Privacy Policy

1. Introduction

md777 ("we", "us", "our") is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you use our online gaming platform accessible at md777.cam (the "Platform") and related services.

This Privacy Policy applies to all users who register an account, access our website, or use any md777 services including online casino games, live dealer games, sports betting markets, togel (lottery draws), sabung ayam (cockfighting streams), and related gambling products (collectively, the "Services").

By using md777 Services, you acknowledge that you have read, understood, and consent to the data practices described in this Privacy Policy. If you do not agree with our data collection and processing practices, please do not use md777 Services.

This Privacy Policy should be read in conjunction with our Terms and Conditions, which govern your use of md777 Services. Terms defined in the Terms and Conditions have the same meaning when used in this Privacy Policy.

2. Information We Collect

md777 collects several categories of personal information to provide, maintain, and improve our Services. The types of information we collect include:

2.1 Information You Provide Directly

When you register for an md777 account, you provide the following information:

• Identity Information: Full legal name (as it appears on your Indonesian National ID card or KTP), date of birth, nationality, and gender
• Contact Information: Email address, phone number (mobile), and residential address (street address, city, province, postal code)
• Account Credentials: Username, password (stored in encrypted form), and security questions
• Financial Information: Bank account details (bank name, account number, account holder name), e-wallet information (OVO, DANA, GoPay, ShopeePay, LinkAja), and payment transaction history
• Verification Documents: Government-issued photo identification (Indonesian National ID / KTP, passport, or driver's license), proof of address documents (utility bills, bank statements), and selfie photographs for identity verification (KYC)

2.2 Information Collected Automatically

When you use md777 Services, we automatically collect certain technical and usage information:

• Device Information: Device type (smartphone, tablet, desktop), operating system (Android, iOS, Windows, macOS), browser type and version, screen resolution, and device identifiers (IP address, device ID)
• Usage Data: Pages visited, games played, bets placed, time spent on platform, click patterns, navigation paths, referral sources, and session duration
• Location Data: IP-based geolocation to verify you are accessing md777 from Indonesia and to comply with geographic restrictions
• Transaction Data: Deposit amounts, withdrawal requests, bonus claims, wagering history, game outcomes, and account balance changes
• Communication Data: Live chat transcripts, email correspondence, support tickets, and WhatsApp message history with customer service

2.3 Information from Third Parties

md777 may receive information about you from third-party sources including:

• Payment Providers: Banks (BCA, BRI, BNI, Mandiri, CIMB Niaga) and e-wallet services (OVO, DANA, GoPay) share transaction confirmation data
• Game Providers: Software providers (Pragmatic Play, Evolution Gaming, Microgaming, NetEnt) share game session data and RNG audit logs
• Verification Services: Third-party KYC and identity verification services used to authenticate your documents
• Fraud Prevention Partners: Data sharing networks that help identify fraudulent activity, multi-accounting, and bonus abuse

3. How We Use Your Information

md777 uses the personal information we collect for the following purposes:

3.1 Service Provision and Account Management

• Create and maintain your md777 account
• Process deposits, withdrawals, and payment transactions
• Enable you to place bets, play casino games, and access all platform features
• Track your gaming activity, transaction history, and account balance
• Provide customer support via live chat, email, and WhatsApp
• Manage your loyalty tier and VIP status

3.2 Legal and Regulatory Compliance

• Verify your identity and age (21+ requirement) through KYC procedures
• Comply with anti-money laundering (AML) regulations and financial crime prevention obligations
• Detect and prevent fraud, multi-accounting, bonus abuse, and other prohibited activities
• Respond to legal requests, court orders, and regulatory inquiries
• Maintain audit logs and transaction records as required by our gaming license

3.3 Platform Security and Integrity

• Monitor for unauthorized account access, security breaches, and suspicious activity
• Implement fraud detection algorithms and risk assessment models
• Enforce our Terms and Conditions and prevent terms violations
• Identify and block users who are self-excluded or underage

3.4 Marketing and Communications

• Send you promotional offers, bonus notifications, and special event announcements via email, SMS, or push notifications
• Personalize your experience by recommending games based on your playing history
• Conduct surveys, request feedback, and improve our Services based on user input
• Communicate important account updates, policy changes, and platform maintenance schedules

Note: You can opt out of marketing communications at any time by clicking the unsubscribe link in emails or adjusting your communication preferences in your account settings. Opting out of marketing does not affect transactional emails (deposit confirmations, withdrawal notifications, security alerts) which are necessary for service provision.

