Does MDGWin share my data with advertising companies?

No. MDGWin does not sell, rent, or share your personal data with any advertising companies, data brokers, or third parties for marketing purposes. Your data is only shared with parties genuinely required for platform operations — such as licensed payment service providers (Touch 'n Go, GrabPay, FPX) and game software providers — and only to the extent necessary to deliver those services. All such third parties are bound by strict data protection agreements with MDGWin.

Can I request MDGWin to delete all my data?

Yes, you have the right to request deletion of your personal data from MDGWin's systems. To submit this request, contact us by email at support@mdgwin.best or via 24/7 live chat. Please note that certain data may not be immediately deletable if MDGWin still has a legal obligation to retain it — for example, financial transaction records that must be kept for a specified period under Malaysia's anti-money laundering (AML) laws. We will clearly inform you which data can be deleted and which must be retained due to legal obligations, along with the applicable retention period.

Does MDGWin store my bank account or eWallet number?

No, MDGWin does not store your full bank account or eWallet number. When you deposit via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX, transactions are processed directly by a licensed payment gateway operating to PCI-DSS security standards. MDGWin only receives the transaction verification details required — such as the transaction reference number, amount, and status — without any sensitive account information. This approach ensures your sensitive financial data is never exposed to MDGWin, even in the event of an unforeseen security incident.

How does MDGWin protect my data from hackers?

MDGWin employs multiple layers of security to protect your data. First, all data communications are encrypted using SSL/TLS 256-bit — the same standard used by banking institutions. Second, sensitive data stored in our databases is encrypted using industry-recognised encryption algorithms. Third, a threat monitoring system operates continuously 24/7 to detect and respond to suspicious activity. Fourth, strict access controls ensure that only authorised personnel can access user data, and every access is logged. Fifth, independent security audits are conducted periodically to assess and strengthen MDGWin's security posture. We always encourage you to take your own security precautions as well, such as using a strong password and enabling 2FA.

Who can view my game history and betting records on MDGWin?

Your game history and betting records on MDGWin are strictly confidential. Only you can view these records through the "Game History" and "Transaction History" sections of your account. On MDGWin's end, only specifically authorised customer support staff may access these records — and only when necessary to resolve an enquiry or complaint you have raised, or for legal compliance purposes. All such access is logged in MDGWin's internal audit trail. This information is not shared with any third party unless required by a court order or lawful directive from a Malaysian authority.

mdgwin | Privacy Policy – Protecting Your Data in Malaysia

Contents

1. Introduction
2. Data We Collect
3. How We Collect Data
4. Purpose of Data Use
5. Data Sharing
6. Storage & Security
7. Cookies & Tracking Technologies
8. Financial Transaction Data
9. Your Rights
10. Children's Data
11. Links to Other Sites
12. Privacy Policy Amendments
13. Contact Us

Introduction

MDGWin ("we", "our platform") operates an online entertainment platform accessible via the domain mdgwin.best. We are fully committed to protecting the privacy and security of every individual's personal data on our platform.

This Privacy Policy details the types of personal data we collect, the purposes for collecting it, how we use and store that data, who may have access to it, and your rights as a data subject under Malaysian data protection law.

This Privacy Policy has been developed in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and its subsidiary regulations. By registering an account and using the MDGWin platform, you confirm that you have read, understood, and agreed to this Privacy Policy.

This Privacy Policy should be read together with MDGWin's Terms & Conditions. Both documents together form the legal basis of the relationship between you and MDGWin. In the event of any conflict between these documents on matters relating to privacy, this Privacy Policy shall take precedence.

Personal Data We Collect

MDGWin only collects the personal data necessary to deliver platform services in a safe, efficient, and legally compliant manner. The following are the categories of personal data we collect:

Identity Data:

Full name MyKad / Passport Number Date of birth Residential address Gender Nationality

Contact Data:

Email address Mobile phone number

Account Data & Platform Activity:

Username Game history Betting records Login logs Account settings

Technical Data:

IP Address Device type Browser type Operating system Network connection data

Financial Data (Limited):

eWallet / bank type Transaction history Account balance

MDGWin does not store your credit card number, full bank account number, or full eWallet number. This sensitive financial data is handled directly and securely by licensed payment providers that operate under PCI-DSS security standards.

How We Collect Your Personal Data

MDGWin collects your personal data through various channels, all for legitimate purposes necessary to operate the platform:

Account registration form: When you first register a MDGWin account, you provide us directly with basic information such as your name, email address, and phone number.
Identity verification process (KYC): Where identity verification is required to process a withdrawal or to meet legal obligations, you may be asked to upload an identification document such as a copy of your MyKad.
Platform usage: When you log in, navigate the platform, place bets, play casino games, or interact with any part of MDGWin, our systems automatically record this activity for security and operational purposes.
Financial transactions: When you make a deposit via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX, transaction-related information (not your full account details) is recorded for financial record-keeping and compliance purposes.
Customer support communications: When you contact the MDGWin support team via live chat or email, those communications may be stored for the purpose of improving service quality and maintaining complaint resolution records.
Cookies and tracking technologies: The MDGWin platform uses cookies and similar tracking technologies to collect technical data about how you use the platform. More information on this can be found in Section 7.

