Privacy Policy

1. Definitions

• "mpo077", "we", "us", "our" — refers to the online gaming platform accessible at https://mpo077.cam and all associated services.
• "Player", "User", "you", "your" — refers to any individual who accesses, registers on, or uses the mpo077 platform.
• "Personal Data" — any information that identifies or can reasonably be used to identify a living individual, including name, date of birth, email address, phone number, bank account details, IP address, and device identifiers.
• "Processing" — any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, or deletion.
• "Data Controller" — the entity that determines the purposes and means of processing Personal Data. For the purposes of this Policy, mpo077 is the Data Controller.
• "Data Processor" — a third party that processes Personal Data on behalf of mpo077, such as payment processors and identity-verification providers.
• "KYC" — Know Your Customer: identity verification procedures conducted to confirm a Player's identity and comply with anti-money-laundering requirements.
• "Cookies" — small text files placed on your device by the mpo077 platform to store session information, preferences, and analytics data.
• "Services" — all gaming, betting, and account-management features available on the mpo077 platform.

2. Data Controller

mpo077, operating through https://mpo077.cam, is the Data Controller responsible for all Personal Data collected and processed in connection with the use of our Services. As Data Controller, we determine the purposes for which your Personal Data is used and the means by which it is processed.

Any questions, requests, or complaints relating to your Personal Data may be directed to our Data Protection contact at: [email protected] (plain text — not a clickable link).

We are committed to maintaining the privacy of all individuals who interact with our platform, with particular attention to the requirements and expectations of our primary user base in Indonesia. Where Indonesian personal data protection law imposes obligations beyond those described in this Policy, we commit to fulfilling those obligations in good faith.

3. Data We Collect

3.1 Registration Data

When you create an Account, we collect:

• Full legal name (as appearing on your government-issued identification).
• Date of birth (to verify the 21+ age requirement).
• Indonesian mobile phone number (for account security and OTP verification).
• Email address (for account communications and password recovery).
• Chosen username and encrypted password.
• City and province of residence in Indonesia.

3.2 Identity Verification (KYC) Data

To comply with anti-money-laundering (AML) best practices and verify your eligibility to withdraw funds, we collect:

• Copies of government-issued identification: Indonesian National Identity Card (KTP), Passport, or Driving License (SIM).
• Proof of address documents: utility bills, bank statements, or official government correspondence issued within the last 3 months.
• Selfie photographs submitted alongside identity documents for liveness verification.
• Bank account or e-wallet ownership documentation (where required).

3.3 Financial Data

To process deposits and withdrawals, we collect:

• Bank account details: bank name (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, BSI, etc.), account holder name, account number.
• E-wallet identifiers: OVO, DANA, GoPay, ShopeePay, or LinkAja registered phone numbers.
• Transaction history: deposit amounts, withdrawal requests, transaction timestamps, and payment reference numbers.

We do not store full debit or credit card numbers. Card transactions (where applicable) are handled directly by PCI-DSS-compliant payment processors; mpo077 receives only a tokenized reference.

3.4 Gaming Activity Data

To operate the Services and fulfill our responsible-gaming obligations, we record:

• Bet history: stake amounts, odds, markets, game titles, outcomes, and settlement amounts.
• Session data: login timestamps, session duration, total wagered per session.
• Bonus usage: bonuses claimed, wagering-requirement progress, bonus expiry dates.
• Responsible-gaming tool usage: any deposit limits, loss limits, or self-exclusion requests you have submitted.

3.5 Technical and Device Data

When you access mpo077, our servers and analytics systems automatically collect:

• IP address and approximate geolocation (city/region level).
• Device type, operating system, and browser version.
• Referring URL and on-site navigation paths.
• Cookie identifiers and session tokens.

3.6 Communications Data

When you contact our support team via live chat, email, WhatsApp, or Telegram, we retain records of those communications, including the content of messages and any attachments you submit, for quality assurance, dispute resolution, and compliance purposes.

