Privacy Policy

1. Introduction

1.1 mpo868 operates as an internationally regulated online gaming platform providing sports betting, live casino, togel (Indonesia's traditional numbers lottery), virtual sports, and esports wagering services to eligible adults aged 21 and above who are residents of Indonesia.

1.2 As a platform that handles real-money transactions and holds personally identifiable information about its Members, mpo868 takes its data protection responsibilities with the utmost seriousness. We have designed our data handling practices to align with internationally recognized data protection standards, including principles of transparency, purpose limitation, data minimization, accuracy, storage limitation, integrity, and confidentiality.

1.3 This Privacy Policy should be read alongside our Terms & Conditions, which govern the overall contractual relationship between mpo868 and its Members. In the event of any conflict between the two documents regarding data matters, this Privacy Policy shall take precedence.

2. Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information that identifies or can reasonably be used to identify a living individual, whether directly (e.g., full name, national identity number) or indirectly (e.g., device identifier, IP address, account username).
• "Processing" means any operation performed on personal data, including collection, recording, storage, use, disclosure, transmission, erasure, or destruction.
• "Controller" means mpo868, the entity that determines the purposes and means of processing your personal data.
• "Processor" means any third party engaged by mpo868 to process personal data on its behalf in accordance with mpo868's instructions and this policy.
• "KYC" (Know Your Customer) means the identity and payment verification process required by mpo868 as part of its fraud prevention and regulatory compliance obligations.
• "Cookie" means a small text file placed on your device by the mpo868 website to store session information, preferences, or analytical data.

3. Data We Collect

3.1 mpo868 collects the following categories of personal data from Members:

3.2 mpo868 does not intentionally collect sensitive personal data beyond what is required for KYC compliance and responsible gaming obligations (e.g., self-exclusion status). Where such data is collected, it is treated with the highest level of protection and processed only for the specific purpose for which it was provided.

4. How We Collect Data

4.1 Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or update your account settings.

4.2 Automatically — through cookies, web beacons, and server logs when you access and navigate the mpo868 platform. This includes IP address data, device fingerprinting for fraud prevention, and session activity logs.

4.3 From third-party services — including identity verification agencies used for KYC checks, payment processors (including the Indonesian banks and e-wallet providers listed in Section 3), and fraud detection services. mpo868 ensures that any third party providing data to us does so on a lawful basis.

5. Purposes of Processing

5.1 mpo868 processes your personal data for the following specific purposes:

• Account Management: Creating, maintaining, and closing your Member account; authenticating your identity at login; enforcing the one-account-per-member rule.
• Transaction Processing: Processing deposits and withdrawals through your registered Indonesian bank accounts or e-wallets; maintaining accurate financial records.
• KYC & Fraud Prevention: Verifying your identity and age (21+ requirement); detecting and preventing fraudulent activity, bonus abuse, and money laundering.
• Regulatory Compliance: Meeting obligations under applicable international gaming regulations; responding to lawful requests from regulatory or law enforcement authorities.
• Customer Support: Responding to your enquiries, resolving disputes, and maintaining support records.
• Responsible Gaming: Monitoring gaming patterns to identify potential problem gambling; administering self-exclusion, deposit limits, and session controls you have requested.
• Platform Improvement: Analysing aggregated, anonymized usage data to improve platform performance, game selection, and user experience.
• Direct Communications: Sending you account notifications, transaction confirmations, security alerts, and (where you have opted in) promotional communications about mpo868 offers.

6. Legal Basis for Processing

6.1 mpo868 processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform our obligations under the Member agreement — including account creation, transaction processing, and customer support.
• Legitimate Interests: Processing necessary for fraud prevention, platform security, respon sible gaming monitoring, and platform improvement — where these interests are not overridden by your privacy rights.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering obligations and responses to lawful regulatory requests.
• Consent: Processing for optional marketing communications, where you have provided explicit opt-in consent. You may withdraw this consent at any time by updating your notification preferences in account settings or by contacting our support team.

7. Data Sharing

7.1 mpo868 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share personal data only in the following limited circumstances and only to the extent necessary for the stated purpose:

7.1 Payment Processors

We share the financial data necessary to process your deposits and withdrawals with the Indonesian banking institutions and e-wallet providers you have registered on your account, including BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata, OVO, DANA, GoPay, ShopeePay, and LinkAja. These entities act as independent controllers under their own privacy policies.

7.2 Identity Verification Partners

For KYC purposes, we may share identity documents and associated data with accredited third-party identity verification agencies. These agencies are contractually bound to process your data only for verification purposes and to maintain appropriate security standards.

7.3 Technology Service Providers

We engage technology partners — including cloud hosting providers, cybersecurity firms, and game content providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Pocket Games Soft, and Spribe — who may process limited technical data in the course of delivering their services to mpo868. All such providers are bound by data processing agreements that restrict their use of your data to the services they supply to us.

7.4 Regulatory and Law Enforcement Authorities

mpo868 will disclose personal data to competent regulatory bodies, law enforcement agencies, or courts where required to do so by law, or where we have reasonable grounds to believe that disclosure is necessary to prevent fraud, money laundering, or other criminal activity. We will notify affected Members of such disclosures where legally permitted to do so.

7.5 Business Transfers

In the event of a merger, acquisition, or sale of all or a substantial portion of mpo868's business assets, personal data held by mpo868 may be transferred to the acquiring entity. Members will be notified of any such transfer and of any material changes to this Privacy Policy that result from it, with a minimum of 30 days' notice prior to the transfer taking effect.

