mdy97 Privacy Policy

Introduction and Purpose

The mdy97 platform takes great care to maintain and protect your personal data. This Privacy Policy ("Policy") explains how we manage information about you when you use mdy97's website, mobile platform, and related services ("Services").

By using these Services, you are considered to have agreed to our handling of your personal data as described in this Policy. Please read this Policy carefully and make sure you understand it. If any part is unclear, you are welcome to contact us.

This Policy covers the personal data of players aged 21+ who use mdy97's services, and it should be noted that all steps of the Policy are carried out in accordance with the law.

Types of Personal Data Collected

We may collect data from your use of the Services, communications you send us, and technical devices. The types of data collected are as follows—

1. Account-related data

• The username and password you set (password stored in hashed form only);
• Contact phone number or email address — according to the communication method we support;
• Date of birth (to verify that you are 21+ in any category);
• Payment account credentials (KBZPay, Wave Money, AYA Pay, CB Pay).

2. Financial data

• Deposit and withdrawal records — amount, date and confirmation status;
• Payment method details (we do not store complete financial authorisation card data);
• Personal information related to financial verification checks (for AML requirements).

3. Gaming Records

• Gaming records — game type played, date/time of play and results;
• Bonus and promotion claim and usage records;
• VIP level change records.

4. Technical Information

• IP address and network connection details;
• Browser type, version and device specification information;
• Cookies and similar tracking technologies (explained further in the section below);
• Login and logout timestamp records (session log).

How We Collect Personal Information

We obtain your personal information through the following methods—

Purposes of Data Use

Collected personal information is used only for the following purposes—

• Account Management — opening your account, verifying your identity and maintaining security;
• Financial Transactions — processing deposits and withdrawals smoothly and maintaining financial transparency;
• Legal Compliance — meeting AML (Anti-Money Laundering) and KYC (Know Your Customer) requirements;
• Service Improvement — resolving platform issues, improving service quality, and recommending games suited to you;
• Communications — sending service-related notifications (and promotional news if you have opted in);
• Responsible Gaming — monitoring gaming patterns to give early warnings of any concerning behaviour;
• Security and Fraud Prevention — protecting against unauthorised access and fraudulent activity.

We will not use your personal information for any purpose beyond those stated above, nor sell it to third parties.

Data Sharing and Disclosure

mdy97 will not sell, rent or trade your personal information to third parties. However, it may be disclosed in the following circumstances—

Service Providers

Companies that provide services on our behalf (for example — payment processors, game software providers, data security providers) may access your data only within the scope of our instructions and may not use it for unrelated purposes.

Legal Requirements

Where required to comply with court orders, legal obligations or related instructions from authorities, we may disclose your personal information in accordance with the law.

Business Transactions

If all or part of mdy97's business changes hands, personal information may be transferred to the successor in accordance with the law, and the terms of this policy will continue to apply.

Your Consent

Your personal information will be disclosed in circumstances beyond what this policy describes only where you have given explicit consent.

Cookies and Tracking Technologies

Our service uses cookies and similar technologies (local storage, session tokens) for the following purposes—

• Essential Cookies — cookies required to keep your session active and run the service without any way to disable them;
• Functional Cookies — to save your preferences such as language selection and last game settings;
• Analytics Cookies — cookies used to understand platform usage patterns and improve the service (includes third-party cookies).

You can disable cookies in your browser settings, but please note that doing so may affect how well some parts of the service work. Disabling "Essential Cookies" may disrupt your login session.

Personal Data Retention Period

The period for which we retain your personal data varies depending on the purpose and legal requirements—

• Account data — from the date the account is closed until the minimum legal retention period has passed;
• Financial records — for the maximum period required by financial record-keeping laws;
• Game records — for as long as needed to cover service liability;
• Technical log records — normally deleted within 6 months to 1 year;
• Marketing data — deleted as soon as you opt out.

Personal data that is no longer needed after legal requirements have passed will be deleted or anonymised so that no individual can be identified.

Personal Data Security Measures

mdy97 applies technical and organisational security measures to protect your personal data from unauthorised access, alteration, disclosure or destruction—

• SSL Encryption — all data transfers between you and our servers are encrypted and protected using TLS/SSL protocol;
• Access Control — internal staff can only access data relevant to their role, and all access is logged;
• Password Protection — no staff member can view your actual password; it is stored in hashed form only;
• Regular Audits — regular security checks are carried out on the platform and data storage systems;
• Payment Data Protection — payment transactions are processed only through PCI-DSS compliant services.

However, we cannot guarantee that data transmission over a network or data storage is 100% secure. You are responsible for keeping your login credentials safe and for preventing unauthorised access to your account.

Your Rights Regarding Personal Data

You have the following rights regarding your personal data—

To exercise any of these rights, contact us at [email protected]. We will respond to your request within the legally required timeframe after receiving it. Where we are unable to act due to legal protections, we will explain the reason clearly.

Protection for Under 21

mdy97's services are for players aged 21 and above only. We do not intentionally collect or store personal data from anyone under 21. If we become aware that a person under 21 has accessed our services, we will immediately delete all related personal data and close that person's account.

If you notice that a minor has accessed the site without authorization, please contact us immediately at [email protected].

Policy Updates

We reserve the right to update this Privacy Policy at any time. Any changes will be posted on this page and the "Last Updated" date will be revised. Continued use of our services after such changes have been posted will be considered your acceptance of those changes.

Accessing our services within 7 days of any posted update will be treated as agreement to the revised policy. We respect your right to opt out by simply discontinuing use of our services.