Privacy Policy

1. Introduction and Scope

This Privacy Policy applies to all personal information collected by mpo807 through our website at https://mpo807.cam (the "Platform"), mobile applications (if any), customer service channels, and any related services. This policy covers all users of the Platform, including registered Players and visitors who browse without creating an Account.

mpo807 operates as an online gaming platform serving primarily Indonesian players with sports betting, casino games, slots, and lottery services including togel (Indonesia's traditional lottery). We process personal data in accordance with international data protection standards and best practices.

This Privacy Policy should be read in conjunction with our Terms & Conditions, which govern your use of mpo807 services.

2. Data Controller

The data controller responsible for your personal information is mpo807, operated under international gaming licenses. For data protection inquiries, you may contact us at:

• Email: [email protected]
• Live Chat: Available 24/7 on the Platform
• Subject Line: "Privacy Inquiry" or "Data Protection Request"

Our Data Protection Officer (DPO) reviews all privacy-related inquiries and responds within 14 business days.

3. Information We Collect

mpo807 collects several categories of personal information to provide, maintain, and improve our services, ensure Platform security, and comply with legal obligations.

3.1 Information You Provide Directly

When you register an Account or use mpo807 services, you voluntarily provide the following information:

• Account Registration Data: Full legal name, date of birth, gender, email address, mobile phone number, residential address (city, province, postal code), and chosen username and password
• Identity Verification (KYC) Documents: Government-issued photo identification (Indonesian KTP, passport, or driver's license), proof of address documents (utility bills, bank statements), bank account details, and selfie photographs for identity confirmation
• Financial Information: Bank account numbers, e-wallet account information (OVO, DANA, GoPay, ShopeePay, LinkAja), payment card details (if applicable), transaction history, deposit and withdrawal records
• Communication Records: Live chat transcripts, email correspondence with Customer Support, WhatsApp messages, feedback and survey responses
• Profile Preferences: Gaming preferences, notification settings, language preferences, marketing communication preferences

3.2 Information Collected Automatically

When you access the mpo807 Platform, we automatically collect certain technical information:

• Device Information: IP address, device type and model, operating system, browser type and version, screen resolution, device identifiers (IMEI, MAC address)
• Usage Data: Pages viewed, games played, bet history, session duration, click patterns, navigation paths, time spent on each page, referring URLs
• Location Data: General geographic location derived from IP address (city and country level, not precise GPS coordinates)
• Cookies and Tracking Technologies: Session cookies, persistent cookies, web beacons, local storage objects. See Section 10 for detailed cookie information

3.3 Information from Third Parties

We may receive information about you from third-party sources including:

• Payment Processors: Transaction verification data from Indonesian banks (BCA, BRI, BNI, Mandiri) and e-wallet providers to confirm deposits and process withdrawals
• Fraud Prevention Services: Identity verification results, fraud risk scores, and watchlist screening reports from third-party security providers
• Game Providers: Gameplay data, game session logs, and technical performance data from third-party game studios (Pragmatic Play, Evolution Gaming, NetEnt, etc.)
• Affiliate Partners: Referral source information if you accessed mpo807 through an affiliate link

4. How We Use Your Information

mpo807 uses your personal information for the following purposes, all of which are necessary to operate a secure and compliant gaming platform:

4.1 Service Provision and Account Management

• Create, maintain, and manage your Account
• Process deposits, withdrawals, and other financial transactions in Indonesian Rupiah (IDR)
• Provide access to games, betting markets, and Platform features
• Maintain game history, transaction records, and account balances
• Process bonus claims and track wagering requirements
• Provide customer support via live chat, email, and WhatsApp

4.2 Verification and Compliance

• Verify your identity and age (21+ requirement enforcement)
• Conduct Know Your Customer (KYC) and Anti-Money Laundering (AML) checks
• Detect and prevent fraud, money laundering, and other illegal activities
• Comply with regulatory obligations and legal requirements
• Enforce our Terms & Conditions and platform policies
• Investigate potential violations and resolve disputes

