Privacy Policy

This Privacy Policy describes how md200m ("we," "us," "our," or the "Company") collects, uses, stores, protects, and discloses your personal information when you access and use our online gaming platform, website, mobile applications, and related services (collectively, the "Services"). We are committed to protecting your privacy and ensuring the security of your personal data in accordance with applicable data protection laws and international privacy standards. By creating an account or using our Services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, processing, and use of your personal information as described herein.

1. Information We Collect

md200m collects various categories of personal information necessary to provide, maintain, and improve our Services, ensure account security, comply with legal obligations, and deliver a personalized gaming experience. The types of information we collect include:

1.1 Information You Provide Directly

When you register for an account, verify your identity, or interact with our Services, you voluntarily provide the following personal information:

• Registration Information: Full name, date of birth, residential address, email address, telephone number, username, and password
• Identity Verification Documents: Government-issued identification (KTP, national ID card, passport, or driver's license), proof of address documents (utility bills, bank statements), selfie photographs for identity confirmation
• Financial Information: Bank account details, e-wallet account information, payment card details, transaction history, deposit and withdrawal records
• Communication Data: Messages sent through customer support channels, live chat conversations, email correspondence, feedback submissions, and survey responses
• Responsible Gaming Preferences: Deposit limits, loss limits, session time preferences, self-exclusion requests, and responsible gaming tool settings

1.2 Information Collected Automatically

When you access and use md200m Services, we automatically collect certain technical and usage information through cookies, server logs, and similar tracking technologies:

• Device Information: Device type, operating system, browser type and version, screen resolution, device identifiers, IP address, mobile network information
• Usage Data: Pages visited, features used, games played, bet history, win/loss records, session duration, click patterns, navigation paths, referral sources
• Location Information: General geographic location derived from IP address to ensure compliance with jurisdiction-specific regulations
• Cookies and Tracking Technologies: Session cookies, persistent cookies, web beacons, and similar technologies that help us recognize your device, maintain login sessions, remember preferences, and analyze platform usage patterns

1.3 Information from Third-Party Sources

We may receive additional information about you from third-party service providers, including:

• Payment Processors: Transaction verification data from Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja)
• Identity Verification Services: Age verification, identity authentication, and fraud prevention data from specialized verification providers
• Affiliate Partners: Referral information if you accessed md200m through a marketing affiliate or promotional campaign

2. How We Use Your Information

md200m uses the collected personal information for the following legitimate business purposes:

2.1 Account Management and Service Provision

• Create, manage, and maintain your player account
• Verify your identity, age, and eligibility to use our Services
• Process deposits, withdrawals, and financial transactions
• Provide access to games, sports betting markets, and gaming features
• Calculate winnings, settle bets, and update account balances
• Administer bonuses, promotions, and loyalty rewards

2.2 Security, Fraud Prevention, and Legal Compliance

• Detect, prevent, and investigate fraudulent activities, money laundering, bonus abuse, and unauthorized account access
• Verify the legitimacy of financial transactions and identify suspicious activity patterns
• Enforce our Terms and Conditions and other policies
• Comply with Know Your Customer (KYC) and Anti-Money Laundering (AML) regulations
• Respond to legal requests, court orders, and regulatory inquiries
• Maintain records as required by applicable gaming laws and financial regulations

2.3 Customer Support and Communication

• Respond to your inquiries, support requests, and complaints
• Send account notifications, transaction confirmations, and security alerts
• Provide customer service through live chat, email, and WhatsApp channels
• Communicate important platform updates, policy changes, and service announcements

2.4 Platform Improvement and Personalization

• Analyze user behavior and gaming patterns to improve platform functionality
• Develop new features, games, and services based on player preferences
• Optimize website performance, loading speeds, and mobile responsiveness
• Personalize game recommendations and promotional offers based on your interests
• Conduct internal research and analytics to enhance user experience

2.5 Responsible Gaming Support

• Implement and enforce deposit limits, loss limits, and session time restrictions
• Process self-exclusion requests and maintain exclusion registers
• Monitor gaming behavior to identify potential problem gambling indicators
• Provide resources, tools, and support for responsible gaming practices

2.6 Marketing and Promotional Communications (With Consent)

• Send promotional offers, bonus notifications, and special event announcements
• Deliver targeted marketing campaigns based on your gaming preferences
• Conduct market research and gather feedback through surveys

You may opt out of promotional communications at any time by adjusting your account preferences or contacting customer support. Transactional and service-related communications (account notifications, security alerts) cannot be opted out as they are essential to Service provision.

