Privacy Policy — mpo55

For the purposes of this Privacy Policy, the following terms carry the meanings defined below:

This Privacy Policy applies to all Personal Data collected and processed by mpo55 in connection with the operation of the Platform at https://mpo55.pro, including data collected through account registration, gameplay activity, payment transactions, customer support interactions, and marketing communications.

mpo55 acts as the Data Controller for all Personal Data described in this policy. mpo55 is an internationally licensed and regulated online gaming platform. The Platform is primarily directed at adult players aged 21 and above who reside in Indonesia, including major urban centres such as Jakarta, Surabaya, Bandung, Medan, Yogyakarta, Bali, Semarang, Makassar, and Palembang, as well as Indonesian players residing abroad.

This policy does not apply to third-party websites, applications, or services that may be linked to or from the Platform. mpo55 is not responsible for the privacy practices of those third parties, and we encourage you to review their privacy policies independently.

mpo55 collects the following categories of Personal Data:

3.1 Registration & Identity Data

• Full legal name as it appears on your government-issued identity document.
• Date of birth — used to verify that you meet the 21+ age requirement.
• Email address — used as your primary account identifier and for transactional communications.
• Mobile phone number — used for two-factor authentication and account security alerts.
• Residential address — including city/province within Indonesia or country of residence for players abroad.
• Username and encrypted password — passwords are stored as salted cryptographic hashes; we never store or view plaintext passwords.

3.2 Identity Verification (KYC) Data

• Copy of government-issued photo identification: Indonesian National Identity Card (KTP), passport, or driver's licence (SIM).
• Proof of address document (e.g., utility bill or bank statement dated within three months).
• Payment method verification evidence (e.g., masked bank account screenshot confirming account ownership).
• Selfie photograph taken during the verification process, where required by our KYC partner.

3.3 Financial & Transaction Data

• Deposit and withdrawal records, including amount (in IDR), timestamp, and payment method used.
• Bank account details (account holder name and account number) for bank transfer payments via BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, BSI, or OCBC NISP.
• E-wallet identifiers (registered phone number or account ID) for OVO, DANA, GoPay, ShopeePay, and LinkAja transactions.
• Bonus claims, wagering history, and net win/loss data.

3.4 Technical & Device Data

• IP address and approximate geolocation derived from the IP address.
• Device type, operating system version, and browser type/version.
• Session identifiers, login timestamps, and logout timestamps.
• Referring URL and on-site navigation path data.

3.5 Gameplay & Behavioural Data

• Games played, bet amounts, session durations, and win/loss outcomes.
• Sports betting selections (including markets such as bandar bola — sports bookmaking — and mix parlay — accumulator betting).
• Responsible gaming tool usage (deposit limits set, cooling-off periods activated, self-exclusion requests).
• Customer support chat and email transcripts.

3.6 Marketing Preferences

• Communication preferences (email, SMS, push notification opt-in/opt-out status).
• Promotional campaign responses and click-through data from mpo55 marketing emails.

mpo55 collects Personal Data through the following channels and methods:

• Directly from you: When you complete the registration form, submit KYC documents, make a deposit or withdrawal, contact customer support, or respond to a promotional communication.
• Automatically via the Platform: Through Cookies, web beacons, server logs, and similar tracking technologies that record technical and behavioural data during your sessions on the Platform.
• From our KYC verification partner: Identity verification results and fraud-risk signals returned by our third-party KYC provider following document review.
• From payment processors: Transaction confirmation data returned by local bank transfer networks (BI-FAST, SKN) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) to confirm deposit and withdrawal status.
• From game studio providers: Game session and outcome data returned by our certified game studio partners (including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Pocket Games Soft) to populate your account history and calculate balances.

mpo55 processes your Personal Data on one or more of the following legal bases, depending on the nature and purpose of the processing activity:

mpo55 uses the Personal Data we collect for the following purposes:

• Account management: Creating, maintaining, and securing your mpo55 account, including password resets, two-factor authentication, and session management.
• Identity verification: Conducting KYC checks to confirm your age (21+), identity, and payment method ownership before processing withdrawals.
• Payment processing: Executing deposit and withdrawal transactions via your chosen payment method, reconciling balances, and investigating payment disputes.
• Gameplay delivery: Facilitating access to all Platform products — including slots, live casino, sportsbook (including bandar bola and mix parlay markets), scratch cards, keno, and togel (Indonesia's traditional numbers lottery) — and recording game outcomes accurately to your account history.
• Responsible gaming: Monitoring account activity for indicators of problem gambling behaviour, applying deposit limits and cooling-off periods requested by you, and enforcing self-exclusion orders.
• Fraud prevention & security: Detecting and preventing unauthorised account access, multi-accounting, bonus abuse, money laundering, and other prohibited activities described in the mpo55 Terms & Conditions.
• Customer support: Responding to account queries, payment issues, complaints, and technical support requests submitted via live chat or email.
• Marketing communications: Sending promotional offers, reload bonus notifications, seasonal promotions (such as those tied to Idul Fitri, Ramadan, Independence Day, or Imlek), and product updates — where you have opted in to receive such communications.
• Analytics & product improvement: Analysing aggregated and anonymised usage data to improve Platform performance, game selection, and user experience.
• Legal compliance: Meeting record-keeping obligations under our international gaming licence conditions and responding to lawful data requests from regulatory or law-enforcement authorities.

mpo55 does not sell or rent your Personal Data to any third party. We share your data only in the following circumstances and only to the minimum extent necessary:

• KYC and identity verification providers: We transmit identity documents and verification requests to our contracted KYC partner for automated and manual review. This partner is bound by a data processing agreement with data protection standards equivalent to those in this policy.
• Payment processors and financial institutions: We share transaction data with the relevant bank (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, BSI, OCBC NISP) or e-wallet provider (OVO, DANA, GoPay, ShopeePay, LinkAja) solely to execute the deposit or withdrawal you have initiated.
• Game studio providers: Game session identifiers and bet data are shared with our certified studio partners (Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, Pocket Games Soft) to deliver game content and return outcomes. These partners process only the data necessary to run the game session.
• Fraud prevention and AML services: Anonymised or pseudonymised transaction patterns may be shared with fraud-detection services to identify and prevent money laundering and account abuse.
• Regulatory and licensing authorities: mpo55 may be required to disclose player records to its international licensing authority or to law-enforcement agencies in response to a lawful order. We will notify you of such a disclosure unless prohibited from doing so by law.
• Corporate transactions: In the event of a merger, acquisition, or sale of substantially all of mpo55's assets, your Personal Data may be transferred to the successor entity, subject to equivalent privacy protections. You will be notified of any such transfer in advance.

mpo55 retains Personal Data for the minimum period necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention schedule applies:

Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised. Anonymised data (from which no individual can be identified) may be retained for statistical and analytical purposes beyond these periods.

You have the following rights in relation to the Personal Data that mpo55 holds about you. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request — [your username]".

• Right of access: You may request a copy of all Personal Data mpo55 holds about you. We will provide a structured response within 30 days of receiving your verified request.
• Right to rectification: If any Personal Data we hold is inaccurate or incomplete, you may request that it be corrected. For identity data, a supporting document may be required.
• Right to erasure ("right to be forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purpose it was collected, where you withdraw consent, or where processing is unlawful. Note that certain data must be retained to meet our legal and licensing obligations (see Clause 8), and those records cannot be erased until the mandatory retention period expires.
• Right to restrict processing: You may request that we limit how we use your data — for example, while a dispute is being investigated — without requesting full deletion.
• Right to data portability: You may request that we provide your Personal Data in a structured, commonly used, machine-readable format so that it can be transferred to another service provider.
• Right to object: You may object to processing based on legitimate interests (e.g., analytics or profiling for fraud prevention) where you believe your interests override ours. You may also withdraw consent for marketing communications at any time.
• Right not to be subject to automated decisions: Where mpo55 uses automated systems to make decisions with significant effects on you (e.g., automated account suspension for suspected fraud), you have the right to request human review of that decision.

