MPO303 Privacy Policy – Personal Data Protection for Malaysian Members

MPO303 collects various types of information depending on how you interact with our platform. Below are the main categories of data we collect:

Information you provide directly:

• The username and password you created during registration
• An active Malaysian phone number for account verification
• Email address for account communications and promotions
• Identity verification details such as your MyKad or passport number (required for withdrawal verification)
• Payment account details such as your Touch 'n Go account number, GrabPay, DuitNow or relevant FPX information

Automatically collected information:

• Your device's IP address when accessing the MPO303 platform
• Device type, operating system, and web browser used
• Session data including login time, session duration, and pages visited
• Transaction history including deposits, withdrawals, and in-platform bets
• Game history including slots played, sports bets placed, and esports followed
• Cookie data and similar tracking technologies (see Section 5)

All information we collect at mpo303 serves a clear and legitimate purpose. We do not collect data that is unnecessary for delivering our services. The following are the primary purposes for which your data is used:

• Account management: Verifying your identity, processing registration, enabling secure login and managing your account settings.
• Transaction processing: Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow and FPX; processing withdrawals to the same payment methods; maintaining accurate financial records.
• Service delivery: Providing access to all games including slots, Live Casino, Sports Betting on the Malaysia Super League and EPL, e-sports, and progressive jackpots.
• Fraud prevention and security: Detecting and preventing fraudulent activity, money laundering, bonus abuse, and unauthorised access to your account.
• Customer support: Enabling our Bahasa Malaysia-speaking support team to understand your account history and transactions so they can assist you more effectively.
• Legal compliance: Meeting the requirements of regulators and audit bodies related to the operation of online gambling platforms.
• Platform improvements: Analysing usage patterns on an aggregate basis (not individually) to improve the user experience, select new games, and optimise platform performance.
• Marketing communications: Sending information about promotions, new bonuses, and platform updates — only if you have not opted out.

MPO303 does not sell members' personal information to anyone. However, there are limited situations where we may need to share data with selected third parties in order to operate the platform properly:

• Payment provider: Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and the FPX banks used to process deposits and withdrawals receive only the transaction details necessary to complete a payment. They are subject to their own privacy policies.
• Game provider: Providers such as Pragmatic Play, PG Soft, and Evolution Gaming may receive session identifiers required to run the games. They do not receive your full personal identity information.
• Identity verification service: Certified third-party providers that assist us in verifying identity documents to meet KYC (Know Your Customer) requirements.
• Legal authorities: We will disclose the required information when mandated by a court order, regulatory directive, or legitimate criminal investigation.
• Independent auditors: Security and game fairness audit firms that help us maintain high operational standards. They are bound by strict confidentiality agreements.

In all of the above cases, we ensure that only the minimum necessary data is shared, and all recipient parties are bound by data protection agreements with mpo303.

Protecting your data is our foremost responsibility at mpo303. We continuously invest in security infrastructure to ensure your information remains protected at all times:

• Data encryption in transit: All communication between your browser or app and MPO303's servers is secured by TLS 1.3 protocol with 256-bit SSL encryption.
• Stored data encryption: Sensitive information including passwords (stored as hashes), MyKad numbers, and payment details are stored using AES-256 encryption.
• Two-factor authentication (2FA): An additional security layer available to all MPO303 members to protect accounts from unauthorised access even if your password is compromised.
• Real-time monitoring: A threat detection system that monitors for suspicious activity around the clock and automatically takes action when unusual patterns are detected.
• Internal access controls: The principle of least privilege applies — each staff member has access only to the data required for their specific role.
• Periodic penetration testing: Security audits and penetration testing are conducted regularly by independent cybersecurity firms to identify and address any vulnerabilities before they can be exploited.

While we take all reasonable steps to protect your data, no security system can guarantee absolute 100% protection. We encourage you to take your own protective measures as well, such as using a strong and unique password, not sharing your login credentials, and logging out after each session on mpo303.

