Privacy Policy

1. Definitions

Throughout this Privacy Policy, the following terms carry the meanings set out below:

• "mpo189," "we," "us," "our" — the online betting platform accessible at https://mpo189.cam, operated as a single integrated service covering sports betting, live casino, slot games, togel (Indonesia's traditional numbers-prediction lottery), sabung ayam (cockfighting) live streams, and all associated payment and account management functions.
• "Player," "User," "you," "your" — any individual who visits the mpo189 website, creates an Account, deposits funds, places bets, interacts with customer support, or otherwise engages with any mpo189 service.
• "Personal Data" — any information that identifies or could reasonably be used to identify a natural person, directly or indirectly. This includes, but is not limited to, full name, date of birth, email address, phone number, residential address, payment account details, device identifiers, and IP address.
• "Processing" — any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, consultation, use, disclosure, transmission, restriction, erasure, or destruction.
• "Data Controller" — the entity that determines the purposes and means of Processing Personal Data. mpo189 acts as the Data Controller for all Personal Data collected through its Platform.
• "Data Processor" — a third party that processes Personal Data on behalf of mpo189 under a data processing agreement, such as payment processors, KYC verification providers, or cloud hosting services.
• "Consent" — a freely given, specific, informed, and unambiguous indication of your agreement to the Processing of your Personal Data for a stated purpose, provided through a clear affirmative action.
• "KYC" — Know Your Customer; the identity and age verification process mandatory for all Players requesting withdrawals or accessing certain account features on mpo189.

2. Data Controller Information

mpo189 is the Data Controller responsible for Personal Data collected through the platform at https://mpo189.cam. As Data Controller, mpo189 determines the purposes for which your Personal Data is collected and the means by which it is processed. Our Data Protection Officer (DPO) oversees all privacy-related matters and is the primary point of contact for any data protection enquiries, complaints, or rights-exercise requests.

For data protection enquiries, please contact: [email protected]. Please note that this email address is for data protection matters only. General support enquiries should be directed to [email protected]. We aim to acknowledge all privacy-related requests within 3 business days and provide a substantive response within 30 calendar days.

3. Data We Collect and How We Collect It

3.1 Data You Provide Directly

mpo189 collects Personal Data that you provide actively and voluntarily when interacting with the Platform. The primary categories of directly provided data include:

• Registration Data: Full legal name, date of birth, email address, mobile phone number, residential address (street, city, province, postal code, Indonesia), username, and password.
• KYC Verification Data: Scanned copies or photographs of government-issued identity documents (Indonesian KTP, passport, SIM/driver's license), proof of address documents (utility bill, bank statement dated within 90 days), and selfie images used for liveness and facial-match verification.
• Payment Data: Bank account details (for local bank transfers via BCA, BRI, BNI, Mandiri, BSI, CIMB Niaga, and other Indonesian banks), e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja), and cryptocurrency wallet addresses (USDT TRC-20/ERC-20, BTC). mpo189 does not store full credit/debit card numbers; card-based payments are handled exclusively by PCI DSS-compliant payment processors.
• Communications Data: The content of live chat transcripts, email conversations, and support ticket submissions you initiate with our customer support team.
• Responsible Gaming Data: Self-reported information provided when you activate deposit limits, self-exclusion periods, cooling-off tools, or contact our responsible gaming team for assistance.

3.2 Data Collected Automatically

When you access and use mpo189, certain technical and behavioral data is collected automatically through our systems and third-party analytics tools:

• Device and Technical Data: IP address, device type (mobile, tablet, desktop), operating system and version, browser type and version, screen resolution, device language settings, and device identifiers.
• Usage and Behavioral Data: Pages visited, features accessed, games played (including session duration, bet amounts, game titles, and outcomes), navigation paths, click patterns, search queries within the Platform, and time stamps of all significant account actions.
• Transaction Data: Complete records of all deposits, withdrawals, bonuses claimed, bet placements, and account balance changes. Transaction logs are retained for compliance, dispute resolution, and audit purposes.
• Location Data: Approximate geographic location derived from your IP address. We do not access precise GPS coordinates unless you explicitly grant permission via a mobile browser or application.

