Privacy Policy

1. Introduction and Scope

This Privacy Policy governs the collection, processing, and protection of personal data submitted to or collected by mdu303 (hereinafter "we," "us," or "our") through our platform accessible at https://mdu303.cam and all associated mobile applications and services (collectively, the "Platform"). By creating an account or using mdu303 services, you acknowledge that you have read, understood, and consent to the data practices described in this Privacy Policy.

This Privacy Policy applies to all users of the mdu303 Platform, including residents of Indonesia and other jurisdictions where our services are accessible. We are committed to compliance with international data protection standards and best practices to ensure your personal information is handled responsibly and securely.

2. Information We Collect

2.1 Personal Information Provided by You

When you register for an mdu303 account, we collect the following categories of personal data:

• Identity Information: Full legal name, date of birth, gender, and nationality as indicated on your government-issued identification documents.
• Contact Information: Email address, phone number, and residential address including city, province, and postal code.
• Account Credentials: Username, password (stored in encrypted format), and security questions for account protection.
• Financial Information: Bank account details for deposits and withdrawals (bank name, account number, account holder name), e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja account details), and transaction history.
• Verification Documents: Copies of Indonesian ID card (KTP), passport, driver's license, utility bills, bank statements, or other documents required for Know Your Customer (KYC) identity verification and age confirmation.

2.2 Information Collected Automatically

When you access the mdu303 Platform, we automatically collect technical and usage data including:

• Device Information: Device type, operating system, browser type and version, screen resolution, and device identifiers.
• Connection Information: IP address, internet service provider (ISP), geographic location (city and region level, not precise GPS coordinates), and timezone.
• Usage Data: Pages viewed, games played, bets placed, deposit and withdrawal amounts, session duration, click patterns, and interaction with Platform features.
• Cookies and Tracking Technologies: We use cookies, web beacons, and similar technologies to recognize your device, remember preferences, and analyze Platform usage. For detailed information, see Section 8 (Cookies Policy).

2.3 Information from Third-Party Sources

We may receive information about you from third-party service providers including payment processors (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, and e-wallet providers), fraud prevention services, identity verification agencies, and game providers to verify your identity, process transactions, and detect fraudulent activity.

3. How We Use Your Information

mdu303 processes your personal data for the following legitimate business purposes:

3.1 Account Management and Service Delivery

• Creating and maintaining your user account.
• Authenticating your identity and verifying you meet the 21+ age requirement.
• Processing deposits, withdrawals, and managing your account balance in Indonesian Rupiah (IDR).
• Providing access to casino games, sports betting, live dealer experiences, and other gaming services.
• Calculating and awarding bonuses, promotions, and VIP rewards.
• Sending transactional notifications regarding deposits, withdrawals, bonuses, and account status updates.

3.2 Compliance and Security

• Complying with Know Your Customer (KYC) and Anti-Money Laundering (AML) regulations.
• Preventing fraud, money laundering, underage gambling, and other illegal activities.
• Detecting and investigating suspicious betting patterns, bonus abuse, and terms of service violations.
• Responding to legal requests from law enforcement, regulatory authorities, or courts.
• Enforcing our Terms & Conditions and protecting the integrity of the Platform.

3.3 Platform Improvement and Analytics

• Analyzing usage patterns to optimize game selection, user interface, and overall user experience.
• Conducting market research to understand Indonesian player preferences for casino games, sports betting markets (BRI Liga 1, EPL, La Liga), and local favorites like togel games.
• Testing new features, games, and promotions before full rollout.
• Monitoring Platform performance, identifying technical issues, and improving security measures.

3.4 Marketing Communications (With Your Consent)

• Sending promotional emails about new games, bonuses, tournaments, and special offers tailored to Indonesian players.
• Delivering personalized recommendations based on your gaming preferences and history.
• Informing you about VIP program benefits, tier upgrades, and exclusive events.

You can opt out of marketing communications at any time by adjusting your account preferences or clicking the unsubscribe link in promotional emails. Opting out will not affect transactional or service-related messages.

4. Data Sharing and Disclosure

mdu303 does not sell your personal information to third parties. We may share your data only in the following limited circumstances:

4.1 Service Providers and Business Partners

We engage trusted third-party service providers to perform essential business functions on our behalf, including:

• Payment Processors: Banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) to process deposits and withdrawals.
• Game Providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and other licensed studios to deliver casino games and live dealer experiences.
• Identity Verification Services: Third-party KYC providers to verify your identity documents and age.
• Fraud Prevention Partners: Security firms that analyze betting patterns and detect suspicious activity.
• Customer Support Tools: Platforms for managing live chat, WhatsApp, and email support inquiries.

All service providers are contractually obligated to protect your data and use it only for the specific purposes authorized by mdu303.

4.2 Legal and Regulatory Obligations

We may disclose your information when required by law, including to comply with court orders, subpoenas, law enforcement requests, or regulatory investigations. We may also share data to protect our legal rights, prevent fraud, enforce our Terms & Conditions, or safeguard the security of our users and Platform.

