mpo108 Privacy Policy

1Definitions

In this Privacy Policy, the following terms have the meanings set out below:

2Who We Are

2.1  mpo108 is the operator of the online gaming platform accessible at https://mpo108.cam. As the data controller for all Personal Data collected through the Platform, mpo108 is responsible for ensuring that your data is handled in accordance with applicable data protection principles and the terms of this Privacy Policy.

2.2  mpo108 serves players primarily based in Indonesia, a market in which we have built a substantial and trusted community of over 2.4 million registered members across Jakarta, Surabaya, Bandung, Medan, Bali, Yogyakarta, and cities nationwide. The data practices described in this Policy reflect the specific context of serving Indonesian players on an internationally operated platform.

2.3  If you have any questions about data controllership or wish to exercise any rights described in this Policy, you may contact us using the details provided in Clause 15.

3Personal Data We Collect

3.1  mpo108 collects Personal Data in several categories depending on how you interact with the Platform:

3.1 Identity and Contact Data

• Full legal name as it appears on your Indonesian National Identity Card (KTP) or passport.
• Date of birth (used to verify you meet the 21-year minimum age requirement).
• Residential address within Indonesia.
• Email address and mobile phone number.
• Copies of identity documents submitted during KYC verification.

3.2 Financial Data

• Bank account details for Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, Bank Perm ata) used for deposits and withdrawals.
• E-wallet identifiers for OVO, DANA, GoPay, ShopeePay, and LinkAja accounts registered in your name.
• Transaction history, including deposit amounts, withdrawal requests, and account balance movements.
• Source of funds documentation where required by our internal compliance thresholds.

3.3 Account and Gaming Data

• Your chosen username and encrypted password.
• Betting history, game session records, wagering patterns, and bonus claim history.
• Responsible gaming settings you have applied, including deposit limits, session time-outs, and any self-exclusion requests.
• Customer support correspondence and live chat transcripts.

3.4 Technical and Device Data

• IP address and approximate geographic location derived from it.
• Device type, operating system, and browser version.
• Pages visited on the Platform, time spent on each page, click-path data, and referring URLs.
• Cookie identifiers and similar tracking technology data as described in Clause 8.

4How We Collect Your Data

4.1  mpo108 collects Personal Data through the following channels:

• Direct submission: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal request, contacting customer support, or completing any other form on the Platform.
• Automated technologies: Data collected automatically when you visit the Platform, including through cookies, web beacons, server logs, and session-recording tools. See Clause 8 for full details.
• Third-party sources: Data received from payment processors (such as bank APIs and e-wallet gateways) to confirm transaction status; identity verification service providers used during KYC; fraud-detection partners; and, where applicable, publicly available sources used to verify information you have provided.
• Game providers: Aggregated or anonymised session data shared by licensed game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft, and others) to support platform analytics and responsible gaming monitoring.

4.2  Where mpo108 receives Personal Data about you from a third party, we will use that data only in accordance with the purposes described in Clause 5 and will not combine it with your profile data in ways that would be unexpected or inconsistent with this Privacy Policy.

5How We Use Your Personal Data

5.1  mpo108 uses the Personal Data we collect for the following purposes:

5.2  mpo108 does not use your Personal Data for automated decision-making that produces significant legal effects on you without human review, except where such processing is required for fraud prevention or regulatory compliance, in which case you retain the right to request human review of the decision.

6Legal Basis for Processing

6.1  mpo108 processes your Personal Data on one or more of the following legal bases depending on the activity:

• Contractual necessity: Processing required to fulfil our obligations to you under the mpo108 Terms & Conditions — for example, creating your account, processing transactions, and delivering gaming services.
• Legal obligation: Processing required to comply with applicable laws and regulations, including anti-money-laundering (AML) requirements, age verification obligations, and regulatory reporting duties.
• Legitimate interests: Processing necessary for mpo108's legitimate business interests, such as fraud prevention, platform security, internal analytics, and improving the quality of our services — provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing that requires your explicit agreement before it can take place, such as sending you personalised promotional offers by email or SMS. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6.2  Where mpo108 relies on legitimate interests as the legal basis for processing, we conduct a balancing assessment to ensure that those interests do not disproportionately impact your privacy. You have the right to object to processing carried out on the basis of legitimate interests; see Clause 10 for details.

7Sharing Your Personal Data

7.1  mpo108 does not sell your Personal Data. We share data only in the circumstances described below, and only to the extent necessary for the stated purpose:

• Payment service providers: Indonesian bank gateways (BCA, BRI, BNI, Mandiri, CIMB Niaga, and others) and e-wallet platforms (OVO, DANA, GoPay, ShopeePay, LinkAja) receive the financial and identity data necessary to process deposits and withdrawals on your behalf.
• Identity verification providers: Licensed KYC and AML service providers receive copies of identity documents and related data solely for the purpose of completing verification checks required before withdrawals are authorised.
• Game content providers: Licensed studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft, and others) receive a session token and account identifier to authenticate your access to their games. These providers do not receive your full identity or financial data.
• Fraud and security partners: Specialised fraud-detection and cybersecurity partners may process technical and behavioural data to identify suspicious activity on the Platform. All such partners are contractually bound to process data only for these security purposes.
• Legal and regulatory authorities: mpo108 will disclose Personal Data to law enforcement agencies, regulatory bodies, or courts when required to do so by a valid legal order, warrant, or regulatory obligation.
• Business transfers: In the event of a merger, acquisition, or sale of substantially all of mpo108's assets, your Personal Data may be transferred to the acquiring entity, subject to equivalent privacy protections continuing to apply.

