Privacy Policy — mcd88

1. Introduction & Scope

mcd88 ("the Platform", "we", "us", "our") operates the online betting and gaming platform accessible at https://mcd88.cam. This Privacy Policy applies to all personal information collected, processed, and stored by mcd88 in connection with your use of the Platform, including your account registration, KYC verification, deposit and withdrawal transactions, customer support interactions, and general browsing of the mcd88 website.

This Policy applies to all current and prospective Members regardless of their location, with particular reference to Members based in Indonesia, which constitutes mcd88's primary target market. By registering an account on mcd88 or by continuing to use the Platform after this Policy has been published or updated, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein.

This Privacy Policy should be read alongside the mcd88 Terms & Conditions, which govern the contractual relationship between you and mcd88. In the event of any conflict between this Privacy Policy and the Terms & Conditions in respect of data handling, this Privacy Policy shall prevail.

2. Definitions

In this Privacy Policy, the following terms carry the meanings set out below:

3. Information We Collect

3.1 Information You Provide Directly

When you register an account, complete KYC verification, make deposits or withdrawals, contact support, or respond to a survey or promotion, you may provide the following categories of Personal Data:

• Identity information: Full legal name, date of birth, gender, nationality;
• Contact information: Email address, mobile telephone number, residential address;
• Identity documents: Indonesian National Identity Card (KTP Nasional — front and back), proof of address documents, selfie verification photographs submitted during KYC;
• Financial information: Bank account details (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon), e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja), and transaction records denominated in Indonesian Rupiah (IDR / Rp);
• Account credentials: Username and hashed password (passwords are never stored in plain text);
• Support communications: Records of your interactions with the mcd88 support team via live chat or email.

3.2 Information Collected Automatically

When you access or use the mcd88 platform, certain technical data is collected automatically by our systems:

• Device and browser data: IP address, device type, operating system, browser type and version, screen resolution;
• Usage data: Pages visited, bet history, game session data, deposit and withdrawal timestamps, navigation path, session duration;
• Geolocation data: Approximate geographic location derived from IP address (used for jurisdiction eligibility checks and fraud prevention);
• Cookies and similar technologies: Session cookies, preference cookies, and analytics identifiers as described in Section 7.

3.3 Information from Third Parties

mcd88 may receive Personal Data about you from the following third-party sources:

• Identity verification providers: Third-party KYC services used to cross-reference the identity documents you submit;
• Payment processors: Confirmation data from Indonesian banks and e-wallet providers confirming the status of deposit and withdrawal transactions;
• Fraud prevention services: Risk signals and watchlist data from internationally recognized fraud and sanctions screening services;
• Responsible gaming partners: Self-exclusion registry data where applicable under the responsible gaming standards to which mcd88 adheres.

4. How We Use Your Information

mcd88 uses the Personal Data we collect for the following purposes:

mcd88 does not use your Personal Data for automated decision-making that produces legal or similarly significant effects without human oversight, except for routine fraud-detection scoring which is subject to manual review upon request.

5. Legal Basis for Processing

mcd88 processes your Personal Data on one or more of the following legal grounds:

• Contractual necessity: Processing required to perform the contract between you and mcd88, including account registration, payment processing, and game delivery;
• Legal obligation: Processing required to comply with applicable laws, including KYC/AML obligations, age verification requirements, and regulatory reporting duties;
• Legitimate interests: Processing necessary for mcd88's legitimate business interests — including fraud prevention, platform security, responsible gaming monitoring, and platform improvement — where those interests are not overridden by your rights and freedoms;
• Consent: Processing based on your explicit consent, particularly for marketing communications and the use of non-essential cookies. You may withdraw consent at any time by contacting mcd88 support or adjusting your account settings.

6. Sharing Your Information

6.1 We Do Not Sell Your Data

mcd88 does not sell, rent, or trade your Personal Data to any third party for their independent commercial purposes. This is an unconditional commitment and applies regardless of the commercial relationship between mcd88 and any third party.

