mpo100 Privacy Policy

01 Introduction and Identity of the Data Controller

This Privacy Policy governs the collection, use, storage, disclosure and protection of personal information in connection with the mpo100 website and associated services. mpo100 operates as an English-language online gaming information and entertainment destination designed for Malaysian adults.

Where mpo100 determines the purposes and means by which personal data is processed, it acts as the data controller in respect of that processing. Specific account-level or payment-level data may also be processed by third-party service providers acting as data processors on behalf of mpo100, subject to appropriate agreements and safeguards.

02 Definitions

Personal Data

Any information that identifies or could reasonably be used to identify a living individual, including name, email address, identification number, payment details or device identifiers.

Processing

Any operation performed on personal data, including collection, recording, storage, use, disclosure, restriction, erasure or destruction.

Data Subject

The individual to whom personal data relates — in the context of mpo100, this is ordinarily a registered user or visitor to the website.

KYC

Know Your Customer — identity and verification procedures used to confirm user age, identity, payment ownership and, where required, source of funds.

Third-Party Processor

An organisation that processes personal data on behalf of mpo100 under a contractual arrangement, such as a payment provider or fraud detection service.

03 Information We May Collect

3.1 Information You Provide Directly

When you register a mpo100 account, verify your identity or contact support, mpo100 may collect registration details such as your name, date of birth, residential address, email address and contact number. During KYC checks, a copy of an identity document, proof of address or payment instrument evidence may also be requested.

3.2 Transaction and Account Data

mpo100 may record deposit amounts, withdrawal requests, chosen payment methods, bonus claims and wagering activity associated with your account. Payment method references — such as a masked bank account number, Touch 'n Go eWallet token or FPX transaction reference — may be stored to enable payment matching and to prevent fraud.

3.3 Technical and Device Data

When you access mpo100, technical information including IP address, browser type, device model, operating system version, session timestamps and pages visited may be collected automatically. This data helps identify unusual access patterns and supports service stability.

3.4 Communications Data

If you contact mpo100 by email or through a support channel, the content of that communication, together with any attachments you provide, may be retained to resolve queries and maintain a service record.

04 Lawful Basis and Purposes of Processing

mpo100 processes personal data only where at least one of the following bases applies:

• Contract performance: processing necessary to register your account, process deposits, verify withdrawals or provide access to gaming content you have requested.
• Legal obligation: processing required to comply with applicable identity verification, anti-money laundering, age restriction or regulatory requirements.
• Legitimate interests: processing for fraud detection, security monitoring, service improvement or responsible gambling safeguards, where those interests are not overridden by your rights.
• Consent: where you have provided clear consent for a specific purpose, such as receiving optional marketing communications, which may be withdrawn at any time.

mpo100 does not use personal data for automated decision-making that produces significant legal effects without appropriate human review where required by applicable law.

05 Payment Data and Malaysian Payment Methods

mpo100 may facilitate payments through Malaysian services including Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, DuitNow and FPX. When you initiate a deposit or withdrawal through one of these services, relevant transaction identifiers and confirmation references may be recorded by mpo100 alongside the transaction amount and timestamp.

Full card numbers, banking passwords and e-wallet PINs are not collected or stored by mpo100. Payment credential entry occurs on the payment provider's own secure environment. mpo100 receives only confirmation or reference data necessary to reconcile the transaction to your account.

06 Cookies and Tracking Technologies

mpo100 may use session cookies, persistent cookies and similar technologies to maintain authentication state, remember interface preferences and analyse aggregate usage patterns. Cookies do not ordinarily identify you by name but may link to a session or device identifier.

You can configure your browser to block or delete cookies, though doing so may affect parts of the mpo100 service that require authentication or preference memory to function correctly. Third-party analytics or security services integrated with mpo100 may set their own cookies subject to their own terms.