4.3 Business Transfers

In the event of a merger, acquisition, corporate restructuring, or sale of assets, your personal information may be transferred to the acquiring entity. We will notify you via email or Platform notification before your data is transferred and becomes subject to a different privacy policy.

5. Data Security Measures

mdu303 employs industry-leading security technologies and practices to protect your personal information from unauthorized access, disclosure, alteration, or destruction:

• 256-bit SSL Encryption: All data transmitted between your device and our servers is encrypted using Secure Socket Layer (SSL) technology, the same standard used by major banks worldwide.
• Secure Data Storage: Personal data is stored on encrypted servers in secure data centers with restricted physical and digital access.
• Access Controls: Only authorized mdu303 personnel with legitimate business needs can access your data, and all access is logged and monitored.
• Regular Security Audits: We conduct periodic security assessments and vulnerability testing by independent third-party cybersecurity firms.
• Firewall Protection: Advanced firewall systems protect our servers from external attacks and unauthorized intrusion attempts.
• Account Security Features: Two-factor authentication (2FA) options, secure password requirements, and automatic logout after periods of inactivity.

While we implement robust security measures, no method of electronic transmission or storage is 100% secure. You are responsible for maintaining the confidentiality of your account credentials and should immediately notify us if you suspect unauthorized access.

6. Data Retention

mdu303 retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy and comply with legal obligations:

• Active Accounts: Personal data and transaction records are retained throughout the lifetime of your active account.
• Closed Accounts: After voluntary account closure, we retain essential data for a minimum of 5 years to comply with financial regulations, anti-money laundering requirements, and potential legal claims.
• Marketing Data: If you opt out of marketing communications, we retain your email address solely to honor your opt-out preference and prevent future marketing.
• Legal Holds: Data subject to ongoing litigation, regulatory investigations, or legal disputes is retained until the matter is resolved.

After the retention period expires, we securely delete or anonymize your data so it can no longer identify you personally.

7. Your Privacy Rights

As a mdu303 user, you have the following rights regarding your personal data:

7.1 Right to Access

You can request a copy of the personal information we hold about you, including account details, transaction history, and verification documents submitted.

7.2 Right to Rectification

You can update or correct inaccurate personal information directly through your account settings or by contacting customer support.

7.3 Right to Erasure

You can request deletion of your personal data, subject to legal retention requirements. Note that account deletion is permanent and cannot be reversed.

7.4 Right to Restrict Processing

You can request that we limit how we process your data in certain circumstances, such as while disputing data accuracy or contesting the legality of processing.

7.5 Right to Data Portability

You can request a copy of your data in a structured, machine-readable format for transfer to another service provider.

7.6 Right to Withdraw Consent

Where processing is based on your consent (e.g., marketing communications), you can withdraw consent at any time without affecting the lawfulness of processing conducted before withdrawal.

To exercise any of these rights, please contact our Data Protection Officer at [email protected] with your request. We will respond within 30 days of verification of your identity.

8. Cookies Policy

mdu303 uses cookies and similar tracking technologies to enhance your Platform experience. Cookies are small text files stored on your device that remember your preferences and improve functionality. We use the following types of cookies:

You can manage cookie preferences through your browser settings. Note that disabling certain cookies may limit Platform functionality and user experience. For mobile app users, tracking preferences can be adjusted in device settings.

9. International Data Transfers

mdu303 operates internationally and may transfer your personal data to servers located outside Indonesia for processing and storage. When we transfer data across borders, we ensure adequate safeguards are in place through standard contractual clauses, data processing agreements, and compliance with international data protection frameworks. Your data receives the same level of protection regardless of geographic location.

10. Children's Privacy

mdu303 services are strictly for individuals aged 21 and older. We do not knowingly collect personal information from individuals under the legal gambling age. If we become aware that a user is underage, we will immediately suspend the account, prevent further access, and delete all associated personal data. Parents or guardians who believe a minor has provided information to mdu303 should contact us immediately at [email protected].

11. Third-Party Links and Services

The mdu303 Platform may contain links to third-party websites, game providers, or payment processors. This Privacy Policy applies only to information collected by mdu303. We are not responsible for the privacy practices of external sites or services. We encourage you to review the privacy policies of any third-party platforms you visit or use in connection with mdu303 services.

12. Changes to This Privacy Policy

mdu303 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or Platform features. Material changes will be communicated via email or prominent Platform notification at least 30 days before taking effect. Your continued use of mdu303 services after the effective date of changes constitutes acceptance of the revised Privacy Policy. We recommend reviewing this page periodically to stay informed about how we protect your data.

13. Contact Information and Data Protection Officer

For questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact our Data Protection team:

Email: [email protected]
Subject Line: Privacy Inquiry - [Your Account Username]
Response Time: We aim to respond to all privacy inquiries within 5-7 business days
Support Hours: 24/7 availability via live chat, WhatsApp, and email for urgent security concerns

If you are not satisfied with our response to your privacy concern, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.