6.2 Permitted Disclosures

mcd88 may share your Personal Data with the following categories of third parties, strictly on a need-to-know basis and under contractual data protection obligations:

• KYC and identity verification providers: To verify your identity, age, and address. These providers act as Data Processors under mcd88's instructions;
• Payment service providers: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon) and e-wallet platforms (OVO, DANA, GoPay, ShopeePay, LinkAja) to facilitate deposits and withdrawals. These providers have their own privacy policies governing your financial data;
• Game software providers: Licensed game studios (including Pragmatic Play, Evolution Gaming, PGSoft, and Spribe) may receive game session data to ensure correct round outcomes and RTP reporting. These providers do not receive your financial or identity data;
• Fraud prevention and security services: Third-party platforms used to screen transactions, detect account anomalies, and verify sanctions status;
• IT infrastructure and cloud service providers: Hosting, database, and content delivery providers that process data on our behalf under strict confidentiality and security agreements;
• Legal and regulatory authorities: Where mcd88 is required by applicable law, court order, or regulatory instruction to disclose Personal Data.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or substantially all of mcd88's assets, your Personal Data may form part of the transferred assets. In such circumstances, mcd88 will provide notice to affected Members and ensure that the transferee is bound by data protection obligations no less protective than those set out in this Privacy Policy.

7. Cookies & Tracking Technologies

7.1 What Cookies We Use

mcd88 uses the following categories of cookies and similar tracking technologies:

• Strictly necessary cookies: Essential for the platform to function — these include session authentication tokens, security tokens, and load-balancing cookies. These cannot be disabled without impairing platform functionality;
• Functional cookies: Store your language preferences, display settings, and last-session data to improve your experience on subsequent visits;
• Analytics cookies: Allow mcd88 to understand how Members navigate and use the platform, which pages are most visited, and where technical errors occur. This data is aggregated and does not identify individual Members by name;
• Security cookies: Used to detect and prevent fraudulent activity, bot access, and credential-stuffing attacks.

mcd88 does not deploy third-party advertising cookies, retargeting pixels, or social media tracking scripts on the Platform.

7.2 Managing Cookies

You can control non-essential cookie categories via your browser settings. Most modern browsers allow you to block or delete cookies, though doing so may affect the functionality of the mcd88 platform — particularly session management and login persistence. Instructions for managing cookies in the most common browsers are available through your browser's Help documentation.

8. Data Retention

mcd88 retains your Personal Data only for as long as is necessary to fulfil the purposes described in this Privacy Policy, or as required by applicable legal obligations. The following general retention guidelines apply:

• Active account data: Retained for the duration of your account's active status plus five (5) years following account closure, to comply with anti-money-laundering record-keeping obligations;
• KYC documentation: Retained for a minimum of five (5) years from the date of submission, in accordance with internationally recognized AML record-keeping standards;
• Transaction records: Deposit, withdrawal, and bet history records are retained for five (5) years from the date of the relevant transaction;
• Support communications: Retained for three (3) years from the date of the relevant communication;
• Marketing consent records: Retained until you withdraw consent plus one (1) year to demonstrate consent compliance;
• Technical logs and security data: Retained for ninety (90) days in live systems, then archived for up to twelve (12) months for security investigation purposes.

Once the applicable retention period expires, your data is securely deleted or anonymized in a manner that makes it irrecoverable and non-attributable to you as an individual.

