mdt88 Privacy Policy

mdt88 collects personal data through several distinct channels. The type of data collected depends on how you interact with the platform. Below is a detailed breakdown of the categories of personal information we may collect and the circumstances under which each category is gathered.

Sensitive Personal Data: mdt88 does not intentionally collect sensitive personal data such as racial or ethnic origin, religious beliefs, health information, or biometric data. If you voluntarily disclose such information in a support communication, we will handle it with strict confidentiality and will not use it for any purpose other than resolving your immediate support query.

Data from Third Parties: In some cases, mdt88 may receive data about you from third parties. This includes identity verification results from KYC service providers, fraud risk scores from payment processors, and publicly available information used to verify the accuracy of the details you have provided at registration.

mdt88 does not sell or rent your personal data to any third party. We may, however, share your data with carefully selected third-party organisations where it is necessary to deliver the mdt88 service or to comply with our legal obligations. All third parties with whom mdt88 shares data are required to handle that data securely, to use it only for the specified purpose, and to comply with applicable data protection standards.

The categories of third parties with whom mdt88 may share your personal data include:

• Payment Service Providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard — solely for the purpose of processing your deposit and withdrawal transactions.
• Identity Verification Providers: Third-party KYC and AML compliance services that assist mdt88 in verifying player identities and screening for politically exposed persons (PEPs) or sanctioned individuals.
• Technology and Infrastructure Providers: Cloud hosting providers, content delivery networks (CDNs), and database management services that form part of the mdt88 technical infrastructure. These providers process data on mdt88's behalf under strict data processing agreements.
• Game Software Providers: Game studios and platform providers (such as Pragmatic Play, Evolution Gaming, Spribe, NetEnt, Microgaming, and Ezugi) may receive limited session and gameplay data necessary to deliver their game content and to investigate disputes. These providers do not receive your full identity data.
• Fraud Prevention and Security Services: Third-party services that assist mdt88 in detecting and preventing fraudulent activity, money laundering, and account takeover attempts.
• Legal and Regulatory Authorities: Law enforcement agencies, financial intelligence units, or other government authorities where mdt88 is required by law or a court order to disclose your personal data. mdt88 will notify you of such disclosure where it is legally permitted to do so.

mdt88 takes the security of your personal data seriously and has implemented a range of technical and organisational measures to protect it against unauthorised access, accidental loss, alteration, or disclosure. These measures include, but are not limited to:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and mdt88 servers is encrypted using industry-standard Transport Layer Security (TLS) protocols.
• Encrypted Data Storage: Sensitive data fields — including passwords, identity document numbers, and financial account references — are stored in encrypted form in mdt88's databases. Passwords are hashed using a strong one-way hashing algorithm; mdt88 support staff cannot view your password at any time.
• Access Controls: Access to systems containing personal data is restricted to authorised mdt88 personnel on a strict need-to-know basis. All access events are logged and monitored.
• Two-Factor Authentication: mdt88 offers SMS OTP two-factor authentication for all player accounts and requires it for certain high-value withdrawal requests. Internal staff access to administrative systems requires multi-factor authentication.
• Regular Security Audits: mdt88's platform and infrastructure undergo periodic security assessments to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: mdt88 maintains a documented data breach response procedure. In the event of a security incident that affects your personal data, mdt88 will notify you and the relevant authorities in accordance with applicable legal obligations.

While mdt88 implements robust security measures, no online platform can guarantee absolute security against all threats. You play an important role in keeping your account secure: use a strong, unique password, enable two-factor authentication, and never share your login credentials with anyone. If you suspect your account has been compromised, contact the mdt88 support team immediately via Live Chat or at [email protected].

As an mdt88 player, you have a number of rights with respect to the personal data we hold about you. mdt88 is committed to facilitating the exercise of these rights in a timely and transparent manner. The rights available to you are as follows:

• Right of Access: You have the right to request a copy of the personal data that mdt88 holds about you. We will provide this in a structured, commonly used format within 30 days of a verified request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. For basic profile updates (email address, phone number), you can make changes directly in your account settings. For identity data corrections, please contact the support team.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you have withdrawn your consent and no other legal basis applies. Please note that mdt88 may be required to retain certain data to comply with legal obligations (such as AML record-keeping requirements) even after you have requested erasure. In such cases, we will explain clearly what data must be retained and why.
• Right to Restrict Processing: You may request that mdt88 restrict the processing of your personal data in certain circumstances — for example, while a dispute about the accuracy of your data is being resolved.
• Right to Data Portability: Where processing is based on your consent or on a contract with you, you have the right to receive your personal data in a machine-readable format and to request that it be transmitted directly to another service provider where technically feasible.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on mdt88's legitimate interests, though mdt88 may continue processing if it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing that took place before the withdrawal.

To exercise any of the above rights, please contact the mdt88 support team by emailing [email protected] with the subject line "Data Privacy Request" and a description of the right you wish to exercise. We may ask you to verify your identity before we can action your request. We will respond to all verified requests within 30 days. If we are unable to action your request within that period, we will notify you and provide a revised timeline.