md777 Privacy Policy

The following definitions apply throughout this Privacy Policy. Capitalized terms not otherwise defined here carry the meanings assigned to them in the md777 Terms & Conditions.

• "md777" refers to the online betting and gaming platform accessible at https://md777.bio and all associated digital services, products, and interfaces operated thereunder.
• "Personal Data" means any information that directly or indirectly identifies a living individual — including but not limited to name, email address, phone number, device identifiers, IP address, payment account details, and betting activity records.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, transmission, disclosure, and deletion.
• "Data Controller" means md777, as the entity that determines the purposes and means of Processing your Personal Data.
• "Data Processor" means any third-party service provider that Processes Personal Data on behalf of md777 under a contractual data processing agreement.
• "Player" / "You" means any individual who registers an Account on or otherwise accesses the md777 Platform.
• "KYC" (Know Your Customer) means the identity verification process md777 may require you to complete, involving the submission of government-issued identification and supporting documentation.
• "Cookie" means a small text file placed on your device by the md777 Platform for the purposes described in Section 10 of this Policy.

md777 collects only the Personal Data that is necessary to deliver our services securely, comply with our regulatory obligations, and improve your experience on the Platform. The categories of data we collect are set out below.

md777 collects your Personal Data through several channels, each serving a specific operational purpose.

• Direct submission: You provide Personal Data directly when you register an Account, complete the KYC process, make a deposit or withdrawal, contact our support team, or update your Account settings.
• Automated collection: Technical Data and Usage Data are collected automatically as you browse and interact with the md777 Platform through cookies, server logs, and similar tracking technologies (see Section 10).
• Payment processors: When you initiate a deposit or withdrawal, our payment processing partners transmit the minimum necessary transaction data to md777 to confirm and record the transaction against your Account.
• Identity verification providers: During the KYC process, md777 may work with third-party identity verification services that return a verification status result to md777. The raw document images you submit are handled in accordance with the verification provider's own privacy policy.
• Fraud prevention and analytics services: md777 may receive signals from third-party fraud-detection tools that help identify unusual or suspicious Account activity. These signals may include device fingerprint data and behavioral risk scores.

md777 processes your Personal Data for the following specific purposes. We do not use your data for any purpose that is incompatible with those listed below.

• Account management: To create, maintain, and administer your md777 Player Account, including verifying your identity at registration and during KYC review.
• Service delivery: To process bets, wagers, and gaming activity; to credit winnings to your Account; and to facilitate deposits and withdrawals via your selected Indonesian payment method.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, account takeovers, money laundering, and other prohibited activities that could harm Players or the integrity of the Platform.
• Regulatory compliance: To comply with the anti-money laundering (AML), counter-terrorism financing (CTF), and KYC obligations imposed by md777's international operating license.
• Customer support: To respond to your inquiries, complaints, and support requests — including responsible gaming assistance — efficiently and accurately.
• Responsible gaming: To monitor betting patterns that may indicate problem gambling behavior, to enforce self-exclusion or deposit limit requests, and to provide welfare outreach where appropriate.
• Marketing communications: To send you promotional offers, bonus notifications, seasonal campaign announcements (such as Idul Fitri or Ramadhan promotions), and md777 news — where you have provided consent or where our legitimate interests apply and you have not opted out.
• Platform improvement: To analyze aggregated, anonymized Usage Data to improve the Platform's performance, navigation, game lobby design, and overall user experience for Indonesian players.
• Legal proceedings: To establish, exercise, or defend legal claims in the event of a dispute, chargeback, fraud investigation, or regulatory inquiry.

md777 processes your Personal Data on one or more of the following legal bases, depending on the specific processing activity involved.

md777 does not sell your Personal Data. We share data only with the categories of third parties listed below, and only to the extent strictly necessary for the stated purpose. All third-party Data Processors are contractually required to protect your data and to process it only on md777's documented instructions.

• Payment processors: Indonesian bank transfer operators and e-wallet providers (including OVO, DANA, GoPay, ShopeePay, and LinkAja) receive the transaction data required to process your deposits and withdrawals. md777 does not store full bank account credentials; payment data is tokenized wherever technically possible.
• Identity verification providers: KYC document data is shared with licensed identity verification partners solely for the purpose of verifying your identity. These providers are bound by data processing agreements and applicable data protection law.
• Fraud detection and cybersecurity vendors: Technical and behavioral data may be shared with fraud-prevention platforms to identify and block unauthorized Account access, bonus abuse, and money laundering activity.
• Game content providers: Game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft may receive a session token and anonymized player identifier to deliver their game content within the md777 lobby. No personally identifiable information is shared beyond what is technically required for session management.
• Customer support platforms: Live-chat and helpdesk software providers that host our support infrastructure may process your communications data under a data processing agreement with md777.
• Regulatory authorities: md777 may be required by applicable law, regulation, court order, or competent regulatory authority to disclose your Personal Data. md777 will notify you of any such disclosure request to the extent legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, or asset sale affecting the md777 Platform, your Personal Data may be transferred to the acquiring entity, subject to equivalent privacy protections. You will be notified of any such transfer.

md777 operates internationally and may transfer your Personal Data to servers or service providers located outside Indonesia. Where such transfers occur, md777 ensures that appropriate safeguards are in place to protect your data.