4. How We Collect Data

5. Purposes of Processing

mpo077 processes your Personal Data for the following specific, explicit, and legitimate purposes:

5.1 Account Administration

To create and maintain your Account, authenticate your identity at login, process password resets, and communicate important account-related updates such as security alerts, withdrawal confirmations, and policy changes.

5.2 Provision of Services

To operate the full range of gaming and betting services on the mpo077 platform — including sports betting on BRI Liga 1, EPL, Champions League, and other leagues; live casino games; slot games from Pragmatic Play, Evolution Gaming, NetEnt, and other providers; and togel (Indonesia's traditional numbers lottery) draws — and to settle bets, calculate winnings, and credit balances accurately.

5.3 Payment Processing

To process deposits received via BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, OVO, DANA, GoPay, ShopeePay, LinkAja, and other supported Indonesian payment channels, and to fulfill withdrawal requests to your nominated bank account or e-wallet in Indonesian Rupiah (IDR).

5.4 Identity Verification and AML Compliance

To conduct KYC verification, confirm that you meet the 21+ age requirement, verify your Indonesian residency, and satisfy our obligations under internationally recognized anti-money-laundering and counter-terrorist-financing standards. This processing is mandatory — without it, withdrawal services cannot be provided.

5.5 Fraud Prevention and Platform Security

To detect, investigate, and prevent fraudulent activity, multi-accounting, bonus abuse, match fixing, money laundering, and other prohibited activities that could harm other players or the integrity of the platform. Technical and device data plays a central role in this processing.

5.6 Responsible Gaming

To monitor gaming patterns and identify signs of problem gambling; to enforce deposit limits, loss limits, session time limits, and self-exclusion orders that you have voluntarily set; and to fulfill our duty of care under internationally recognized responsible-gaming frameworks. You can learn more on our Responsible Gaming page.

5.7 Customer Support

To handle your support inquiries, resolve disputes, investigate complaints, and maintain records of communications for quality assurance and audit purposes.

5.8 Marketing Communications

Where you have given your explicit consent at registration (or subsequently), to send you promotional emails, SMS messages, and push notifications about bonuses, new game releases, and special events such as Idul Fitri promotions, Ramadhan cashback offers, and Indonesian Independence Day tournaments. You may withdraw this consent at any time by updating your Account preferences or contacting support.

5.9 Platform Improvement and Analytics

To analyze aggregated, anonymized usage patterns, identify technical issues, optimize page performance, and improve the overall user experience of the mpo077 platform. Analytics data is processed at an aggregate level wherever possible and is not used to make automated decisions about individual players.

6. Legal Basis for Processing

Every processing activity described in this Policy is grounded in at least one of the following lawful bases:

• Contractual Necessity: Processing is necessary to perform the contract between you and mpo077 (i.e., to provide the Services you have signed up for). This covers account administration, payment processing, and service delivery.
• Legal Obligation: Processing is required to comply with applicable law, including AML/CTF obligations and age-verification requirements. KYC processing falls primarily under this basis.
• Legitimate Interests: Processing is necessary for mpo077's legitimate business interests — specifically fraud prevention, platform security, and responsible-gaming monitoring — provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Where no other lawful basis applies, we rely on your freely given, specific, and informed consent. Marketing communications are processed on this basis. You may withdraw consent at any time without affecting the lawfulness of prior processing.

7. Data Sharing

7.1 Payment Processors

We share financial data with Indonesian and international payment processing partners to execute deposits and withdrawals. These processors include bank transfer intermediaries, e-wallet operators (OVO, DANA, GoPay, ShopeePay, LinkAja), and card networks where applicable. All payment processors are contractually bound to process your data only for the specific purpose of executing your transactions.

7.2 KYC and Identity Verification Providers

We share identity documents and verification data with third-party KYC service providers who perform automated and manual document authentication checks. These providers operate under strict data-processing agreements and are prohibited from using your data for any purpose other than the verification task.

