Privacy Policy

This Privacy Policy applies to all personal data collected by mpo989 through your use of our platform at https://mpo989.cam, including all services, features, account management tools, and customer support interactions. By registering an account or using the mpo989 platform, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy.

This Privacy Policy supplements and should be read in conjunction with our Terms & Conditions. In the event of a conflict between this Privacy Policy and the Terms & Conditions, this Privacy Policy shall prevail with respect to data protection matters.

We are committed to transparency. If you have any questions about how we handle your data, please contact our Data Protection Officer using the contact details provided in Section 14 of this policy.

For the purposes of applicable data protection laws, the data controller responsible for your personal information is mpo989, operating the platform at https://mpo989.cam. mpo989 determines the purposes and means of processing your personal data and is responsible for ensuring compliance with applicable privacy regulations.

Our registered contact details for privacy and data protection matters are:

• Email: [email protected]
• Subject Line for Data Requests: "Data Privacy Request – [Your Account ID]"
• Response Time: We will acknowledge data subject requests within 2 business days and provide a substantive response within 30 days as required under applicable data protection frameworks.

mpo989 collects personal data in three primary ways: information you provide directly, information collected automatically through your use of the platform, and information obtained from third-party sources for verification purposes. The categories of data we collect include:

3.1 Information You Provide

• Account Registration Data: Full legal name, date of birth, email address, phone number, residential address, username, and password.
• Identity Verification (KYC) Documents: Government-issued photo identification (Indonesian National Identity Card / KTP, passport), proof of address (utility bill, bank statement), and proof of payment method ownership (bank account statements, e-wallet screenshots).
• Financial Information: Bank account details (account number, bank name, account holder name), e-wallet identifiers (OVO, DANA, GoPay account linked phone number), deposit and withdrawal transaction history.
• Communications: Content of live chat messages, email correspondence with customer support, and any other communications you initiate with mpo989.
• Marketing Preferences: Your consent status for receiving promotional emails, SMS notifications, and push notifications.

3.2 Information Collected Automatically

• Device Information: IP address, device type, operating system, browser type and version, screen resolution, time zone setting.
• Usage Data: Pages visited, features accessed, time spent on pages, betting activity (wagers placed, games played, win/loss outcomes), session duration, referral source (how you arrived at mpo989).
• Location Data: Approximate geographic location derived from IP address. mpo989 does not collect precise GPS coordinates unless explicitly enabled by you for specific features.
• Cookies and Similar Technologies: Session cookies for maintaining login state, preference cookies for storing language and display settings, analytics cookies for understanding platform usage patterns. See Section 7 for detailed information on cookies.

3.3 Information from Third Parties

• Payment Processors: Transaction confirmation data from BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, and other integrated payment providers.
• KYC Verification Services: Identity verification results from third-party KYC providers used to confirm the authenticity of submitted documents and detect fraudulent registrations.
• Fraud Prevention Services: Risk scoring data, device fingerprinting information, and behavioral analysis reports from security vendors used to prevent multi-accounting, bonus abuse, and financial crime.

mpo989 processes your personal data for the following purposes, all of which are necessary to provide our services, comply with legal obligations, or pursue legitimate business interests:

• Account Management: Creating and maintaining your member account, authenticating your identity on login, managing your profile settings and preferences.
• Transaction Processing: Processing deposits and withdrawals, maintaining accurate financial records, generating account statements, complying with anti-money laundering (AML) obligations.
• Identity Verification (KYC): Verifying that you meet our eligibility criteria (21+ age requirement, Indonesia residency where applicable), preventing underage gambling, detecting fraudulent account registrations, complying with Know Your Customer regulations.
• Service Delivery: Providing access to sports betting markets, live dealer casino games, togel lottery draws, slot games, and all other platform features; calculating and crediting winnings; applying bonus terms and wagering requirements.
• Customer Support: Responding to your inquiries via live chat, email, and WhatsApp; resolving account issues, payment disputes, and technical problems; processing responsible gaming tool requests (deposit limits, self-exclusion).
• Fraud Prevention and Security: Detecting and preventing multi-accounting, collusion, bonus abuse, payment fraud, and other prohibited conduct; monitoring betting patterns for irregular activity; securing the platform against unauthorized access and cyber attacks.
• Legal Compliance: Fulfilling our obligations under applicable gambling regulations, AML/CFT (Counter-Financing of Terrorism) laws, and data protection requirements; responding to lawful requests from regulatory authorities and law enforcement agencies.
• Marketing and Promotions (with your consent): Sending promotional emails about new games, bonus offers, and platform updates; delivering personalized bonus recommendations based on your gaming preferences; conducting customer satisfaction surveys.
• Analytics and Platform Improvement: Understanding how members use the platform; identifying popular games and features; optimizing page load times and user interface design; improving mobile responsiveness; measuring the effectiveness of marketing campaigns.
• Responsible Gaming: Monitoring your betting behavior for signs of problem gambling; providing reality checks and session reminders; enforcing deposit limits and self-exclusion requests; offering access to responsible gaming resources.

mpo989 does not use your personal data for automated decision-making that produces legal effects or similarly significant impacts without human oversight. While we use automated fraud detection systems to flag suspicious activity, all account suspension or termination decisions involve manual review by our compliance team.