07 Disclosure to Third Parties

mpo100 does not sell or rent personal data. Disclosure to third parties may occur in the following circumstances:

• Payment processors: to facilitate deposits and withdrawals through approved Malaysian payment methods.
• Identity verification providers: to perform KYC checks and confirm age or identity documents during account review.
• Fraud and security services: to detect suspicious transactions, abnormal login patterns or coordinated abuse.
• Regulatory or legal authorities: where mpo100 is legally required or permitted to disclose information in response to a lawful request.
• Business transfers: in the event of a merger, acquisition or asset sale, personal data held by mpo100 may transfer to a successor entity, subject to appropriate notice.

Where third-party processors handle personal data on behalf of mpo100, appropriate contractual safeguards are in place to restrict processing to the stated purpose.

08 Data Retention

mpo100 retains personal data for as long as is necessary to fulfil the purposes described in this policy, including the duration of an active account and any legally required retention period that applies after account closure. Transaction records and identity verification documents may be retained for longer periods where required to satisfy financial record-keeping, regulatory or dispute resolution obligations.

When personal data is no longer required, mpo100 will take reasonable steps to securely delete or anonymise it so it can no longer be attributed to an identifiable individual.

09 Data Security

mpo100 applies technical and organisational measures appropriate to the nature of the data processed. These may include encrypted transmission protocols, access controls limiting who within the organisation can view sensitive account data, audit logging of significant data operations and periodic review of security configurations.

No transmission over the internet or electronic storage system can be guaranteed to be entirely secure. You play an important role in account security by choosing a strong unique password, protecting access to your registered devices and contacting mpo100 promptly if you suspect unauthorised access.

10 User Rights

Depending on the laws applicable to you, you may hold certain rights in respect of personal data mpo100 holds about you:

• Access: the right to request confirmation of whether mpo100 holds personal data about you, and to receive a copy of that data.
• Rectification: the right to request correction of inaccurate or incomplete personal data.
• Erasure: the right to request deletion of personal data where it is no longer necessary for the purpose for which it was collected, subject to legal retention obligations.
• Restriction: the right to request that processing be limited in certain circumstances while a query or objection is assessed.
• Objection: the right to object to processing carried out on the basis of legitimate interests, including profiling related to direct marketing.
• Withdrawal of consent: where processing is based solely on your consent, the right to withdraw that consent without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, contact mpo100 using the email address shown in the Contact section below. mpo100 will respond within a reasonable timeframe and may need to verify your identity before acting on a request.

11 Children and Underage Users

mpo100 casino-style gambling services are strictly for persons aged 21 and above. mpo100 does not knowingly collect or retain personal data from any person below this age threshold. If mpo100 becomes aware that personal data has been collected from an underage individual, that data will be deleted as promptly as practicable and the associated account will be closed.

If you believe an underage person has registered a mpo100 account, please contact the support team immediately using the email address below so the matter can be investigated and resolved.

12 Responsible Gambling and Data

Where a user interacts with responsible gambling features — such as deposit limit requests, cooling-off periods or account self-exclusion — mpo100 may record those preferences and any related account notes to ensure the controls function correctly and are not circumvented by a duplicate registration attempt.

This processing supports the welfare of mpo100 users and is carried out in the legitimate interest of protecting vulnerable players. Further detail on available responsible gambling tools is available on the mpo100 Responsible Gambling page.

13 Changes to This Privacy Policy

mpo100 may update this Privacy Policy to reflect changes in legal requirements, service features, payment methods or data handling practices. The effective date shown at the top of this page will be updated when a revision is published. Continued use of mpo100 after a revised policy is posted constitutes acceptance of the revised terms.

If a material change affects how mpo100 processes personal data in a way that requires your attention, an appropriate notice will be provided through the website or account communication channel where practicable.

14 Contact Us

If you have a privacy question, wish to exercise a data right or believe your personal information has been handled incorrectly, please contact the mpo100 support team. Provide a concise description of your query and your registered account email address so the matter can be identified and addressed efficiently. Do not include passwords, full payment credentials or sensitive verification codes in any email.

Email: [email protected]

mpo100 will acknowledge privacy requests within a reasonable period and aims to respond fully as promptly as circumstances allow. Where a request requires identity verification before it can be actioned, you may be asked to provide suitable confirmation.