Privacy Policy — mpo383

This Privacy Policy ("Policy") describes how mpo383 ("the Company", "we", "us", "our"), operating the online gaming platform accessible at https://mpo383.click ("the Platform"), collects, processes, stores, discloses, and protects the personal data of individuals who access or use our services ("you", "your", "the Player").

mpo383 is committed to handling personal data responsibly and in compliance with applicable data protection laws and regulations. By registering an account on, or otherwise accessing, the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

This Policy applies to all players of the mpo383 platform, including those accessing the service from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and all other locations where the Platform is lawfully accessible.

For the purposes of this Policy, the following terms carry the meanings assigned below:

• "Personal Data" — any information that identifies or can reasonably be used to identify a living individual, including name, identification number, contact details, financial account details, and device identifiers.
• "Processing" — any operation performed on Personal Data, including collection, recording, storage, use, disclosure, transmission, restriction, erasure, or destruction.
• "Data Controller" — mpo383, the entity that determines the purposes and means of processing your Personal Data.
• "Data Processor" — a third party that processes Personal Data on behalf of mpo383, under contract and subject to mpo383's instructions.
• "Sensitive Personal Data" — a subset of Personal Data that warrants heightened protection, including financial account details, identity document numbers, and data relating to health conditions where collected for responsible gambling purposes.
• "Cookies" — small data files stored on your device by the Platform to maintain session state, remember preferences, and support analytical functions.
• "Platform" — the mpo383 website (https://mpo383.click) and all associated services, features, and tools.

mpo383 collects only the Personal Data that is necessary for the specific purposes described in this Policy. The categories of data we collect include the following:

We do not collect payment card numbers in full on our servers. Card transactions are processed via PCI-DSS compliant payment processors who handle card data directly.

mpo383 collects Personal Data through the following means:

• Account Registration: When you create an account on the Platform, you directly provide Identity Data and Contact Data.
• KYC Verification: When you submit identity documents to verify your account, we collect and retain copies of the relevant Identity Data for compliance purposes.
• Deposits and Withdrawals: Transactions processed via FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, or Public Bank generate Financial Data records associated with your account.
• Platform Interaction: Your gameplay activity, session behaviour, and feature use are recorded automatically as Usage Data and Technical Data.
• Customer Support: Interactions with our live chat or email support team are recorded as Communications Data for quality assurance and dispute resolution purposes.
• Cookies and Tracking Technologies: Automated technologies embedded in the Platform collect Technical Data as described in Section 10 of this Policy.
• Third-Party Sources: In limited circumstances, we may receive data about you from third-party compliance or identity verification service providers engaged to support our KYC and anti-fraud obligations.

mpo383 processes your Personal Data solely for defined, legitimate purposes. The table below sets out the principal purposes for which we process each category of data:

• Account Management: To create, maintain, and administer your player account, including login authentication, session management, and account security.
• Transaction Processing: To facilitate deposits and withdrawals in MYR via your chosen Malaysian payment method, and to maintain accurate financial records.
• Identity Verification (KYC): To comply with our regulatory obligations by verifying your identity and age (21+) before permitting withdrawals or high-value activity.
• Fraud Prevention & AML Compliance: To monitor transactions and account behaviour for indicators of fraud, money laundering, or other financial crime, in accordance with applicable anti-money laundering regulations.
• Customer Support: To respond to your enquiries, resolve disputes, and improve the quality of our support services.
• Responsible Gambling: To deliver and maintain responsible gambling tools including deposit limits, self-exclusion, session reminders, and player protection interventions.
• Promotions and Bonuses: To assess eligibility for, credit, and track wagering requirements related to promotional offers where you have opted in.
• Platform Improvement: To analyse aggregated, anonymised usage data to improve the performance, features, and user experience of the Platform.
• Legal Compliance: To meet our obligations under applicable laws, respond to lawful regulatory requests, and enforce our Terms & Conditions.

mpo383 processes your Personal Data only where a lawful basis exists to do so. The primary legal bases on which we rely are:

• Contractual Necessity: Processing required to fulfil our contract with you — operating your account, processing your transactions, and delivering the Platform's services.
• Legal Obligation: Processing required to comply with applicable laws, including KYC / AML regulations, data retention obligations, and responses to lawful regulatory authority requests.
• Legitimate Interests: Processing that serves mpo383's legitimate business interests — including fraud prevention, security monitoring, and platform analytics — where these interests are not overridden by your privacy rights.
• Consent: For specific optional processing activities, such as the delivery of marketing communications, where you have given explicit, informed consent. You may withdraw consent at any time by contacting our support team.

mpo383 does not sell, rent, or trade your Personal Data. We may share your data with third parties only in the following strictly defined circumstances:

• Payment Processors: Financial data is shared with our authorised payment processing partners (e.g., FPX gateway operators, e-wallet service providers) solely to facilitate your transactions. These processors operate under contractual data protection obligations.
• Identity Verification Providers: KYC documents and identity data may be shared with licensed identity verification service providers engaged to fulfil our compliance obligations.
• Game Studios: Aggregate gameplay data (not personal identifying information) may be shared with our game content partners for performance analytics and game optimisation.
• Regulatory and Law Enforcement Authorities: We will disclose Personal Data to competent authorities where required to do so by law, court order, or regulatory direction — including in the context of AML investigations or fraud inquiries.
• Professional Advisers: We may share data with legal counsel, auditors, or insurers where necessary to obtain professional advice or in the context of legal proceedings.
• Business Transfers: In the event of a merger, acquisition, or sale of substantially all of mpo383's assets, your data may be transferred to the successor entity, subject to the same privacy protections described in this Policy.

mpo383 retains your Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or accounting obligations. The following general retention periods apply:

• Active Account Data: Retained for the duration of your active account relationship with mpo383.
• KYC and Identity Verification Records: Retained for a minimum of five (5) years from account closure, or longer where required by applicable AML regulations.
• Financial Transaction Records: Retained for a minimum of seven (7) years from the date of the transaction, in accordance with standard financial record-keeping obligations.
• Customer Support Communications: Retained for up to three (3) years from the date of the interaction, unless subject to an ongoing dispute or legal proceeding.
• Marketing Consent Records: Retained for the duration of your active consent, plus a reasonable period following withdrawal of consent for audit purposes.