3. How We Share Your Information

md200m does not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we may share your information with the following categories of recipients under specific circumstances:

3.1 Service Providers and Business Partners

We engage trusted third-party service providers to perform functions on our behalf, including:

• Payment Processors: Indonesian banks, e-wallet providers, and payment gateways that process deposits and withdrawals
• Identity Verification Services: KYC and AML compliance providers that verify player identities and screen against watchlists
• Game Providers: Casino software developers and sports betting data suppliers who power our gaming content
• Cloud Hosting Services: Infrastructure providers that host our platform and store encrypted data
• Customer Support Tools: Live chat, email, and communication platforms used to deliver support services
• Analytics Services: Website analytics and business intelligence tools that help us understand platform usage

All service providers are bound by confidentiality agreements and are permitted to use your information only for the specific purposes for which they were engaged. They are prohibited from using your data for their own purposes or sharing it with other parties.

3.2 Legal and Regulatory Authorities

We may disclose your personal information to government authorities, regulatory bodies, law enforcement agencies, or courts when required by law or in response to valid legal processes, including:

• Compliance with court orders, subpoenas, or legal obligations
• Cooperation with regulatory investigations or audits
• Prevention or investigation of suspected illegal activities, fraud, or security threats
• Protection of the rights, property, or safety of md200m, our players, or the public

3.3 Business Transfers

In the event of a merger, acquisition, corporate restructuring, or sale of assets, your personal information may be transferred to the acquiring entity as part of the business transaction. You will be notified via email and prominent platform notice of any such change in ownership or control of your personal data.

3.4 With Your Consent

We may share your information with other parties when you have provided explicit consent for such disclosure, such as participation in joint promotions or partnerships with third-party brands.

4. Data Security Measures

md200m implements comprehensive technical, administrative, and physical security measures to protect your personal information against unauthorized access, disclosure, alteration, and destruction:

4.1 Technical Security Controls

• Encryption: All sensitive data, including passwords and financial information, is encrypted using industry-standard SSL/TLS protocols during transmission and AES-256 encryption at rest
• Secure Authentication: Multi-factor authentication options, strong password requirements, and automatic session timeouts
• Firewall Protection: Advanced firewall systems and intrusion detection mechanisms protect against unauthorized access attempts
• Regular Security Audits: Periodic penetration testing, vulnerability assessments, and security reviews conducted by independent experts
• Network Monitoring: Continuous monitoring of system activity to detect and respond to security incidents in real-time

4.2 Administrative Security Controls

• Access Restrictions: Personal information is accessible only to authorized employees and service providers who require access to perform their duties
• Employee Training: Regular security awareness training for all staff members handling personal data
• Confidentiality Agreements: All employees and contractors sign legally binding confidentiality agreements
• Data Minimization: We collect and retain only the information necessary to provide our Services and comply with legal obligations

4.3 Physical Security Controls

• Secure Data Centers: Physical servers are housed in secure facilities with restricted access, surveillance systems, and environmental controls
• Backup Systems: Regular data backups stored in geographically separate locations to prevent data loss

Despite our robust security measures, no system can guarantee absolute security. We cannot ensure or warrant the complete security of any information transmitted to us. You are responsible for maintaining the confidentiality of your login credentials and should notify us immediately if you suspect unauthorized access to your account.

