medal88 Privacy Policy

What Data We Collect on medal88

We collect information in several categories. First, identity data—when you register on medal88, we require your full name, date of birth, email address, and phone number. Second, verification documents—before your first withdrawal, we request a government-issued ID (such as a KTP for Indonesian residents) and proof of address (utility bill or bank statement). Third, payment information—when you deposit or withdraw, we record your chosen payment method (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, or e-wallet) and transaction amounts.

Fourth, account activity data—we log your gameplay history, market entries, and betting patterns so we can settle games fairly and detect fraud. Fifth, technical data—we collect your IP address, device type, and browser information to maintain platform security and prevent unauthorized access. Sixth, communication data—if you contact our support team, we store those messages and our responses to resolve disputes and improve our service.

We do not collect financial data beyond payment method and transaction amounts. We do not ask for bank account numbers, credit card details, or full card information—payment processors handle those details directly, not medal88. We do not use cookies to track you across other websites; our cookies are limited to medal88's own session management and user preferences.

How We Use Your Data

We use your data for five core purposes. First, account management—we verify your identity, secure your account, and maintain your wallet balance. Second, payment processing—we process deposits and withdrawals through our payment partners. These partners (mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, and Indonesian banks) receive only the information necessary to complete your transaction.

Third, game settlement—we use your gameplay records to calculate outcomes fairly for slots, live games, sportsbook markets, and esports events. Fourth, legal compliance—we retain transaction records and identity documents to comply with anti-money-laundering regulations and respond to law enforcement requests where required. Fifth, fraud prevention—we analyze patterns to detect suspicious activity and protect your account from unauthorized use.

We do not use your data for marketing purposes. We do not send unsolicited promotional emails. We do not create behavioral profiles to sell to advertisers. Your data exists solely to operate medal88 and fulfill our legal obligations.

Third-Party Data Processors

We share your data only with entities essential to operating medal88. Our payment processors receive your payment method and transaction amount to process deposits and withdrawals. Our hosting provider (where medal88's servers are located) may be outside Indonesia, which means your data may be stored in a foreign jurisdiction. Our compliance auditors review transaction records periodically to ensure we meet regulatory standards.

When law enforcement or regulatory agencies request your information, we comply with valid legal orders. We do not voluntarily disclose user data to government agencies without proper legal process. Our support staff may access limited account data only to resolve your issues and never retain that data for secondary purposes.

Data Retention

We retain identity documents and payment records for seven years to comply with anti-money-laundering requirements. Account activity logs are retained for three years or as required by law.

Encryption

All data transmitted between your device and medal88's servers is encrypted using industry-standard protocols. Stored data is encrypted at rest.

Access Control

Only medal88 staff authorized for specific functions (payment processing, compliance, support) can access your information. All access is logged and audited.

Your Rights and Data Access

You have the right to request what personal data we hold about you on medal88. Contact our support team with your account email, and we will provide a copy of your stored information within ten business days. You have the right to request correction of inaccurate data—if your address or contact details change, you can update them in your account settings.

You have the right to request deletion of your account and associated data, subject to legal retention requirements. If you request account deletion, we will remove your personal information within thirty days, except for transaction records and identity documents required by law for seven years. You also have the right to restrict how we use your data for specific purposes—if you object to our fraud-prevention analysis, we cannot process that objection (as it is essential to operating medal88), but you can request other data uses be limited.

You have the right to withdraw consent for optional data processing. On medal88, most data collection is mandatory for service delivery, not optional. If we request optional data (such as feedback surveys), you can decline without affecting your account or withdrawals.

Cookies and Tracking on medal88

Our platform uses cookies only for session management and user preferences. When you log into medal88, we set a session cookie to keep you authenticated. This cookie expires after a set period of inactivity for security reasons. We use preference cookies to remember your language choice, game categories you frequent, and account settings. These cookies exist only on medal88 and are not shared with external sites.

We do not use tracking cookies to follow you across other websites. We do not employ retargeting pixels or third-party analytics trackers that profile your behavior outside medal88. You can clear medal88 cookies from your browser at any time; this will log you out and reset your preferences, but will not affect your account or funds.

Security and Data Breach Response

We implement industry-standard security measures to protect your data. medal88's infrastructure uses firewalls, intrusion detection, and regular security audits. Staff access to sensitive data is restricted and logged. We conduct penetration testing quarterly to identify vulnerabilities.

In the event of a data breach, we notify affected users within thirty days. Our notification includes details of the breach, steps we took to contain it, and your rights to monitor your data. We cooperate with law enforcement and regulatory agencies to investigate breaches. We carry cyber insurance to cover incident response and user notification costs.

Policy Changes and Contact

We may update this privacy policy as our operations evolve or as law changes. We will notify you of material changes by email or by prominently displaying a notice on medal88 before the change takes effect. Your continued use of medal88 after a policy change means you accept the updated terms.

If you have questions about our privacy practices, how we use your data, or your rights under this policy, contact our support team via the in-app contact form or email. We respond to privacy inquiries within five business days. Our data protection officer oversees compliance with this policy and investigates privacy concerns.

medal88 operates only in jurisdictions where local law permits our service. By using medal88, you acknowledge that you have read this privacy policy and consent to our data practices as described. Our services are available only where applicable law allows.