Purposes for Using Personal Data

MDGWin uses collected personal data solely for the following legitimate purposes. We do not use your data for any other purpose without your consent:

Account management: To create, verify, and manage your MDGWin account, including the login process, identity verification, and account information updates.
Service provision: To give you seamless, uninterrupted access to all MDGWin games and services — including Sports Betting, Live Casino baccarat, poker, lottery, and e-sports.
Financial transaction processing: To accurately and promptly process your deposits and withdrawals, and to maintain correct financial transaction records.
Platform security: To detect and prevent fraud, money laundering, unauthorised access, and any activity that violates MDGWin's Terms & Conditions.
Service communications: To send you important account-related information such as transaction confirmations, security notices, policy updates, and promotional content that you have opted in to receive.
Legal compliance: To fulfil MDGWin's legal obligations under Malaysian law, including anti-money laundering (AML) requirements and identity verification (KYC) requirements.
Customer support: To enable MDGWin's support team to assist you effectively whenever you encounter an issue or have a query about the platform.
Platform improvements: To analyse usage patterns in aggregate and anonymised form for the purpose of improving user experience, platform performance, and MDGWin's product offerings.

MDGWin has never and will never use your data for third-party advertising, sell your profile to marketing companies, or use your data for automated decision-making that affects your rights without full transparency.

Data Sharing with Third Parties

MDGWin does not share, sell, or disclose your personal data to third parties except in the following limited situations required for platform operations or legal compliance:

Payment service providers: Licensed payment service providers that process your transactions — including Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX member banks — require access to certain transaction details in order to process payments. All such providers are bound by strict data protection agreements with MDGWin.
Game software providers: MDGWin's Live Casino and Sports Betting providers may receive the technical data required to deliver their games. They do not receive your full personal identification details.
Legal authorities: MDGWin may be legally required to disclose certain information to Malaysian authorities — including law enforcement or relevant regulatory bodies — when directed by a valid court order or lawful legal directive.
Technical service providers: Companies that provide technical infrastructure services, server hosting, or IT support to MDGWin may have limited access to data in the course of performing their services, subject to strict confidentiality agreements.

In all instances of data sharing listed above, MDGWin ensures that the relevant third parties adhere to data protection standards equivalent to or higher than those applied by MDGWin itself.

Mdgwin does not share your data with marketing companies, advertising platforms, data brokers, or any party not listed above. If you suspect your data has been shared without authorisation, please contact us immediately via 24/7 live chat.

Data Storage & Security

MDGWin invests seriously in security infrastructure to protect your personal data from unauthorised access, loss, alteration, or disclosure.

Technical security measures we employ:

256-bit SSL/TLS Encryption: All data transmitted between your device and MDGWin's servers is encrypted using SSL/TLS protocol with 256-bit keys — the same standard used by the banking industry.
Stored data encryption: Sensitive data stored in MDGWin's databases — including passwords and financial information — is kept in encrypted form using industry-recognised encryption algorithms.
Strict access controls: Access to user data within MDGWin's systems is restricted to staff who require it to perform their legitimate job functions, and every access is recorded in an audit log.
24/7 security monitoring: MDGWin's security monitoring system operates around the clock to detect and respond to any threats or suspicious activity in real time.
Two-factor authentication (2FA): MDGWin supports two-factor authentication via SMS OTP for all member accounts as an additional layer of protection.
Periodic security audits: Independent security audits are conducted periodically by accredited third parties to assess and ensure the integrity of MDGWin's platform security.

Data retention period: MDGWin retains your personal data for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable Malaysian law. Generally, account and transaction records are kept for the period prescribed under Malaysia's anti-money laundering laws. Once the applicable retention period has elapsed, data is securely deleted using industry-recognised data disposal procedures.

While MDGWin takes all reasonable steps to protect your data, no online security system can be guaranteed 100% safe against every threat. We encourage you to take your own precautions as well, such as using a strong password, enabling 2FA, and never sharing your password with anyone.

Cookies & Tracking Technologies

The MDGWin platform uses cookies and similar tracking technologies to enhance the user experience and to ensure that certain platform functions operate correctly.

