Privacy Policy How MPO007 Collects, Uses & Protects Your Data

1 Introduction

mpo007 ("we", "us", "our", "the Platform") is committed to protecting the personal data of all users who register and interact with the website located at mpo007.click ("the Site"). This Privacy Policy ("Policy") sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us.

This Policy applies to all members, visitors, and users of the mpo007 platform, including those accessing our services from Malaysia — including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, and Shah Alam — and from other jurisdictions. By registering an account, making a deposit, or otherwise using the mpo007 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein.

This Policy should be read alongside our Terms & Conditions, which govern the overall use of the mpo007 platform. If you do not agree with this Policy, you should not use the platform.

2 Definitions

Throughout this Privacy Policy, the following definitions apply:

• "Personal Data" — any information that identifies or could reasonably identify a living individual, directly or indirectly. This includes name, email address, contact number, MyKad number, payment details, IP address, and device identifiers.
• "Processing" — any operation performed on personal data, including collection, storage, use, disclosure, transmission, deletion, or any combination thereof.
• "Data Controller" — mpo007, the entity that determines the purposes and means of processing personal data collected through the platform.
• "Data Subject" — the natural person to whom personal data relates; in this context, you as a registered member or site visitor.
• "Third Party" — any person or entity other than you, mpo007, or mpo007's authorised processors and service providers.
• "Cookies" — small text files stored on your device by your web browser when you access the mpo007 website.
• "KYC" — Know Your Customer procedures used to verify a member's identity in accordance with applicable regulatory requirements.

3 Data We Collect

mpo007 collects personal data in the following categories. We collect only what is reasonably necessary for the purposes described in this Policy:

3.1 Identity and Contact Data

• Full legal name as it appears on your government-issued identification.
• Date of birth (for age verification — all members must be 21 or older).
• Malaysian national identity card number (MyKad) or passport number.
• Residential address, including postcode and state.
• Email address and mobile phone number.

3.2 Financial and Transaction Data

• Bank account details (account number and bank name — e.g., Maybank, CIMB, Public Bank, Hong Leong Bank).
• E-wallet identifiers (Touch 'n Go eWallet, Boost, GrabPay account references).
• Deposit and withdrawal transaction records, including amounts, timestamps, and payment channel used.
• Cryptocurrency wallet addresses for members using BTC, ETH, USDT, or BNB deposits.

3.3 Account and Activity Data

• Username and encrypted password.
• Betting and gaming history, including bet amounts, outcomes, and timestamps.
• Bonus and promotional activity records.
• Customer support communications and chat transcripts.
• Account preferences and responsible gambling tool settings.

3.4 Technical and Device Data

• IP address and approximate geolocation derived therefrom.
• Device type, operating system, and browser type and version.
• Session duration and navigation patterns on the platform.
• Cookie identifiers and similar tracking technologies.

4 How We Collect Your Data

mpo007 collects personal data through the following means:

4.1 Direct Collection

Data you provide voluntarily when you register an account, complete KYC verification, make a deposit or withdrawal request, contact our support team, or participate in a promotional activity. This includes form submissions, live chat conversations, and email correspondence directed to [email protected].

4.2 Automated Collection

Technical data collected automatically when you access and interact with the mpo007 platform, including via cookies, web beacons, server logs, and analytics tools. This data is collected regardless of whether you are logged in to your account.

4.3 Third-Party Sources

In certain circumstances, mpo007 may receive personal data from third-party sources, including:

• Identity verification service providers used for KYC compliance — these providers may confirm name, date of birth, and address against third-party databases.
• Payment processors and financial institutions — including FPX, DuitNow, and participating Malaysian banks — which may confirm transaction status and account holder details as part of payment processing.
• Fraud prevention and anti-money laundering screening services used to assess transactional risk.

