Privacy Policy

1. Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings assigned below:

• "mpo007," "we," "us," "our" — the online gambling platform operating at https://mpo007.cam and any affiliated entities responsible for processing personal data.
• "User," "you," "your" — any individual who visits our Website, registers an Account, or otherwise interacts with our Services.
• "Personal Data" — any information relating to an identified or identifiable natural person, including but not limited to name, date of birth, national identity number, contact details, financial information, and device identifiers.
• "Processing" — any operation performed on Personal Data, including collection, storage, use, disclosure, transmission, alteration, or deletion.
• "Account" — the personal gaming account created by a User to access mpo007 Services.
• "Services" — all online gambling products and related features offered through our Website, including sports betting, live casino, slot games, lottery games, and customer support.
• "Third Parties" — entities external to mpo007 with whom we may share data under lawful bases described in this Policy.

2. Data Controller

mpo007 acts as the data controller for all Personal Data collected through our Website and Services. As data controller, we determine the purposes and means of processing your Personal Data and bear responsibility for ensuring that processing is conducted lawfully, fairly, and transparently.

For all privacy-related inquiries, requests to exercise your rights, or questions about this Policy, please contact our Data Privacy team using the contact details set out in Section 14 of this document. We are committed to responding to all legitimate privacy requests within 30 calendar days of receipt.

3. Information We Collect

3.1 Registration and Identity Data

When you create an Account with mpo007, we collect personal information necessary to establish and verify your identity. This includes:

• Full legal name as it appears on your Indonesian national identity card (KTP)
• Date of birth (to verify you are at least 21 years of age)
• Residential address in Indonesia
• Email address and mobile phone number
• Username and encrypted password
• Nationality and country of residence

3.2 Verification and KYC Documents

Before processing your first withdrawal, we conduct Know Your Customer (KYC) verification and collect the following documentation:

• Copy or photograph of your Indonesian national identity card (KTP)
• Proof of address dated within the last three months (utility bill, bank statement, or government correspondence)
• Selfie photograph holding your KTP next to your face
• Any additional documents requested during enhanced due diligence reviews

3.3 Financial and Transaction Data

We collect and process information relating to deposits, withdrawals, and other financial transactions conducted through your Account, including:

• Bank account details for Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata)
• E-wallet account identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja)
• Transaction amounts, dates, and currency (Indonesian Rupiah, IDR)
• Transaction reference numbers and processing status

3.4 Gaming Activity Data

We record information about your gambling activity on our platform, which is necessary for account management, bonus administration, fraud detection, and regulatory compliance:

• Games played, bet amounts, and outcomes
• Session start and end times
• Bonus activations and wagering progress
• VIP tier status and loyalty point accumulation
• Responsible gaming tool settings (deposit limits, session limits, self-exclusion status)

3.5 Technical and Device Data

Our systems automatically collect certain technical information when you access our Website or Services:

• IP address and geo-location data (to verify Indonesian residency and detect fraud)
• Device type, operating system, and browser version
• Unique device identifiers and mobile advertising IDs
• Pages visited, click-stream data, and referral URLs
• Session duration and navigation paths

3.6 Communication Data

We retain records of communications between you and our support team, including Live Chat transcripts, email correspondence, WhatsApp messages, and in-app support tickets. These records allow us to provide consistent service, resolve disputes, and train support agents.

4. How We Collect Your Data

mpo007 collects Personal Data through the following mechanisms:

Collection Method	Examples
Direct submission	Registration form, KYC document upload, withdrawal requests, support messages
Automated systems	Cookies, server logs, analytics tools, fraud detection engines
Third-party sources	Identity verification services, payment processors, fraud screening providers
Gaming activity	Game servers, betting engines, live dealer platforms, RNG systems
Public sources	Sanctions lists, politically exposed person (PEP) databases (for AML compliance)

5. Legal Basis for Processing

We process your Personal Data only when a valid legal basis exists. The bases applicable to our processing activities are:

• Contractual necessity: Processing required to perform our contract with you — creating your Account, processing deposits and withdrawals, delivering gaming services, and administering bonuses.
• Legal obligation: Processing required to comply with applicable laws and regulations — KYC verification, anti-money laundering checks, age verification, fraud prevention reporting, and records retention mandated by law.
• Legitimate interests: Processing necessary to pursue our legitimate business interests, provided those interests are not overridden by your rights — fraud detection, network security, improving our Services, and responsible gaming monitoring.
• Consent: Processing based on your voluntary, informed, and specific consent — marketing communications and optional analytics cookies. You may withdraw consent at any time without affecting lawfulness of prior processing.

