Privacy Policy MDG288 —
Malaysian Player Personal Data Protection

1 Introduction & Scope of Privacy Policy

Mdg288 ("we", "our platform") operates an online wagering platform accessible at mdg288.win. We understand that your personal data is a trust placed in us, and we do not take that responsibility lightly. This Privacy Policy is designed to provide full transparency on how we handle your personal information from start to finish.

This policy applies to all players who register, use, or simply browse the MDG288 platform. It covers all data collected through the MDG288 website, the MDG288 mobile app, and any of our official communication channels including live chat and support email.

We are committed to ensuring that all our data handling practices comply with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international data protection standards. This policy is updated periodically to reflect changes in law, technology, and our business practices.

2 Types of Personal Data We Collect

Mdg288 collects your personal data in several ways — directly when you provide it to us, automatically through your use of the platform, and in some cases, through trusted third parties. The categories of data we collect are as follows:

We only collect data necessary for the stated purposes. We do not collect sensitive information such as health records, religious beliefs, or political views unless required by applicable law.

3 How MDG288 Uses Your Data

Every piece of personal data we collect is used for a clear and lawful purpose. mdg288 does not process your data for any unrelated purposes without first obtaining your consent. The following are the primary purposes for which player personal data is used:

• Account management: Creating, maintaining, and managing your mdg288 player account, including identity verification and a secure login process.
• Transaction processing: Processing deposits, withdrawals, and bonus payments accurately and securely through your chosen payment method.
• Legal compliance (KYC/AML): Fulfilling legal obligations related to identity verification, anti-money laundering, and reporting requirements set by the authorities.
• Platform security: Detecting and preventing fraud, unauthorized access, multi-account usage, and any suspicious activity on the platform.
• Customer support: Providing effective technical assistance and support services when you contact the mdg288 support team.
• Service communications: Sending important notices regarding your account, changes to terms, security updates, and promotional information you have agreed to receive.
• Platform improvements: Analyzing usage patterns in aggregate (without identifying individuals) to improve mdg288's functionality, user experience, and service offerings.
• Responsible gambling: Monitoring betting patterns to identify players who may need responsible gambling support and proactively reaching out to them where necessary.

4 Legal Basis for Data Processing

Mdg288 only processes your personal data when there is a valid legal basis under Malaysia's Personal Data Protection Act 2010 (PDPA). The legal bases we rely on are as follows:

• Your consent: For the processing of data for direct marketing and promotional communications purposes. You may withdraw this consent at any time.
• Contract performance: To process the data necessary to provide the mdg288 services you have registered for — including account management and transaction processing.
• Legal obligations: To fulfil legal requirements such as KYC verification, AML reporting, and directives from relevant authorities.
• Legitimate interest: For platform security purposes, fraud prevention, and aggregated statistical analysis for service improvement, where such interests do not override your fundamental privacy rights.

5 Third-Party Data Sharing & Disclosure

Mdg288 does not sell, rent, or trade player personal data to outside parties for commercial purposes. However, in the course of operating the platform, we may share certain data with carefully selected third parties, subject to strict confidentiality agreements and only for specified purposes:

• Payment service providers: Banks and e-wallet providers that process your deposit and withdrawal transactions. They receive only the information necessary to complete the transaction.
• Identity verification service providers: KYC companies that help us verify player identity and prevent fraud in accordance with legal requirements.
• Technology infrastructure providers: Companies providing cloud computing, cybersecurity, and technical maintenance services to ensure the mdg288 platform operates securely and stably.
• Legal authorities: Law enforcement agencies, courts, or regulatory bodies when required by law or a valid court order.

All third parties that receive mdg288 player data are bound by comprehensive data protection agreements and are periodically audited to ensure compliance with established security standards.

6 Security & Data Protection

Mdg288 continuously invests in the latest security infrastructure to ensure player personal data is always protected against cyber threats, unauthorized access, and any form of data breach. The technical and organizational measures we employ include:

• 256-bit SSL/TLS encryption for all data transmitted between players' devices and mdg288 servers.
• Encryption of data stored in databases using the AES-256 encryption standard.
• Intrusion detection (IDS) and intrusion prevention (IPS) systems operating 24 hours a day.
• Two-factor authentication (2FA) for admin access, and encouraged for all player accounts.
• Continuous security monitoring and periodic penetration testing conducted by independent security experts.
• Mandatory information security training attended by all mdg288 staff who handle player data.
• Established incident response procedures to ensure any data breach is addressed promptly and effectively.

While we employ the best available security measures, no system can guarantee 100% absolute security. We encourage players to also take proactive steps to protect their accounts, including using strong passwords and not sharing login credentials.

7 Data Retention Period

Mdg288 retains your personal data only for as long as necessary for the purposes stated in this Privacy Policy, or as required by applicable law. The specific retention period for each data category is as follows:

• Active account data: Retained for the duration your account remains active on MDG288 and for a defined period following account closure.
• Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysia's tax and accounting legal requirements.
• KYC and identity verification records: Retained for a minimum of 5 years after the business relationship ends, in line with Malaysia's AML legal requirements.
• Support communication logs: Retained for 2 years for reference and dispute resolution purposes.
• Technical data and access logs: Retained for 90 days for security and technical troubleshooting purposes.

Once the designated retention period has elapsed, your personal data will be securely deleted or anonymised in a way that cannot be linked to any specific individual.

8 Cookie & Tracking Technology Policy

Mdg288 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small data files stored on your device when you visit the mdg288 website. The types of cookies we use are as follows:

You can manage or delete cookies through your web browser settings at any time. However, deleting essential cookies may disrupt certain features of the MDG288 platform and you may need to log in again each time you visit.

9 Your Rights Under Malaysia's PDPA

As a mdg288 player who is a Malaysian citizen or resident, you have rights protected under the Personal Data Protection Act 2010 (PDPA) regarding your personal data. mdg288 is committed to respecting and facilitating the exercise of these rights:

To exercise any of the above rights, please contact the mdg288 data protection team via the in-platform live chat. We will process your request within 30 business days. We may need to verify your identity before processing the request.

10 Contact Us Regarding Privacy

If you have any questions, concerns, or complaints about how mdg288 handles your personal data, we strongly encourage you to contact us directly. Our Data Protection Officer (DPO) team is ready to assist you.

You can reach us via live chat available 24 hours a day, 7 days a week on the MDG288 platform. For written inquiries related to privacy and data protection, you may email us at the address listed in the footer of this website.

Mdg288 will investigate every privacy-related complaint seriously and respond within a reasonable timeframe. If you are not satisfied with our response, you have the right to lodge a complaint with Malaysia's Department of Personal Data Protection (PDPA).