Under applicable data protection laws, mpo989 must have a lawful basis for processing your personal data. We rely on the following legal grounds:

• Contract Performance: Processing necessary to provide the gambling services you have requested by registering an account and placing wagers. This includes account management, transaction processing, game access, and customer support.
• Legal Obligation: Processing required to comply with our obligations under gambling regulations, AML/CFT laws, and tax reporting requirements. This includes KYC verification, transaction monitoring, and regulatory reporting.
• Legitimate Interests: Processing necessary to pursue our legitimate business interests in fraud prevention, platform security, service improvement, and operational efficiency — provided those interests do not override your fundamental rights and freedoms. This includes security monitoring, analytics, and non-marketing communications (e.g., account security alerts, system maintenance notifications).
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent. This applies primarily to marketing communications, which you may withdraw consent for at any time by clicking the unsubscribe link in promotional emails or updating your preferences in your account settings.

mpo989 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share your data only in the following limited circumstances:

• Payment Processors: Bank account details and transaction information are shared with BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, and other payment providers as necessary to process your deposits and withdrawals.
• KYC and Fraud Prevention Vendors: Identity documents and verification data are shared with third-party KYC service providers to confirm your identity and detect fraudulent registrations. These vendors operate under strict data processing agreements and are prohibited from using your data for any purpose other than providing verification services to mpo989.
• Technology Service Providers: Hosting providers, content delivery networks (CDNs), and IT infrastructure vendors may have access to your data as necessary to operate the platform. All such vendors are contractually bound to protect your data and use it solely for providing services to mpo989.
• Regulatory and Legal Authorities: We may disclose your data to gambling regulators, law enforcement agencies, tax authorities, and courts where required by law, court order, or regulatory directive. We will notify you of such disclosures unless prohibited by law.
• Professional Advisors: Your data may be shared with our legal counsel, auditors, and other professional advisors under obligations of confidentiality where necessary for business operations and compliance.
• Business Transfers: In the event that mpo989 is acquired by or merges with another entity, your personal data may be transferred to the successor entity as part of the transaction. You will be notified of any such transfer and given the opportunity to delete your account if you do not wish your data to be transferred.

mpo989 does not share your data with affiliate marketers, data brokers, or advertising networks. We do not participate in cross-site tracking or behavioral advertising beyond our own platform.

mpo989 uses cookies and similar tracking technologies to provide and improve our services. Cookies are small text files stored on your device that enable us to recognize you and remember your preferences across sessions.

Types of Cookies We Use

• Strictly Necessary Cookies: Essential for platform operation. These cookies enable core functionality such as login authentication, session management, and security features. You cannot disable these cookies through our preference center, but you may block them via your browser settings — note that doing so will prevent you from using the platform.
• Functional Cookies: Enable personalized features such as language selection, currency display (IDR), and interface preferences. These cookies remember your choices to improve your experience.
• Analytics Cookies: Help us understand how members use the platform by collecting aggregated usage statistics. We use this data to identify popular games, optimize page performance, and improve user interface design. mpo989 uses first-party analytics only — we do not use Google Analytics or other third-party analytics that track you across multiple websites.
• Marketing Cookies (with consent): Used to deliver personalized bonus offers and track the effectiveness of promotional campaigns. These cookies remember which promotions you have viewed and whether you claimed them. You may opt out of marketing cookies at any time through your account preferences.

Managing Cookies

You can control cookie preferences through your account settings or your browser's privacy controls. Most browsers allow you to refuse cookies or delete existing cookies. Please note that blocking strictly necessary cookies will prevent you from accessing the mpo989 platform.

mpo989 implements industry-standard technical and organizational measures to protect your personal data against unauthorized access, accidental loss, destruction, or damage. Our security measures include but are not limited to:

• Encryption: All data transmitted between your device and our servers is encrypted using TLS 1.3 (Transport Layer Security). Financial data and identity documents are encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data is restricted on a need-to-know basis. Only authorized personnel with specific job functions requiring data access (e.g., KYC review, customer support, fraud investigation) are granted permission. All access is logged and audited.
• Password Security: Member passwords are hashed using bcrypt with per-user salts. mpo989 employees and contractors never have access to plaintext passwords.
• Network Security: Our infrastructure is protected by firewalls, intrusion detection systems, and DDoS mitigation services. Regular security assessments and penetration testing are conducted by independent third-party security firms.
• Data Minimization: We collect and retain only the data necessary to provide our services and meet legal obligations. Data that is no longer needed is securely deleted in accordance with our retention policies (see Section 9).
• Incident Response: In the event of a data breach affecting your personal data, we will notify you within 72 hours where required by applicable data protection laws and will provide information on the nature of the breach, the data affected, and steps you should take to protect yourself.