4.3 Platform Security and Integrity

• Monitor for suspicious activity, bonus abuse, and multi-accounting
• Detect and prevent unauthorized access and cyber attacks
• Analyze betting patterns to identify collusion or match-fixing
• Maintain Platform stability and prevent technical abuse
• Conduct security audits and vulnerability assessments

4.4 Communication and Marketing

• Send transactional emails regarding deposits, withdrawals, and account activity
• Deliver service updates, policy changes, and important Platform announcements
• Send promotional offers, bonuses, and VIP rewards (with your consent)
• Conduct player satisfaction surveys and request feedback
• Provide responsible gaming reminders and reality check notifications

4.5 Analytics and Improvement

• Analyze Platform usage patterns to improve user experience
• Conduct A/B testing on features and interface designs
• Generate aggregated statistics and reports (anonymized data)
• Develop new games, features, and services based on Player preferences
• Optimize Platform performance and loading speeds

4.6 Responsible Gaming

• Monitor Player behavior for signs of problem gambling
• Enforce deposit limits, loss limits, and session time limits
• Process self-exclusion requests and cooling-off periods
• Provide access to responsible gaming tools and resources
• Contact Players proactively if concerning patterns are detected

5. Legal Basis for Processing

mpo807 processes your personal data based on the following legal grounds:

5.1 Contractual Necessity

Processing is necessary to perform our contract with you (the Terms & Conditions). This includes Account creation, transaction processing, game provision, and customer support. Without this data, we cannot provide mpo807 services.

5.2 Legal Obligation

Processing is required to comply with legal obligations including age verification (21+ requirement), anti-money laundering regulations, fraud prevention, tax reporting, and responding to valid legal requests from authorities.

5.3 Legitimate Interests

Processing is necessary for our legitimate business interests including Platform security, fraud detection, business analytics, product improvement, and marketing to existing customers. We balance these interests against your privacy rights.

5.4 Consent

For certain processing activities, we rely on your explicit consent, particularly for marketing communications via email or SMS, non-essential cookies, and sharing data with third-party partners beyond what is strictly necessary for service provision. You may withdraw consent at any time.

6. Data Sharing and Disclosure

mpo807 does not sell your personal information to third parties. We share your data only in the following limited circumstances:

6.1 Service Providers

We share data with trusted third-party service providers who perform services on our behalf:

• Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Danamon, BSI, Permata) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) to process financial transactions
• Game Providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and other licensed studios to deliver games
• Identity Verification Services: KYC and AML compliance providers to verify your identity and screen against watchlists
• Customer Support Tools: Live chat platforms and helpdesk software to deliver support services
• Cloud Hosting Providers: Secure cloud infrastructure providers who host our Platform and databases
• Security Vendors: Cybersecurity firms, DDoS protection services, and fraud detection systems

All service providers are bound by strict confidentiality obligations and process data only on our instructions.

6.2 Legal Requirements

We may disclose your information if required by law, court order, subpoena, or valid governmental request, or to protect our legal rights, prevent fraud, or ensure Platform security.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of mpo807's assets, your personal information may be transferred to the acquiring entity. You will be notified of any such change.

6.4 With Your Consent

We may share data with third parties if you provide explicit consent for a specific purpose.

7. Data Retention

mpo807 retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy and comply with legal obligations:

• Active Accounts: Data is retained for the duration of your Account activity plus a reasonable period afterward
• Closed Accounts: Following Account closure, we retain data for a minimum of 5 years to comply with financial record-keeping requirements, anti-money laundering regulations, and potential dispute resolution
• Transaction Records: Financial transaction data is retained for 7 years as required by international financial regulations
• Marketing Data: If you unsubscribe from marketing, your contact information is retained on a suppression list to prevent future contact
• Legal Holds: Data subject to legal proceedings, investigations, or disputes is retained until resolution

After retention periods expire, personal data is securely deleted or anonymized. Anonymized statistical data may be retained indefinitely for analytics purposes.