5 Data Processing & Use

mpo007 processes your personal data for the following specific purposes. We do not process personal data for any purpose not described in this Policy without first obtaining your explicit consent:

• Account Management: To create, maintain, and manage your mpo007 member account, including authentication, password recovery, and account preference settings.
• Identity Verification (KYC): To verify your identity and confirm that you meet the minimum age requirement of 21 years in compliance with our responsible gambling commitments and operational policies.
• Payment Processing: To process deposits, withdrawals, and internal wallet transactions in MYR via FPX, DuitNow, e-wallets, bank transfers, and cryptocurrency channels.
• Platform Delivery: To provide access to casino games, sportsbook services, live dealer tables, and all other mpo007 platform features.
• Customer Support: To respond to queries, complaints, and requests submitted via live chat or email, and to maintain records of support interactions for quality assurance purposes.
• Legal and Regulatory Compliance: To fulfil our obligations under applicable anti-money laundering (AML), counter-terrorism financing (CTF), and other regulatory requirements.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, prohibited conduct, multi-accounting, and security breaches.
• Responsible Gambling: To monitor betting patterns for signs of problem gambling behaviour and to enforce member-requested deposit limits, loss limits, and self-exclusion agreements.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates — where you have given explicit consent. You may withdraw this consent at any time.
• Platform Improvement: To analyse aggregated, anonymised usage data to improve platform performance, user interface design, and the overall member experience.

6 Legal Basis for Processing

mpo007 processes your personal data on one or more of the following legal bases, as applicable to each processing activity:

• Contractual Necessity: Processing necessary to perform our contract with you — i.e., to provide the mpo007 betting and casino platform services you have registered to access.
• Legal Obligation: Processing required to comply with applicable legal and regulatory requirements, including KYC/AML obligations and data retention mandates.
• Legitimate Interests: Processing carried out in the legitimate interests of mpo007, including fraud prevention, security monitoring, and platform quality improvement — provided such interests are not overridden by your privacy rights.
• Consent: Processing based on your explicit, freely given, and informed consent — primarily for marketing communications. You may withdraw consent at any time by contacting our support team.

7 Data Sharing & Disclosure

mpo007 does not sell, rent, or trade your personal data to third parties. We share personal data only in the following limited and controlled circumstances:

7.1 Service Providers and Processors

We share personal data with carefully selected third-party service providers who process data on our behalf and under our written instructions. These include:

• Payment processors and financial institutions (FPX, DuitNow, Maybank, CIMB, Public Bank, Hong Leong Bank, e-wallet operators).
• Identity verification and KYC service providers.
• Fraud detection and AML screening services.
• Cloud infrastructure and data hosting providers operating under data processing agreements.
• Customer support software providers.

7.2 Legal and Regulatory Disclosure

We may disclose personal data to law enforcement authorities, regulatory bodies, or courts where required to do so by applicable law, court order, or regulatory directive. mpo007 will notify affected members of such disclosures where legally permitted to do so.

7.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of mpo007's business or assets, personal data held by us may be transferred as part of that transaction. Affected members will be notified in advance where possible, and this Privacy Policy will continue to govern the processing of their personal data.

8 Data Retention

mpo007 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following retention principles:

• Active Account Data: Personal data associated with an active mpo007 account is retained for the duration of the account's existence and for a minimum of five (5) years following account closure, in compliance with applicable AML and record-keeping requirements.
• Transaction Records: Financial transaction data — including all MYR deposit and withdrawal records — is retained for a minimum of seven (7) years from the date of the transaction, in line with standard financial record-keeping obligations applicable in Malaysia.
• Support Communications: Customer support records are retained for three (3) years from the date of the final communication, to support quality assurance and dispute resolution.
• Marketing Data: Where processing is based on consent, marketing data will be deleted within 30 days of a withdrawal of consent being received and actioned by our team.
• Technical Logs: Server logs, IP address records, and device data are retained for up to twelve (12) months unless retained longer for fraud investigation purposes.

At the expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual.

9 Data Security

mpo007 takes the security of your personal data seriously and has implemented a range of technical and organisational measures to protect it against unauthorised access, disclosure, alteration, and destruction:

• Encryption in Transit: All data transmitted between your browser or device and the mpo007 platform is encrypted using industry-standard 256-bit Transport Layer Security (TLS/SSL) protocols.
• Encryption at Rest: Sensitive personal data, including payment information and identity documents, is encrypted at rest within our secure data infrastructure.
• Access Controls: Access to personal data within mpo007 is restricted on a strict need-to-know basis. Staff members with access to personal data are subject to confidentiality obligations and receive regular data protection training.
• Two-Factor Authentication (2FA): Optional two-factor authentication is available to all mpo007 members and is strongly recommended to protect account access.
• Penetration Testing and Audits: mpo007 conducts regular security assessments, including penetration testing, to identify and remediate vulnerabilities.
• Incident Response: In the event of a data security incident that poses a risk to your personal data, mpo007 will notify affected members promptly and take all reasonable steps to contain and remediate the incident.

