Privacy Policy

Introduction

MPO55 ("we", "us", "our", "the Platform") is committed to protecting the privacy and personal data of all individuals who interact with our services at https://mpo55.click. This Privacy Policy ("Policy") sets out in clear, comprehensive terms how MPO55 collects, uses, stores, shares, and safeguards personal information provided by players, visitors, and prospective users ("you", "Player", "User") of our online casino and sports betting platform.

MPO55 operates as a data controller in respect of personal data processed under this Policy. We process personal data in accordance with internationally recognised data protection principles — including those reflected in the General Data Protection Regulation (GDPR) and equivalent frameworks — and in compliance with the requirements of our international gaming licence.

This Policy applies to all personal data collected through the MPO55 website, mobile platform interfaces, account registration processes, live chat communications, email correspondence, payment transactions, and any other interaction you have with MPO55 as a platform or as a business.

This Policy should be read alongside our Terms & Conditions and Responsible Gambling Policy, which together form the full contractual and regulatory framework governing your use of MPO55.

Definitions

For the purposes of this Privacy Policy, the following definitions apply:

Data We Collect

MPO55 collects personal data across several categories, depending on your interaction with our Platform. The data we collect is as follows:

3.1 — Registration & Account Data

• Full legal name as appearing on your government-issued identification
• Date of birth (to verify the 21+ age requirement)
• Residential address, including city and postcode
• Email address and mobile phone number
• Username and encrypted password hash
• Currency preference (MYR / RM or cryptocurrency)

3.2 — Identity Verification (KYC) Data

• Scans or photographs of valid Malaysian NRIC (MyKad), Passport, or Driver's License
• Proof of address documents (utility bills, bank statements) dated within 3 months
• Selfie photographs taken with identity documents
• Payment method verification documents where applicable

3.3 — Financial & Transaction Data

• Deposit and withdrawal transaction records including amounts, dates, and payment methods
• Payment method identifiers (e.g., masked bank account numbers, e-wallet reference IDs for Touch 'n Go, Boost, GrabPay, DuitNow, FPX)
• Cryptocurrency wallet addresses used for transactions
• Account balance history and wagering records

3.4 — Technical & Usage Data

• IP address, geolocation data (country and region level), and device identifiers
• Browser type, operating system, and device model
• Session duration, pages visited, games played, and interaction logs
• Referral source and marketing attribution data

3.5 — Communication Data

• Live chat transcripts and support ticket correspondence
• Email communications between you and the MPO55 team
• Survey responses and feedback submissions

How We Collect Data

MPO55 collects personal data through the following channels and mechanisms:

• Direct provision: Data you provide directly when registering an account, completing your profile, submitting KYC documents, making a deposit or withdrawal, contacting support, or participating in a survey.
• Automated collection: Technical data collected automatically when you access the Platform, including IP addresses, device identifiers, session data, and usage logs via server logs and analytics tools.
• Cookie-based collection: Data collected through first-party cookies and tracking technologies as described in Section 8 of this Policy.
• Third-party payment providers: Transaction confirmation data received from payment processors including DuitNow, FPX banking partners, and cryptocurrency network confirmations. MPO55 does not receive or store full payment card numbers or e-wallet credentials.
• Identity verification partners: In some cases, MPO55 may use third-party KYC verification services that process identity documents on our behalf. These partners are bound by confidentiality and data processing agreements.
• Publicly available sources: In limited circumstances, such as investigating fraudulent activity or confirming the identity of a Player, MPO55 may cross-reference information against publicly available records.

Purpose & Legal Basis

The table below outlines the purposes for which MPO55 processes your personal data and the corresponding legal basis for each processing activity:

Data Processing

MPO55 processes personal data through automated and manual means. Our data processing activities are designed to be proportionate, targeted, and limited to what is genuinely necessary for the stated purpose. The following principles govern all data processing at MPO55:

• Lawfulness, fairness, and transparency: All processing has a clear legal basis and is conducted openly as described in this Policy.
• Purpose limitation: Data collected for one purpose is not reused for a different, incompatible purpose without your consent or a new legal basis.
• Data minimisation: We collect only the minimum personal data necessary for the stated purpose. We do not collect data "just in case".
• Accuracy: We maintain reasonable processes to keep personal data accurate and up to date. You may update your account information at any time.
• Storage limitation: Personal data is not retained beyond the period necessary for its purpose or the period required by applicable law.
• Integrity and confidentiality: Processing is carried out with appropriate technical and organisational security measures in place.

