mdplay Privacy Policy - Your Data Protection

1. Introduction

This Privacy Policy explains how mdplay.cam ("mdplay," "we," "us," "our") collects, uses, discloses, and protects personal information obtained from users ("you," "User," "Player") of our online gaming platform located at mdplay.cam (the "Platform"). We are committed to protecting your privacy and handling your personal data in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173) and other applicable Philippine data protection regulations.

By accessing or using the mdplay Platform, registering an account, or providing personal information to us, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your personal information as described herein. If you do not agree with this Privacy Policy, you must not use our Platform or provide any personal information to us.

This Privacy Policy should be read in conjunction with our Terms and Conditions and Responsible Gaming Policy, which govern your use of the Platform. We encourage you to review this Privacy Policy periodically as we may update it from time to time to reflect changes in our practices, technology, legal requirements, or business operations.

2. Information We Collect

2.1 Information You Provide to Us

When you register for an mdplay account, we collect personal information that you voluntarily provide, including but not limited to:

• Account Registration Information: Full legal name, date of birth, gender, residential address, email address, mobile phone number, and chosen username and password.
• Identity Verification Documents: Government-issued identification (Philippine passport, driver's license, UMID, SSS ID, or other valid IDs), proof of address (utility bills, bank statements), and selfie photographs for identity verification purposes.
• Payment Information: Payment method details including GCash account numbers, Maya account information, bank account details (bank name, account number, account holder name), cryptocurrency wallet addresses, and transaction history.
• Communication Data: Information contained in communications you send to us, including customer support inquiries, feedback, complaints, and survey responses.
• Marketing Preferences: Your communication preferences regarding promotional materials, newsletters, and marketing communications.

2.2 Information Automatically Collected

When you access and use the mdplay Platform, we automatically collect certain technical and usage information through cookies, log files, and similar tracking technologies:

• Device Information: Device type, operating system, browser type and version, screen resolution, device identifiers, and mobile network information.
• Usage Data: Pages visited, features used, games played, time and date of visits, time spent on pages, clickstream data, and referring/exit pages.
• Location Data: IP address, approximate geographic location derived from IP address, and time zone settings.
• Gaming Activity: Bets placed, games played, win/loss history, deposit and withdrawal transactions, bonus claims, and wagering patterns.
• Performance Data: Information about Platform performance, errors encountered, and technical issues experienced during your use of our services.

2.3 Information from Third Parties

We may receive information about you from third-party sources, including:

• Payment processors (GCash, Maya, banks) regarding transaction verification and fraud prevention.
• Identity verification services that confirm the authenticity of identification documents.
• Marketing partners and affiliate networks through which you may have been referred to mdplay.
• Social media platforms if you choose to connect your social media accounts with your mdplay account.
• Credit reference agencies and fraud prevention agencies for security and compliance purposes.

3. How We Use Your Information

mdplay uses your personal information for the following purposes:

3.1 Service Provision and Account Management

• Creating and maintaining your mdplay account
• Verifying your identity and age to ensure compliance with legal requirements (21+ age restriction)
• Processing deposits, withdrawals, and other financial transactions
• Providing access to games, betting markets, and Platform features
• Managing bonuses, promotions, and loyalty programs
• Responding to customer support inquiries and resolving disputes

3.2 Legal and Regulatory Compliance

• Complying with PAGCOR regulations and Philippine gaming laws
• Fulfilling anti-money laundering (AML) and counter-terrorist financing (CTF) obligations
• Preventing fraud, unauthorized access, and illegal activities
• Enforcing our Terms and Conditions and other policies
• Responding to legal processes, court orders, and government requests
• Protecting the rights, property, and safety of mdplay, our users, and the public

3.3 Responsible Gaming

• Monitoring gaming behavior to identify potential problem gambling indicators
• Implementing deposit limits, loss limits, and self-exclusion requests
• Providing access to responsible gaming tools and resources
• Preventing underage gambling and unauthorized account access

