MPO77 Privacy Policy

MPO77 ("MPO77", "we", "our", "us") operates the online casino and sports betting platform accessible at mpo77.casa. As part of delivering our services to players across Malaysia — including users in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and other states — we collect and process certain personal data relating to registered members and platform visitors.

This Privacy Policy sets out a transparent account of how MPO77 handles your personal information, including the types of data collected, the purposes for which it is processed, with whom it may be shared, how long it is retained, and what rights you have in relation to your personal data.

This Privacy Policy applies to all individuals who:

• Register or hold an Account on the MPO77 platform;
• Visit the MPO77 website regardless of whether they register an Account;
• Contact MPO77 via live chat, email, or any other communication channel; or
• Otherwise interact with the MPO77 platform or its services.

This Privacy Policy is to be read in conjunction with our Terms and Conditions. By registering an Account or using the MPO77 platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with the practices described herein, you must discontinue your use of the platform.

The following terms carry the meanings set out below throughout this Privacy Policy:

• "Personal Data" — Any information that identifies or could reasonably be used to identify a living individual, whether directly (such as a name or identification number) or indirectly (such as a device identifier or IP address).
• "Processing" — Any operation performed on personal data, including collection, recording, storage, use, disclosure, deletion, or destruction whether by automated or manual means.
• "Data Controller" — The entity that determines the purposes and means of processing personal data. For purposes of this policy, MPO77 is the Data Controller in respect of the personal data of its registered Players.
• "Data Subject" — The identifiable individual to whom the personal data relates — in this context, a registered Player or platform visitor.
• "Third Party" — Any natural or legal person, public authority, agency, or body other than MPO77 and the Data Subject.
• "KYC" — Know Your Customer: the identity verification process required by MPO77 to confirm a Player's identity and age prior to processing withdrawals.
• "Cookies" — Small data files stored on a user's device by the MPO77 website for the purpose of session management, analytics, or personalisation.

MPO77 collects the following categories of personal data, depending on the nature of your interaction with our platform:

3.1 Registration & Identity Data

• Full legal name
• Date of birth (used for age verification —21+ policy)
• Residential address (including city, state, and postcode)
• Email address
• Mobile phone number
• Username and encrypted password

3.2 Identity Verification (KYC) Documents

• Malaysian National Identity Card (MyKad) or passport copy
• Proof of residential address (utility bill, bank statement)
• Selfie or facial image (for identity confirmation where required)
• Source of funds documentation (where required by AML policy)

3.3 Financial & Transaction Data

• Bank account numbers, e-wallet identifiers (Touch 'n Go, Boost, GrabPay, Maybank2u, CIMB, Public Bank, DuitNow, FPX references), and cryptocurrency wallet addresses used for deposits or withdrawals
• Deposit and withdrawal amounts, dates, and method details
• Transaction reference numbers
• Account balance history

3.4 Gambling Activity Data

• Games played, wager amounts, win and loss records
• Bonus claims and wagering progress
• Sports betting selections and outcomes
• Session durations and gambling frequency patterns

3.5 Technical & Device Data

• IP address and approximate geolocation
• Device type, operating system, and browser version
• Session timestamps and login history
• Cookies and session tracking identifiers

3.6 Communication Data

• Live chat transcripts and support ticket records
• Email correspondence with MPO77 support
• Responses to surveys or feedback requests (where applicable)

MPO77 collects personal data through the following channels:

• Directly from you: When you register an Account, complete KYC verification, make a deposit or withdrawal, contact support, or participate in a promotion.
• Automatically: Through cookies, server logs, and session tracking when you visit or interact with the MPO77 website. This includes IP addresses, device fingerprints, and browsing behaviour within the platform.
• Payment providers: Transaction confirmation data received from Malaysian banking and e-wallet partners (such as DuitNow network operators, FPX system responses, and cryptocurrency network confirmations) when you make deposits or withdrawals.
• Identity verification services: Confirmation responses from third-party KYC verification tools used to verify the authenticity of identity documents submitted during account verification.
• Fraud and risk detection tools: Aggregated risk signal data from anti-fraud and anti-money laundering (AML) screening services used to protect the integrity of the platform.

MPO77 processes your personal data for the following specific purposes:

MPO77 processes personal data one or more of the following legal bases:

• Contractual Necessity: Processing is required to fulfil our obligations to you under the Terms and Conditions — including operating your Account, processing payments, and delivering platform services.
• Legal Obligation: Processing is required to comply with applicable laws and regulatory requirements, including KYC identity verification, AML screening, and record-keeping obligations imposed by our licensing framework.
• Legitimate Interests: Processing is necessary for MPO77's legitimate business interests, including fraud prevention, platform security, responsible gambling monitoring, and improving the platform — provided those interests are not overridden by your rights and interests.
• Consent: Where processing is based on your express consent (such as marketing communications), you may withdraw that consent at any time by contacting support or adjusting your account notification preferences. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

MPO77 does not sell, rent, or trade your personal data to third parties for commercial purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment Service Providers: Malaysian banking and e-wallet partners (including operators within the DuitNow network, FPX infrastructure, and cryptocurrency settlement services) for the sole purpose of processing your deposits and withdrawals.
• Identity Verification Providers: Third-party KYC and age verification service providers engaged to confirm the authenticity of identity documents submitted during account verification.
• Fraud & AML Screening Services: Compliance technology providers engaged to perform anti-fraud screening and anti-money laundering checks in accordance with our regulatory obligations.
• Game Software Providers: Licensed game studios whose content is offered on the MPO77 platform may receive limited game activity data strictly necessary for game delivery and RNG certification purposes.
• IT Infrastructure Providers: Cloud hosting and server infrastructure providers who process data on MPO77's behalf under binding data processing agreements.
• Legal & Regulatory Authorities: Competent authorities, law enforcement agencies, courts, or licensing regulators, where MPO77 is legally required or permitted to disclose data to comply with a legal obligation or lawful order.
• Professional Advisors: Legal counsel, auditors, and compliance consultants, subject to professional confidentiality obligations.