8. Data Security Measures

mpo807 implements comprehensive technical and organizational measures to protect your personal information against unauthorized access, disclosure, alteration, or destruction:

8.1 Technical Security

• Encryption: All data transmissions use 256-bit SSL/TLS encryption, the same standard used by major Indonesian banks
• Secure Storage: Personal data is stored on secure servers with encrypted databases
• Firewalls and Intrusion Detection: Multi-layer firewall protection and real-time intrusion detection systems
• Access Controls: Role-based access restrictions ensure only authorized personnel can access personal data
• Two-Factor Authentication: Available for Player Accounts and mandatory for staff accessing sensitive systems
• Regular Audits: Third-party security audits and penetration testing conducted regularly

8.2 Organizational Security

• All staff undergo data protection training and sign confidentiality agreements
• Strict internal policies govern data access, usage, and disposal
• Incident response procedures for potential data breaches
• Regular backup procedures with encrypted offsite storage

8.3 Your Responsibility

While we implement robust security measures, you also play a role in protecting your data. Use strong, unique passwords, never share your login credentials, log out after each session on shared devices, and report suspicious activity immediately.

9. Your Privacy Rights

As a mpo807 user, you have the following rights regarding your personal information:

9.1 Right to Access

You may request a copy of all personal data we hold about you. We will provide this in a structured, commonly used format within 30 days of your request.

9.2 Right to Rectification

If your personal information is inaccurate or incomplete, you have the right to request corrections. You can update most information directly through your Account settings.

9.3 Right to Erasure

You may request deletion of your personal data, subject to legal retention requirements. Certain data must be retained for regulatory compliance (minimum 5 years after Account closure).

9.4 Right to Restriction

You may request that we limit processing of your data in certain circumstances, such as while disputes are resolved.

9.5 Right to Data Portability

You can request a copy of your data in a machine-readable format to transfer to another service provider.

9.6 Right to Object

You may object to processing based on legitimate interests or for direct marketing purposes. Marketing opt-outs are honored immediately.

9.7 Right to Withdraw Consent

Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

9.8 Exercising Your Rights

To exercise any privacy rights, contact us at [email protected] with subject line "Privacy Rights Request." Include your Account username and specify which right you wish to exercise. We will verify your identity before processing requests and respond within 30 days.

10. Cookies and Tracking Technologies

mpo807 uses cookies and similar technologies to enhance your Platform experience and collect usage data:

10.1 Types of Cookies We Use

10.2 Managing Cookies

You can manage cookie preferences through your browser settings. However, disabling essential cookies may prevent access to certain Platform features. Most browsers allow you to reject all cookies or only third-party cookies.

11. International Data Transfers

mpo807 operates internationally and may transfer your personal data to countries outside Indonesia, including jurisdictions where our servers, service providers, or business partners are located. Some of these countries may have different data protection standards than Indonesia.

When we transfer data internationally, we implement appropriate safeguards including:

• Standard contractual clauses approved by relevant data protection authorities
• Ensuring recipients are certified under recognized data protection frameworks
• Conducting due diligence on data protection practices of international partners

By using mpo807 services, you consent to these international transfers as necessary for Platform operation.

12. Children's Privacy

mpo807 services are strictly for adults aged 21 years and above. We do not knowingly collect personal information from individuals under 21. If we discover that a user is underage, we immediately suspend the Account, delete all associated personal data, and forfeit any remaining balance.

If you are a parent or guardian and believe your child under 21 has provided information to mpo807, please contact us immediately at [email protected] so we can take appropriate action.

13. Changes to This Privacy Policy

mpo807 may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. Material changes will be communicated via:

• Email notification to your registered email address
• Prominent notice on the Platform homepage
• Pop-up notification upon your next login

The "Last Updated" date at the top of this policy indicates when the most recent revisions were made. Your continued use of mpo807 after changes take effect constitutes acceptance of the updated Privacy Policy. We encourage you to review this policy periodically.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or how mpo807 handles your personal information, please contact us:

• Email: [email protected] (Subject: "Privacy Inquiry")
• Live Chat: Available 24/7 on the Platform - Indonesian-speaking agents available
• WhatsApp: Contact via Customer Support on the Platform

Our Data Protection team reviews all privacy inquiries and responds within 14 business days. For urgent security concerns (suspected data breach, unauthorized Account access), contact us immediately via live chat for faster response.