Privacy Policy

1. Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information that identifies or could reasonably be used to identify you as an individual, including your name, email address, phone number, national ID number, bank account details, and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, storage, retrieval, use, disclosure, and deletion.
• "Controller" means mpo869, the entity that determines the purposes and means of processing your Personal Data.
• "Processor" means any third party that processes Personal Data on our behalf, such as payment processors or KYC verification providers.
• "KYC" means Know Your Customer — the identity verification process required for regulatory compliance.
• "Cookie" means a small text file placed on your device by the mpo869 website to support session management, analytics, and personalization.
• "WIB" means Western Indonesia Time (UTC+7), the default time zone for all timestamped records unless otherwise specified.

2. Information We Collect

2.1 Information You Provide Directly

When you register an account, undergo KYC verification, make deposits or withdrawals, or contact our support team, you provide us with the following categories of Personal Data:

• Identity Information: Full legal name, date of birth, gender, nationality, and government-issued ID number (KTP, passport, or driver's license number).
• Contact Information: Email address, mobile phone number, and residential address (city, province, postal code).
• Financial Information: Bank account name, account number, and institution (e.g., BCA, BRI, BNI, Mandiri, CIMB Niaga). E-wallet identifiers (e.g., OVO, DANA, GoPay, ShopeePay registered numbers).
• Identity Verification Documents: Photographs or scanned copies of government-issued identification and proof-of-address documents submitted during KYC.
• Communications: Records of live chat conversations, email exchanges, and WhatsApp messages with our support team.

2.2 Information Collected Automatically

When you use the mpo869 platform, we automatically collect certain technical and behavioral data, including:

• Device Information: Device type, operating system, browser type and version, screen resolution, and language settings.
• Network Information: IP address, internet service provider, and general geographic location (city and country level — we do not collect precise GPS coordinates).
• Usage Data: Pages visited, features accessed, search queries, time spent on each page, bets placed, games played, and navigation patterns.
• Session Data: Login timestamps, session duration, and session activity logs.
• Transaction Data: Deposit amounts, withdrawal amounts, bet history, win/loss records, and bonus redemption history.

2.3 Information from Third Parties

We may receive Personal Data about you from third-party sources, including:

• Payment processors confirming successful deposit or withdrawal transactions.
• KYC verification service providers confirming identity document authenticity.
• Fraud prevention and anti-money-laundering screening services.
• Self-exclusion registries operated by responsible gambling organizations.

3. How We Use Your Personal Data

mpo869 uses your Personal Data for the following purposes:

Purpose	Description
Account Management	Creating, maintaining, and securing your mpo869 Account, including authentication and password recovery.
Payment Processing	Processing deposits and withdrawals via BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and other supported channels.
Identity Verification (KYC)	Verifying your identity and age (21+) to comply with anti-money-laundering and responsible gaming obligations.
Service Delivery	Enabling sports betting, live casino, slot games, and togel (traditional numbers lottery) services.
Customer Support	Responding to support requests, resolving disputes, and improving service quality based on interaction history.
Fraud Prevention	Detecting, investigating, and preventing fraudulent transactions, bonus abuse, collusion, and unauthorized account access.
Responsible Gaming	Monitoring betting behavior to identify potential problem gambling and applying self-exclusion or deposit limit restrictions when requested.
Legal Compliance	Meeting regulatory obligations, responding to lawful government or court requests, and maintaining records required by law.
Platform Improvement	Analyzing usage patterns to improve platform performance, design, and feature offerings.
Marketing Communications	Sending promotional offers, bonus notifications, and news updates — only with your consent, which you may withdraw at any time.

4. Legal Basis for Processing

We process your Personal Data on one or more of the following legal grounds:

• Contractual Necessity: Processing required to perform our contract with you — operating your account, processing bets, and handling payments.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including anti-money-laundering requirements and age verification.
• Legitimate Interests: Processing for fraud prevention, platform security, and service improvement — where these interests are not overridden by your privacy rights.
• Consent: Processing for marketing communications and certain cookie uses — which you may withdraw at any time without affecting the legality of prior processing.