Types of cookies used by MDGWin:

Essential Cookies: These cookies are necessary for the MDGWin platform to function correctly. Without them, core functions such as login, navigation, and session security cannot operate. These cookies cannot be disabled.
Performance Cookies: These cookies collect information about how visitors use the MDGWin platform — such as the most frequently visited pages and any error messages encountered. All information is collected in aggregate and anonymised form.
Functionality Cookies: These cookies allow the MDGWin platform to remember the choices you make — such as your preferred language, display settings, and game preferences — to provide a more personalised and comfortable experience.
Session Cookies: A temporary cookie that is deleted when you close your web browser. Used to maintain your login session while you are active on the platform.

You can control and manage cookies through your web browser settings. Please note, however, that disabling essential cookies may affect the functionality of the MDGWin platform and prevent you from accessing certain features properly.

Financial Transaction Data

Protecting your financial transaction data is one of MDGWin's highest priorities. Here is how we handle your deposit and withdrawal data:

When you make a deposit via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX (Maybank2u, CIMB Clicks, and other participating banks), transactions are processed securely through a licensed payment gateway that adheres to PCI-DSS security standards.
MDGWin records only the information required of each transaction: amount, date and time, payment method used, and transaction status. Your full bank account number or full eWallet number is not stored in MDGWin's systems.
Your transaction history on the MDGWin platform is accessible to you at any time through the "Transaction History" section in your account. These records are available for your reference and for legal compliance purposes.
For anti-money laundering (AML) purposes and compliance with Malaysian financial regulations, MDGWin may be required to retain transaction records for the period specified by applicable law.
Where suspicious transaction activity is detected, MDGWin has a legal obligation to report the matter to the relevant authorities in Malaysia.

All financial transactions on MDGWin are processed through payment channels that are registered and licensed in Malaysia. MDGWin does not process payments through unofficial or unlicensed channels. If you are ever asked to make a payment through a channel not listed on the official MDGWin platform, disregard it and report it to our support team immediately.

Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and MDGWin's policies, you have the following rights regarding your personal data. MDGWin is committed to making it easy and straightforward for you to exercise these rights:

Right of Access

You have the right to request a copy of all personal data that MDGWin holds about you. This request can be submitted via live chat or email and will be processed within 14 working days.

Right to Rectification

If your personal data in MDGWin's systems is inaccurate or incomplete, you have the right to request a correction. You can update basic information such as your address and phone number directly through your account settings.

Right to Erasure

You may request deletion of your personal data from MDGWin's systems. Please note that this request may not be fully fulfilled if MDGWin still has a legal obligation to retain the data — for example, financial transaction records for the period specified under Malaysia's AML laws.

Right to Object to Processing

You have the right to object to the processing of your personal data for certain purposes, particularly for direct marketing. You may withdraw your consent to receive marketing communications at any time through your account settings.

Data Portability

You have the right to request your personal data in a machine-readable format for the purpose of transferring it to another service provider. Contact the MDGWin support team to arrange this.

Right to Restrict Processing

In certain circumstances — such as when the accuracy of data is disputed or when processing is unlawful — you have the right to request that MDGWin restrict the processing of your data while the issue is being resolved.

To exercise any of the rights above, please contact the MDGWin support team via 24/7 live chat on the platform or by email at support@mdgwin.best. We will endeavour to process your request within the timeframe required by applicable law.

Summary of Data Subject Rights at MDGWin

Rights	How to Exercise Your Rights	Response Time
Data Access	Live chat or email support@mdgwin.best	14 working days
Data Correction	Account settings or live chat	3 working days
Data Deletion	Email support@mdgwin.best	14 working days
Opt Out of Marketing	Account settings (immediate)	Immediate
Data Portability	Email support@mdgwin.best	14 working days
Restriction of Processing	24/7 live chat	24 hours

Children's Data

The MDGWin platform is intended for individuals aged 21 and above only. MDGWin does not knowingly collect any personal data from individuals under the age of 21.

MDGWin's registration process includes strict age verification. Should MDGWin discover that personal data belonging to an individual under the age of 21 has been collected — whether through the provision of false information during registration or by any other means — MDGWin will:

Immediately close the account in question.
Permanently removing all personal data associated with the account from our systems.
Taking appropriate legal action where there is evidence of deliberate identity fraud.

If you believe MDGWin may have collected personal data from someone under the age of 21, please contact us immediately at support@mdgwin.best so we can take prompt action.

Links to Other Websites

The MDGWin platform may contain links to third-party websites or services in certain contexts. This MDGWin Privacy Policy applies solely to the MDGWin platform and does not cover the privacy practices of any linked third-party websites.

MDGWin is not responsible for the content, privacy policies, or data handling practices of any third-party websites or services. We encourage you to read and understand the privacy policy of any website you visit outside the MDGWin platform.

Amendments to This Privacy Policy

MDGWin reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data handling practices, new legal requirements, or changes to the services we offer.