While we implement robust security measures, no online system is completely impervious to all possible threats. We encourage members to use strong, unique passwords for their mpo007 accounts and to report any suspected unauthorised activity to [email protected] immediately.

10 Cookies & Tracking Technologies

mpo007 uses cookies and similar tracking technologies to operate and improve the platform experience. By using the mpo007 website, you consent to the use of cookies as described in this section.

10.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the platform to function, including session management, authentication, and security features. These cannot be disabled without affecting core platform functionality.
• Functional Cookies: Enable personalised features such as remembering your language preferences, account settings, and responsible gambling tool configurations.
• Analytics Cookies: Help us understand how members use the platform — which pages are visited most, where users drop off, and how performance can be improved. Data collected via analytics cookies is aggregated and anonymised wherever possible.
• Security and Fraud Prevention Cookies: Used to detect and prevent fraudulent activity, including multi-account detection and bot activity identification.

10.2 Managing Cookies

You may control and manage cookies through your browser settings. Most browsers allow you to refuse or delete cookies. Please note that disabling certain cookies may affect the availability and functionality of some mpo007 platform features. Consult your browser's help documentation for guidance on cookie management.

11 Your Rights as a Data Subject

Subject to applicable data protection law, you hold the following rights with respect to your personal data held by mpo007. To exercise any of these rights, please contact us at [email protected] with your full name, registered email address, and a description of your request:

• Right of Access: You have the right to request a copy of the personal data we hold about you, along with information about how it is being processed. We will respond to access requests within 30 days.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal and regulatory retention obligations.
• Right to Restriction of Processing: You may request that we restrict the processing of your personal data in certain circumstances, such as where you contest its accuracy or object to its use.
• Right to Data Portability: Where processing is based on consent or contract and is carried out by automated means, you may request a copy of your data in a structured, machine-readable format.
• Right to Object: You have the right to object to processing based on our legitimate interests, and to withdraw consent for marketing communications at any time.
• Right Not to Be Subject to Automated Decision-Making: Where mpo007 makes decisions that have a significant effect on you solely through automated means, you have the right to request human review of that decision.

12 Children & Minors

The mpo007 platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. Age verification is conducted during the KYC process, and any account found to belong to a person below the minimum age will be closed immediately, with all associated data reviewed in accordance with our responsible gambling and legal obligations.

If you believe that mpo007 has inadvertently collected personal data from a person under the age of 21, please contact our support team at [email protected] immediately. We will investigate and take appropriate action without delay.

13 International Data Transfers

The mpo007 platform serves members primarily from Malaysia and operates infrastructure that may be hosted across multiple jurisdictions. As a result, your personal data may be transferred to and processed in countries outside of Malaysia.

Wherever personal data is transferred internationally, mpo007 ensures appropriate safeguards are in place, including:

• Contractual arrangements with third-party processors that include data protection obligations equivalent to those under applicable law.
• Use of service providers operating within jurisdictions that maintain adequate data protection standards.
• Implementation of technical measures to protect data in transit and at rest during international transfers.

14 Changes to This Privacy Policy

mpo007 reserves the right to update or modify this Privacy Policy at any time. The date of the most recent revision is displayed at the top of this page. Where changes are material — meaning they significantly affect your rights or how we use your data — we will notify registered members by email prior to the changes taking effect.

We encourage all members to review this Privacy Policy periodically to remain informed about how mpo007 collects and uses personal data. Continued use of the platform following the publication of any amendment constitutes acceptance of the updated Policy.

15 Contact Us & Privacy Complaints

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, please contact our Data Protection team using the following details:

• Privacy Enquiries: [email protected] (plain text — not a clickable link)
• Subject Line: Please use the subject line "Privacy Request — [Your Username]" for faster handling.
• Response Time: We aim to acknowledge all privacy-related queries within five (5) business days and to provide a substantive response within thirty (30) calendar days.
• Live Chat: Available 24/7 for general support and preliminary privacy queries. Average response under 5 minutes.

If you are not satisfied with our response to your privacy complaint, you have the right to escalate your complaint to the relevant data protection supervisory authority in your jurisdiction.