Data Protection

mdi97 Privacy Policy

At mdi97, your personal information is our top priority. This policy explains what personal information we collect and how we protect it.

Last updated: 29 October 2026
1

Introduction — Policy Overview

This Privacy Policy explains how we handle the personal information you provide when using mdi97 services, as well as data collected through your browsing activity on the website.

This policy applies to all mdi97 services and the website at https://mdi97.im. By continuing to use the website, you are considered to have agreed to the purposes and practices described in this policy.

We commit to using your personal information only for the purposes set out in this policy, and not to sell, rent, or trade it to third parties.

🔐 Data Security

Your personal information is protected and stored using SSL encryption.

🛡️ Data Use

Data is used only to improve our services, conduct security checks, and meet legal requirements.

👤 Your Rights

You have the right to view, correct, and request deletion of your personal information.

2

Personal Information We Collect

When you register an account, use our services, and play at mdi97, we may collect several types of personal information. This section explains the details of that data.

Identity Data

Data we receive when you register an account includes—

  • Full name (Burmese or English)
  • Date of birth (to verify age 21+)
  • Phone number (for OTP verification)
  • Username and password

Financial Data

Data is recorded for every deposit and withdrawal transaction—

  • Payment method (KBZPay, Wave Money, AYA Pay, Bank Transfer)
  • Transaction amounts and financial history
  • Payment confirmation reference numbers

Technical Data

Data collected automatically when you browse the website includes—

  • IP address
  • Browser type and version
  • Device type (desktop, mobile, tablet)
  • Pages visited, time spent, and click history
  • Data from cookies and similar tracking tools

Gaming Data

We record the following to improve our service and monitor responsible gambling—

  • Game history and betting records
  • Bonus and promotion claim history
  • VIP level information
  • Session duration and game types played
3

How We Collect Data

We receive data through three methods—

Data you provide directly

This includes information you give us when registering an account, making a deposit, withdrawing funds, or contacting customer support.

Data collected automatically

Data is collected automatically from cookies and technical tools while you browse the website. See Section 6 for details on cookies.

Third-party data

We may receive data such as financial verification results from payment processors (KBZPay, Wave Money, AYA Pay).

4

How We Use Your Data

At mdi97, your data is used only for the following purposes—

4.1 Providing Our Services

  • Creating and verifying your account
  • Processing deposits, withdrawals, and VIP rewards
  • Maintaining your service relationship with us
  • Delivering customer support

4.2 Security and Legal Requirements

  • Preventing fraudulent financial activity
  • Blocking unauthorized access
  • Complying with applicable laws and regulations
  • Conducting age verification (21+)
  • Monitoring responsible gambling

4.3 Service Improvement

  • Understanding player preferences to improve our service
  • Keeping the website running smoothly
  • Identifying and fixing technical issues

4.4 Communications

  • Sending important account-related notifications
  • Sending promotional information (only with your prior consent)
  • Responding to customer support enquiries
5

Personal Information Sharing and Disclosure

We do not sell or rent your personal information to third parties. We may share it only in the following circumstances—

Service Providers

Payment processors (KBZPay, Wave Money, AYA Pay), technology service providers, and other third parties essential to delivering our service — only those who operate under our instructions and hold a data handling agreement that meets at least our minimum security standards.

Legal Requirements

We may disclose data as required by applicable law, court orders, or legal investigations. Where possible, we will notify you in advance.

Business Transfers

If our company undergoes a merger, sale, or transfer of assets, data may transfer as part of that process. We commit that the same level of protection under this policy will continue to apply.

Your Prior Consent

For any sharing not described above, we will obtain your prior consent and clearly explain the purpose before sharing your data.

When we share data, we sign data processing agreements with third parties and verify that they handle data in ways that comply with our data protection policy.

6

Cookies and Tracking Technologies

A cookie is a small data file stored on your device when you visit a website. We use cookies to keep the website running smoothly and to improve our services.

Essential Cookies

Required for the basic operation of the website. These include login verification, session management, and security functions.

Analytics Cookies

Used to understand browsing patterns and improve our services. Data collected from these cookies is aggregated and handled anonymously.

Preference Cookies

Used to remember your preferred settings, such as language selection and display layout.

You can decline non-essential cookies through your browser settings. Please note that doing so may reduce the functionality of some parts of the website.

