Privacy Policy

1. Definitions and Interpretation

In this Privacy Policy, the following terms have the meanings set out below:

• "mpo509", "we", "us", or "our" refers to the mpo509 online gaming platform and its operating entity.
• "Personal Data" means any information that identifies or could reasonably identify a natural person, including name, identification number, contact details, financial information, IP address, and device identifiers.
• "User", "you", or "your" refers to any individual who registers for, accesses, or uses the mpo509 platform.
• "Processing" means any operation performed on personal data, including collection, storage, access, use, transfer, disclosure, or deletion.
• "Platform" means the mpo509 website, mobile-optimized interface, and any associated software or services.
• "Third Party" means any entity other than you and mpo509, including game providers, payment processors, and analytics services.
• "KYC" (Know Your Customer) refers to the identity and age verification process required before account activation or first withdrawal.

2. Scope and Application

This Privacy Policy applies to all personal data collected by mpo509 in connection with your use of the Platform, including data collected when you:

• Register or apply for an account on mpo509
• Make deposits or withdrawals via Indonesian payment channels (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, OVO, DANA, GoPay, ShopeePay, LinkAja)
• Submit KYC verification documents
• Engage in any game or betting activity on the Platform
• Contact customer support via live chat or email
• Browse the Platform (including via cookies and session tracking)

This Policy does not apply to third-party websites or services linked from our Platform (if any). We are not responsible for the privacy practices of those third parties.

3. Data We Collect

3.1 Data You Provide Directly

When you register an account, complete KYC verification, or contact our support team, we collect:

• Identity data: Full legal name, date of birth, gender, nationality
• Contact data: Email address, mobile phone number, residential address (city, province, postal code)
• Identification documents: National ID (KTP), passport, or driver's license; proof of address; bank statements or e-wallet screenshots for payment method verification
• Account credentials: Username and encrypted password (passwords are never stored in plain text)
• Financial data: Bank account numbers, e-wallet IDs (OVO, DANA, GoPay, etc.), transaction history, deposit and withdrawal records
• Support communications: Transcripts of live chat and email interactions with our customer support team

3.2 Data Collected Automatically

When you access the Platform, we automatically collect certain technical and behavioral data:

• Device data: Device type, operating system, browser type and version, screen resolution
• Network data: IP address, approximate geographic location (city/region level), internet service provider
• Session data: Login timestamps, session duration, pages visited, features accessed, bet and game history
• Cookies and similar technologies: See Section 7 for full details on our cookie usage

3.3 Data from Third Parties

We may receive supplementary data about you from:

• Payment processors and banking partners, to confirm transaction validity and prevent fraud
• Identity verification services, to cross-check the accuracy of KYC documents you submit
• Fraud detection and anti-money laundering (AML) screening services, to identify high-risk activity patterns
• Game providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft), who share anonymized gameplay session data for dispute resolution purposes

4. How We Use Your Personal Data

mpo509 uses your personal data only for the purposes set out below. We do not use your data in ways incompatible with these stated purposes without first obtaining your explicit consent.

Purpose	Data Categories Used
Account registration and management	Identity data, contact data, account credentials
Age verification and KYC compliance	Identity data, identification documents
Processing deposits and withdrawals	Financial data, identity data, contact data
Fraud prevention and AML screening	Financial data, network data, session data, third-party data
Customer support and dispute resolution	Identity data, support communications, session data
Platform security and integrity monitoring	Device data, network data, session data
Responsible gaming monitoring	Session data, financial data, behavioral patterns
Service improvement and analytics	Anonymized session data, device data (no personal identifiers)
Promotional communications (with consent)	Contact data, game preference data
Legal and regulatory compliance	All categories, as required by applicable law

5. Legal Basis for Processing

mpo509 processes your personal data on the following legal bases, consistent with internationally recognized data protection principles:

• Contractual necessity: Processing required to perform our obligations under the account registration agreement and Terms and Conditions — including identity verification, payment processing, and account management.
• Legal obligation: Processing required to comply with anti-money laundering (AML) laws, Know Your Customer (KYC) obligations, fraud prevention regulations, and any lawful requests from competent authorities.
• Legitimate interests: Processing carried out to protect the security and integrity of our platform, prevent fraudulent activity, improve service quality, and manage business risk — where these interests are not overridden by your fundamental rights.
• Consent: Processing for optional purposes such as sending promotional communications and using non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6. Data Sharing and Disclosure

6.1 Authorized Third-Party Processors

mpo509 shares your personal data with carefully selected third-party service providers who process data strictly on our behalf and under binding data processing agreements. These include:

• Payment processors and banking partners: BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, OVO, DANA, GoPay, ShopeePay, LinkAja, Visa, Mastercard — to facilitate deposits and withdrawals
• KYC and identity verification providers: To authenticate identity documents and comply with age verification requirements
• Game content providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft — limited session data for game operation and dispute resolution
• Cloud infrastructure providers: For secure data storage and platform hosting
• Customer support platform: To manage and record support interactions

6.2 Legal Disclosures

We may disclose your personal data to law enforcement agencies, regulatory bodies, courts, or other governmental authorities if we are required to do so by applicable law, court order, or lawful regulatory request. We will, where legally permissible, notify you of such a disclosure.