5. Data Sharing and Disclosure

5.1 Service Providers (Processors)

We engage carefully selected third-party service providers who process Personal Data solely on our behalf and under our written instructions. These include:

• Payment gateway and bank transfer processing partners (for BCA, BRI, BNI, Mandiri, and e-wallet transactions).
• Identity verification and KYC service providers.
• Fraud detection and anti-money-laundering screening providers.
• Cloud hosting and data storage providers with ISO 27001-certified infrastructure.
• Customer support platform providers (live chat software, email management systems).
• Game content suppliers (Evolution Gaming, Pragmatic Play, Microgaming, and others) — limited to session token data necessary for game delivery.

All processors are contractually bound to handle your data with the same level of protection as mpo869 and may not use it for any purpose other than providing the contracted service.

5.2 Legal and Regulatory Disclosure

We may disclose Personal Data to government agencies, regulatory authorities, law enforcement, or courts when required to do so by applicable law, valid legal process, or binding government order. We will notify you of such a disclosure where legally permitted to do so.

5.3 Business Transfers

In the event of a merger, acquisition, corporate restructuring, or sale of assets, your Personal Data may be transferred to the acquiring entity, subject to equivalent privacy protections. You will be notified in advance of any such transfer.

5.4 No Sale of Personal Data

mpo869 does not sell, rent, or trade your Personal Data to third-party advertisers, data brokers, or marketing companies under any circumstances.

6. Data Retention

We retain Personal Data for as long as your Account is active and for a defined period thereafter, based on the following principles:

• Active Accounts: All Personal Data is retained for the duration of your active relationship with mpo869.
• Closed Accounts: Following account closure (whether voluntary or involuntary), we retain identity and transaction records for a minimum of five (5) years to comply with anti-money-laundering regulations and internal audit requirements.
• Support Communications: Live chat logs, email correspondence, and dispute r ecords are retained for three (3) years from the date of the communication.
• Marketing Data: If you withdraw consent to marketing communications, your preferences are updated immediately and marketing data is deleted within 30 days.
• Cookie Data: Session cookies expire when you close your browser. Persistent cookies are retained for periods specified in our Cookie settings — typically 30 to 365 days.

When Personal Data is no longer required for any legitimate purpose, it is securely deleted or anonymized so that it can no longer be associated with your identity.

7. Data Security

mpo869 implements a comprehensive set of technical and organizational measures to protect your Personal Data against unauthorized access, disclosure, alteration, and destruction:

• Encryption in Transit: All data exchanged between your device and our servers is encrypted using TLS 1.2 or higher (256-bit SSL).
• Encryption at Rest: Sensitive data stored on our servers — including identity documents, bank account details, and payment records — is encrypted at rest using AES-256.
• Access Controls: Personal Data is accessible only to authorized mpo869 personnel with a documented operational need. Access is role-based, logged, and reviewed quarterly.
• Two-Factor Authentication (2FA): Internal system access by mpo869 staff requires multi-factor authentication. We also offer 2FA to members for account login security.
• Penetration Testing: Our platform undergoes regular third-party security assessments and penetration tests to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: We maintain a documented data breach response procedure. If a breach occurs that poses a material risk to your rights, we will notify affected users without undue delay.

While we take every reasonable precaution to protect your data, no online platform can guarantee absolute security. You are responsible for safeguarding your own account credentials and for notifying us immediately at [email protected] if you suspect unauthorized access.

8. Cookies and Tracking Technologies

8.1 What We Use

mpo869 uses cookies and similar tracking technologies (local storage, session storage, and pixel tags) to operate and improve our platform. The categories of cookies we use are:

• Strictly Necessary Cookies: Essential for platform functionality — session management, login authentication, and security token validation. These cannot be disabled without breaking core platform features.
• Functional Cookies: Remember your preferences such as language settings, preferred currency display (IDR), and game lobby layout.
• Analytics Cookies: Collect aggregated, anonymized data about how members use the platform — pages visited, features accessed, and navigation paths — to help us improve the user experience.
• Security Cookies: Support fraud detection by helping us identify unusual login patterns or suspicious session activity.