The mpo55 Platform uses Cookies and similar tracking technologies to deliver a functional, personalised, and secure experience. By continuing to use the Platform, you consent to the use of Cookies as described in this clause.

You can manage or delete Cookies via your browser settings at any time. Disabling strictly necessary Cookies will impair your ability to log in and use the Platform. Disabling other Cookie categories will not affect your ability to play but may reduce personalisation.

mpo55 implements a layered technical and organisational security framework to protect your Personal Data against unauthorised access, accidental loss, alteration, or disclosure. Key measures include:

• 256-bit SSL/TLS encryption on all data in transit between your device and mpo55 servers.
• AES-256 encryption at rest for all sensitive stored data, including identity documents, payment details, and password hashes.
• Two-factor authentication (2FA) available on all accounts via SMS or authenticator app — strongly recommended for all players.
• Role-based access controls: Internal mpo55 staff can only access Personal Data on a strict need-to-know basis, with all access logged and audited.
• Penetration testing: The Platform undergoes regular independent security audits and penetration tests to identify and remediate vulnerabilities before they can be exploited.
• Incident response plan: In the event of a confirmed data breach affecting your Personal Data, mpo55 will notify affected players via their registered email address within 72 hours of discovery, in line with international breach notification standards.
• Segregated player funds: Financial balances held on behalf of players are maintained in accounts segregated from mpo55's operational funds, reducing risk in the event of a financial dispute involving the company.

While mpo55 takes all reasonable steps to protect your data, no online system can guarantee absolute security. You are also responsible for keeping your account credentials confidential and for logging out from shared or public devices after each session.

The mpo55 Platform is strictly intended for adults aged 21 and above. We do not knowingly collect Personal Data from any person under the age of 21. Age verification is a mandatory step in the KYC process for all accounts, and mpo55 will suspend any account where there is reasonable suspicion that the account holder is under 21 years of age.

If you are a parent or guardian and believe that your child has registered an account on mpo55 without your knowledge, please contact us immediately at [email protected]. We will investigate promptly, suspend the account, void any bets placed, and return any deposited funds to the originating payment method following verification.

As an internationally licensed platform, mpo55 may process or store certain categories of Personal Data on servers or through service providers located outside of Indonesia. Where such transfers occur, mpo55 ensures that appropriate safeguards are in place, including:

• Contractual data protection clauses equivalent to internationally recognised standards (such as standard contractual clauses) incorporated into our agreements with all Data Processors.
• Transfers to jurisdictions that have been independently assessed as providing an adequate level of personal data protection.
• Technical safeguards (encryption in transit and at rest) applied to all cross-border data flows.

You may request further information about the specific safeguards applied to any international transfer of your Personal Data by contacting us at [email protected].

mpo55 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or regulatory requirements. Material changes — those that meaningfully affect how we collect, use, or share your Personal Data — will be communicated to registered players via the email address on their account at least 7 days before taking effect.

The "Last Updated" date at the top of this page will always reflect the most recent revision. We encourage you to review this policy periodically. Your continued use of the Platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy.

If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to raise a privacy-related complaint, please contact the mpo55 data protection team through the following channels:

• Email: [email protected] — use the subject line "Privacy Enquiry" or "Data Rights Request — [your username]" for faster routing. We aim to respond within 24 hours for general enquiries and within 30 days for formal data rights requests.
• Live chat: Available 24/7 on any mpo55 page. Indonesian-speaking agents are available on every shift for players who prefer to communicate in their native language, even though the Platform itself is operated in English.
• FAQ: Our FAQ page contains answers to common questions about account data, payment records, and KYC document handling.

If you are not satisfied with our response to a privacy complaint, you have the right to escalate the matter to the relevant data protection authority or regulatory body in your jurisdiction.