Data Sharing

MPO55 does not sell or rent personal data to third parties. We may share your personal data with the following categories of recipients, strictly limited to what is necessary for each purpose:

• Payment service providers: To process deposits and withdrawals via Touch 'n Go, Boost, GrabPay, DuitNow, FPX banking partners (Maybank, CIMB, Public Bank, Hong Leong Bank), and cryptocurrency processors. These providers receive only the transaction data necessary to execute the payment.
• KYC and identity verification partners: Third-party identity verification services that assist in processing KYC document submissions on MPO55's behalf, bound by data processing agreements and confidentiality obligations.
• Game software providers: Game studios and live dealer operators whose games are hosted on the MPO55 platform may receive anonymised gameplay session data for game performance and fairness monitoring purposes.
• Fraud prevention and AML service providers: Specialist third-party services used to screen transactions, detect suspicious activity, and fulfil anti-money laundering obligations.
• IT infrastructure and hosting providers: Cloud infrastructure and data hosting partners who process data on MPO55's behalf under binding data processor agreements with appropriate technical safeguards.
• Regulatory and licensing authorities: MPO55's international licensing authority and, where legally required, law enforcement or regulatory bodies — in each case only to the extent required by law or our licence obligations.

All third parties with whom personal data is shared are required to maintain appropriate data protection standards and may only process personal data in accordance with MPO55's instructions and for the specified purpose.

Cookies & Tracking Technologies

MPO55 uses cookies and similar tracking technologies to operate the Platform effectively, enhance your experience, and gather analytics data. The following categories of cookies are used:

You can control non-essential cookie preferences through your browser settings. Please note that disabling essential cookies may affect Platform functionality and prevent you from logging in or completing transactions.

Data Retention

MPO55 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law or our licensing obligations. The following retention periods apply as general guidelines:

• Active account data: Retained for the duration of your account's active status and for a period of seven (7) years following account closure, in accordance with standard financial record-keeping and AML compliance requirements.
• KYC and identity documents: Retained for a minimum of five (5) years from the date of verification or account closure (whichever is later), as required by anti-money laundering regulations applicable under our international licence.
• Transaction records: Retained for seven (7) years from the transaction date to comply with financial reporting and audit requirements.
• Customer support records: Retained for three (3) years from the date of the interaction or the resolution of any related dispute, whichever is later.
• Marketing consent records: Retained for the duration of your consent and for three (3) years following withdrawal of consent, as evidence of the consent decision.
• Technical and usage logs: Retained for a rolling period of up to twelve (12) months, then either deleted or anonymised for aggregate analytics purposes.

Upon expiry of the applicable retention period, personal data will be securely deleted or irreversibly anonymised. Requests for earlier deletion are addressed under the User Rights section below, subject to any overriding legal retention obligations.

Your User Rights

Subject to applicable data protection law and any overriding legal obligations, you have the following rights in respect of your personal data held by MPO55. To exercise any of these rights, contact our Data Protection team at [email protected] with the subject line "Data Rights Request — [Your Account Username]".

Data Security

MPO55 implements a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, disclosure, or destruction. Our security framework includes the following measures:

• Encryption in transit: All data transmitted between your device and the MPO55 platform is encrypted using TLS 1.2 or higher with 256-bit SSL certificates.
• Encryption at rest: Sensitive personal data stored in MPO55's databases is encrypted at rest using industry-standard encryption protocols.
• Access controls: Access to personal data within MPO55's systems is restricted to authorised personnel on a need-to-know basis, enforced through role-based access control and multi-factor authentication.
• KYC document isolation: Identity documents submitted for KYC verification are stored in isolated, access-controlled environments separate from general account data.
• Intrusion detection: MPO55 employs automated monitoring systems to detect and respond to unusual access patterns, potential intrusion attempts, and data anomalies in real time.
• Regular security assessments: Our platform and infrastructure undergo regular penetration testing and security audits conducted by qualified third-party specialists.
• Staff training: All MPO55 personnel with access to personal data receive mandatory data protection and security awareness training.

In the event of a personal data breach that poses a risk to your rights and freedoms, MPO55 will notify the relevant regulatory authority within 72 hours of becoming aware of the breach, and will notify affected individuals without undue delay where required by applicable law.

Policy Amendments

MPO55 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal requirements, or business operations. Any material changes to this Policy will be communicated to registered Players via in-platform notification and/or email to the address associated with your account, with a minimum of fourteen (14) days' notice prior to the changes taking effect.

Minor or non-material amendments — such as clarifications of existing practices, corrections of typographical errors, or formatting updates — may be made without advance notice. The effective date displayed at the top of this page will be updated whenever a change is made.

Following any update to this Policy, your continued use of the MPO55 platform constitutes your acknowledgement of and agreement to the revised Policy. If you do not agree with any changes to this Policy, you may close your account and request deletion of your personal data in accordance with Section 10 above.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way MPO55 handles your personal data, please contact us through the following channels:

For formal data rights requests (access, rectification, erasure, portability), please include your full account username and a brief description of your request in your correspondence. MPO55 may be required to verify your identity before processing a data rights request.