Mpocasino Privacy Policy – Malaysia Player Personal Data Protection

MPOCasino ("we", "Platform") is fully committed to protecting the privacy of every player who uses our services at mpocasino.vu. This Privacy Policy is drawn up in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and leading international data protection standards.

This policy applies to all information you provide when registering, using the platform, contacting our support team, or interacting with any part of mpocasino's services. This includes the web platform, Android and iOS mobile apps, and communication channels such as live chat, email, and Telegram.

We take our responsibilities as a data controller seriously. Privacy is not just a box to tick — it is the foundation of trust we have built with every mpocasino player since 2018.

We only collect data that is genuinely necessary to provide, improve, and protect our services. The following are the categories of data we collect:

We do not collect sensitive data categories such as health information, biometric data, or religious information unless specifically required to comply with legal obligations.

The data we collect is used solely for legitimate and transparent purposes. The following are the primary purposes for which your data is used:

• Account management: Creating, verifying, and securely managing your player account.
• Transaction processing: Processing deposits, withdrawals, and managing your account balance.
• KYC verification: Complying with anti-money laundering (AML) and Know Your Customer (KYC) requirements set by the relevant authorities.
• Platform security: Detecting and preventing fraud, hacking, and illegal activity that could compromise your account.
• Personalise your experience: Offering promotions, game recommendations, and relevant content based on your preferences.
• Customer support: Providing effective support and resolving disputes fairly.
• Responsible gaming: Monitoring gameplay patterns to identify signs of problem gambling and offer appropriate assistance.
• Platform improvements: Analysing usage to improve platform performance, interface, and overall experience.

MPOCasino does not sell or rent your personal data to any third party. However, we share data in the following limited situations, solely to enable us to provide services to you:

• Payment providers: DuitNow, FPX, Touch 'n Go eWallet, Boost, and GrabPay receive the transaction data necessary to process your payments securely.
• Game providers: Required session information is shared with licensed game providers such as Pragmatic Play, Evolution Gaming, and Microgaming to enable games to function.
• Identity verification services: Your KYC documents are submitted to a certified identity verification platform for verification purposes only.
• Legal requirements: We will disclose your data to the relevant authorities where required by law, court order, or a legitimate criminal investigation.

All our third-party partners are bound by strict data protection agreements and may only use your data for specified purposes. They are not permitted to share your data further.

MPOCasino uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions correctly. Below are the types of cookies we use:

• Essential cookies: Required for core platform functions such as login, session management, and security. These cookies cannot be disabled.
• Performance cookies: Helping us understand how players interact with the platform so we can improve it. Data is collected in aggregate and anonymised form.
• Functional cookies: Saving your preferences such as language, theme, and display settings for a more personalised experience.
• Analytics cookies: Helping us analyse traffic and usage patterns to improve platform performance.

You can manage or delete cookies through your web browser settings at any time. However, disabling essential cookies may affect platform functionality. For more information, refer to your web browser documentation.

MPOCasino continuously invests in the latest security infrastructure to protect your personal data. Key security measures we have implemented include:

• 256-bit SSL/TLS encryption for all data communications between the platform and your device.
• AES-256 encryption for all sensitive data stored in our databases.
• Two-factor authentication (2FA) as an additional security layer for player accounts.
• Round-the-clock 24/7 security monitoring by our in-house cybersecurity team.
• Independent security audits conducted annually by certified cybersecurity firms.
• Security awareness training for all staff who handle player data.
• Role-based access controls ensuring only authorised staff can access sensitive data.

As an mpocasino player, you have the following rights regarding your personal data under Malaysia's PDPA:

To exercise any of the above rights, contact our data protection team via 24/7 live chat or email at [email protected]. Requests will be processed within 30 business days. In complex cases, this period may be extended up to 60 days with prior notice.

We only retain your personal data for as long as it is needed for the stated purposes or as required by law. The following are our data retention guidelines:

• Active account data: Retained for the duration that your account remains active at mpocasino.
• Financial and transaction records: Retained for seven (7) years in accordance with Malaysia's financial legislation requirements.
• KYC records: Retained for five (5) years after account closure in accordance with AML requirements.
• Customer support records: Retained for two (2) years for dispute resolution purposes.
• Technical data and logs: Retained for 90 days for security and debugging purposes.

Once the retention period expires, your data will be securely deleted or fully anonymised so it can no longer be linked to you.

To ensure optimal platform performance and high service availability, some of your data may be stored or processed on servers located outside Malaysia. This includes certified cloud infrastructure providers such as data centers in Singapore and Hong Kong.

In all cases of international data transfers, mpocasino ensures that:

• Data recipients are bound by data protection agreements that meet standards equivalent to or higher than Malaysia's PDPA.
• All data transfers are conducted through encrypted, secure channels.
• Our international service providers undergo rigorous security assessments before being appointed.

If you have any questions, concerns, or complaints about how we handle your personal data, we encourage you to reach out to us directly. Our Data Protection Officer (DPO) team is ready to help.

• Live chat: Available 24/7 directly from the mpocasino platform — the fastest way to get a response.
• Email: [email protected] — for detailed inquiries requiring written documentation.
• Telegram: Reach us through mpocasino's official support channel on Telegram.

We are committed to responding to all privacy-related inquiries within 3 business days. For formal data protection complaints, you also have the right to report to the Department of Personal Data Protection Malaysia if you are not satisfied with our response.