Mpo77 Privacy Policy – Malaysian Member Personal Data Protection

Mpo77 values the privacy of every member who uses our platform. This Privacy Policy was established to transparently explain how we collect, use, store, and protect your personal information while you use mpo77's services — whether through our website, iOS or Android app, or customer support channels.

This policy applies to all user categories, including new visitors, registered members, and anyone who interacts with our support team. We comply with applicable data protection requirements and continuously update our practices in line with the latest legal and technological developments.

Mpo77 collects personal information through several means depending on how you interact with the platform. The following are the categories of data we collect:

We do not collect any sensitive information such as biometric data, medical records, or religious information, except where specifically required by law.

Every piece of information we collect has a clear and legitimate purpose. mpo77 collects your personal data for the following purposes:

• Identity and eligibility verification: Verifying that you meet the minimum age requirement and confirming your identity through the KYC process before withdrawals are approved.
• Account management: Creating, managing, and securing your account, including processing deposits and withdrawals.
• Transaction processing: Accurately verifying and recording all financial transactions for the protection of both parties.
• Platform security: Detecting and preventing fraud, hacking, money laundering, and suspicious activity.
• Legal compliance: Fulfilling reporting obligations to the relevant authorities when required.
• Service improvement: Analyzing usage patterns to improve platform experience, speed, and usability.
• Service communications: Sending important notices regarding your account, transactions, promotions, and system updates.

Mpo77 uses collected data responsibly and strictly limited to legitimate operational needs. In running the platform, your data is used to enable a smooth, secure, and personalized experience for every member.

For example, when you make a withdrawal, our system uses the bank details you registered to ensure funds are sent to the correct and verified account. When you log in from a new device, our security system uses technical data such as your IP address and device type to confirm that the login is legitimate and not suspicious activity.

Usage data such as game history is used internally to:

• Personalizing relevant game recommendations and promotions.
• Identifying gameplay patterns that may indicate a need for responsible gaming support.
• Optimizing platform performance based on real traffic patterns.
• Providing internal statistical reports for continuous improvement.

Mpo77 does not sell, rent, or share members' personal data with third parties for marketing or commercial purposes. However, there are limited situations where data sharing with partners or authorities is necessary and legally permissible:

• Payment providers: Transaction information is shared with payment processors such as banks and e-wallet providers solely for the purpose of processing your deposits and withdrawals.
• Technical service providers: Companies providing cloud infrastructure, cybersecurity, and technical support services may access data within a limited scope to carry out their functions.
• Legal authority: mpo77 will disclose required information when compelled by a court order, legal warrant, or anti-money laundering (AML) compliance requirements.
• Game providers: Minimum information required to verify member eligibility may be shared with third-party game providers integrated within our platform.

All third-party partners who receive your data are bound by strict confidentiality agreements and are not permitted to use that data for any purpose other than those specified.

Data security is at the core of mpo77's operations. We continuously invest in the latest technologies and processes to ensure your data is always protected against unauthorized access, breaches, and cyber threats.

The security measures we implement include:

• 256-bit SSL Encryption on all connections between your device and mpo77's servers — data in transit cannot be read by any party attempting to intercept the connection.
• Hashed password storage using the bcrypt algorithm — your password is not stored in plain text and cannot be recovered by anyone, including our staff.
• 24/7 system monitoring by a dedicated cybersecurity team that monitors for anomalies, intrusion attempts, or unusual activity in real time.
• Two-factor authentication (2FA) available for all accounts to add an extra layer of protection during login.
• Strict internal access controls ensuring that only authorized and necessary personnel can access specific data, with every access logged and audited.
• Regular penetration testing by independent security auditors to identify and close any vulnerabilities before they can be exploited.

Mpo77 uses cookies and similar tracking technologies to enhance your experience on the platform. Cookies are small text files stored in your browser when you visit our website.

We use three main types of cookies:

• Essential Cookies: Required for core platform functions such as maintaining your login session and remembering your language preference. These cookies cannot be disabled as they are essential for the platform to function properly.
• Performance Cookies: Collecting anonymous information about how visitors use the platform — pages visited, time spent, and any errors encountered. This data is used to improve platform performance.
• Functional Cookies: Remembering your preferences such as username, language, and display settings to deliver a more personalized experience.

You can manage your cookie settings through your browser at any time. Please note that disabling essential cookies may affect the overall functionality of the platform.

You have full control over your personal data. mpo77 respects and facilitates the exercise of the following rights:

To exercise any of the above rights, please contact our privacy team via support email. We will process your request within 14 business days.

Mpo77 retains your personal data only for as long as necessary for the stated purposes or as required by law. Once the retention period expires, data will be securely deleted or anonymized so it can no longer be linked back to you.

• Active account data: Retained for the duration your account is active, plus 5 years after account closure for legal compliance purposes.
• Financial transaction records: Retained for 7 years in accordance with financial and anti-money laundering legal requirements.
• Support communication logs: Retained for 2 years for service reference and dispute resolution.
• Cookie data: Session cookies are deleted when you close your browser; persistent cookies expire between 30 and 365 days depending on their type.

Mpo77 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or platform improvements. Whenever a significant change occurs, we will:

• Sending a notice to your registered email at least 7 days before changes take effect.
• Displaying a clear notice on the platform's home page throughout the transition period.
• Updating the "Last Updated" date at the top of this document.

Continued use of the platform after changes take effect constitutes your acceptance of the latest version of the Privacy Policy. If you do not agree with any changes, you may contact us to close your account before those changes come into effect.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, the mpo77 privacy team is here to help.

You can reach us via:

• Privacy Email: [email protected]
• Live Chat Support: Available 24/7 directly on the mpo77 platform
• FAQ Section: Visit FAQ page us for answers to frequently asked questions about privacy

We are committed to responding to all privacy-related enquiries within 3 business days. For official rights requests (access, deletion, etc.), the processing period is up to 14 business days.