3.3 Data Received from Third Parties

In certain circumstances, mpo189 receives Personal Data about you from trusted third-party sources:

• KYC Verification Providers: Identity verification bureaus that cross-reference your submitted documents against national identity databases to confirm authenticity.
• Payment Processors: Transaction status confirmations, fraud signals, and payment method ownership verification from partner banks, e-wallet operators, and cryptocurrency custodians.
• AML and Fraud Detection Services: Risk scores, politically exposed person (PEP) status, sanctions list screening results, and behavioral fraud signals from our compliance technology partners.
• Affiliate Partners: If you arrived at mpo189 via an affiliate referral link, we receive a tracking identifier from the affiliate partner to attribute your registration. We do not receive any additional personal data beyond the referral identifier.

4. Purposes and Legal Basis for Processing

mpo189 processes your Personal Data only when we have a clear, lawful basis to do so. The table below summarizes the primary processing activities, their purposes, and the legal basis applied:

Where mpo189 relies on legitimate interests as the legal basis for processing, we have carried out a balancing test to confirm that our interests do not override your fundamental rights and freedoms. You have the right to object to processing based on legitimate interests at any time; see Section 9 for details.

5. Data Retention Periods

mpo189 retains Personal Data for no longer than is necessary to fulfill the purposes for which it was collected, subject to any overriding legal retention obligations. Our standard retention schedule is as follows:

• Account and Registration Data: Retained for the duration of your active Account plus 5 years following permanent account closure, to satisfy AML record-keeping requirements.
• KYC and Identity Documents: Retained for 5 years from the date of verification, in line with international financial compliance standards. Where a specific jurisdiction requires a longer period, the longer period applies.
• Transaction Records (deposits, withdrawals, bets): Retained for 7 years from the date of each transaction for financial audit and legal compliance purposes.
• Customer Support Communications: Retained for 3 years from the date of each interaction, for dispute resolution and quality assurance purposes.
• Marketing Consent Records: Retained for the duration of your subscription to marketing communications plus 2 years following opt-out, as evidence of consent management compliance.
• Technical Log Data (IP, device, session): Retained for 12 months from collection for security monitoring, fraud detection, and platform diagnostics.
• Responsible Gaming Records: Retained for 5 years from the date of last interaction, to support ongoing player protection obligations and re-registration screening.

When the applicable retention period expires, Personal Data is securely deleted, anonymized, or pseudonymized so that it can no longer be linked to an identifiable individual. Aggregated, non-identifiable analytical data may be retained indefinitely for business intelligence purposes.

6. Data Sharing and Disclosure

6.1 Authorized Data Processors

mpo189 shares Personal Data with carefully vetted third-party Data Processors who provide essential operational services. All processors are bound by contractual data processing agreements that restrict their use of your data to the specific service they provide. Categories of authorized processors include:

• Payment Service Providers: Partner banks, e-wallet operators (OVO, DANA, GoPay, ShopeePay, LinkAja), and cryptocurrency custodians required to execute deposit and withdrawal transactions.
• KYC and Identity Verification Providers: Third-party identity verification bureaus that authenticate government-issued documents and perform liveness checks.
• AML and Compliance Technology Providers: Services that screen Players against sanctions lists, PEP databases, and adverse media sources as part of our ongoing compliance obligations.
• Cloud Infrastructure and Hosting Providers: Secure data center and cloud storage providers who host mpo189's servers and databases under strict contractual security requirements.
• Customer Support Platforms: Live chat and ticketing software providers through which support interactions are conducted and recorded.
• Analytics Providers: Web and product analytics services that process anonymized or pseudonymized usage data to help mpo189 improve Platform performance and user experience.

6.2 Legal Disclosure Requirements

mpo189 may disclose your Personal Data to law enforcement agencies, regulatory bodies, courts, or other government authorities when required to do so by a lawful order, subpoena, court order, or legal obligation. We will notify you of such disclosure requests where legally permitted to do so. mpo189 does not voluntarily share data with any government body beyond what is strictly required by law.