6. How We Use Your Information

mpo007 uses your Personal Data for the following purposes:

6.1 Account Management and Service Delivery

We process your identity, contact, and financial data to create and maintain your Account, authenticate your identity during login, process deposits and withdrawals through Indonesian banking channels, administer bonuses and VIP program rewards, and deliver all gaming services you request through our platform.

6.2 Identity Verification and Regulatory Compliance

We process KYC documentation to verify your identity, confirm you are at least 21 years of age and a resident of Indonesia, conduct anti-money laundering screening, and meet obligations under international regulatory standards applicable to online gambling operators. This processing is mandatory; failure to provide required documentation will prevent withdrawal processing.

6.3 Fraud Prevention and Security

We analyze IP addresses, device identifiers, betting patterns, transaction histories, and behavioral signals to detect and prevent fraudulent activity, account takeovers, bonus abuse, money laundering, and other prohibited conduct. Our fraud prevention systems operate continuously in the background without interrupting your normal use of the platform.

6.4 Responsible Gaming Monitoring

We monitor gaming activity data to identify potential indicators of problem gambling behavior, such as rapidly escalating bet sizes, unusually long session durations, repeated failed withdrawal cancellations, or patterns consistent with chasing losses. Where such indicators are detected, our responsible gaming team may proactively reach out to offer support tools or resources.

6.5 Customer Support

Communication data and Account history are used to provide effective customer support, resolve disputes, investigate complaints, and maintain accurate records of all interactions between you and our support team. Our Indonesian-speaking agents access only the information necessary to address your specific inquiry.

6.6 Marketing Communications

With your consent, we may send you promotional offers, bonus notifications, tournament announcements, and platform updates via email, SMS, WhatsApp, or in-app messaging. You may opt out of marketing communications at any time by contacting our support team or updating your notification preferences in your Account settings. Opting out of marketing does not affect essential service communications such as deposit confirmations, withdrawal notifications, and security alerts.

6.7 Platform Improvement and Analytics

Aggregated and anonymized usage data helps us understand how members interact with our Website, identify areas for improvement, optimize game recommendations, and develop new features. Where analytics involve Personal Data, we apply appropriate data minimization and pseudonymization techniques.

7. Data Sharing and Disclosure

mpo007 does not sell, rent, or trade your Personal Data to third parties for their own marketing purposes. We share data only under the following limited circumstances:

7.1 Service Providers

We engage carefully vetted third-party service providers who process data on our behalf under binding contractual obligations. These include payment processors handling transactions through BCA, BRI, BNI, Mandiri, and e-wallet platforms; identity verification and KYC screening services; game software providers (Evolution Gaming, Pragmatic Play, Microgaming, and others); cloud hosting and IT infrastructure providers; fraud detection and cybersecurity specialists; and customer support platform operators. All service providers are contractually prohibited from using your data for any purpose other than delivering services to mpo007.

7.2 Legal and Regulatory Authorities

We may disclose Personal Data to law enforcement agencies, regulatory bodies, courts, or other governmental authorities when required by applicable law, court order, or regulatory directive. We will notify you of such disclosures where legally permitted to do so.

7.3 Anti-Money Laundering and Fraud Prevention

Where required by anti-money laundering obligations or fraud prevention mandates, we may share relevant data with financial intelligence units, banking partners, and international compliance databases. Such disclosures are conducted under strict legal authority and are not made at our discretion.

7.4 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of assets involving mpo007, your Personal Data may be transferred to the successor entity, subject to equivalent privacy protections. We will notify you of any such transfer and provide an opportunity to request deletion of your data where legally permissible.

8. Data Retention

We retain your Personal Data for as long as necessary to fulfill the purposes described in this Policy, comply with legal obligations, resolve disputes, and enforce our agreements. The following retention periods apply as a general guide:

Data Category	Retention Period	Reason
Account registration data	Duration of Account + 5 years after closure	Legal obligation, dispute resolution
KYC verification documents	Duration of Account + 5 years after closure	AML regulatory requirements
Financial transaction records	7 years from transaction date	Financial recordkeeping obligations
Gaming activity logs	3 years from date of activity	Dispute resolution, responsible gaming
Customer support communications	3 years from last interaction	Quality assurance, dispute resolution
Marketing consent records	Until consent withdrawn + 1 year	Compliance evidence
Technical/device logs	12 months from collection	Fraud detection, security

Upon expiration of applicable retention periods, Personal Data is securely deleted or irreversibly anonymized. Where deletion is not immediately possible due to backup systems or archival processes, the data is isolated and protected from further active processing until deletion can be completed.