You will be notified of any material amendments to this Privacy Policy through a prominent notice on the MDGWin platform and/or by email to your registered address, at least 7 days before the amendment takes effect.
The "Last Updated" date at the top of this page will be updated each time this Privacy Policy is amended to reflect the current applicable version.
Continued use of the MDGWin platform after the effective date of any Privacy Policy amendment constitutes your acceptance of the revised policy.
If you disagree with any amendments to this Privacy Policy, you have the right to close your account before the changes take effect and to request deletion of your data to the extent permitted by law.

Contact Us

If you have any questions, concerns, or complaints regarding MDGWin's Privacy Policy or how we handle your personal data, please reach us through any of the following channels:

Live Chat: Available 24 hours a day, 7 days a week via the chat icon within the MDGWin platform. This is the fastest way to get a response.
Email: support@mdgwin.best — for detailed enquiries or those requiring documentation, email is the most suitable channel. We aim to respond within 24 business hours.

MDGWin's support team, fluent in both Bahasa Malaysia and English, is ready to assist you with any privacy or data-related enquiries. We take your privacy concerns seriously and will handle every enquiry with care and in a timely manner.

For data rights complaints under Malaysia's PDPA that cannot be resolved directly with MDGWin, you may contact the Department of Personal Data Protection (JPDP) Malaysia or the relevant supervisory body for further assistance.

Your Privacy, Our Priority: MDGWin's Approach to Data Protection

In today's digital world, personal data is incredibly valuable — and unfortunately, many people underestimate just how important it is to protect it. When you sign up with any online platform, you are entrusting it with personal information that could have serious consequences if it falls into the wrong hands. MDGWin takes this responsibility very seriously. Your privacy is not a marketing slogan to us — it is a commitment we back with ongoing investment in security technology, staff training, and rigorous processes.

For Malaysian players, financial transaction privacy is one of the most important privacy concerns. When you deposit via Touch 'n Go eWallet or GrabPay to play baccarat or place bets on the Malaysia Super League, you want to know your financial details are safe. MDGWin processes all transactions through licensed payment gateways that comply with international PCI-DSS standards. We do not store your full eWallet or bank account number — only the transaction information required for record-keeping and legal compliance is retained, in encrypted form.

Many Malaysian players ask: "Can MDGWin sell my data to advertising companies?" The answer is an unequivocal no. MDGWin has never and will never sell, rent, or share your user profile with marketing companies, data brokers, or any party for commercial purposes. Your data is collected solely to enable the MDGWin platform to function safely and effectively, and to meet applicable legal obligations. There are no hidden or implied purposes beyond this.

Transparency is a core value that MDGWin upholds across all aspects of our operations, including how we handle data. We do not hide behind complex legal language to obscure important information about how your data is used. This Privacy Policy is written in clear, plain English so that every Malaysian player — not just lawyers — can understand exactly what happens to their data at MDGWin. If anything is still unclear, our English-speaking support team is available around the clock to answer your questions.

Your rights as a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA) are rights that MDGWin fully respects. If you want to know what data MDGWin holds about you, you can request it and we will provide it. If any data is inaccurate, you can request a correction. If you close your account and want your data deleted, we will do so to the extent permitted by any remaining legal obligations. These rights are not just fine print in a legal document — they are real rights you can exercise easily via MDGWin's live chat or email.

One thing MDGWin does differently from many other platforms is our "data minimisation" approach — we only collect data that is genuinely necessary for a legitimate purpose. We do not collect data "just in case" or because it "might come in handy someday". Every piece of data we collect has a clear purpose, a defined retention period, and an orderly deletion policy. This is the responsible way to handle personal data, and it is the way MDGWin has chosen to operate.

The security of your own account plays a vital role in protecting your privacy. While MDGWin maintains a robust security infrastructure, we also need your cooperation. Use a strong, unique password for your MDGWin account — never reuse a password from another account. Enable two-factor authentication (2FA) from your account settings. Do not share your login credentials with anyone, including family members. Most importantly, never click on suspicious links claiming to be from MDGWin — we will never ask for your password via email or message. If you receive any such communication, it is a phishing attempt and you should report it to MDGWin's support team immediately.

MDGWin also wishes to reaffirm our commitment to ongoing compliance with Malaysia's data protection laws. The Personal Data Protection Act 2010 (PDPA) is the primary legislation governing the handling of personal data in Malaysia, and MDGWin complies with it in full. Our legal compliance team continuously monitors developments in data protection legislation and makes the necessary adjustments to our policies and procedures. Whenever this Privacy Policy is updated, we will notify you with clear notice at least 7 days before the changes take effect — this is our commitment to you.

MDGWin Privacy Policy – Data Protection & Privacy Malaysian Players

MDGWin's Six Pillars of Privacy Protection