6.3 Business Transfers

In the event of a merger, acquisition, asset sale, or restructuring of mpo509's business, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify you via email or a prominent notice on the Platform prior to your data being transferred and subject to a materially different privacy policy.

6.4 What We Do Not Do

7. Cookies and Tracking Technologies

7.1 What Are Cookies?

Cookies are small text files placed on your device when you visit a website. They allow the site to recognize your device across sessions, store preferences, and collect usage data. mpo509 uses both session cookies (which expire when you close your browser) and persistent cookies (which remain until they expire or are deleted).

7.2 Types of Cookies We Use

• Strictly necessary cookies: Required for the Platform to function. These include authentication cookies that keep you logged in, session integrity tokens, and security cookies that prevent cross-site request forgery. These cannot be disabled.
• Functional cookies: Remember your preferences such as language settings, display options, and game lobby filters. Disabling these may reduce platform functionality.
• Analytics cookies: Collect anonymized data on how users navigate the Platform, which features they use most, and where errors occur. This data helps us improve the user experience. No personally identifiable information is collected in this category.
• Security and fraud-prevention cookies: Help us detect and prevent fraudulent activity, bot access, and account takeover attempts by recognizing unusual device or behavioral patterns.

7.3 Managing Cookies

You may control or disable non-essential cookies through your browser settings. Note that disabling functional cookies may impair certain features of the Platform. Strictly necessary cookies cannot be disabled as they are required for core platform operation and security. Instructions for managing cookies in major browsers are available on the respective browser support pages.

8. Data Retention

mpo509 retains your personal data for as long as is necessary to fulfill the purposes described in this Policy, or as required by applicable legal, regulatory, and accounting obligations. Our standard retention schedules are:

• Account data: Retained for the duration of your account's active status plus a minimum of five (5) years following account closure, for legal and audit purposes.
• Transaction and financial records: Retained for a minimum of five (5) years from the date of each transaction, to comply with anti-money laundering record-keeping requirements.
• KYC documents: Retained for the duration of your account plus five (5) years post-closure.
• Support communications: Retained for three (3) years from the date of the interaction.
• Session and analytics data: Retained in anonymized form for up to two (2) years for platform improvement purposes.

After the applicable retention period, your data will be securely deleted or anonymized so that it can no longer be linked to you as an individual.

9. Your Data Rights

As a user of mpo509, you hold the following rights in relation to your personal data. To exercise any of these rights, contact us at [email protected] or via live chat. We will respond within 14 business days.

• Right of access: You may request a copy of all personal data we hold about you, along with information on how it is being used.
• Right to rectification: If any personal data we hold is inaccurate or incomplete, you may request that we correct it.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes it was collected, subject to our legal retention obligations.
• Right to restrict processing: You may request that we limit the use of your data in certain circumstances, for example while a correction request is being assessed.
• Right to data portability: You may request that we provide your personal data in a structured, machine-readable format so you can transfer it to another service.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to the withdrawal.
• Right to object: You may object to processing based on our legitimate interests, or to the use of your data for direct marketing purposes at any time.

10. Data Security

mpo509 implements a comprehensive suite of technical and organizational security measures to protect your personal data against unauthorized access, loss, alteration, or disclosure. These measures include:

• 256-bit TLS/SSL encryption for all data in transit between your device and our servers
• AES-256 encryption for sensitive data stored at rest, including identity documents and financial records
• Multi-factor authentication (MFA) for all internal systems access by mpo509 staff
• Role-based access controls ensuring that only authorized personnel can access personal data relevant to their job function
• Continuous intrusion detection and security monitoring across all platform infrastructure
• Regular third-party penetration testing and security audits
• Formal incident response procedures with defined timelines for breach notification

While we take every reasonable precaution to protect your data, no internet-based system can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for notifying us promptly if you suspect unauthorized account access.

11. Children's Privacy and Age Restriction

mpo509 is strictly an adult platform. Our services are not directed at, and we do not knowingly collect personal data from, individuals under the age of 21 years. Age verification is performed as a mandatory step during the account registration and KYC process.

If we discover or have reason to believe that an account belongs to a person under 21 years of age, we will immediately suspend the account, conduct an investigation, and permanently close the account if the suspicion is confirmed. Any funds held in such an account will be handled in accordance with our Terms and Conditions and applicable legal requirements.

If you believe a minor has registered an account on mpo509, please contact us immediately at [email protected] so we can take prompt action.

12. Changes to This Privacy Policy

mpo509 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When we make material changes, we will:

• Update the "Last Updated" date at the bottom of this page
• Post a prominent notice on the Platform notifying users of the change
• Where required by applicable law or where changes significantly affect your rights, send a notification to your registered email address

Your continued use of the Platform after any changes are posted constitutes your acceptance of the revised Privacy Policy. We encourage you to review this page periodically to stay informed of how mpo509 handles your personal data.

13. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or the way mpo509 handles your personal data, please contact our Data Protection team:

• Email: [email protected]
• Live Chat: Available 24/7 on the Platform
• Response Time: We aim to respond to all privacy-related inquiries within 14 business days