9. Security Measures

mpo007 implements industry-standard technical and organizational security measures to protect your Personal Data against unauthorized access, accidental loss, disclosure, alteration, or destruction. Our security framework includes:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers
• Encryption at rest for all sensitive data stored in our databases, including KYC documents and financial records
• Two-factor authentication available for all Account logins, strongly recommended for all members
• Role-based access controls ensuring staff access only the data necessary for their specific job function
• Regular penetration testing and independent third-party security audits conducted at least annually
• Intrusion detection systems monitoring for unauthorized access attempts and anomalous traffic patterns around the clock
• Secure data centers with physical access controls, redundant power systems, and environmental monitoring
• Staff training on data protection responsibilities, phishing awareness, and incident response procedures

While we apply rigorous security measures, no digital system can guarantee absolute security. In the event of a data breach that poses a high risk to your rights and freedoms, we will notify affected users promptly and take all reasonable steps to contain and remediate the incident.

10. Cookies and Tracking Technologies

mpo007 uses cookies and similar tracking technologies to operate our Website, enhance your experience, and gather analytics data. The following categories of cookies are used:

10.1 Strictly Necessary Cookies

These cookies are essential for the Website to function correctly and cannot be disabled. They enable core functionality such as session authentication, security token management, load balancing, and fraud prevention. No personal information is stored by these cookies beyond what is operationally required.

10.2 Functional Cookies

Functional cookies remember your preferences and settings — such as language preference, chosen payment method, and responsible gaming tool configurations — so you do not need to reconfigure them on each visit. These cookies improve your experience but are not strictly necessary for the platform to operate.

10.3 Analytics Cookies

With your consent, we use analytics cookies to understand how visitors interact with our Website. This data helps us identify popular features, detect usability issues, and prioritize platform improvements. Analytics data is collected in aggregated, anonymized form wherever possible.

10.4 Managing Cookies

You may control cookie preferences through your browser settings. Most browsers allow you to refuse some or all cookies, delete existing cookies, or receive notifications when cookies are set. Please note that disabling strictly necessary cookies will impair core platform functionality, including login and transaction processing.

11. Your Privacy Rights

As a user of mpo007 Services, you have the following rights with respect to your Personal Data. To exercise any of these rights, contact our Data Privacy team at the details provided in Section 14:

• Right of access: Request a copy of the Personal Data we hold about you and information about how it is processed.
• Right to rectification: Request correction of inaccurate or incomplete Personal Data. You may update most Account details directly through your Account settings.
• Right to erasure: Request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations and ongoing contractual requirements.
• Right to restriction: Request that we restrict processing of your Personal Data while accuracy is contested, or where processing is unlawful but you prefer restriction over erasure.
• Right to data portability: Request a structured, machine-readable copy of Personal Data you have provided to us, for transfer to another service provider where technically feasible.
• Right to object: Object to processing based on our legitimate interests, including direct marketing. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent, withdraw it at any time without affecting the lawfulness of processing carried out prior to withdrawal.

We will respond to all verifiable privacy requests within 30 calendar days. In complex cases, we may extend this period by a further 60 days with notification. We may require identity verification before processing any request that could expose another person's data or facilitate Account takeover.

12. Protection of Minors

mpo007 strictly prohibits access to our Services by individuals under 21 years of age. We do not knowingly collect Personal Data from minors. Our mandatory age verification process — requiring KTP submission and confirmation of date of birth at registration — is specifically designed to prevent underage access.

If we discover that Personal Data has been collected from an individual under 21 years of age, we will immediately close the associated Account, void all gaming activity, and delete the minor's Personal Data in accordance with our deletion procedures. Parents or guardians who believe a minor has registered an Account with mpo007 should contact our support team immediately for prompt investigation and remediation.

13. Changes to This Privacy Policy

mpo007 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform functionality. When material changes are made, we will:

• Update the "Last Updated" date at the top of this Policy
• Display a prominent notice on our Website homepage for a period of at least 14 days following the change
• Send email or in-app notification to registered Account holders where the change materially affects their rights or our processing activities

Your continued use of our Services after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the revised Policy, you should close your Account and cease using our Services.

14. Contact Our Data Privacy Team

For all privacy-related inquiries, requests to exercise your data rights, questions about this Policy, or concerns about how your Personal Data is handled, please contact us through the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 through our Website — our fastest response channel
• WhatsApp: +62 812 3456 7890 (plain text — not a clickable link)

Our Data Privacy team endeavors to acknowledge all inquiries within 2 business days and resolve them within 30 calendar days. Complex requests involving large volumes of data or requiring third-party coordination may take longer; we will communicate any extension to you promptly.