• Data transferred to countries that have been determined to provide an adequate level of data protection may be transferred without additional safeguards.
• For transfers to countries without an adequacy determination, md777 relies on standard contractual clauses or binding corporate rules, as applicable, to ensure that your Personal Data receives an equivalent level of protection.
• md777 conducts data transfer impact assessments where required to ensure that transferred data is not exposed to risks that materially exceed the protections afforded to data retained within Indonesia.
• You may request information about the specific safeguards applicable to any international transfer of your Personal Data by contacting [email protected].

md777 retains your Personal Data for no longer than is necessary to fulfill the purposes for which it was collected, or as required by our regulatory obligations. The following general retention periods apply.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymized so that it can no longer be associated with any individual. Anonymized, aggregated data may be retained indefinitely for statistical and platform improvement purposes.

md777 implements a layered set of technical and organizational security measures to protect your Personal Data against unauthorized access, disclosure, alteration, or destruction.

• Encryption in transit: All data exchanged between your browser or device and the md777 Platform is encrypted using TLS 1.2 or higher. Connections downgraded below TLS 1.2 are rejected at the server level.
• Encryption at rest: Sensitive Personal Data — including financial details and KYC documents — is encrypted at rest using AES-256 or equivalent standards on all storage systems.
• Access controls: Internal access to Personal Data is governed by a strict role-based access control policy. Employees and contractors may only access the minimum data necessary to perform their specific function.
• Intrusion detection and monitoring: md777 operates continuous security monitoring systems that detect and alert on anomalous access patterns, data exfiltration attempts, and other potential security incidents in real time.
• Regular security assessments: md777 engages third-party security professionals to conduct periodic penetration testing and vulnerability assessments of the Platform's infrastructure and codebase.
• Incident response: In the event of a data breach that poses a risk to your rights and freedoms, md777 will notify affected Players without undue delay and will report the incident to the relevant regulatory authority within the timeframes required by applicable law.

md777 uses cookies and similar tracking technologies to enable essential Platform functionality, remember your preferences, and analyze how the Platform is used. The following categories of cookies are deployed.

• You can manage your cookie preferences through your browser settings. Disabling strictly necessary cookies may prevent the md777 Platform from functioning correctly.
• Consent for analytics and marketing cookies may be withdrawn at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
• md777 does not use cross-site tracking cookies to build advertising profiles across third-party websites. Our cookies are confined to the md777.bio domain and its subdomains.

As an md777 player, you hold a set of rights in relation to your Personal Data. md777 is committed to honoring these rights promptly and transparently. To exercise any of the rights listed below, contact our support team at [email protected] with the subject line "Data Subject Request".

• Right of access: You have the right to request a copy of the Personal Data md777 holds about you, along with information about how it is being processed. We will respond within 30 days of a verified request.
• Right to rectification: If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may also update basic Account details directly within your Profile settings.
• Right to erasure: You may request that md777 delete your Personal Data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing is unlawful. This right is subject to our legal retention obligations — data we are required to retain by law cannot be erased on request.
• Right to restrict processing: You may request that md777 temporarily suspend processing of your Personal Data in certain circumstances — for example, while we verify the accuracy of data you have contested.
• Right to data portability: You may request a machine-readable copy of Personal Data you have provided to md777 for the purposes of transmitting it to another service provider, where technically feasible.
• Right to object: You have the right to object to processing based on md777's legitimate interests at any time. You also have an absolute right to opt out of direct marketing communications, which md777 will honor without delay.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
• Right not to be subject to automated decisions: md777 does not make solely automated decisions that produce significant legal effects on Players. Any automated risk-flagging that could affect your Account access is subject to human review by our compliance team.

md777 operates an adults-only platform. The md777 Platform is strictly prohibited to individuals under the age of 21 years.

• md777 does not knowingly collect Personal Data from any person under the age of 21. If you are under 21, you must not register an Account or submit any personal information to md777.
• If md777 becomes aware that Personal Data has been collected from a person under the age of 21, that data will be deleted immediately and the associated Account will be terminated without further notice.
• If you are a parent or guardian and believe that a minor in your care has provided Personal Data to md777 or created an Account, please notify us immediately at [email protected]. We will investigate and take appropriate action within 48 hours of receiving your report.

The md777 Platform may contain links to third-party websites or services — for example, game studio pages or payment provider information pages. This Privacy Policy applies exclusively to data processed by md777 and does not extend to any third-party site or service.

• md777 is not responsible for the privacy practices, data collection methods, or security standards of any third-party website to which the Platform may link.
• We encourage you to review the privacy policy of any third-party site before submitting personal information to it.
• The inclusion of a link on the md777 Platform does not constitute an endorsement of the linked site's privacy or data protection practices.

md777 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, regulatory requirements, or Platform features.

• Material changes to this Privacy Policy will be communicated to Players via the email address registered to their Account at least seven (7) days before the changes take effect — except where an immediate update is required by law or to address an urgent security matter.
• The "Last Updated" date at the top of this page will be revised with each amendment. We recommend reviewing this page periodically to stay informed about how md777 protects your data.
• Your continued use of the md777 Platform following the effective date of any amendment constitutes your acknowledgment of the updated Privacy Policy. If you do not agree with the revised terms, you must cease using the Platform and close your Account.

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data, please reach out to the md777 Data Privacy team. Our Indonesian-speaking support agents are available around the clock.