3.5 Analytics and Service Improvement

• Analyze usage patterns to understand how users interact with our platform
• Identify technical issues, performance bottlenecks, and areas for improvement
• Test new features, A/B test interface changes, and optimize user experience
• Generate aggregated statistics and reports that do not identify individual users

4. Data Sharing and Disclosure

md777 does not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we may share your data in the following limited circumstances:

4.1 Service Providers

We share data with trusted third-party service providers who assist us in operating our platform:

Service Provider Category	Data Shared	Purpose
Payment Processors	Name, bank account, transaction amounts	Process deposits and withdrawals
Game Providers	Username, game session data, bet history	Enable casino games and sports betting
KYC Verification Services	ID documents, selfie photos, address proof	Verify identity and age compliance
Cloud Hosting Providers	All data stored on our servers	Secure data storage and platform hosting
Customer Support Tools	Contact info, chat transcripts, support tickets	Provide customer service
Fraud Detection Partners	Device data, IP addresses, behavioral patterns	Detect fraud and bonus abuse

All service providers are contractually bound to maintain data confidentiality and may only use your data for the specific purposes we authorize.

4.2 Legal Obligations

We may disclose your information if required by law or if we believe in good faith that disclosure is necessary to:

• Comply with legal obligations, court orders, subpoenas, or regulatory requests
• Enforce our Terms and Conditions and investigate potential violations
• Protect the rights, property, or safety of md777, our users, or the public
• Respond to claims of illegal activity or abuse
• Cooperate with law enforcement investigations

4.3 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your personal information may be transferred to the acquiring entity. We will notify you via email and prominent notice on the platform before your data is transferred and becomes subject to a different privacy policy.

5. Data Security Measures

md777 implements comprehensive technical and organizational security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction:

5.1 Technical Safeguards

• Encryption: All data transmissions between your device and our servers are protected by 256-bit SSL/TLS encryption (the same technology used by major banks)
• Password Protection: Passwords are hashed using industry-standard bcrypt algorithms and never stored in plain text
• Secure Servers: All data is stored on secure servers located in certified data centers with physical access controls, surveillance, and redundant systems
• Firewalls and Intrusion Detection: Multi-layer firewalls and real-time intrusion detection systems monitor for unauthorized access attempts
• Regular Security Audits: Third-party security firms conduct penetration testing and vulnerability assessments quarterly

5.2 Organizational Safeguards

• Access Controls: Personal data access is restricted to authorized personnel on a need-to-know basis using role-based permissions
• Employee Training: All staff receive mandatory data protection and security awareness training
• Confidentiality Agreements: Employees and contractors sign non-disclosure agreements
• Incident Response: We maintain a data breach response plan and will notify affected users within 72 hours of discovering a breach as required by law

5.3 Payment Security

md777 does not store complete credit card numbers or CVV codes. Payment processing is handled by PCI-DSS compliant payment processors who maintain separate secure systems. Bank account information and e-wallet details are encrypted and tokenized.

6. Data Retention

md777 retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements.

6.1 Active Account Data

While your account remains active, we retain all personal information, transaction history, gaming activity, and communication records to provide continuous service and maintain accurate financial records.

6.2 Closed Account Data

If you close your account voluntarily or if md777 terminates your account, we retain the following data for the specified periods:

• Transaction and Financial Records: 7 years (required by anti-money laundering regulations and tax laws)
• KYC Documents: 7 years (regulatory requirement for licensed gaming operators)
• Gaming Activity and Bet History: 7 years (dispute resolution and audit trail purposes)
• Marketing Communications History: Deleted within 90 days of account closure unless you specifically consent to continued marketing
• Support Communications: 3 years (to maintain records of customer service interactions and complaint resolutions)

6.3 Self-Excluded Users

If you self-exclude from md777 due to problem gambling concerns (see our Responsible Gaming Policy), we retain your identification information indefinitely to prevent you from creating new accounts during your self-exclusion period and to fulfill our responsible gaming obligations.

6.4 Data Deletion Requests

You may request deletion of your personal data by contacting [email protected]. However, we may be legally required to retain certain data (financial records, KYC documents) even after you request deletion. We will explain any limitations on data deletion based on legal obligations.

7. Your Privacy Rights

Subject to applicable law, you have the following rights regarding your personal information:

7.1 Right to Access

You have the right to request a copy of the personal information we hold about you. You can download your account data, transaction history, and gaming activity logs directly from your account dashboard. For additional information not available through the dashboard, contact [email protected].