9. Data Security

mcd88 takes the security of your Personal Data seriously and has implemented a comprehensive set of technical and organizational measures to protect it against unauthorized access, disclosure, alteration, or destruction:

• Encryption in transit: All data transmitted between your browser or app and mcd88 servers is encrypted using 256-bit TLS (Transport Layer Security), the same standard used by global banking institutions;
• Encryption at rest: Sensitive data fields — including identity documents and payment credentials — are encrypted at rest using industry-standard algorithms;
• Password hashing: Account passwords are hashed using a strong one-way cryptographic function. mcd88 does not store passwords in plain or reversible form;
• Access controls: Access to Member Personal Data is restricted to mcd88 personnel and Data Processors who have a documented need to access it. All access is logged and subject to periodic review;
• Penetration testing: mcd88's platform undergoes regular independent security assessments to identify and remediate vulnerabilities;
• Incident response: mcd88 maintains a documented data breach response procedure. In the event of a breach affecting Member Personal Data, affected Members will be notified in accordance with applicable data protection standards within seventy-two (72) hours of mcd88 becoming aware of the breach.

10. Your Rights

As a Member of mcd88, you have the following rights in relation to the Personal Data we hold about you. To exercise any of these rights, please contact our support team via the in-platform live chat or by email at [email protected]. We will respond to all data rights requests within thirty (30) days of receipt.

• Right of access: You have the right to request a copy of the Personal Data we hold about you, along with information about how it is being used and on what legal basis;
• Right to rectification: You have the right to request correction of any inaccurate or incomplete Personal Data we hold about you. For basic account details, you may update these directly in your account settings;
• Right to erasure ("right to be forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where we have no lawful basis for continued retention. Note that this right is limited by our legal obligations to retain data for KYC and AML compliance purposes;
• Right to restrict processing: You may request that we pause the processing of your Personal Data in certain circumstances, for example while a dispute about its accuracy is resolved;
• Right to data portability: Where processing is based on your consent or on contract performance, you may request that we provide your Personal Data in a structured, commonly used, machine-readable format;
• Right to object: You may object to the processing of your Personal Data where mcd88 relies on legitimate interests as the legal basis, or for direct marketing purposes. We will cease direct marketing activities promptly upon receipt of a valid objection;
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing conducted prior to the withdrawal.

11. Children's Privacy

mcd88 is a gambling platform intended exclusively for adults. The minimum age to create an account and use the Platform is twenty-one (21) years. mcd88 does not knowingly collect Personal Data from anyone under the age of 21. If we become aware that Personal Data has been collected from an individual under 21, we will take immediate steps to delete that data and close the associated account.

We strongly encourage parents and guardians to use parental control software to prevent minors from accessing online gambling platforms, including mcd88. If you believe a minor has accessed mcd88 using your payment credentials or personal information, please contact our support team immediately so we can take appropriate protective action.

12. International Data Transfers

mcd88's platform infrastructure may involve the transfer of Personal Data to servers and processors located outside Indonesia. Where such transfers occur, mcd88 ensures that adequate safeguards are in place to protect your Personal Data to a standard at least equivalent to that described in this Privacy Policy. Safeguards include:

• Contractual data processing agreements with Data Processors incorporating standard data protection clauses;
• Transfers exclusively to jurisdictions or service providers that maintain internationally recognized data security standards;
• Periodic audits of Data Processor compliance with mcd88's data protection requirements.

By using mcd88, you acknowledge that your Personal Data may be processed outside Indonesia and consent to such transfers subject to the safeguards described in this section.

13. Amendments to This Privacy Policy

mcd88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in data protection law, platform functionality, or mcd88's data handling practices. Where amendments are material — particularly changes affecting the categories of data collected, the purposes for which data is used, or Member rights — mcd88 will provide no less than fourteen (14) days' advance notice via the registered email address and/or a prominent notice on the Platform.

The effective date shown at the top of this document will be updated each time the Policy is revised. We recommend that you review this Privacy Policy periodically to remain informed of how mcd88 protects your data. Continued use of the Platform following the effective date of any revision constitutes acceptance of the updated Privacy Policy.

14. Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise your data rights, or have a complaint about how mcd88 has handled your Personal Data, please contact us through the following channels:

If you are dissatisfied with mcd88's response to a data rights request or privacy complaint, you may escalate the matter to the applicable data protection supervisory authority in your jurisdiction. mcd88 will cooperate fully with any regulatory investigation into data handling complaints.