While we employ robust security measures, no system is completely secure. You are responsible for maintaining the confidentiality of your login credentials and should enable two-factor authentication where available. Notify us immediately if you suspect unauthorized access to your account.

mpo989 retains your personal data for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods include:

• Account Data: Retained for the duration of your active membership and for 5 years after account closure to comply with AML/CFT record-keeping requirements and to resolve any post-closure disputes.
• Transaction Records: Retained for 7 years after the transaction date to comply with financial record-keeping obligations under tax and gambling regulations.
• KYC Documents: Retained for 5 years after your last transaction or account closure, whichever is later, to comply with identity verification and AML regulations.
• Marketing Consent Records: Retained for 3 years after consent is withdrawn to demonstrate compliance with consent management requirements.
• Customer Support Communications: Retained for 2 years to resolve ongoing inquiries and improve service quality.
• System Logs and Analytics Data: Retained for 12 months for security monitoring and platform optimization purposes, after which they are aggregated and anonymized.

Upon expiry of the applicable retention period, your personal data is securely deleted or anonymized such that it can no longer be associated with you. Anonymized data may be retained indefinitely for statistical and research purposes.

Subject to applicable data protection laws, you have the following rights regarding your personal data held by mpo989:

• Right of Access: You may request a copy of the personal data we hold about you. We will provide this information in a structured, commonly used, and machine-readable format within 30 days of your request.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data. Most account data can be updated directly through your account settings.
• Right to Erasure (Right to be Forgotten): You may request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected. Note that we may be required to retain certain data to comply with legal obligations.
• Right to Restriction of Processing: You may request that we limit the processing of your personal data in certain circumstances, such as while we verify the accuracy of data you have disputed.
• Right to Data Portability: You may request a copy of your personal data in a portable format to transfer to another service provider, where technically feasible.
• Right to Object: You may object to processing of your personal data where we rely on legitimate interests as the legal basis and there are no overriding legitimate grounds for the processing.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.
• Right to Lodge a Complaint: You have the right to lodge a complaint with a data protection supervisory authority if you believe we have processed your data unlawfully.

To exercise any of these rights, please contact us at [email protected] with the subject line "Data Privacy Request – [Your Account ID]". We will respond to your request within 30 days. To protect your privacy, we may require additional identity verification before fulfilling data subject requests.

mpo989 operates internationally and your personal data may be transferred to and processed in jurisdictions outside Indonesia where data protection laws may differ from Indonesian standards. Where we transfer data internationally, we implement appropriate safeguards to ensure your data receives an adequate level of protection, including:

• Standard contractual clauses approved by relevant data protection authorities;
• Data processing agreements that require third-party service providers to implement appropriate technical and organizational security measures;
• Limiting data transfers to jurisdictions recognized as providing adequate data protection;
• Encryption of data in transit and at rest.

By using the mpo989 platform, you acknowledge and consent to the international transfer of your personal data as described in this Privacy Policy.

mpo989 strictly prohibits use of our platform by individuals under 21 years of age. We do not knowingly collect personal data from minors. Our registration process requires date of birth verification, and KYC procedures verify age through government-issued identification documents.

If we discover that we have inadvertently collected personal data from an individual under 21 years of age, we will immediately suspend the account, delete the data, and return any deposited funds to the payment source (where possible and compliant with AML requirements). If you believe we have collected data from a minor, please contact us immediately at [email protected] with the subject line "Underage Account Report".

mpo989 reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or platform features. Material changes will be communicated via email to your registered address and by a prominent notice on the platform at least 14 days before the changes take effect.

Your continued use of the mpo989 platform after any changes indicates your acceptance of the updated Privacy Policy. If you do not agree to the changes, you may close your account by contacting customer support. The current version of this Privacy Policy is always available at https://mpo989.cam/privacy-policy with the "Last updated" date displayed at the top.

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact the mpo989 Data Protection team:

• Email: [email protected]
• Subject Line: "Data Privacy Request – [Your Account ID]" or "Privacy Policy Inquiry"
• Response Time: We will acknowledge your inquiry within 2 business days and provide a substantive response within 30 days.

For general customer support inquiries unrelated to data privacy, please use our 24/7 live chat or contact us via the methods listed in our FAQ page.