Privacy Policy

1. Introduction

Welcome to mdtoto. This Privacy Policy ("Policy") describes how mdtoto ("Company", "we", "us", "our") collects, uses, stores, and protects the personal information of users ("you", "your") who access our online betting platform at https://mdtoto.cam (the "Service"). By using the Service, you consent to the data practices described in this Policy.

mdtoto is committed to protecting your privacy and complying with applicable data protection laws, including but not limited to international best practices for financial services and online gaming operators. We understand that trust is essential in the online betting industry, and we take your privacy seriously.

This Policy applies to all personal information collected through our website, mobile platform, customer support channels (live chat, email, WhatsApp), and any other services or features we offer. It also explains your rights regarding your personal data and how you can exercise those rights.

2. Information We Collect

mdtoto collects several types of information to provide, maintain, and improve our Service, comply with legal obligations, and protect both you and our platform from fraud and abuse.

2.1. Information You Provide Directly

When you register an account, verify your identity, or contact our support team, you provide us with the following information:

• Account Registration Data: Full legal name (as it appears on your government-issued ID), date of birth, residential address in Indonesia, email address, mobile phone number, and username/password.
• Identity Verification Documents (KYC): Indonesian National ID (KTP Nasional), passport, driver's license, utility bills, bank statements, or other documents required to verify your identity and address.
• Payment Information: Bank account details (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata, BSI), e-wallet account details (OVO, DANA, GoPay, ShopeePay, LinkAja), and transaction history.
• Communication Data: Messages you send to our support team via live chat, email, or WhatsApp, including any attachments or screenshots.

2.2. Information Collected Automatically

When you use the Service, we automatically collect certain technical and usage data, including:

• Device Information: IP address, browser type and version, operating system, device type (mobile, tablet, desktop), screen resolution, and device identifiers.
• Usage Data: Pages viewed, time spent on each page, betting activity (bets placed, games played, results), login timestamps, clickstream data, and navigation patterns.
• Location Data: General location information inferred from your IP address (country, city, region). We do not collect precise GPS coordinates unless you explicitly grant permission through your device settings.
• Cookies and Tracking Technologies: See Section 6 for details on how we use cookies and similar technologies.

2.3. Information from Third Parties

We may receive information about you from third-party sources, including:

• Payment Processors: Transaction confirmation data from BCA, BRI, BNI, Mandiri, OVO, DANA, and other payment partners to verify deposits and withdrawals.
• Identity Verification Services: Third-party KYC and anti-fraud services that help us verify your identity and prevent illegal activity.
• Affiliate Partners: If you were referred to mdtoto by an affiliate or marketing partner, we may receive data about the referral source.

3. How We Use Your Data

mdtoto uses your personal information for the following purposes:

3.1. Service Delivery

• To create and manage your mdtoto account.
• To process deposits, withdrawals, and other financial transactions.
• To enable you to place bets on sports, togel lottery, casino games, and slots.
• To display your account balance, betting history, and transaction records.
• To provide customer support via live chat, email, and WhatsApp.

3.2. Legal Compliance & Security

• To verify your identity (KYC) and ensure you meet the minimum age requirement (21+ years).
• To comply with anti-money laundering (AML) regulations and financial reporting requirements.
• To detect, prevent, and investigate fraud, unauthorized access, and other illegal activities.
• To enforce our Terms & Conditions and protect the security and integrity of the Service.

3.3. Service Improvement & Personalization

• To analyze usage patterns and improve the user experience on our website and mobile platform.
• To personalize content, promotions, and game recommendations based on your betting preferences.
• To develop new features, games, and betting markets that meet user demand.

3.4. Marketing & Communications

• To send promotional emails, SMS messages, or push notifications about bonuses, cashback offers, and new game releases (you can opt out at any time).
• To notify you about important account updates, security alerts, or changes to our Terms & Conditions and Privacy Policy.

4. Data Sharing & Disclosure

mdtoto does not sell, rent, or trade your personal information to third parties for marketing purposes. However, we may share your data with the following categories of third parties under specific circumstances:

4.1. Service Providers

We share data with trusted third-party service providers who perform services on our behalf, including:

• Payment Processors: BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata, BSI, OVO, DANA, GoPay, ShopeePay, LinkAja, and international payment gateways.
• Game Providers: Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, Pocket Games Soft, and other studios that power our casino and slot games.
• Identity Verification Services: Third-party KYC and anti-fraud platforms that verify your identity documents.
• Cloud Hosting & IT Infrastructure: Secure cloud storage providers that host our servers and databases.
• Customer Support Tools: Live chat, email, and helpdesk software providers.

All service providers are bound by strict confidentiality agreements and are only permitted to use your data for the purposes we specify.

4.2. Legal Requirements

We may disclose your personal information if required to do so by law or in response to valid legal requests, including:

• Court orders, subpoenas, or other legal processes.
• Requests from law enforcement, regulatory authorities, or government agencies.
• To protect the rights, property, or safety of mdtoto, our users, or the public.
• To investigate or prevent fraud, money laundering, or other illegal activities.

4.3. Business Transfers

In the event of a merger, acquisition, sale of assets, or bankruptcy, your personal information may be transferred to the acquiring entity as part of the business assets. You will be notified via email or a notice on our website before your data is transferred or becomes subject to a different Privacy Policy.