7.2 Right to Rectification

If any personal information we hold about you is inaccurate or incomplete, you have the right to request correction. You can update most information directly in your account settings. For changes to verified identity information (name, date of birth), you must contact customer support with supporting documentation.

7.3 Right to Erasure ("Right to be Forgotten")

You may request deletion of your personal data in certain circumstances. However, this right is not absolute—we may retain data where we have legal obligations (financial records retention, KYC regulatory requirements) or legitimate interests (fraud prevention, dispute resolution).

7.4 Right to Restrict Processing

You can request that we limit how we use your data in certain situations, such as while we verify the accuracy of information you dispute or while we assess your objection to processing.

7.5 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format (such as CSV or JSON) and transmit it to another service provider. Contact [email protected] to request data export.

7.6 Right to Object

You can object to processing of your personal data for direct marketing purposes at any time by unsubscribing from marketing emails or adjusting your communication preferences in account settings.

7.7 Right to Withdraw Consent

Where we rely on your consent to process personal data, you may withdraw consent at any time. However, withdrawal of consent does not affect the lawfulness of processing based on consent before withdrawal.

7.8 Exercising Your Rights

To exercise any of these rights, contact us at [email protected] or through the contact methods listed in Section 12. We will respond to your request within 30 days. If we cannot fulfill your request, we will explain the legal or operational reasons preventing us from doing so.

8. Cookies and Tracking Technologies

md777 uses cookies, web beacons, and similar tracking technologies to enhance your experience, analyze platform usage, and deliver personalized content.

8.1 What Are Cookies?

Cookies are small text files stored on your device that help websites remember your preferences and activity. md777 uses both session cookies (deleted when you close your browser) and persistent cookies (remain on your device for a set period).

8.2 Types of Cookies We Use

• Essential Cookies: Required for platform functionality, authentication, security, and session management. These cookies cannot be disabled without severely impacting your ability to use md777.
• Performance Cookies: Collect anonymous data about how users interact with our platform to improve performance and fix technical issues.
• Functional Cookies: Remember your preferences (language, time zone, display settings) to personalize your experience.
• Analytics Cookies: Help us understand user behavior through tools like Google Analytics (anonymized data collection).
• Marketing Cookies: Track your activity to deliver relevant promotional offers and measure advertising effectiveness.

8.3 Managing Cookies

Most web browsers automatically accept cookies, but you can modify your browser settings to decline cookies or alert you when cookies are being sent. Note that disabling cookies may limit your ability to use certain md777 features. Consult your browser's help documentation for instructions on managing cookies.

9. Children's Privacy

md777 Services are strictly intended for individuals aged 21 years or older. We do not knowingly collect personal information from anyone under 21 years of age. If we discover that we have inadvertently collected information from a minor, we will immediately delete that information and terminate the associated account.

If you are a parent or guardian and believe your child has provided personal information to md777, please contact us immediately at [email protected] so we can take appropriate action.

10. International Data Transfers

md777 operates internationally and may transfer your personal data to servers located outside Indonesia. When we transfer data to countries that do not provide the same level of data protection as Indonesia, we implement appropriate safeguards such as:

• Standard contractual clauses approved by data protection authorities
• Ensuring service providers are certified under recognized data protection frameworks
• Obtaining your explicit consent where required by law

Our primary data storage facilities are located in secure data centers in Southeast Asia with redundant backups in geographically distributed locations to ensure data availability and disaster recovery.

11. Changes to This Policy

md777 reserves the right to modify, update, or replace this Privacy Policy at any time. Material changes will be communicated via:

• Email notification to your registered email address
• Prominent banner notice on the md777 platform
• Update to the "Last Updated" date at the top of this page

We encourage you to review this Privacy Policy periodically. Your continued use of md777 Services after any changes constitutes acceptance of the revised Privacy Policy. If you do not agree with the updated terms, you should discontinue use of our Services and close your account.

12. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or how md777 handles your personal information, please contact us through any of the following channels:

• Privacy Officer Email: [email protected]
• General Support Email: [email protected]
• Live Chat: Available 24/7 through the md777 website
• WhatsApp Support: +62 812 3456 7890

When contacting us about privacy matters, please include "Privacy Inquiry" in your subject line and provide sufficient detail to allow us to understand and respond to your request effectively.

We aim to respond to all privacy-related inquiries within 7 business days. Complex requests may require up to 30 days to investigate and resolve fully.