8.2 Managing Cookies

You may manage cookie preferences through your browser settings. Most browsers allow you to refuse non-essential cookies, delete existing cookies, or receive a notification before a cookie is placed. Note that disabling certain cookies may affect platform functionality. For detailed instructions, refer to your browser's help documentation.

mpo869 does not use cookies for third-party advertising or behavioral retargeting on external websites.

9. Your Privacy Rights

As a member of mpo869, you have the following rights with respect to your Personal Data. To exercise any of these rights, contact our support team at [email protected] with your full name, registered email address, and a clear description of your request. We will respond within 14 business days.

• Right of Access: Request a copy of the Personal Data we hold about you, including what categories of data, for what purposes, and with whom it has been shared.
• Right to Rectification: Request correction of any inaccurate or incomplete Personal Data we hold about you.
• Right to Erasure ("Right to Be Forgotten"): Request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations.
• Right to Restriction of Processing: Request that we limit how we use your Personal Data while a complaint or dispute is being resolved.
• Right to Data Portability: Request your Personal Data in a structured, commonly used, machine-readable format (e.g., CSV) so that you may transfer it to another service.
• Right to Object: Object to processing based on our legitimate interests or for direct marketing purposes. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time by clicking "Unsubscribe" in any marketing email or contacting support. Withdrawal does not affect the lawfulness of processing that occurred before withdrawal.

10. Minors and Age Restriction

mpo869 is strictly an adults-only platform. You must be at least 21 years of age to register an Account and use our services. We do not knowingly collect Personal Data from individuals under the age of 21. If we become aware that Personal Data has been collected from a minor, we will immediately close the associated Account, void all bets and balances, and securely delete the data.

Parents and guardians who believe their minor child has accessed mpo869 are strongly encouraged to contact us immediately at [email protected] so that we can take prompt action. We also recommend installing parental control software to prevent minors from accessing gambling platforms.

11. International Data Transfers

mpo869 operates internationally, which means your Personal Data may be transferred to and stored on servers located outside Indonesia. Where such transfers occur, we ensure that appropriate safeguards are in place to protect your data to the same standard as within Indonesia, including:

• Contractual clauses requiring the recipient to protect data to an equivalent standard.
• Use of service providers certified to internationally recognized security standards (e.g., ISO 27001, SOC 2 Type II).
• Data processing agreements with all third-party processors specifying data protection obligations.

By using mpo869, you acknowledge and consent to the transfer of your Personal Data to our servers and processors in jurisdictions outside Indonesia, subject to the safeguards described above.

12. Third-Party Services and Links

The mpo869 platform integrates with third-party game content providers (such as Evolution Gaming, Pragmatic Play, and Microgaming) and payment service providers (such as Indonesian bank transfer gateways and e-wallet operators). Each of these third parties operates under its own privacy policy and data handling practices.

mpo869 is not responsible for the privacy practices of third-party providers once your data leaves our platform boundary. We encourage you to review the privacy policies of any third-party service you interact with through our platform. This Privacy Policy applies solely to Personal Data collected and processed by mpo869.

13. Changes to This Privacy Policy

mpo869 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or platform features. When material changes are made, we will:

• Update the "Effective Date" at the top of this page.
• Send a notification to your registered email address at least 14 days before the changes take effect.
• Display a prominent notice on the mpo869 platform.

Your continued use of the platform after the effective date of the revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the changes, you must cease using mpo869 and may request account closure by contacting our support team.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way mpo869 handles your Personal Data, please contact our Data Privacy team through any of the following channels:

• Email: [email protected] — include "Privacy Request" in the subject line for priority routing.
• Live Chat: Available 24/7 on mpo869.cam — ask to be connected to the Privacy or Compliance team.
• WhatsApp: Contact our support team via WhatsApp during WIB hours (08:00–24:00 WIB) for non-urgent privacy inquiries.

We aim to acknowledge all privacy-related requests within 2 business days and resolve them fully within 14 business days. Complex requests involving data export or deletion may require up to 30 days.