mdrplay Privacy Policy — Your Data, Explained Clearly

1Introduction and Scope

This Privacy Policy describes how mdrplay ("we," "us," "the Platform") collects, processes, stores, and protects personal information relating to players and visitors ("you") who use the mdrplay website located at mdrplay.vu and associated mobile applications.

mdrplay is an online gaming platform serving players in the Philippines. We handle personal data responsibly and in line with applicable data protection obligations. This policy should be read alongside our Terms & Conditions, which form part of the overall agreement between you and the platform.

This policy covers data collected through account registration, gameplay activity, financial transactions, customer support interactions, and general platform use including browsing on mobile or desktop.

2What Personal Data We Collect

The type of personal data mdrplay collects depends on how you interact with the platform. The main categories are:

We do not collect sensitive personal data beyond what is required for identity verification and regulatory compliance. We do not store complete payment card numbers.

3How We Use Your Personal Data

mdrplay uses the personal data it collects for the following purposes:

• Account Management: Creating, verifying, and maintaining your mdrplay account throughout your time as a registered player.
• Identity Verification (KYC): Confirming that you meet the minimum age requirement of 21 and that your account details are accurate, in line with standard platform compliance requirements.
• Transaction Processing: Handling PHP deposits and withdrawal requests through your chosen Philippine banking or e-wallet channel.
• Platform Operation: Providing access to games, betting markets, and platform features; maintaining session continuity; resolving technical issues.
• Security and Fraud Prevention: Monitoring account activity for signs of fraud, unauthorised access, or abuse, and taking appropriate protective action when detected.
• Customer Support: Responding to your questions, resolving disputes, and providing assistance related to your account or transactions.
• Service Improvement: Analysing aggregated usage data to understand how the platform performs and to guide improvements in the gaming experience.
• Legal and Regulatory Compliance: Meeting obligations under applicable laws, including anti-money laundering (AML) and record-keeping requirements.

mdrplay does not use your personal data for targeted advertising to third parties, and we do not build advertising profiles based on your gaming activity.

4When We Share Your Data

mdrplay does not sell your personal information. We share data only in the following limited circumstances:

• Payment Processors: Your payment-related information is shared with Philippine banking partners and e-wallet service providers (such as those facilitating InstaPay or PESONet transfers) solely to process your transactions.
• Game Software Providers: Certain game providers may receive session-level data necessary to deliver the game experience. They do not receive personally identifiable information beyond what is technically required.
• Identity Verification Services: Third-party KYC providers may process your identity documents to complete account verification. These providers operate under strict data handling agreements.
• Legal Obligations: We may disclose data to relevant authorities where required by law, court order, or in response to a lawful request from a government body.
• Fraud and Security: In the event of a serious fraud investigation, relevant data may be shared with law enforcement or security services as legally required.

Any third party that receives your data for operational purposes is bound by contractual obligations to use it only for the specified purpose and to protect it appropriately.

5How Long We Keep Your Data

mdrplay retains personal data for as long as your account is active and for a reasonable period afterwards. Retention periods vary by data type:

• Account and identity information is retained while your account is open and for a period after closure, to meet regulatory and legal record-keeping obligations.
• Transaction records are retained for the period required by applicable financial and anti-money laundering obligations.
• Support communications are retained for a period sufficient to resolve any related disputes or recurring issues.
• Technical and device data is typically retained in aggregate form for analytical purposes and is not retained indefinitely at the individual level.

When data is no longer required for the purpose for which it was collected and no legal obligation requires its retention, mdrplay will delete or anonymise it in a secure manner.

6Your Rights Over Your Personal Data

As a player on mdrplay, you have the following rights regarding your personal information:

• Right of Access: You can request a summary of the personal data mdrplay holds about your account.
• Right to Correction: If any information we hold about you is inaccurate or outdated, you can request that it be corrected.
• Right to Deletion: You can request that your data be deleted where there is no longer a lawful basis or legal obligation requiring its retention. Note that some data must be retained for regulatory compliance even after account closure.
• Right to Restriction: You may request that we restrict processing of your data in certain circumstances while a concern or dispute is being resolved.
• Right to Raise Concerns: If you believe your data has been mishandled, you can contact our support team to raise the matter directly.

To exercise any of these rights, contact the mdrplay support team at [email protected]. We will respond to reasonable requests within a reasonable timeframe. We may need to verify your identity before processing a data request.

7Cookies and Tracking Technologies

mdrplay uses cookies and similar technologies to support platform functionality and improve the user experience. The main types used are:

• Essential Cookies: Required to keep your session active, remember your login state, and ensure basic platform functions work correctly. These cannot be disabled without affecting your ability to use the platform.
• Functional Cookies: Remember your preferences and settings across visits, such as language and display options.
• Analytics Cookies: Collect aggregated, anonymised data about how pages are used — which sections are visited, where navigation issues occur — to help us improve the platform. This data is not linked to individual user identities.

You can manage cookie settings through your browser preferences at any time. Note that disabling essential cookies will affect your ability to stay logged in and use core platform features.

mdrplay does not use cookies to serve personalised advertising to third-party networks, and we do not sell cookie-derived data.

8Data Security

mdrplay employs a combination of technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction.

• All data transmitted between your device and mdrplay servers is encrypted using SSL/TLS.
• Account sessions are protected by OTP two-factor authentication, requiring a one-time code in addition to your password at login.
• Access to personal data within mdrplay is restricted to personnel who need it to perform specific functions, under appropriate access controls.
• Financial transaction data is processed through secured payment infrastructure. mdrplay does not store full payment credentials directly.

No system is completely immune to risk. If you suspect your account has been accessed without your authorisation, contact our support team immediately so we can take protective action on your account.

9Minors and Age Verification

mdrplay strictly prohibits use of the platform by anyone under 21 years of age. We collect date of birth and identity documents during registration and verification specifically to enforce this requirement.

If we discover that an account has been registered using false age information, or that a minor has accessed the platform, we will close the account immediately, void any associated gaming activity, and handle any funds in the account in accordance with applicable legal obligations.

mdrplay does not knowingly collect or retain personal data relating to minors. If you believe a minor has created an account on the platform, please contact us at [email protected] immediately.

10Updates to This Privacy Policy

mdrplay may update this Privacy Policy from time to time to reflect changes in our data practices, operational requirements, or applicable legal obligations. When changes are made, the revised policy will be published at this URL with an updated effective date at the top of the page.

For material changes that significantly affect how your data is used, we will make reasonable efforts to notify registered players through in-platform notifications or email to the address on file.

Your continued use of mdrplay after a revised policy has been published constitutes your acceptance of the changes. We recommend checking this page periodically to stay informed.

11Contact Us About Privacy

If you have any questions about this Privacy Policy, want to exercise your data rights, or have a concern about how your information has been handled, please get in touch with the mdrplay support team.

We are available 24 hours a day, 7 days a week through in-platform live chat (accessible after logging in) and by email:

Privacy-related requests are handled by our support team in English. We aim to acknowledge all requests promptly and resolve them within a reasonable period, subject to verification of your identity where required.