6.3 Business Transfers

In the event that mpo189 undergoes a merger, acquisition, asset sale, restructuring, or change of ownership, Player Personal Data may be transferred to the acquiring or successor entity as part of that transaction. We will notify affected Players via email or prominent in-platform notice prior to any such transfer, and the receiving entity will be required to honor the terms of this Privacy Policy.

7. Data Security Measures

mpo189 implements a comprehensive, layered security framework to protect your Personal Data from unauthorized access, disclosure, alteration, or destruction. Our key technical and organizational security measures include:

• Transport Encryption: All data transmitted between your device and mpo189 servers is protected by 256-bit TLS encryption. HTTPS is enforced site-wide with HTTP Strict Transport Security (HSTS) headers enabled.
• Data-at-Rest Encryption: Sensitive data fields stored in our databases — including KYC document references, payment details, and authentication credentials — are encrypted using AES-256 encryption at rest.
• Password Security: User passwords are never stored in plaintext. They are hashed using industry-standard adaptive hashing algorithms (bcrypt with a minimum cost factor of 12) with unique per-user salts.
• Access Controls: Employee access to Personal Data is governed by a strict role-based access control (RBAC) policy. Access is granted on a need-to-know basis only, and all data access events are logged and audited.
• Infrastructure Security: mpo189's servers are hosted in ISO 27001-certified data centers with physical access controls, 24/7 monitoring, redundant power supplies, and DDoS mitigation systems.
• Vulnerability Management: Regular penetration testing, automated vulnerability scanning, and code security reviews are conducted by internal and external security teams. Critical vulnerabilities are patched within 24 hours of discovery.
• Data Breach Response: mpo189 maintains a documented Data Breach Response Plan. In the event of a confirmed data breach affecting your Personal Data, we will notify affected Players and relevant authorities within the timeframe required by applicable law — and no later than 72 hours after becoming aware of the incident.

While mpo189 takes all reasonable technical and organizational precautions, no online system can guarantee absolute security. You are responsible for keeping your Account credentials confidential and for notifying us immediately if you suspect unauthorized access to your Account.

8. Cookies and Tracking Technologies

8.1 What Cookies Are Used

mpo189 uses cookies, pixel tags, and similar tracking technologies to operate the Platform, remember your preferences, maintain your login session, and analyze usage patterns. The cookies we use fall into the following categories:

• Strictly Necessary Cookies: Essential for core Platform functionality — session management, login authentication, security tokens (CSRF protection), and load-balancing. These cannot be disabled without breaking core functionality.
• Functional Cookies: Remember your language preference, display settings, last visited game lobby, and notification preferences. Disabling these cookies will cause the Platform to forget your preferences between sessions.
• Performance and Analytics Cookies: Collect anonymized or pseudonymized data about how you navigate and interact with the Platform — pages visited, time spent per section, error occurrences, and feature usage. This data informs product improvements.
• Marketing and Tracking Cookies: Used only with your explicit consent, these cookies track your interaction with promotional campaigns and affiliate referral links to attribute registrations and assess marketing effectiveness. These cookies do not build third-party advertising profiles.

8.2 Managing Cookies

You can control cookie behavior through your browser settings. Most modern browsers allow you to block, delete, or receive alerts about cookies. Please note that disabling Strictly Necessary cookies may impair Platform functionality, including your ability to log in or maintain a secure session. For detailed instructions on managing cookies in your specific browser, consult your browser's official help documentation. You may also modify your cookie preferences at any time by contacting [email protected].

9. Your Rights as a Data Subject

As a Player whose Personal Data is processed by mpo189, you hold the following data protection rights. To exercise any of these rights, submit a written request to [email protected]. We will verify your identity before processing any request and respond within 30 calendar days.