3.4 Marketing and Communications

• Sending promotional offers, bonuses, and special promotions (with your consent)
• Providing newsletters and updates about mdplay services
• Conducting market research and customer satisfaction surveys
• Personalizing your gaming experience and tailoring content to your preferences

3.5 Platform Improvement and Analytics

• Analyzing usage patterns and trends to improve Platform functionality
• Testing new features and optimizing user experience
• Monitoring Platform performance and troubleshooting technical issues
• Conducting security assessments and preventing cyber threats

4. Legal Basis for Processing

Under Philippine data protection law, mdplay processes your personal information based on the following legal grounds:

• Consent: You have provided explicit consent for us to process your personal information for specific purposes, such as marketing communications.
• Contract Performance: Processing is necessary to fulfill our contractual obligations to you under our Terms and Conditions, including providing gaming services and processing transactions.
• Legal Obligation: Processing is required to comply with Philippine laws and regulations, including PAGCOR requirements, AML/CTF obligations, and tax reporting duties.
• Legitimate Interests: Processing serves our legitimate business interests, such as fraud prevention, security, Platform improvement, and customer service, provided such interests do not override your fundamental rights and freedoms.

5. Information Sharing and Disclosure

mdplay does not sell your personal information to third parties. We may share your information with the following categories of recipients for the purposes described in this Privacy Policy:

5.1 Service Providers and Business Partners

• Payment Processors: GCash, Maya, banks, and cryptocurrency payment providers that facilitate deposits and withdrawals.
• Game Providers: Third-party game developers and software providers whose games appear on the Platform.
• Identity Verification Services: Companies that verify identification documents and prevent identity fraud.
• Customer Support Platforms: Live chat software and helpdesk systems used to provide customer service.
• Marketing and Analytics Providers: Services that help us understand user behavior and optimize marketing campaigns.
• Cloud Hosting Services: Infrastructure providers that host our Platform and data storage systems.

5.2 Regulatory Authorities

We may disclose personal information to PAGCOR, the National Privacy Commission, law enforcement agencies, courts, and other government authorities when required by law or when necessary to comply with legal obligations, regulatory requests, or court orders.

5.3 Professional Advisors

We may share information with lawyers, accountants, auditors, and other professional advisors who provide services to mdplay and are bound by confidentiality obligations.

5.4 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your personal information may be transferred to the acquiring entity, subject to the same privacy protections outlined in this Privacy Policy.

6. Data Security

mdplay implements comprehensive technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. Our security measures include:

• Encryption: All data transmissions are protected using 256-bit SSL/TLS encryption technology, the same standard used by financial institutions.
• Secure Storage: Personal information is stored on secure servers with restricted access controls and regular security audits.
• Access Controls: Only authorized personnel with legitimate business needs can access personal information, and all access is logged and monitored.
• Password Security: User passwords are hashed using industry-standard cryptographic algorithms and are never stored in plain text.
• Firewall Protection: Network-level firewalls prevent unauthorized access to our systems.
• Regular Security Testing: We conduct vulnerability assessments, penetration testing, and security audits to identify and address potential weaknesses.
• Employee Training: All mdplay personnel receive regular training on data protection principles and security best practices.

Despite our security measures, no method of transmission over the internet or electronic storage is completely secure. While we strive to protect your personal information, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and should immediately notify us if you suspect unauthorized access to your account.

7. Data Retention

mdplay retains personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Specific retention periods include:

• Active Accounts: Personal information associated with active accounts is retained for the duration of the account relationship and for a reasonable period thereafter to address potential disputes or inquiries.
• Closed Accounts: Following account closure, we retain certain information for up to seven (7) years to comply with legal obligations, including tax reporting, AML/CTF requirements, and PAGCOR regulations.
• Transaction Records: Financial transaction data is retained for at least seven (7) years in accordance with Philippine financial record-keeping requirements.
• Marketing Data: If you opt out of marketing communications, we retain minimal information necessary to honor your opt-out preference and prevent future unwanted communications.
• Usage Analytics: Aggregated and anonymized usage data may be retained indefinitely for statistical and research purposes.