5. Data Security

mdtoto employs industry-standard security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. Our security practices include:

• 256-Bit SSL Encryption: All data transmitted between your device and our servers is encrypted using Secure Socket Layer (SSL) technology, the same standard used by banks and financial institutions.
• Secure Data Storage: Personal information is stored on secure servers located in data centers with 24/7 monitoring, fire suppression, and physical access controls.
• Access Controls: Only authorized personnel with a legitimate business need can access user data. All access is logged and audited.
• Regular Security Audits: We conduct periodic security assessments and vulnerability scans to identify and address potential risks.
• Password Protection: User passwords are hashed using industry-standard algorithms and are never stored in plain text.

While we take reasonable precautions to protect your data, no online platform can guarantee 100% security. You are responsible for maintaining the confidentiality of your account credentials and notifying us immediately if you suspect unauthorized access to your account.

6. Cookies & Tracking Technologies

mdtoto uses cookies and similar tracking technologies (web beacons, pixels, local storage) to enhance your browsing experience, analyze site traffic, and deliver personalized content.

6.1. What Are Cookies?

Cookies are small text files stored on your device when you visit a website. They allow the site to remember your preferences, login status, and browsing activity.

6.2. Types of Cookies We Use

• Essential Cookies: Required for the Service to function properly. These cookies enable core features like account login, payment processing, and security. You cannot opt out of essential cookies.
• Performance Cookies: Collect anonymous data about how users interact with the Service (e.g., most-visited pages, error messages). This helps us improve site performance.
• Functional Cookies: Remember your preferences (e.g., language settings, favorite games) to provide a more personalized experience.
• Marketing Cookies: Track your browsing activity across websites to deliver targeted advertisements. You can opt out of these cookies through your browser settings or third-party opt-out tools.

6.3. Managing Cookies

Most web browsers allow you to control cookies through their settings. You can choose to block or delete cookies, but doing so may affect your ability to use certain features of the Service. For more information on managing cookies, visit your browser's help documentation.

7. Your Privacy Rights

Under applicable data protection laws, you have the following rights regarding your personal information:

• Right to Access: You can request a copy of the personal data we hold about you.
• Right to Rectification: You can request that we correct inaccurate or incomplete data.
• Right to Erasure (Right to be Forgotten): You can request that we delete your personal data, subject to legal obligations and legitimate business interests.
• Right to Restrict Processing: You can request that we limit how we use your data in certain circumstances.
• Right to Data Portability: You can request a copy of your data in a structured, machine-readable format to transfer to another service provider.
• Right to Object: You can object to our processing of your data for direct marketing purposes or based on legitimate interests.
• Right to Withdraw Consent: If we process your data based on your consent, you can withdraw that consent at any time.

To exercise any of these rights, please contact our support team at [email protected] or via WhatsApp at +62 812-3456-7890. We will respond to your request within 30 days.

8. Data Retention

mdtoto retains your personal information for as long as necessary to fulfill the purposes described in this Policy, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods include:

• Account Data: Retained for the duration of your active account plus 5 years after account closure to comply with financial regulations.
• Transaction Records: Retained for 7 years to meet anti-money laundering (AML) and tax reporting requirements.
• Identity Verification Documents: Retained for 7 years after your last transaction or account closure.
• Marketing Data: Retained until you opt out or withdraw consent, then deleted within 30 days.

After the retention period expires, your personal data will be securely deleted or anonymized so it can no longer identify you.

9. International Data Transfers

mdtoto operates from an international jurisdiction, and your personal information may be transferred to, stored, and processed in countries outside Indonesia. These countries may have data protection laws that differ from those in Indonesia.

When we transfer your data internationally, we take appropriate safeguards to ensure it receives the same level of protection as required by Indonesian law, including:

• Using standard contractual clauses approved by international data protection authorities.
• Ensuring third-party service providers comply with strict confidentiality and security standards.
• Encrypting data during transmission and storage.

10. Children's Privacy

mdtoto strictly prohibits underage gambling. Our Service is only available to individuals who are 21 years of age or older. We do not knowingly collect, use, or disclose personal information from anyone under 21.

If we become aware that a user is under 21, we will immediately suspend the account, delete all associated personal data, and forfeit any funds in the account. If you believe a minor has provided personal information to mdtoto, please contact us immediately at [email protected].

11. Changes to This Privacy Policy

mdtoto reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or technological developments. When we make material changes, we will notify you by:

• Posting a notice on our homepage or in your account dashboard.
• Sending an email to the address associated with your account.
• Updating the "Last Updated" date at the top of this Policy.

Your continued use of the Service after changes are posted constitutes your acceptance of the revised Privacy Policy. We encourage you to review this page periodically to stay informed about how we protect your data.

12. Contact Us About Privacy

If you have questions, concerns, or requests regarding this Privacy Policy or how mdtoto handles your personal information, please contact us:

• Email: [email protected] (response time: 2-6 hours)
• Live Chat: Available 24/7 on our website (average response: under 2 minutes)
• WhatsApp: +62 812-3456-7890 (available 24/7)

We take your privacy seriously and are committed to addressing your concerns promptly and transparently.

Last Updated: January 1, 2026
Version: 2.0
By using mdtoto, you acknowledge that you have read, understood, and agree to this Privacy Policy.