MPO303 uses cookies and similar tracking technologies to enhance your experience on the platform. The following are the types of cookies we use:

• Strictly necessary cookies: Session cookies that keep you logged in while browsing the platform, remember your in-game details during an active session, and ensure transaction security. These cookies cannot be disabled as the platform will not function without them.
• Functional cookies: Remembering your preferences such as language settings and your last display choice. This allows the platform to adapt to the way you prefer to use it.
• Performance and analytics cookies: Collecting aggregated information on how pages are used — average session duration, most visited pages, and where players commonly drop off within certain flows. This data is used solely for platform improvement.
• Security cookies: Helps detect suspicious activity such as login attempts from unusual locations or irregular transaction patterns.

You can manage your cookie settings through your web browser preferences. Please note that disabling certain cookies may affect the functionality of the MPO303 platform. For the best experience, we recommend allowing at least the necessary and functional cookies.

As a member mpo303 and owner of your personal data, you hold the following rights, which we fully respect:

• Right to access: You may request a copy of the personal data we hold about you at any time. We will provide this within 14 business days of receiving your request.
• Right to rectification: If any information we hold about you is inaccurate or out of date, you have the right to request a correction. You can update much of this information directly through your account settings.
• Right to erasure: You may request the deletion of your personal data, subject to applicable legal requirements and certain operational needs (for example, financial records that must be retained for a minimum period under the law).
• Right to restrict processing: You may ask us to restrict how we use your data in certain situations, such as when a dispute about the accuracy of your data is ongoing.
• Right to object to marketing: You may opt out of marketing communications from MPO303 at any time through your account settings or by sending us an email.
• Right to data portability: You may request your data in a machine-readable format for the purpose of transferring it to another platform.

To exercise any of the rights above, please contact our support team mpo303 via email at support@mpo303.site or via the platform's live chat. We are committed to processing all requests within 14 business days. For complex cases, we may require up to 30 days and will notify you in advance.

Mpo303 retains your personal data only for as long as necessary for the purposes outlined in this Privacy Policy, or as required by applicable law:

• Active account data: Retained for as long as your account remains active on MPO303. Information is updated each time you update your profile.
• Financial transaction records: Retained for a minimum of 7 years from the transaction date, in line with financial and regulatory standard requirements.
• Security logs: Retained for 12 months for fraud detection and security investigation purposes.
• Game history data: Retained for 24 months for customer support and dispute resolution purposes.
• Terminated accounts: Core data is retained for 5 years after account termination for legal compliance purposes, after which it will be permanently deleted or fully anonymised.

When the retention period expires or when data is no longer required, mpo303 will delete or anonymise that data in a secure and irreversible manner. The deletion process is internally audited to ensure it is carried out correctly.

Mpo303 strictly prohibits use of the platform by anyone under the age of 18. We do not knowingly collect or store personal data of underage children or minors. This is a commitment we take seriously:

• The registration process requires verification of an active Malaysian phone number, which we use as one of our age verification layers.
• During the identity verification process for withdrawals, we confirm your date of birth through official documents such as MyKad or passport.
• If we suspect that a member is under 18 years of age, the account will be suspended immediately while an investigation is carried out.
• If the member is confirmed to be underage, the account will be terminated and all related data deleted immediately.

If you are aware of or suspect that someone under the age of 18 is using the mpo303, please contact our customer support immediately. We take every such report seriously and will act without delay.

For those who may be experiencing difficulties with gambling, we provide self-help tools to assist you in managing your usage. Contact Talian Kasih 15999 if you or someone you know needs help.

MPO303 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or improvements to how we protect your data. When material amendments are made, we will:

• Updating the "Last Updated" date at the top of this page
• Sending a notification via email to the address registered to your account
• Displaying a clear notice on the mpo303 platform for a minimum of 7 days

Continued platform use mpo303 after the effective date of the amendment constitutes your acceptance of the revised Privacy Policy. We encourage you to review this page periodically.

For any enquiries, concerns, or requests relating to this Privacy Policy or your personal data, please contact us via:

• Email: support@mpo303.site
• Live Chat: Available 24 hours within the MPO303 platform
• Response time: Within 2 minutes for live chat, 30 minutes for email