When personal information is no longer needed, we securely delete or anonymize it in accordance with data protection best practices.

8. Your Privacy Rights

Under the Philippine Data Privacy Act, you have the following rights regarding your personal information:

8.1 Right to Access

You have the right to request confirmation of whether mdplay processes your personal information and to obtain access to such information. You may request copies of your personal data held by us.

8.2 Right to Rectification

You have the right to request correction of inaccurate or incomplete personal information. You can update most account information directly through your mdplay account settings.

8.3 Right to Erasure

You have the right to request deletion of your personal information in certain circumstances, such as when the information is no longer necessary for the purposes for which it was collected. However, we may retain certain information where required by law or for legitimate business purposes.

8.4 Right to Object

You have the right to object to processing of your personal information for direct marketing purposes. You may opt out of marketing communications at any time by clicking the unsubscribe link in promotional emails or contacting customer support.

8.5 Right to Data Portability

You have the right to receive your personal information in a structured, commonly used, and machine-readable format and to transmit that data to another controller where technically feasible.

8.6 Right to Withdraw Consent

Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing conducted prior to withdrawal.

8.7 Right to Lodge a Complaint

If you believe mdplay has violated your privacy rights or Philippine data protection law, you have the right to lodge a complaint with the National Privacy Commission of the Philippines.

To exercise any of these rights, please contact our Data Protection Officer using the contact information provided in Section 12 below. We will respond to your request within the timeframe required by law, typically within thirty (30) days.

9. Cookies and Tracking Technologies

mdplay uses cookies, web beacons, and similar tracking technologies to enhance your experience on the Platform, analyze usage patterns, and deliver personalized content. Cookies are small text files stored on your device that help us recognize you on return visits.

Types of Cookies We Use:

• Essential Cookies: Required for Platform functionality, including account authentication, security features, and session management. These cookies cannot be disabled without affecting Platform operation.
• Performance Cookies: Collect information about how you use the Platform, including pages visited and errors encountered, helping us improve performance and user experience.
• Functional Cookies: Remember your preferences and settings, such as language selection, to provide a personalized experience.
• Targeting Cookies: Track your activity across websites to deliver relevant advertising and measure campaign effectiveness. These cookies require your consent.

You can control cookie settings through your browser preferences. However, disabling certain cookies may limit Platform functionality or prevent access to some features. Most browsers accept cookies automatically but allow you to modify settings to decline cookies or alert you when cookies are being sent.

10. Third-Party Links

The mdplay Platform may contain links to third-party websites, services, or applications that are not operated or controlled by mdplay. This Privacy Policy applies only to information collected by mdplay. We are not responsible for the privacy practices of third-party sites and encourage you to review their privacy policies before providing any personal information.

11. Children's Privacy

mdplay services are intended exclusively for individuals who are at least twenty-one (21) years of age or older, in accordance with Philippine gaming regulations. We do not knowingly collect personal information from individuals under the age of 21. If we become aware that we have inadvertently collected information from a person under the legal gaming age, we will take immediate steps to delete such information and close the associated account.

Parents or guardians who believe their child may have provided personal information to mdplay should contact us immediately using the contact details in Section 12.

12. Changes to This Privacy Policy

mdplay reserves the right to modify, amend, or update this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or business operations. When we make material changes to this Privacy Policy, we will notify you by posting the updated policy on the Platform and updating the "Last Updated" date at the top of this document.

We may also provide additional notice of significant changes through email or Platform notifications. Your continued use of the Platform following such notification constitutes acceptance of the revised Privacy Policy. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal information.

13. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data protection practices, please contact our Data Protection Officer:

We are committed to addressing your privacy concerns and will respond to all inquiries within a reasonable timeframe, typically within thirty (30) days of receipt.