7

Data Retention Period

We do not keep your personal information longer than necessary, and we operate according to the following framework—

Data Type Retention Period Purpose
Account Data For as long as the account exists, plus five years after closure To provide services and meet legal requirements
Financial Records Five years (legal requirement) Financial regulatory compliance
Gaming Records Three years Monitoring responsible gambling
Technical Data One year Security monitoring and service improvement
Communication Records Three years after the communication Customer service review

Once the retention period ends, we will securely delete the data or convert it to an anonymous form.

8

Personal Data Security Measures

mdi97 has put technical and organisational measures in place to protect the security of your personal information—

Technical Safeguards

  • SSL (Secure Socket Layer) encryption
  • Encrypted storage in data repositories
  • Access controls and authentication checks
  • Network traffic monitoring
  • Regular security audits

Organisational Safeguards

  • Limiting staff access to personal information
  • Data security training for staff
  • Established data handling policies and procedures
  • A response plan in place for data breach incidents

We are transparent in noting that, despite the security measures we have in place, no company can guarantee that data transmission over the internet is 100% secure. We apply the best protection methods we can and continue to work on improving them.

9

Players' Data Rights

You have the following rights regarding your personal information—

🔍 Right of Access

You have the right to request a view of what data we hold about you.

✏️ Right to Rectification

You can request that inaccurate personal information be corrected.

🗑️ Right to Erasure

You can request deletion of data that does not need to be kept for legal requirements.

⛔ Right to Restriction

You can request that processing of your data be restricted (where there is a valid reason to do so).

📦 Right to Data Portability

You can request that data you have provided be delivered to you in a readable format.

🚫 Right to Withdraw Consent

Where you have previously given consent for data sharing, you have the right to withdraw that consent at any time.

To exercise any of these rights, contact us at [email protected]. We will process your request upon receipt and respond in accordance with applicable law.

10

Protection of Minors Under 21

mdi97 services are only accessible to users aged 21 and above. We do not knowingly or intentionally collect personal information from individuals under 21, and the protection of minors is a priority for us.

If we find that an account belongs to someone under 21, we will close that account immediately and delete the related personal data in accordance with applicable law.

If you notice that someone under 21 is using mdi97, please notify us immediately at [email protected].

11

Changes to This Policy

We may update this Privacy Policy in line with changes to our services, legal requirements, or business technology.

When policy changes occur—

  • The "Last Updated" date at the top of this page will be revised
  • Registered players will be notified of any significant changes
  • Changes will be announced prominently on the website

Continuing to use the website after a policy change means you accept the updated policy. If you do not agree with the changes, please stop using the website and contact us at [email protected].

12

Contact mdi97

If you have any questions, comments, or requests regarding this Privacy Policy, you can reach us through the following—

📧 Contact via Email

For privacy-related inquiries—

[email protected]

Please include your account ID and the type of request when submitting your inquiry.

💬 Contact via Live Chat

You can reach us through our 24/7 Live Chat service in Myanmar language.

We recommend sending data-related requests by email so they can be properly recorded.

Data Privacy — FAQs

Common privacy-related questions from players

No. mdi97 does not sell or rent your personal information to any third party for advertising purposes. We only share data with service providers who are essential to delivering our services (such as payment processors), and we verify that they handle data in ways that comply with our data protection policy.

Yes. mdi97 protects your data using SSL encryption, database encryption, access controls, and regular security audits. That said, data protection works best as a joint effort between us and each player, so please keep your account password private and do not share it with anyone.

You can submit a Subject Access Request by emailing [email protected]. Include your account ID and the type of data you want to access. We will verify your request and respond within the legally required timeframe.

Yes, you can request deletion. However, data that must be retained for legal reasons (such as financial records) cannot be deleted until the required retention period has ended, at which point we will notify you that it has been removed. Requests can be sent to [email protected].

Cookies are used to maintain login sessions, understand how players browse the site, and remember player settings. Non-essential cookies can be blocked through your browser settings. Please note that blocking essential cookies may affect login functionality.

If a data breach occurs, we will respond immediately upon detection—
  • We will act at once to contain the breach
  • Affected players will be notified in advance
  • We will investigate the incident and put measures in place to prevent it from happening again

Yes. This policy applies to everyone who visits https://mdi97.im, anyone who has an account with mdi97, and all users of our services. By continuing to use the website, you are considered to have agreed to the terms of this policy.