MPO77 retains personal data for no longer than is necessary for the purposes for which it was collected, taking into account legal, regulatory, and business requirements.

• Active Account Data: Retained for the lifetime of your Account and for a minimum of five (5) years following Account closure, in accordance with AML record-keeping requirements.
• KYC & Identity Documents: Retained for a minimum of five (5) years following Account closure or the date of the relevant transaction, whichever is later.
• Transaction Records: Retained for a minimum of five (5) years following the date of each transaction, consistent with financial record-keeping obligations.
• Support Communication Logs: Retained for up to three (3) years following the resolution of a support interaction, unless required for longer retention in connection with a dispute or investigation.
• Marketing Preferences: Retained until you opt out or request deletion, subject to any overiding legal retention obligation.
• Technical & Session Logs: Retained for up to twelve (12) months for security and fraud prevention purposes, then deleted or anonymised.

Where data is no longer required and no legal retention obligation applies, MPO77 will securely delete or irreversibly anonymise it.

MPO77 uses cookies and similar tracking technologies to ensure the proper functioning of the platform, maintain your session when logged in, and gather anonymised usage analytics to improve site performance.

The following categories of cookies are used by MPO77:

• Strictly Necessary Cookies: Essential for the operation of the MPO77 platform. These cookies enable core functions such as user authentication, session management, and payment security. They cannot be disabled without affecting platform functionality.
• Performance & Analytics Cookies: Used to collect anonymised data about how visitors interact with the platform, including pages visited, session duration, and error events. This data is used to improve platform performance and user experience.
• Functional Cookies: Used to remember your preferences (such as preferred language settings and notification choices) to provide a more personalised experience.
• Security Cookies: Used for fraud detection and to identify suspicious login patterns or unusual account activity.

You may configure your browser settings to refuse or delete cookies. However, disabling strictly necessary cookies may impair or prevent access to certain platform features. MPO77 does not use third-party advertising cookies or behavioural targeting cookies.

MPO77 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the MPO77 platform;
• Encryption of sensitive data at rest, including identity verification documents and payment method details;
• Two-factor authentication (2FA) available to all registered Players for Account login;
• Role-based access controls limiting internal access to personal data on a strict need-to-know basis;
• Audit logging of all access to sensitive data by MPO77 staff;
• Regular third-party security assessments and penetration testing of platform infrastructure;
• Secure deletion procedures for data that has reached the end of its retention period.

While MPO77 takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your own Account credentials and for notifying us immediately if you suspect unauthorised access to your Account.

Subject to applicable law and certain limitations, you have the following rights in respect of your personal data held by MPO77. To exercise any of these rights, please contact us via the details in Section16.

MPO77 will respond to verifiable rights requests within 30 days. In complex cases, this may be extended by a further 30 days with prior notice. We may request proof of identity before processing a rights request to ensure data is not disclosed to an unauthorised person.

Please note that certain rights are subject to limitations where processing is required for compliance with a legal obligation, the establishment or defence of legal claims, or to protect the vital interests of another individual.

MPO77's platform is strictly intended for individuals who are 21 years of age or older. We do not knowingly collect personal data from any person under the age of 21. Age verification is conducted as part of the account registration process and is mandatory prior to processing any withdrawal request.

If you are a parent or guardian and believe your child has registered an Account on MPO77, please contact our support team immediately via live chat or email. We will investigate and take appropriate action without delay.

The MPO77 platform may contain references to or integrations with third-party services, including payment processors (such as Maybank, CIMB, Touch 'n Go eWallet, DuitNow, and FPX) and game software providers. This Privacy Policy applies solely to MPO77's own data processing activities.

MPO77 is not responsible for the privacy practices of third-party services. Each third-party service has its own privacy policy governing its collection and use of your data. We encourage you to review the privacy policies of any third-party services you interact with in connection with your use of MPO77.

All third parties engaged by MPO77 to process personal data on our behalf are required to do so subject to binding data processing agreements that impose data protection obligations consistent with this Privacy Policy and applicable law.

As an online platform serving Malaysian players, MPO77 may transfer or store personal data on servers located outside of Malaysia. Such transfers may occur in connection with our cloud hosting infrastructure, identity verification services, or game software delivery.

Where personal data is transferred to a country that may not offer the same level of data protection as Malaysia, MPO77 ensures that appropriate safeguards are in place, including contractual obligations on recipient parties to maintain data protection standards consistent with this Privacy Policy.

By registering an Account and using the MPO77 platform, you acknowledge and consent to the transfer of your personal data as described in this section, subject to the safeguards outlined above.

MPO77 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The "Last Updated" date at the top of this document will be revised accordingly.

For material changes that significantly affect how we process your personal data, MPO77 will endeavour to provide advance notice through a prominent notice on the platform or via the email address registered to your Account. For changes of a minor or administrative nature, posting the updated Privacy Policy on this page constitutes sufficient notice.

Your continued use of the MPO77 platform following the publication of any revised Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with the revised policy, you should cease using the platform and may request account closure by contacting support.

If you have any questions about this Privacy Policy, wish to exercise a data subject right, or have concerns about how MPO77 handles your personal data, please contact us through the following channel:

When submitting a data rights request, please clearly identify yourself and the nature of your request. MPO77 may request proof of identity before processing your request to ensure personal data is not disclosed to an unauthorised party.

For questions regarding our Terms and Conditions, please refer to our Terms & Conditions page. For responsible gambling support, please visit our Responsible Gambling page.