to the Personal Data mdg89 holds about you. To exercise any of these rights, contact our support team via live chat or email at [email protected]. We will respond to all verified requests within 30 days.
The mdg89 Platform is strictly intended for adults aged 21 years or older. mdg89 does not knowingly collect Personal Data from any person under the age of 21. The 21+ age requirement reflects both our licensing obligations and our commitment to responsible gaming.
If mdg89 becomes aware that Personal Data has been collected from a person under the age of 21 — whether through registration fraud, a misrepresented date of birth, or any other circumstance — that Account will be closed immediately, all associated Personal Data will be deleted as soon as reasonably practicable (subject to any legal retention requirements relating to fraud), and any balance will be handled in accordance with applicable law.
If you are a parent or guardian and believe that a minor in your care has registered on the mdg89 Platform, please contact us immediately via live chat or at the email address in Section 15. We take underage gambling extremely seriously and will act promptly on any verified report.
mdg89 may send you promotional communications — including bonus offers, seasonal promotions tied to events such as Idul Fitri, Ramadhan, or major Indonesian sporting events, and platform news — where you have explicitly opted in to receive such communications during registration or via your Account settings.
You may unsubscribe from marketing emails at any time by clicking the "Unsubscribe" link included in every promotional email, or by updating your communication preferences in your Account settings. Opt-out requests are processed within five business days. Opting out of marketing communications does not affect transactional notifications — such as deposit confirmations, withdrawal updates, and account security alerts — which are sent as a necessary part of the Account service.
mdg89 does not share your contact details with third-party advertisers for the purpose of sending you marketing communications from those parties.
mdg89 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or operational requirements. Where changes are material — for example, a new category of data collection, a new third-party sharing arrangement, or a change to retention periods — mdg89 will provide at least 14 days' prior notice by posting the revised Policy on the Platform and notifying registered Members via email or in-platform notification.
The "Last updated" date at the top of this page will be revised each time a change is made. For non-material updates — such as clarifications, corrected typographical errors, or structural reformatting that does not affect the substance of the Policy — the change will take effect immediately upon posting without advance notice.
Your continued use of the Platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not accept the changes, you must stop using the Platform and close your Account in accordance with Section 11.2 of the Terms & Conditions before the revision takes effect.
If you have any questions, concerns, or requests relating to this Privacy Policy or the way mdg89 handles your Personal Data, please contact our Data Protection team through the following channels:
For formal data subject access requests or erasure requests, please contact us via live chat or email and our compliance team will provide the required verification form and processing instructions. We may need to verify your identity before processing any request that involves disclosing or modifying Personal Data.
Our Data Commitments
These are the operational commitments that stand behind every clause of this Privacy Policy — not just words on a page, but active practices embedded in how mdg89 is built and run.
mdg89 has never sold, rented, or traded Member data to advertisers, data brokers, or any third party for commercial gain — and never will. Your betting history and personal information belong to you alone.
Every byte of data transmitted between your device and mdg89 is protected by TLS encryption. Sensitive data at rest — including KYC documents and financial identifiers — is encrypted using AES-256 ciphers.
We collect only what we genuinely need to deliver your Account services and meet our regulatory obligations. No speculative data harvesting, no collection of data "just in case" — lean, purposeful, and auditable.
Access requests, rectification requests, and erasure requests are handled by our compliance team within 30 days. Live chat is available 24/7 for any data-related query — no waiting weeks for a form response.
Financial identifiers for BCA, BRI, BNI, Mandiri, OVO, DANA, and GoPay are tokenised — we retain only a secure reference, never your full account number — so your banking details stay protected at every step.
mdg89 does not deploy third-party advertising cookies, retargeting pixels, or cross-site tracking scripts. Your browsing behaviour on the Platform is never shared with social media platforms or ad networks.
Every category of data we hold has a defined maximum retention period. When that period expires, data is securely deleted or irreversibly anonymised — we do not hold data indefinitely or "just in case".
mdg89 operates under an international gaming licence that mandates compliance with data protection standards. Regular third-party audits and penetration tests verify that our security controls remain effective.
Now that you understand exactly how mdg89 protects your data, explore the full platform — from live sports betting and slots to togel (Indonesia's traditional numbers lottery) and live casino tables — knowing your privacy is fully safeguarded.