• Right of Access: You may request a copy of all Personal Data we hold about you, together with information about how it is processed, stored, and shared.
• Right to Rectification: If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request correction or completion. For minor corrections (e.g., email address updates), you may also use your Account settings directly.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been unlawfully processed. Note that this right is subject to legal retention obligations — we cannot delete data that we are legally required to retain (e.g., AML transaction records).
• Right to Restriction of Processing: You may request that we restrict the Processing of your Personal Data in certain circumstances — for example, while a dispute about data accuracy is being resolved, or where you have objected to processing based on legitimate interests and the outcome of the balancing test is pending.
• Right to Data Portability: Where processing is based on your consent or contractual necessity and carried out by automated means, you may request a copy of your Personal Data in a structured, commonly used, machine-readable format (e.g., JSON or CSV) for transfer to another service provider.
• Right to Object: You have the right to object at any time to Processing based on legitimate interests, including profiling. You may also object to processing for direct marketing purposes, in which case we will cease marketing communications immediately without requiring a justification.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

mpo189 will not charge a fee for handling rights requests unless a request is manifestly unfounded, repetitive, or excessive. In such cases, we may charge a reasonable administrative fee or decline to act, and we will inform you of our reasons in writing.

10. Age Restrictions and Protection of Minors

mpo189 strictly prohibits use of its Platform by anyone under the age of 21 years. This age restriction applies to all Players, regardless of local laws that may set a lower minimum gambling age. We impose the 21+ standard specifically because our primary market, Indonesia, has a higher cultural and regulatory expectation for responsible age-gating in online entertainment platforms.

We do not knowingly collect Personal Data from individuals under 21. If you are under 21 years of age, you must not register an Account, deposit funds, or use any mpo189 service. If we discover that an Account has been registered by an individual under 21 — whether through KYC verification, self-reporting, or third-party notification — we will immediately close the Account, void all bets, forfeit all balances, and permanently delete the associated Personal Data to the extent permitted by law.

If you are a parent or guardian and believe that a minor in your care has registered on mpo189, please contact us immediately at [email protected] with details of the account. We will investigate and take appropriate action within 48 hours of receiving your report.

11. International Data Transfers

mpo189 operates an international Platform, and certain technical services — including cloud hosting, analytics, and KYC verification — may involve the transfer of Personal Data to servers or service providers located outside Indonesia. Where such transfers occur, mpo189 ensures that adequate protections are in place to maintain a standard of data protection equivalent to or greater than the protections applied within Indonesia.

Safeguards for international transfers include contractual clauses (Standard Contractual Clauses) with service providers, data processing agreements imposing obligations equivalent to those in this Privacy Policy, and preferential use of service providers whose infrastructure is located in jurisdictions with recognized data protection regimes.

You may request information about the specific safeguards applied to any international transfer of your Personal Data by submitting a written enquiry to [email protected].

12. Changes to This Privacy Policy

mpo189 reserves the right to update, revise, or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, Platform features, or business structure. When we make material changes — those that significantly affect your rights or how we handle your Personal Data — we will notify you through one or more of the following methods:

• A prominent notice displayed on the mpo189 homepage and login screen for a minimum of 30 days prior to the change taking effect.
• An email notification sent to the address registered on your Account.
• An in-platform notification sent to your Account inbox.

The "Last Updated" date at the top of this document will always reflect the date on which the most recent version took effect. Your continued use of mpo189 following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not accept the updated Privacy Policy, you must discontinue use of the Platform and contact support to close your Account.

For non-material changes — such as typographical corrections, clarifications that do not alter the substance of our data practices, or updated contact details — we may update this Policy without advance notice. We recommend reviewing this page periodically to stay informed about how we protect your data.

13. Contact Our Data Protection Team

If you have any questions, concerns, or requests related to this Privacy Policy or the way mpo189 handles your Personal Data, please reach out to our Data Protection Officer using the contact details below. All communications regarding privacy are treated with strict confidentiality.

• Data Protection Enquiries: [email protected]
• General Support: [email protected]
• Legal & Compliance: [email protected]
• Live Chat: Available 24/7 via the chat widget on mpo189.cam
• Support Hours: 24/7, WIB (UTC+7) — Indonesian-speaking agents available

We are committed to resolving all privacy-related concerns promptly and fairly. If you remain unsatisfied after contacting us, you have the right to lodge a formal complaint with the relevant data protection supervisory authority in your jurisdiction.