01 Introduction
This Privacy Policy ("Policy") is issued by mpo888 ("mpo888", "we", "us", "our"), the operator of the online gaming platform accessible at mpo888.click. It describes how mpo888 collects, uses, stores, discloses and protects personal data submitted by or generated through the use of our services — including casino games, sports betting markets, live dealer tables, promotional features and customer support interactions.
This Policy applies to all registered players, prospective players who browse the platform, and any individual whose personal data is processed by mpo888 in connection with the operation of this platform. By registering an account or by continuing to use mpo888 services, you acknowledge that you have read and understood this Policy.
mpo888 respects and supports the data protection rights of Malaysian players. All personal data is handled with care, collected only for defined purposes, and retained only for as long as is necessary to fulfil those purposes or to comply with applicable regulatory obligations.
02 Definitions
- "Personal Data"
- Any information that identifies or can reasonably identify a natural person, including name, identification number, contact details, financial information and online identifiers.
- "Processing"
- Any operation performed on Personal Data, including collection, recording, storage, use, disclosure, transfer, deletion or destruction.
- "Data Controller"
- mpo888, the entity that determines the purposes and means by which Personal Data is processed.
- "Data Processor"
- A third-party service provider that processes Personal Data on behalf of mpo888, under written instructions and subject to confidentiality obligations.
- "Player" / "User"
- Any individual who accesses the mpo888 platform, whether registered or unregistered.
- "KYC"
- Know Your Customer — identity and document verification procedures required by applicable anti-money laundering regulations before withdrawal processing.
- "Cookies"
- Small text files placed on a User's device by the mpo888 platform to store session preferences, authentication tokens and usage analytics.
03 Data We Collect
mpo888 collects Personal Data in the following categories:
3.1 Identity & Contact Data
- Full legal name as it appears on a government-issued identification document.
- Date of birth (used to verify compliance with the 21+ age requirement).
- Malaysian MyKad number, passport number or equivalent national identity number.
- Residential address, including city (e.g., Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam) and postcode.
- Email address and mobile phone number registered at account creation.
3.2 Financial & Payment Data
- Registered bank account name and account number where FPX or DuitNow transfers are used.
- eWallet account identifiers associated with Touch 'n Go eWallet, Boost or GrabPay.
- Transaction history: deposit amounts, withdrawal requests, bonus claims and associated MYR values.
- Cryptocurrency wallet addresses where BTC or USDT deposits are made.
3.3 Account & Usage Data
- mpo888 account username and encrypted password hash.
- Login timestamps, session durations and IP addresses.
- Game history: games played, bet amounts, outcomes and RTP records.
- Bonus claims, wagering activity and promotion participation records.
- Customer support interactions including live chat transcripts and email correspondence.
3.4 Technical & Device Data
- Device type, operating system version and browser type.
- Internet Protocol (IP) address and approximate geolocation derived from IP data.
- Cookie identifiers and session tokens as described in Section 8.
04 How We Collect Data
mpo888 collects Personal Data through the following channels:
- Direct submission: Information you provide when creating an account, completing KYC verification, making a deposit or withdrawal, or contacting customer support.
- Automated technical collection: Data collected automatically as you navigate and interact with the mpo888 platform, including cookies, log files and analytics tools.
- Payment service providers: Transaction confirmation data passed to mpo888 by Malaysian payment processors including Maybank, CIMB, Public Bank, Hong Leong, DuitNow, FPX, Touch 'n Go eWallet, Boost and GrabPay.
- Third-party verification services: Identity and age verification data returned by KYC processing partners in connection with regulatory compliance.
05 Purposes of Data Processing
mpo888 processes Personal Data for the following defined purposes:
- Account management: Creating, maintaining, updating and closing player accounts.
- Age and identity verification: Confirming that all registered Players are 21 years of age or older and are the legitimate account holders.
- Payment processing: Facilitating MYR deposits and withdrawals via supported Malaysian payment methods.
- Regulatory compliance: Meeting anti-money laundering (AML), counter-terrorism financing (CTF) and Know Your Customer (KYC) obligations imposed by applicable laws and our licensing conditions.
- Fraud prevention and security: Detecting and preventing unauthorised account access, bonus abuse, collusion, money laundering and other prohibited activities.
- Customer support: Responding to account queries, payment disputes and technical issues raised by Players.
- Responsible gambling: Administering deposit limits, cooling-off periods and self-exclusion requests in accordance with our Responsible Gambling policy.
- Platform improvement: Analysing aggregated and anonymised usage data to improve game performance, navigation, mobile responsiveness and promotional relevance for Malaysian players.
- Marketing communications: Sending promotional emails or notifications about mpo888 offers, seasonal promotions (including Hari Raya Aidilfitri specials) and loyalty programme updates — only where you have provided consent or where this is permitted under the applicable legal basis.
06 Legal Bases for Processing
mpo888 processes Personal Data under one or more of the following legal bases, depending on the specific processing activity:
- Contractual necessity: Processing required to fulfil our obligations under the Player Account Agreement, including account operation and payment processing.
- Legal obligation: Processing required to comply with applicable laws, including AML, KYC, data retention laws and regulatory licence conditions.
- Legitimate interests: Processing carried out to protect the integrity of the platform, prevent fraud and improve our services, where these interests are not overridden by your fundamental rights.
- Consent: Where consent has been explicitly obtained — for example, for marketing communications — processing will continue only while that consent remains active and may be withdrawn at any time.
07 Data Sharing & Disclosure
mpo888 does not sell, rent or trade Personal Data to third parties. We may share Personal Data with carefully selected third parties only where necessary and under strict contractual protections:
- Payment processors: Malaysian payment service providers (including Maybank, CIMB, Public Bank, Hong Leong, DuitNow, FPX, Touch 'n Go eWallet, Boost and GrabPay) receive necessary transaction data to process deposits and withdrawals.