Upon the expiry of applicable retention periods, Personal Data is securely deleted or anonymised in accordance with our data destruction procedures.

mpo383 implements a range of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, destruction, alteration, or unlawful disclosure. These measures include:

• 256-bit SSL (Secure Sockets Layer) encryption for all data transmitted between your device and the Platform.
• Encryption of sensitive data fields (including passwords and financial identifiers) at rest using industry-standard cryptographic techniques.
• Two-factor authentication (2FA) available for Player accounts.
• Access controls restricting internal data access to authorised personnel on a need-to-know basis.
• Continuous monitoring of platform infrastructure for security anomalies, intrusion attempts, and unusual transaction patterns.
• Regular security assessments and penetration testing conducted by independent third-party security specialists.

While mpo383 employs robust security practices, no method of electronic transmission or storage is entirely free from risk. In the event of a data security incident that affects your Personal Data, mpo383 will notify affected players in accordance with applicable legal requirements.

The mpo383 Platform uses cookies and similar tracking technologies (including local storage objects and session tokens) to support essential platform functions, maintain security, and improve your experience. We do not use third-party advertising cookies or cross-site tracking technologies.

The categories of cookies we use include:

• Strictly Necessary Cookies: Required for the Platform to function correctly. These include session authentication tokens, security cookies, and cookies that maintain your preferences during a session. These cannot be disabled without impairing Platform functionality.
• Functional Cookies: Remember your preferences (such as language and display settings) across sessions to improve your experience on return visits.
• Analytical Cookies: Collect anonymised data about how players interact with the Platform — pages visited, features used, session lengths — to help us identify and fix performance issues and improve the user experience. Data collected is aggregated and not linked to individual identities.
• Responsible Gambling Cookies: Support the delivery of responsible gambling tools, including session time reminders, deposit limit tracking, and self-exclusion status checks.

You may manage cookie preferences through your browser settings. Please note that disabling certain categories of cookies may affect the functionality of specific Platform features. Your continued use of the Platform following the display of our cookie notice constitutes your acceptance of our use of cookies as described in this section.

Subject to applicable law, you hold the following rights in relation to the Personal Data that mpo383 holds about you:

• Right of Access: You may request a copy of the Personal Data we hold about you, along with information about how it is processed.
• Right to Rectification: You may request that inaccurate or incomplete Personal Data is corrected without undue delay.
• Right to Erasure ("Right to be Forgotten"): You may request the deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to Restriction of Processing: You may request that we restrict the processing of your Personal Data in certain circumstances — for example, while the accuracy of the data is contested.
• Right to Data Portability: Where processing is based on consent or contractual necessity, you may request a structured, machine-readable copy of the Personal Data you provided to us.
• Right to Object: You may object to processing based on legitimate interests, including profiling where applicable.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please contact our Data Protection team via live chat or email as described in Section 15. We will respond to all valid requests within a reasonable timeframe. Note that certain rights may be limited where mpo383 has overriding legal obligations requiring us to retain or process specific data.

mpo383 is strictly prohibited to individuals under the age of 21 years. We do not knowingly collect Personal Data from minors. Our registration and KYC processes include age verification steps designed to prevent access by underage individuals.

If we become aware that Personal Data has been collected from a person under the age of 21, we will take immediate steps to delete that data and close the associated account. Any funds deposited by an underage individual will be handled in accordance with our regulatory obligations.

If you believe that a minor has registered an account on mpo383 or that their data is held on our Platform, please contact our support team immediately using the details in Section 15. For more information on our age verification procedures and responsible gambling safeguards, please visit our Responsible Gambling page.

mpo383 may transfer your Personal Data to countries outside of Malaysia in connection with our operational and service delivery needs — for example, where our data hosting infrastructure, third-party service providers, or compliance partners are located in other jurisdictions.

Where such transfers occur, mpo383 ensures that appropriate safeguards are in place to protect your Personal Data to a standard equivalent to the protections afforded by applicable data protection law. These safeguards may include contractual data processing agreements incorporating standard contractual clauses, or reliance on the adequacy decisions of relevant regulatory authorities.

mpo383 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable legislation, or regulatory guidance. The revised Policy will be published on this page with an updated "Last Updated" date.

Where amendments are material — for example, where we introduce a new category of data processing or a new category of third-party recipient — we will take reasonable steps to bring the changes to your attention, which may include a notification via the Platform interface or to your registered email address.

Your continued use of the Platform following publication of a revised Policy constitutes your acceptance of the updated terms. If you do not agree with any amendment, you should cease using the Platform and contact our support team to arrange account closure.

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data, please contact the mpo383 Data Protection team using the following channels:

• Live Chat: Available 24/7 directly on the Platform. Average response time under 2 minutes. This is the fastest channel for data subject requests.
• Email: [email protected] — please use the subject line "Privacy Request" for data subject rights enquiries. This address is for written reference only and is not a clickable link.
• Operating Hours: All support services operate on Malaysian time MYT (GMT+8), 24 hours per day, 7 days per week.