Privacy Policy MPO88 – Our Commitment to Protecting the Personal Data of Malaysian Members

This Privacy Policy ("Policy") describes how MPO88 ("we", "Platform", or "MPO88") collects, uses, stores, and protects your personal data when you access or use our platform at https://mpo88.run. This Policy is drafted in accordance with the Malaysian Personal Data Protection Act (PDPA) 2010 and global cybersecurity industry best practices.

By registering an account with MPO88 or by continuing to use this platform, you agree to the collection and use of your personal data as described in this Policy. If you do not agree with any part of this Policy, please discontinue use of the platform and contact us to close your account.

1 Introduction & Scope of MPO88's Privacy Policy

This Privacy Policy applies to all users and members who interact with the MPO88 — including unregistered website visitors, registered members who are actively playing, and former members whose accounts have been closed but whose data is still retained within the stipulated retention period.

This Policy covers all personal data collected through the MPO88 website, online registration forms, interactions with the customer support team, financial transactions, and general use of the platform. It does not apply to third-party websites or services you may access via links from our platform — each external platform has its own privacy policy that should be reviewed separately.

MPO88 acts as the data controller under Malaysia's PDPA 2010, meaning we are responsible for determining the purposes and means of processing your personal data. We also engage certain third-party data processors (such as payment service providers) who process data on our instructions and under our oversight, subject to strict data protection agreements.

2 Types of Personal Data We Collect

To provide members with a high-quality service, MPO88 collects several categories of personal data. We collect only what is genuinely necessary — nothing more, nothing less.

2.1 Data You Provide Directly

2.2 Automatically Collected Data

3 How We Use Your Personal Data

Every piece of data we collect has a clear and lawful purpose. MPO88 does not use members' personal data for any purposes not stated in this Policy.

MPO88 does not use your personal data to make automated decisions that significantly affect you without human involvement, except in cases of automated fraud monitoring where an initial decision may result in a temporary account suspension, which will subsequently be reviewed by our team.

4 Data Sharing with Third Parties

This is one of the most important sections of this Privacy Policy. MPO88 never sells, leases, or discloses members' personal data to third parties for marketing or commercial purposes. However, there are limited situations where we need to share data with certain parties to keep our services running:

4.1 Trusted Service Providers

To operate the platform MPO88, we work with a number of third-party service providers who have limited access to certain data for specific purposes:

• Payment Provider: Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and banks supporting FPX (Maybank, CIMB, and others) need to receive the necessary transaction details to process your deposits and withdrawals. They maintain their own privacy policies and security standards.
• Game Providers: Slot and live casino providers that partner with MPO88 may receive the game data required to operate their games within our platform — however, this does not include personal information such as your full name or phone number.
• Cloud Services & Infrastructure: Server and cloud service providers that store our data are bound by strict data protection agreements and are not permitted to access data for any purpose other than secure storage.

4.2 Legally Required Disclosures

MPO88 will disclose members' personal data to the relevant authorities when required to do so by Malaysian law, a valid court order, or as part of an investigation by a law enforcement agency. In such circumstances, we will notify the affected member if we are legally permitted to do so.

5 Data Security & Protection Measures

The security of members' personal data is an ongoing investment that MPO88. We implement multiple layers of technical and administrative safeguards to keep your data secure at all times.

• 256-bit SSL Encryption for all data transmitted between your device and MPO88's servers — including login credentials, payment information, and other communications.
• Salted password hashing uses secure hashing algorithms — MPO88 does not store your password in any form readable by anyone, including our own team.
• Multi-layer access control — only staff with a legitimate operational need are permitted to access member personal data, and all access is logged and monitored.
• 24-hour security monitoring by automated systems that detect and alert on any suspicious activity in real time.
• Regular penetration testing by independent security experts to identify and patch any vulnerabilities before they can be exploited.
• Secure data backup that are encrypted are stored in a separate location to ensure data recovery is possible in the event of an unforeseen incident.
• Data security training for all MPO88 staff who have access to systems that store members' personal data.

While we take all reasonable steps to protect your data, no system is truly 100% impenetrable. As such, MPO88 also encourages members to play their part in account security — including using strong, unique passwords, not sharing login credentials, and ensuring that devices used to access MPO88 are protected with up-to-date security software.

6 Cookies & Tracking Technologies

Like most modern websites, MPO88 uses cookies and similar technologies to enhance the user experience and understand how our platform is being used. Below is an explanation of the types of cookies we use:

You can manage or disable cookies through your web browser settings. Please note, however, that disabling essential cookies may affect your ability to log in and use certain features on the platform MPO88. For specific instructions on managing cookies in your browser, please refer to the help documentation for the browser you are using.

7 Data Retention & Deletion

MPO88 does not retain members' personal data for longer than is necessary for the purposes stated in this Policy or as required by law.

When the retention period expires or your data deletion request is successfully processed, MPO88 will securely delete or anonymise that data. Anonymised data (where all personal identifiers have been removed) may be retained for aggregate analytics purposes without a time limit.

8 Your Rights as an MPO88 Member

Under Malaysia's PDPA 2010 and Privacy Policy MPO88, you have several rights regarding the personal data we hold about you. We are committed to respecting and facilitating the exercise of these rights.

To exercise any of the above rights, please contact the privacy team MPO88 via email at support@mpo88.run with the subject line "Privacy Rights Request", clearly stating the right you wish to exercise along with your account details for identity verification. We will respond within 14 business days of receiving a complete request.

9 Financial Data & Payment Privacy

Financial information is among the most sensitive data you entrust to MPO88, and we handle it with the highest level of protection we have.

All deposits at MPO88 processed through Malaysia's familiar local payment methods — Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX via Maybank2u or CIMB Clicks. Payment processing is handled by the respective payment providers, each operating under their own PCI-DSS security standards.

MPO88 never stores full credit card details, CVV codes, or complete bank account numbers in our systems. For e-wallet transactions, we retain only the phone number associated with the e-wallet account as a transaction reference — we have no access to full e-wallet account information. This means that even in a worst-case security scenario, your sensitive financial information cannot be compromised through MPO88's systems.

10 Protection of Children's Data

Platform MPO88 is strictly for individuals aged 18 and above. We do not knowingly collect, store, or process the personal data of any individual under the age of 18. Registration by minors is strictly prohibited and constitutes a violation of our Terms & Conditions.

If we discover or are made aware that we have inadvertently collected personal data from someone under the age of 18, we will take immediate steps to delete all related data and close the account in question. If you become aware that someone under the age of 18 has registered an account at MPO88, please contact us at support@mpo88.run immediately so we can take the appropriate action.

11 Amendments to the Privacy Policy

MPO88 reserves the right to review and update this Privacy Policy from time to time to reflect changes in technology, legislation, industry practices, or our business operations. The "Last Updated" date at the top of this document will be revised whenever changes are made.

For amendments considered material — such as changes to the types of data collected, significant new purposes for its use, or changes to how we share data — MPO88 endeavours to notify active members by email or in-account notification at least 14 days before any amendment takes effect. It remains your responsibility to review this Policy periodically.

12 Contact MPO88's Privacy Officer

If you have any questions, concerns, or complaints regarding how MPO88 manages your personal data, or if you wish to exercise any of your privacy rights, please contact us through the following channels:

When contacting us regarding a privacy matter, please include your account's registered phone number and a clear description of your request or concern. This helps us verify your identity and process your request more quickly and accurately.

If after contacting MPO88 you are still not satisfied with how your privacy complaint has been handled, you have the right to lodge a complaint with the Department of Personal Data Protection (JPDP) Malaysia, the regulatory body under the PDPA 2010.