7.3 Game Content Providers

Game studios and live dealer operators — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft — may receive anonymized player session data (user IDs, bet amounts, game outcomes) necessary to operate their game engines and settle rounds. These providers do not receive your name, contact details, or bank information.

7.4 Fraud Prevention and Security Services

We share technical and device data with third-party fraud-detection and cybersecurity services to identify bot activity, multi-accounting, and other platform-integrity threats. Data shared for this purpose is subject to strict contractual confidentiality obligations.

7.5 Legal and Regulatory Authorities

We may disclose Personal Data to law enforcement agencies, regulatory bodies, or courts when required to do so by applicable law, valid legal process, or a binding order from a competent authority. We will, where legally permissible, notify you before making such a disclosure.

7.6 Business Transfers

In the event of a merger, acquisition, or sale of all or a substantial portion of mpo077's assets, your Personal Data may be transferred to the acquiring entity. We will notify registered players of any such transfer and the privacy practices of the successor entity before the transfer takes effect.

8. International Data Transfers

As an internationally operated online gaming platform, mpo077 may transfer your Personal Data to servers and service providers located outside of Indonesia. Where such transfers occur, we take steps to ensure that an adequate level of protection is applied to your data by:

• Entering into standard contractual clauses with data processors in countries that have not been deemed to provide an adequate level of data protection.
• Selecting third-party partners that hold recognized international data-security certifications (such as ISO 27001 or SOC 2 Type II).
• Requiring all data processors to implement technical and organizational security measures equivalent to those applied by mpo077 itself.

By using the mpo077 platform, you acknowledge that your data may be transferred to and processed in countries other than Indonesia. We will always ensure that such transfers are carried out with appropriate safeguards in place.

9. Data Retention

We retain Personal Data for no longer than is necessary to fulfill the purposes for which it was collected, subject to any longer retention periods required by law or regulatory obligation. The following retention periods apply:

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymized in a manner that prevents reconstruction of the original data. Anonymized, aggregated data may be retained indefinitely for statistical analysis and platform-improvement purposes.

10. Cookies & Tracking Technologies

mpo077 uses cookies and similar tracking technologies (web beacons, pixel tags, local storage objects) to operate core platform functions, enhance your experience, and gather analytics data. By accessing the platform, you consent to the use of cookies as described below.

10.1 Cookie Categories

• Strictly Necessary Cookies: Essential for the platform to function. These include session authentication tokens, security cookies, and load-balancing cookies. They cannot be disabled without preventing access to the platform.
• Functional Cookies: Remember your preferences such as language settings, preferred deposit method, and responsible-gaming notification intervals. These improve your experience but are not essential.
• Analytics Cookies: Collect anonymized data about how players navigate the platform — which pages are most visited, where users drop off, and how long sessions last. We use this data to improve the platform.
• Marketing Cookies: Where you have consented, these cookies allow us to show you relevant promotional content and measure the effectiveness of our marketing campaigns.

10.2 Managing Cookies

You may control cookie preferences through your browser settings. Most browsers allow you to refuse new cookies, delete existing cookies, and be notified when a new cookie is set. Please note that disabling strictly necessary cookies will impair or prevent access to the mpo077 platform. Instructions for managing cookies are available in your browser's help documentation.

10.3 Cookie Retention Periods

• Session cookies: Deleted automatically when you close your browser.
• Persistent functional cookies: Retained for up to 12 months.
• Analytics cookies: Retained for up to 13 months.
• Marketing cookies: Retained for up to 90 days.

11. Your Privacy Rights

Subject to applicable law and our legitimate interests in maintaining platform security and fulfilling legal obligations, you have the following rights regarding your Personal Data:

To exercise any of these rights, please contact us at [email protected] (plain text — not a clickable link), providing your registered email address and a description of your request. We will respond within 30 days of receipt. In complex cases, this period may be extended by a further 60 days, and we will notify you of any such extension.