8Cookies and Tracking Technologies

8.1  The mpo108 Platform uses cookies and similar technologies to enhance your experience, maintain session continuity, and gather analytics data. The categories of cookies we use are as follows:

8.2  Strictly necessary cookies cannot be disabled as they are essential to the operation of the Platform. For all other cookie types, you may manage your preferences through your browser settings. Disabling functional or analytics cookies may reduce the quality of your experience on the Platform but will not prevent you from accessing core services.

8.3  mpo108 does not use third-party advertising cookies or cross-site tracking technologies that would share your browsing behaviour with external advertising networks.

9Data Retention

9.1  mpo108 retains your Personal Data only for as long as necessary to fulfil the purposes for which it was collected, unless a longer retention period is required by applicable law or regulatory obligation.

9.2  The following general retention guidelines apply:

• Active account data: Retained for the duration of your account's active status and for a minimum of five (5) years following account closure to satisfy AML, regulatory audit, and dispute resolution requirements.
• KYC and identity documents: Retained for a minimum of five (5) years following the completion of the business relationship, in compliance with applicable financial crime prevention obligations.
• Transaction records: Retained for a minimum of five (5) years following each transaction, as required for financial record-keeping and regulatory reporting purposes.
• Customer support records: Retained for two (2) years from the date of the last interaction, unless the matter involves an ongoing dispute or legal claim, in which case records are retained until the matter is fully resolved.
• Technical and analytics data: Retained in aggregated or anonymised form for up to twelve (12) months, after which data is either deleted or fully anonymised so it can no longer be attributed to any individual.

9.3  When Personal Data is no longer required and no legal retention obligation applies, mpo108 will securely delete or irreversibly anonymise that data.

10Your Privacy Rights

10.1  As a player on the mpo108 Platform, you hold the following rights in relation to your Personal Data. To exercise any of these rights, please contact our support team using the details in Clause 15. We will acknowledge your request within five (5) business days and aim to fulfil it within thirty (30) calendar days.

10.2  mpo108 will not charge a fee for handling privacy rights requests unless a request is manifestly unfounded, repetitive, or excessive, in which case we reserve the right to charge a reasonable administrative fee or decline to act on the request, providing written reasons for the decision.

11Children's Privacy

11.1  The mpo108 Platform is strictly intended for adults aged 21 years and over. mpo108 does not knowingly collect Personal Data from individuals under the age of 21. If you are under 21 years of age, you must not register an account, access the Platform, or provide any Personal Data to mpo108.

11.2  If mpo108 becomes aware that Personal Data has been collected from a person under the age of 21, we will take immediate steps to delete that data, close the associated account, and reverse any financial transactions associated with it. If you believe that a person under 21 has registered on the Platform, please contact us immediately using the details in Clause 15.

12International Data Transfers

12.1  mpo108 operates as an internationally hosted platform. This means that your Personal Data may be transferred to and stored on servers located outside of Indonesia. When such transfers occur, mpo108 takes the following steps to ensure your data remains protected:

• We enter into data processing agreements with all third-party Processors that include contractual clauses requiring them to apply data protection standards equivalent to those described in this Privacy Policy.
• We conduct due diligence on all third-party Processors before engaging them to ensure they have adequate technical and organisational security measures in place.
• We limit the Personal Data shared with international Processors to only what is strictly necessary for the relevant processing purpose.

12.2  If you would like more information about the safeguards mpo108 applies to international data transfers, please contact us using the details in Clause 15.

13Security Measures

13.1  mpo108 has implemented a comprehensive set of technical and organisational security measures designed to protect your Personal Data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers.
• Encryption at rest for sensitive fields including passwords (stored as salted hashes), bank account numbers, and identity document references.
• Multi-factor authentication options available for player accounts to provide an additional layer of login security.
• Role-based access controls that restrict employee access to Personal Data on a strict need-to-know basis, with all access logged and audited.
• Intrusion detection and prevention systems that monitor network traffic in real time and alert our security team to suspicious activity.
• Regular penetration testing conducted by independent security specialists to identify and remediate vulnerabilities before they can be exploited.
• Incident response procedures that enable rapid containment and notification in the event of a confirmed data breach.

13.2  Despite these measures, no system is entirely immune to security risk. In the unlikely event of a data breach that poses a risk to your rights and freedoms, mpo108 will notify affected players promptly and take all reasonable steps to mitigate the impact.

14Amendments to This Privacy Policy

14.1  mpo108 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, new legal requirements, or improvements to our privacy programme. Material changes will be communicated to registered players via a prominent notice on the Platform and, where practicable, by email to the address registered on your account, at least seven (7) days before the changes take effect.

14.2  The version of this Privacy Policy bearing the most recent "Last Updated" date at the top of this page is the version currently in force. We encourage you to review this page periodically to stay informed of how mpo108 protects your data.

14.3  Your continued use of the Platform after the effective date of any amendment constitutes your acknowledgement of the updated Privacy Policy. If you do not agree with the revised terms, you should stop using the Platform and may request account closure in accordance with the Terms & Conditions.

15Contact and Complaints

15.1  If you have any questions, concerns, or requests regarding this Privacy Policy or the way mpo108 processes your Personal Data, please contact our dedicated privacy support team through the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24 hours a day, 7 days a week via the chat widget on the Platform.
• Response Time: We aim to acknowledge all privacy-related enquiries within 24 hours (WIB, UTC+7) and to provide a substantive response within five (5) business days.

15.2  If you are not satisfied with how mpo108 has handled your privacy concern, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction. mpo108 will cooperate fully with any such authority in the resolution of your complaint.

15.3  For requests to exercise the privacy rights described in Clause 10, please include your full registered name and account email address in your communication so that we can locate your records and verify your identity before fulfilling the request. Identity verification is a necessary step to ensure we do not disclose or delete Personal Data in response to a fraudulent request.