8. International Data Transfers

8.1 As an internationally operating platform, mpo868 may transfer your personal data to servers or processors located outside of Indonesia. Where such transfers occur, mpo868 ensures that appropriate safeguards are in place — including contractual protections, encryption in transit and at rest, and access controls — to protect your data to a standard equivalent to that described in this policy.

8.2 By using the mpo868 platform, you acknowledge that your data may be transferred to and processed in jurisdictions outside Indonesia in accordance with the safeguards described above.

9. Data Retention

9.1 mpo868 retains personal data for the periods set out below, after which data is securely deleted or anonymized:

9.2 Where a Member requests account closure and erasure, mpo868 will delete or anonymize all data for which there is no ongoing legal or regulatory obligation to retain it, within 30 days of the verified request.

10. Security Measures

10.1 mpo868 implements a layered security architecture to protect your personal data against unauthorized access, disclosure, alteration, or destruction. Our security measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers;
• AES-256 encryption for sensitive data stored at rest in our databases;
• Multi-factor authentication options for Member account access;
• Role-based access controls ensuring that internal staff access personal data only on a strict need-to-know basis;
• Regular third-party penetration testing and security audits of our platform infrastructure;
• Real-time intrusion detection and automated threat response systems;
• Secure, geographically redundant data backup procedures.

10.2 In the event of a personal data breach that is likely to result in a risk to the rights of affected Members, mpo868 will notify affected Members without undue delay and take all reasonable steps to contain the breach and mitigate its impact.

11. Cookies & Tracking Technologies

11.1 mpo868 uses cookies and similar tracking technologies on its platform to enable core functionality, maintain session security, and improve the overall user experience. The categories of cookies we use are as follows:

• Strictly Necessary Cookies: Essential for platform operation, including session management, authentication, and security. These cookies cannot be disabled without impairing core platform functionality.
• Functional Cookies: Used to remember your preferences — such as your preferred payment method, language setting, and notification preferences — so that you do not need to re-enter them on each visit.
• Analytical Cookies: Used to collect anonymized, aggregated data about how Members navigate and interact with the platform, enabling us to identify and resolve usability issues and improve service quality.
• Security Cookies: Used for device fingerprinting and fraud detection, helping us identify and block unauthorized access attempts and suspicious account activity.

11.2 mpo868 does not use third-party advertising cookies or behavioral tracking technologies for the purpose of serving targeted advertisements on external websites.

11.3 You may configure your browser settings to block or delete cookies. Please note that disabling strictly necessary cookies will impair your ability to use the mpo868 platform, as session management and authentication depend on them.

12. Your Privacy Rights

12.1 As a Member of the mpo868 platform, you have the following rights with respect to your personal data. To exercise any of these rights, please contact us at the details provided in Section 15:

• Right of Access: You may request a copy of all personal data mpo868 holds about you. We will provide this within 30 days of a verified request, at no charge for the first request in any 12-month period.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data. Minor corrections (e.g., contact details) can often be made directly through your account settings.
• Right to Erasure: Subject to our legal and regulatory retention obligations (see Section 9), you may request deletion of your personal data. We will acknowledge your request within 5 business days and complete processing within 30 days.
• Right to Restriction of Processing: You may request that we restrict the processing of your data in certain circumstances — for example, while a dispute about data accuracy is being resolved.
• Right to Data Portability: Where technically feasible, you may request your personal data in a structured, machine-readable format for transfer to another service provider.
• Right to Object: You may object to processing based on mpo868's legitimate interests at any time. We will cease that processing unless we can demonstrate compelling legitimate grounds that override your rights.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw it at any time without penalty. Withdrawal does not affect the lawfulness of prior processing.

12.2 mpo868 will not discriminate against you for exercising any of the rights described above. All rights requests are handled with the same priority as any other Member support enquiry.

13. Minors

13.1 The mpo868 platform is strictly for adults aged 21 and above. We do not knowingly collect personal data from individuals under the age of 21. If mpo868 becomes aware that it has inadvertently collected personal data from a person under 21, that data will be deleted immediately and the associated account permanently closed.

13.2 If you have reason to believe that a minor has registered on the mpo868 platform, please contact us immediately at [email protected] so that we can take prompt corrective action.

14. Changes to This Policy

14.1 mpo868 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform functionality. When material changes are made, we will notify active Members via the email address registered on their account at least 14 days before the changes take effect.

14.2 The "Last Updated" date at the top of this page reflects the date of the most recent revision. Your continued use of the mpo868 platform after the effective date of any revision constitutes acceptance of the updated policy. If you do not accept the revised policy, you must discontinue use of the platform and request account closure.

14.3 We encourage you to review this Privacy Policy periodically to remain informed about how mpo868 protects your personal information.

15. Contact Us

15.1 If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please contact the mpo868 Data & Privacy team through the following channel:

• Email: [email protected]
• Subject Line: Please include "Privacy Request" or "Data Enquiry" in the subject line of your email to ensure prompt routing to the appropriate team.
• Response Time: All privacy-related enquiries are acknowledged within 2 business days (WIB, UTC+7) and substantively responded to within 10 business days.
• Support Hours: 24 hours a day, 7 days a week, including Indonesian public holidays.

15.2 For matters related to responsible gaming, self-exclusion, or account restrictions, please refer to our dedicated Responsible Gaming page for the appropriate resources and contact channels.