12. Security Measures

mpo077 implements a multi-layered security architecture to protect your Personal Data against unauthorized access, loss, destruction, alteration, or disclosure. Our key security measures include:

• SSL/TLS Encryption: All data transmitted between your browser or app and the mpo077 servers is encrypted using TLS 1.2 or higher. Look for the padlock icon in your browser address bar as confirmation.
• At-Rest Encryption: Sensitive stored data — including identity documents and bank account details — is encrypted at rest using AES-256 encryption.
• Two-Factor Authentication (2FA): Players are encouraged to enable 2FA on their accounts. OTP verification via SMS is applied to all withdrawal requests as standard.
• Access Controls: Access to Personal Data within our organization is strictly role-based and limited to personnel with a demonstrable business need. All internal access is logged and audited.
• Penetration Testing: Our systems undergo regular independent security audits and penetration tests to identify and remediate vulnerabilities.
• Fraud Detection Systems: Real-time monitoring systems analyze login events, device fingerprints, IP addresses, and transaction patterns to detect and block suspicious activity.
• Incident Response Plan: We maintain a documented data-breach response procedure. In the event of a confirmed breach affecting your Personal Data, we will notify you and relevant authorities within 72 hours of discovery.

13. Minors' Privacy

The mpo077 platform is strictly an adult service. Access, registration, and use of any Services is prohibited for individuals under the age of 21 years. We do not knowingly collect Personal Data from minors. If we discover that Personal Data has been submitted by or on behalf of a person under 21, we will immediately suspend the associated account, delete the relevant data, and — where funds have been deposited — initiate a full refund to the original payment method.

Parents and guardians who believe their child may have accessed or registered on the mpo077 platform should contact us immediately at [email protected] (plain text — not a clickable link). We will investigate and act without delay.

We also recommend that parents and guardians use parental-control software to restrict minors' access to online gambling platforms. Tools such as GamBlock and NetNanny are available internationally and can be configured to block gambling-category websites.

14. Third-Party Links & Services

The mpo077 platform may contain references to or integrations with third-party game content providers, payment services, and live data feeds. While these integrations are necessary for the operation of our Services, they are subject to the privacy policies of those third parties, not this Policy.

mpo077 is not responsible for the privacy practices or content of third-party services accessed through or in connection with the mpo077 platform. We encourage you to review the privacy policies of any third-party service you interact with. Our responsibility is limited to the data we directly collect and control.

15. Policy Amendments

mpo077 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data-processing practices, applicable law, or platform functionality. When material changes are made, we will:

• Update the "Last Updated" date at the top of this page.
• Send a notification to your registered email address at least 7 days before the amended Policy takes effect (except where immediate changes are required to address a security threat or comply with an urgent legal obligation).
• Display a prominent notice on the mpo077 platform informing you of the change and directing you to review the updated Policy.

Your continued use of the Services after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not agree with an amendment, you must cease using the Services and contact support to request account closure. Any real-money balance at the time of closure will be refunded to your verified payment method after applicable KYC checks.

16. Contact & Complaints

If you have questions, concerns, or complaints about how mpo077 handles your Personal Data, or if you wish to exercise any of the rights described in Section 11, please reach out to us through the following channels:

• Email: [email protected] (plain text — not a clickable link). Subject line: "Privacy Request – [Your Registered Email]". Response time: 2–6 hours.
• Live Chat: Available 24/7 via the platform interface. For privacy-related requests, ask to be connected to a Data Protection representative.
• WhatsApp & Telegram: Contact details available on the platform's support page. For sensitive data requests, email is recommended for documentation purposes.

We take all privacy inquiries seriously and aim to resolve complaints at the first point of contact. If you are not satisfied with our response, you have the right to escalate your complaint to the relevant data-protection supervisory authority in your jurisdiction. For Indonesian residents, guidance on consumer data rights may be obtained from the relevant Indonesian government ministry responsible for communications and informatics.

All privacy-related requests are handled confidentially. We will verify your identity before processing any request that grants access to, modifies, or deletes Personal Data, to protect both your data and the data of other platform users.