- KYC and compliance providers: Third-party identity verification services receive identity document data to fulfil regulatory age and identity checks.
- IT infrastructure and hosting providers: Cloud hosting and server management partners access platform data solely to maintain technical operations, under data processing agreements.
- Game content providers: Licensed game software providers may receive session tokens for seamless game loading; they do not receive financial or identity data.
- Regulatory and law enforcement authorities: Where required by applicable law, court order, or a formal request from a Malaysian regulatory authority or law enforcement body, mpo888 will disclose Personal Data to the extent legally required.
08 Cookies & Tracking Technologies
The mpo888 platform uses cookies and similar tracking technologies to deliver core functionality, improve performance and understand how Malaysian players use our services. The following cookie categories are in use:
- Essential cookies: Required for account authentication, session management and security. These cannot be disabled without affecting platform functionality.
- Performance cookies: Collect anonymised usage data (pages visited, session duration, error logs) to improve platform stability and load times.
- Preference cookies: Store your selected language, display preferences and notification settings between sessions.
- Analytics cookies: Aggregated and anonymised data used to understand player behaviour patterns and improve the mpo888 experience.
You may manage non-essential cookie preferences through your browser settings. Please note that disabling certain cookies may affect platform functionality, including session persistence and payment gateway integration.
09 Data Retention
mpo888 retains Personal Data only for as long as is necessary for the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention principles apply:
- Active account data: Retained for the full duration of the active Player account relationship.
- Closed account data: Following account closure, identity, KYC and transaction records are retained for a minimum of five (5) years to comply with AML and financial regulatory requirements.
- Customer support records: Live chat logs and email records retained for up to three (3) years from the date of the interaction.
- Marketing consent records: Retained for as long as the consent is active, and for one (1) year following withdrawal of consent.
- Technical logs and session data: Anonymised where possible after 90 days; raw server logs deleted within 12 months.
10 Data Security
mpo888 implements a layered security approach to protect Personal Data against unauthorised access, disclosure, alteration or destruction. Technical and organisational measures in place include:
- 256-bit Transport Layer Security (TLS/SSL) encryption for all data transmitted between your device and the mpo888 platform.
- Encryption of sensitive data fields (including identity document numbers and payment references) at rest in our databases.
- Strict access control policies ensuring that Personal Data is accessible only to mpo888 personnel with a documented operational need.
- Regular security audits, penetration testing and vulnerability assessments conducted by qualified independent parties.
- Incident response procedures to detect, contain and notify affected Players of any confirmed data breach within the timeframe required by applicable law.
11 International Data Transfers
mpo888 may transfer Personal Data to servers or service providers located outside Malaysia in the course of normal operational activities, including cloud hosting and KYC processing. Where such transfers occur, mpo888 ensures that appropriate safeguards are in place — including contractual protections, data processing agreements and technical security measures — to maintain an equivalent standard of protection to that which applies within Malaysia.
By registering an mpo888 account, you acknowledge that your Personal Data may be transferred to and processed in jurisdictions outside Malaysia for the purposes described in this Policy.
12 Your User Rights
As a Player whose Personal Data is processed by mpo888, you hold the following rights, subject to applicable legal limitations:
- Right of access: You may request a copy of the Personal Data mpo888 holds about you.
- Right of rectification: You may request correction of inaccurate or incomplete Personal Data.
- Right of erasure: You may request deletion of your Personal Data where mpo888 no longer has a lawful basis for retaining it, subject to regulatory retention obligations.
- Right to restrict processing: You may request that mpo888 limit how your data is used in specified circumstances.
- Right to data portability: You may request a structured, machine-readable copy of Personal Data you have provided to mpo888, where technically feasible.
- Right to withdraw consent: Where processing is based on consent (e.g., marketing communications), you may withdraw consent at any time without affecting the lawfulness of prior processing.
- Right to object: You may object to processing carried out on the basis of legitimate interests where your individual rights and freedoms outweigh those interests.
To exercise any of the above rights, please contact the mpo888 support team via live chat or by email (see Section 15). mpo888 will respond to verified requests within 30 calendar days. Where a request is complex or numerous, this period may be extended by a further 60 days with prior notification.
13 Children & Minors
The mpo888 platform is strictly restricted to individuals aged 21 years and above. mpo888 does not knowingly collect Personal Data from persons under the age of 21. If we become aware that Personal Data has been submitted by or on behalf of an individual under 21, the associated account will be immediately suspended, all Personal Data will be securely deleted, and any deposited funds will be returned to the originating payment method where technically possible.
Parents and guardians who believe a minor may have accessed the mpo888 platform should contact our support team immediately. mpo888 takes underage protection seriously and cooperates fully with parental and regulatory requests in this regard.
14 Policy Amendments
mpo888 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable legal requirements, or platform functionality. Material changes will be communicated to registered Players via the email address on file and will be prominently noted on the mpo888 platform prior to taking effect.
The "Last Updated" date at the top of this Policy reflects the most recent revision. Continued use of the mpo888 platform following the effective date of any updated Policy constitutes your acknowledgement of the revised terms. If you do not agree with any change, you must discontinue use and request account closure before the effective date.
15 Contact Us
For any privacy-related enquiries, data subject access requests, consent withdrawals, or concerns about how mpo888 handles your Personal Data, please contact our Data Protection team through the following channel:
Live Chat: Available 24 hours a day, 7 days a week, accessible directly from the mpo888 platform.
Email (plain text only — not a clickable link):
[email protected]
Please include your registered account username and a clear description of your request. mpo888 will acknowledge receipt within one business day and provide a substantive response within 30 calendar days. All data subject requests are handled in strict confidence by authorised personnel only.