5. Data Retention

md200m retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods vary depending on the type of information and applicable legal requirements:

• Account Information: Retained for the duration of your active account and up to 7 years after account closure for regulatory compliance and dispute resolution purposes
• Transaction Records: Retained for 7 years as required by financial record-keeping regulations and tax laws
• Identity Verification Documents: Retained for 7 years after account closure to comply with KYC and AML obligations
• Communication Records: Customer support interactions retained for 3 years for quality assurance and dispute resolution
• Marketing Data: Retained until you opt out of marketing communications or request deletion, whichever occurs first

After the applicable retention period expires, we securely delete or anonymize your personal information in accordance with our data deletion procedures.

6. Your Privacy Rights

As a user of md200m Services, you have the following rights regarding your personal information:

6.1 Right to Access

You have the right to request confirmation of whether we process your personal data and to obtain a copy of the personal information we hold about you. To request access to your data, contact our customer support team.

6.2 Right to Rectification

You have the right to correct inaccurate or incomplete personal information. You can update most information directly through your account settings or by contacting customer support for assistance.

6.3 Right to Deletion

You may request deletion of your personal information in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected. Please note that we may be required to retain certain information to comply with legal obligations, resolve disputes, or enforce our agreements.

6.4 Right to Restrict Processing

You have the right to request that we limit the processing of your personal information under certain conditions, such as when you contest the accuracy of the data or object to processing.

6.5 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another service provider where technically feasible.

6.6 Right to Object

You have the right to object to the processing of your personal information for direct marketing purposes or when processing is based on legitimate interests. We will cease processing your data for those purposes unless we have compelling legitimate grounds to continue.

6.7 Right to Withdraw Consent

Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing conducted prior to withdrawal.

To exercise any of these rights, please contact our customer support team at [email protected]. We will respond to your request within 30 days. For security purposes, we may need to verify your identity before processing your request.

7. Cookies and Tracking Technologies

md200m uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device that help us recognize your browser, remember your preferences, and analyze website usage. We use the following types of cookies:

Cookie Type	Purpose	Duration
Essential Cookies	Required for basic platform functionality, login sessions, and security features. Cannot be disabled.	Session or persistent
Functional Cookies	Remember your preferences, language settings, and customization choices.	Persistent (up to 1 year)
Analytics Cookies	Collect aggregated usage statistics to help us improve platform performance and user experience.	Persistent (up to 2 years)
Marketing Cookies	Track your activity to deliver personalized promotional offers and measure campaign effectiveness.	Persistent (up to 1 year)

You can manage cookie preferences through your browser settings. Please note that disabling certain cookies may limit platform functionality and affect your user experience.

8. Third-Party Links

Our Services may contain links to third-party websites, payment providers, or external resources. md200m is not responsible for the privacy practices or content of these third-party sites. We encourage you to review the privacy policies of any external websites you visit. This Privacy Policy applies only to information collected through md200m Services.

9. Children's Privacy

md200m Services are strictly intended for individuals aged 21 years and older. We do not knowingly collect personal information from individuals under the legal gambling age. If we become aware that we have inadvertently collected information from a minor, we will take immediate steps to delete that information and close the associated account. If you believe we have collected information from a minor, please contact us immediately.

10. International Data Transfers

md200m primarily serves players located in Indonesia. However, to provide our Services, your personal information may be transferred to and processed in countries outside Indonesia where our service providers and infrastructure partners are located. When we transfer data internationally, we ensure that appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable data protection laws.

11. Changes to This Privacy Policy

md200m reserves the right to update, modify, or revise this Privacy Policy at any time to reflect changes in our practices, Services, legal requirements, or business operations. Material changes will be communicated to you via email and prominent notice on our platform. The "Last Updated" date at the top of this document indicates when the most recent revisions were made. Your continued use of our Services after such modifications constitutes your acceptance of the updated Privacy Policy. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

12. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data protection practices, please contact our privacy team through the following channels:

• Email: [email protected]
• Live Chat: Available 24/7 through the md200m platform
• WhatsApp: Available 24/7 for Indonesian-speaking support

Our customer support team is committed to addressing your privacy concerns promptly and professionally. We will respond to all inquiries within 30 days of receipt.