Privacy Policy MDG99 — Your Personal Data Protection

1Information We Collect

MDG99 collects your personal information through various interaction points — from the initial registration process through to your daily use of our platform. We only collect information that is genuinely necessary for legitimate and transparent operational purposes.

Account Registration Information

• Full name as shown on your official identification document.
• An active Malaysian mobile number for OTP verification.
• A valid email address for account communications and promotions (with your consent).
• Date of birth to verify the minimum age eligibility of 18 years.
• Your chosen password — stored in hashed format and cannot be read by our staff.

KYC Verification Information

• National identification number (MyKad) or passport number for foreign nationals.
• Digital copy of your identity document (front and back) when requested.
• Bank statement or proof of residential address when required for advanced verification.
• Selfie or facial photo for biometric identity verification on accounts requiring a higher security level.

Financial Information

• Bank account number or bank name for withdrawal processing (not full credit card number).
• E-wallet username (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay) for transaction processing.
• Deposit and withdrawal transaction history on the MDG99 platform.

Automatically Collected Usage Information

• The IP address of the device used to access the platform.
• Device type, operating system, and web browser version.
• Session log data including login time, session duration, and gaming activity.
• Cookie data and Device ID for security and fraud detection purposes.
• Gaming history including bets, wins, and losses on the platform.

2How We Use Your Information

Every piece of information MDG99 collects has a clear and lawful purpose. We do not use your data for purposes you did not consent to at registration. Below is a full list of how we use your information:

3Data Processing Basis

MDG99 processes your personal data on the following bases recognized under Malaysia's PDPA and international data protection practices:

• Consent: You provide explicit consent when registering an account and when accepting any marketing communications. You may withdraw this consent at any time.
• Contractual Requirement: Data processing is required to fulfill the service agreement between you and MDG99, including the processing of financial transactions.
• Legal Obligation: MDG99 is required by law to maintain certain records for AML (Anti-Money Laundering) and KYC compliance purposes.
• Legitimate Interest: Certain processing is carried out on the basis of our legitimate interests to ensure platform security and prevent fraud that could affect all members.

4Information Sharing

MDG99 does not sell your personal data. Your information is only shared in limited and necessary situations, always within the scope of the consent you have provided.

Third Parties Involved

• Payment Processors: Required transaction information is shared with payment processors (FPX, e-wallets, banks) to facilitate your financial transactions.
• Game Providers: Minimal game session data is shared with gaming software providers solely to ensure smooth and secure gameplay.
• KYC Services: Identity verification documents are shared with approved KYC service providers for identity verification purposes only.
• Authorities: We will disclose information to law enforcement agencies or regulatory bodies when required to do so under Malaysian law.

5Data Security

Your data security is MDG99's top priority. We continuously invest in the latest security infrastructure to ensure your information is always protected from unauthorized access, loss, or misuse.

• 256-bit SSL/TLS encryption for all data transmitted between your device and MDG99 servers.
• Data-at-rest encryption for all personal and financial records stored in our databases.
• Intrusion Detection System (IDS) and Intrusion Prevention System (IPS) active 24/7.
• Role-based access control (RBAC) — staff can only access data they need for their specific duties.
• Two-factor authentication (2FA) is mandatory for all MDG99 staff accessing internal systems.
• Regular security audits conducted by accredited independent cybersecurity firms.
• A detailed security incident response plan to address any data breaches swiftly.

6Data Retention Period

MDG99 retains your personal data only for as long as it is needed for the stated purpose or as required by applicable law. Once the retention period ends, data will be securely deleted or anonymized.

7Cookies and Tracking Technologies

MDG99 uses cookies and similar technologies to ensure the platform functions properly, enhance your user experience, and analyze usage patterns in aggregate for continuous improvement.

Types of Cookies Used

• Essential Cookies: Required for core platform functions such as login, game sessions, and account security. These cookies cannot be disabled without affecting platform functionality.
• Preference Cookies: Saves your preferred settings such as interface language and display preferences for a more personalized experience.
• Analytics Cookies: Helps us understand how members use the platform so we can continually improve our services. This data is collected anonymously.
• Security Cookies: Used to detect suspicious activity, prevent fraud, and ensure the integrity of your login sessions.

8International Data Transfers

In the context of online platform operations, some of your data may be processed or stored on servers located outside Malaysia. MDG99 ensures that any such data transfers are carried out with adequate safeguards in place.

• All international data transfers comply with Malaysia's PDPA requirements and applicable data protection agreements.
• Data recipients outside Malaysia are required to provide a level of data protection equivalent to or exceeding PDPA standards.
• MDG99 uses internationally recognized Standard Contractual Clauses to protect data in cross-border transfers.
• You may request details about the protection mechanisms applied to any international data transfer by contacting our customer support.

9Your Rights

As an MDG99 member and an individual protected under Malaysia's PDPA, you have important rights regarding your personal data. MDG99 is committed to respecting and facilitating the exercise of these rights.

10Children's Privacy

MDG99 is a gaming platform restricted to individuals aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18.

• All registrants are required to verify their age during the account registration process.
• Our KYC verification process is designed to identify and reject registrations from underage individuals.
• If we find that personal data of a child has been collected unintentionally, we will delete that data immediately and close the associated account.
• Parents or guardians who believe their child has registered an account with MDG99 are urged to contact our support team immediately.

11Third-Party Links

The MDG99 platform may contain links or references to third-party services such as game providers or payment channels. MDG99's Privacy Policy does not apply to those third-party websites or services.

• MDG99 is not responsible for the privacy practices of third-party websites or services accessed through links on our platform.
• We recommend that you read and understand the privacy policy of each third-party service before interacting with them.
• The presence of third-party links on the MDG99 platform does not mean we endorse or validate their privacy practices.

12Privacy Policy Amendments

MDG99 reserves the right to amend this Privacy Policy at any time to reflect changes in platform operations, new legal requirements, or the latest industry practices. We are committed to providing sufficient notice before any significant amendments take effect.

• Material changes will be communicated via in-app notifications or email at least 7 days before taking effect.
• The latest version of the Privacy Policy is always available on this page with a clear last-updated date.
• Your continued use of the MDG99 platform after any amendment's effective date constitutes your acceptance of the updated policy.
• If you disagree with any amendments made, you have the right to close your account and request deletion of your personal data.

13Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or how MDG99 handles your personal data, please contact our team through the following channels: