Privacy Policy — How mdslot Protects Your Data

Clause 1 Definitions

In this Privacy Policy, the following terms carry the meanings set out below unless context requires otherwise:

• "mdslot", "we", "us", "our" — the mdslot platform, operated at https://mdslot.cam, and its controlling entity.
• "Player", "you", "your" — any individual who visits, registers on, or uses the mdslot platform.
• "Personal Data" — any information relating to an identified or identifiable natural person, including but not limited to name, date of birth, email address, phone number, financial account details, and device identifiers.
• "Processing" — any operation performed on Personal Data, including collection, recording, storage, use, disclosure, transmission, restriction, or deletion.
• "KYC" — Know Your Customer: the identity and document verification process mdslot applies to comply with anti-money-laundering (AML) and responsible gaming obligations.
• "Cookies" — small text files placed on your device by the mdslot platform to support session management, analytics, and user experience personalisation.
• "Third-Party Service Providers" — external companies engaged by mdslot to deliver specific operational services (e.g., payment processors, identity verification providers, fraud-detection services, analytics platforms) under contractual data-processing agreements.
• "IDR" / "Rp" — Indonesian Rupiah, the exclusive account currency on mdslot.

Clause 2 Data Controller

mdslot acts as the Data Controller in respect of the Personal Data it collects from players accessing the platform at https://mdslot.cam. As Data Controller, mdslot determines the purposes and means by which your Personal Data is processed, and bears responsibility for ensuring that such processing is carried out lawfully, fairly, and transparently in accordance with applicable international data-protection standards.

If you have any questions or concerns about how mdslot processes your Personal Data, you may contact our data-protection point of contact at the email address listed in Clause 16 (Contact Us) of this Policy.

Clause 3 Personal Data We Collect

mdslot collects the following categories of Personal Data, depending on how you interact with the platform:

3.1 Registration Data

• Full legal name (as it appears on your government-issued ID)
• Date of birth (to verify minimum age requirement of 21+)
• Residential address (city and province within Indonesia)
• Email address
• Mobile phone number
• Username and encrypted password

3.2 Identity Verification (KYC) Data

• Copy of government-issued photo ID (Indonesian KTP or valid passport)
• Selfie photograph for biometric identity matching (where applicable)
• Proof of payment method ownership (e.g., bank account screenshot, e-wallet registration confirmation)
• Proof of address documents (utility bill or bank statement, where requested)

3.3 Financial Data

• Deposit and withdrawal transaction records (amount, date, payment method, reference numbers)
• Bank account details or e-wallet identifiers used for transactions — only the last four digits of account numbers are retained in our primary systems; full account numbers are processed transiently for transfer matching and then truncated
• Betting history, game activity records, and account balance history

3.4 Technical & Device Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser information
• Session identifiers and login timestamps
• Cookie data as described in Clause 8

3.5 Communications Data

• Correspondence with our customer support team via live chat or email, including the content of messages and timestamps
• Survey responses or feedback submitted voluntarily by the Player

Clause 4 How We Collect Your Data

mdslot collects Personal Data through the following channels:

• Direct submission: Information you provide when you register an account, complete KYC verification, submit a deposit or withdrawal request, or contact our support team.
• Automated collection: Technical data collected automatically when you access the mdslot platform, including device information, IP address, and cookie data.
• Third-party verification services: Identity verification data returned by our KYC partners after you submit your identification documents for review.
• Payment processors: Transaction confirmation data provided by Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) following your payment instructions.
• Fraud and AML screening: Risk-scoring data generated by our fraud-detection and anti-money-laundering screening systems based on your activity patterns on the platform.

Clause 5 Legal Basis for Processing

mdslot processes your Personal Data on one or more of the following legal bases:

Clause 6 How We Use Your Personal Data

mdslot uses the Personal Data it collects for the following purposes:

6.1 Account Management

To create, maintain, and administer your mdslot account, including authenticating your identity at login, updating account preferences, and communicating account-related notices such as password reset confirmations, withdrawal approvals, and security alerts.

6.2 Payment Processing

To facilitate deposits and withdrawals in IDR via local Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja), verify that payment accounts are registered in the Player's own name, and maintain accurate transaction records for reconciliation and audit purposes.

6.3 Identity & Age Verification

To confirm that every registered player is at least 21 years of age and is who they claim to be, in compliance with our responsible gaming policy and applicable regulatory requirements. KYC data is processed by our verification partners and retained as described in Clause 9.

6.4 Responsible Gaming

To monitor account activity for signs of problem gambling behaviour, enforce self-exclusion requests, apply deposit limits and time-out restrictions where requested or required, and provide Players with access to responsible gaming resources and support contacts. Responsible gaming monitoring is performed in the genuine interests of player welfare and is a core operational commitment of mdslot.

6.5 Fraud Prevention & Security

To detect, investigate, and prevent fraudulent transactions, bonus abuse, money laundering, unauthorised account access, and any other activity that threatens the integrity of the mdslot platform or the security of player funds. This includes automated risk-scoring, IP analysis, device fingerprinting, and manual investigation by our security team.

6.6 Customer Support

To respond to your queries, resolve complaints, and maintain records of support interactions for quality assurance and regulatory compliance purposes. Support communications are retained for a minimum of two years following account closure.

6.7 Platform Improvement & Analytics

To analyse aggregated, anonymised usage data to understand how Players interact with the platform, identify technical issues, and make informed decisions about product development, interface design, and game selection. Individual player data is not used for profiling or automated decision-making that produces legal or similarly significant effects without human review.

6.8 Marketing Communications (Opt-In Only)

To send promotional offers, bonus notifications, and seasonal campaign communications to Players who have explicitly opted in to marketing messages. You may opt out at any time. mdslot does not send unsolicited marketing to Players who have not consented.

Clause 7 Data Sharing & Disclosure

mdslot shares your Personal Data only in the limited circumstances described below. We do not sell or rent your data to any third party for their independent marketing or commercial purposes.

7.1 Third-Party Service Providers

We share data with carefully selected service providers who process it on our behalf under binding data-processing agreements. Categories of providers include:

• Payment processors: Indonesian banks and e-wallet operators to execute deposit and withdrawal transactions in IDR.
• KYC / identity verification providers: Specialist third-party services that verify the authenticity of identity documents and perform biometric matching.
• Fraud detection and AML screening services: Platforms that score transaction and behavioural risk signals to protect the platform and its players.
• Cloud infrastructure providers: Hosting and data-storage services that maintain the technical environment in which mdslot operates, subject to contractual security and confidentiality obligations.
• Customer support platform providers: Live-chat and ticketing system vendors that facilitate communication between Players and mdslot's support team.

7.2 Regulatory and Law Enforcement Disclosure

mdslot may disclose Personal Data to regulatory authorities, law enforcement agencies, or courts of competent jurisdiction where required to do so by applicable law, court order, or regulatory direction. We will notify affected Players of such disclosures where legally permitted to do so.

7.3 Business Transfers

In the event that mdslot undergoes a merger, acquisition, restructuring, or sale of assets, your Personal Data may be transferred to the acquiring or successor entity as part of that transaction. Players will be notified prior to any such transfer that materially changes the terms under which their data is held.

Clause 8 Cookies & Tracking Technologies

mdslot uses cookies and similar tracking technologies to support platform functionality, enhance user experience, and gather aggregated analytics data. The categories of cookies we deploy are as follows:

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair platform functionality and may prevent account login. Disabling analytics or functional cookies will not affect your ability to use core platform features.

Clause 9 Data Retention

mdslot retains Personal Data for as long as is necessary to fulfil the purposes for which it was collected, as set out in this Policy, or as required by applicable regulatory obligations. The following general retention periods apply:

• Active account data: Retained for the duration of your account and for a minimum of five (5) years following account closure, to comply with AML, financial record-keeping, and gaming regulatory requirements.
• KYC documentation: Retained for a minimum of five (5) years following account closure or the completion of the last transaction, whichever is later.
• Transaction records: Retained for a minimum of five (5) years following the date of the transaction.
• Support communications: Retained for a minimum of two (2) years following account closure.
• Marketing consent records: Retained for the duration of your marketing subscription and for twelve (12) months following opt-out, as evidence of consent management compliance.
• Analytics data: Aggregated, anonymised analytics data is retained indefinitely in aggregate form; no individual player is identifiable in retained analytics records.

Following the expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised using industry-standard data-destruction techniques.

Clause 10 Data Security

mdslot implements a comprehensive set of technical and organisational security measures designed to protect your Personal Data against unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the mdslot platform.
• AES-256 encryption at rest for sensitive stored data, including KYC documents and financial records.
• Role-based access controls (RBAC) ensuring that only authorised personnel with a legitimate operational need can access identifiable Personal Data.
• Multi-factor authentication (MFA) for all internal system access by mdslot staff.
• Regular third-party penetration testing and vulnerability assessments of our platform infrastructure.
• 24/7 security monitoring with automated alerts for anomalous access patterns or potential data-breach indicators.

In the event of a data breach that poses a material risk to your rights and freedoms, mdslot will notify affected Players without undue delay following our discovery of the incident, and will take immediate steps to contain and remediate the breach.

Clause 11 International Data Transfers

mdslot operates servers and engages service providers in multiple jurisdictions. As a result, your Personal Data may be transferred to, stored in, or processed in countries outside Indonesia. Where such transfers occur, mdslot ensures that appropriate safeguards are in place to protect your data to a standard consistent with this Privacy Policy, including:

• Contractual data-processing agreements incorporating standard data-protection clauses with all Third-Party Service Providers who process data outside Indonesia.
• Transfer only to jurisdictions that maintain adequate data-protection regimes as assessed by internationally recognised standards.
• Encryption of data in transit and at rest for all cross-border transfers of identifiable Personal Data.

By registering on mdslot and accepting this Privacy Policy, you acknowledge and consent to the international transfer of your Personal Data under the safeguards described above.

Clause 12 Minors & Age Restriction

mdslot's services are strictly restricted to individuals who are 21 years of age or older. We do not knowingly collect Personal Data from anyone under the age of 21. Our mandatory KYC verification process is specifically designed to detect and prevent underage registration.

If mdslot becomes aware that Personal Data has been collected from a person under 21 years of age — whether through our own detection or notification from a parent or guardian — we will immediately close the relevant account, delete all associated Personal Data, and return any deposited funds in accordance with our Terms & Conditions.

Parents and guardians who believe that a minor may have registered on mdslot should contact us immediately at the email address provided in Clause 16. We will treat all such reports with urgency and confidentiality.

Clause 13 Your Data Rights

Subject to applicable law and regulatory restrictions, you have the following rights in respect of your Personal Data held by mdslot. To exercise any of these rights, contact us at the email address in Clause 16. We will respond within 30 days of receiving your request.

• Right of Access: You may request a copy of the Personal Data mdslot holds about you, together with information about how it is processed.
• Right to Rectification: You may request that mdslot corrects any inaccurate or incomplete Personal Data held about you. You may also update some information directly through your account settings.
• Right to Erasure: You may request the deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (for consent-based processing), or where processing is unlawful. Erasure requests are subject to our regulatory data-retention obligations — data we are legally required to retain cannot be deleted on request until the applicable retention period expires.
• Right to Restriction: You may request that mdslot restricts processing of your Personal Data in certain circumstances — for example, while a rectification request is being reviewed.
• Right to Data Portability: Where processing is based on contract or consent and carried out by automated means, you may request a copy of your Personal Data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing based on mdslot's legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

Clause 14 Complaints

If you are not satisfied with how mdslot has handled your Personal Data or responded to a data-rights request, you have the right to lodge a complaint. We encourage you to contact us directly in the first instance so that we can resolve your concern as promptly as possible.

To submit a formal data-protection complaint to mdslot, please email [email protected] with the subject line "Data Protection Complaint — [Your Account Username]". We will acknowledge all formal complaints within 48 hours and provide a substantive response within 14 business days.

If you remain unsatisfied following our response, you may escalate your complaint to the relevant data-protection authority or dispute-resolution body in your jurisdiction. mdslot will cooperate fully with any such regulatory investigation.

Clause 15 Policy Amendments

mdslot reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data-processing practices, applicable law, or regulatory requirements. Where amendments are material — meaning they significantly affect your rights or how your data is used — we will provide at least 14 days' advance notice via a prominent on-platform notification.

For non-material amendments (such as clarifying existing language or updating contact details), we may update this page without advance notice, updating the "Last Updated" date at the top of this Policy. Your continued use of the mdslot platform after any amended Privacy Policy takes effect constitutes your acceptance of the revised terms.

We recommend bookmarking this page and reviewing it periodically to stay informed of how mdslot protects your Personal Data.

Clause 16 Contact Us

For all data-protection enquiries, privacy rights requests, or formal complaints relating to this Privacy Policy, please contact the mdslot data-protection team using the following details:

• Email: [email protected]
• Subject line for data rights requests: "Data Rights Request — [Your Account Username]"
• Subject line for data protection complaints: "Data Protection Complaint — [Your Account Username]"
• Response commitment: Acknowledgement within 48 hours; substantive response within 30 calendar days for data rights requests, and within 14 business days for complaints.
• Support hours: 08:00–23:00 WIB, Monday to Sunday — live chat available within your account dashboard for general account queries.

Please note that the email address above is displayed as plain text and is not a clickable link. Copy the address into your email client to send us a message. mdslot does not use automated email systems to handle data-protection requests — all requests are reviewed by a member of our team.