Privacy Policy MPO808 — Your Data is Safe, Your Rights are Protected

MPO808 (hereinafter referred to as "we", "the platform", or "MPO808") operates and manages an online betting platform at mpo808.im. We care about the privacy of every individual who interacts with our platform — whether you are a newly registered member, a visitor browsing the site, or a VIP member who has been with us for years.

This Privacy Policy describes MPO808's data management practices and applies to all personal information collected through the website mpo808.im, iOS and Android mobile applications, and all official MPO808 communication channels including email, live chat, and WhatsApp. This Policy is drafted in accordance with Malaysia's Personal Data Protection Act (PDPA) 2010.

Mpo808 collects only the information necessary to provide you with a secure, fair, and effective service. The following are the categories of data we collect:

A. Data You Provide Directly

B. Data Collected Automatically

• Your IP address and network information when you access the MPO808 platform.
• Device type, operating system, browser type, and application version in use.
• Activity logs including pages visited, access times, and in-account actions.
• General location data (city/state level) based on IP address — not precise GPS location.
• Cookie data and similar tracking technologies (explained further in Section 7).

C. Transaction & Game Data

• Records of all deposits and withdrawals, including amounts, payment methods (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, FPX), and timestamps.
• Betting history includes game type (football, badminton, live casino, lottery, blackjack), stake amounts, and outcomes.
• Account balance and bonus history.

Every piece of data MPO808 collects has a clear and legitimate purpose. We do not collect data merely to store it — each piece of information serves a specific function that benefits you or is required for the safe operation of the platform:

• Account Management: Creating, verifying, and securely managing your MPO808 account.
• Transaction Processing: Processing deposits and withdrawals via Touch 'n Go, GrabPay, Boost, DuitNow, FPX, and any other payment method you select.
• Identity Verification (KYC): Verifying your identity in accordance with anti-money laundering (AML) requirements and compliance regulations.
• Customer Support: Providing relevant, context-aware assistance whenever you reach out to the MPO808 support team.
• Platform Security: Detecting and preventing fraudulent activity, unauthorised access, and platform abuse.
• Product Improvement: Analysing usage patterns (in aggregate and anonymised form) to improve the user experience.
• Service Communications: Sending important account notifications, promotions you have opted in to receive, and policy updates.
• Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling and provide appropriate assistance.

MPO808 processes your personal data on the following legal bases under Malaysia's Personal Data Protection Act (PDPA) 2010:

• Consent: You provide explicit consent when registering for an MPO808 account and may withdraw this consent at any time for marketing purposes.
• Contractual Necessity: Processing necessary to fulfil the agreement between you and mpo808 — such as handling deposits and managing your account.
• Legal Obligations: Compliance with Malaysian legal requirements, including AML, KYC, and tax reporting where applicable.
• Legitimate Interests: Purposes such as fraud prevention, platform security, and service improvement, where our legitimate interests do not override your privacy rights.

MPO808 does not sell, rent, or trade your personal data to third parties for marketing purposes. Full stop. However, there are limited situations where we need to share information with others:

• Payment Processors: Approved payment service providers — including Touch 'n Go, GrabPay, DuitNow, and FPX processors — receive only the minimum transaction information required to process your payment.
• Technical Service Providers: Hosting companies, cybersecurity providers, and analytics software providers working on behalf of mpo808 — all bound by strict confidentiality agreements.
• Regulatory Body: Legitimate Malaysian authorities where mpo808 is required to do so under applicable law or court order.
• Identity Verification Agency: Third-party KYC services to verify your identity for AML compliance purposes.

MPO808 invests seriously in security infrastructure to safeguard your data. The technical and organisational security measures we have in place include:

• 256-bit SSL/TLS encryption for all data transmitted between your browser or app and MPO808 servers.
• At-rest encryption for all sensitive data stored in our databases.
• Role-based access control (RBAC) ensuring MPO808 staff can only access the data necessary for their specific responsibilities.
• Intrusion detection systems (IDS) and anomaly detection operating 24/7.
• Regular penetration testing conducted by independent cybersecurity firms.
• Daily data backups stored in separate, secure facilities for disaster recovery.
• Two-factor authentication (2FA) is mandatory for all internal administrative access at mpo808.

MPO808 uses cookies and similar tracking technologies to enhance your experience on the platform. Cookies are small text files stored on your device. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as maintaining your login session and remembering your language preference. These cookies cannot be disabled.
• Performance Cookies: Collecting anonymised data on how you use the platform to help us improve performance and responsiveness.
• Functional Cookies: Remembering your preferences, such as display settings and favourite game selections, for a more personalised experience.
• Analytics Cookies: Enabling us to understand aggregate usage patterns for product improvement purposes.

You can manage or delete cookies through your browser settings. However, disabling certain cookies may affect the functionality of some mpo808 platform features.

As a financial platform, MPO808 is subject to anti-money laundering (AML) and counter-terrorism financing (CFT) compliance requirements. This means we are required to collect and retain certain information relating to your financial transactions with greater rigour:

• Records of all deposits made via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX (Maybank2u, CIMB Clicks), and other methods are retained for a minimum of 7 years in accordance with legal requirements.
• For deposits exceeding a certain threshold, we are legally required to conduct more thorough KYC procedures, including verification of the source of funds.
• Any suspicious transactions will be reported to the relevant authorities in accordance with our legal obligations — without requiring your prior consent.

Under Malaysia's Personal Data Protection Act (PDPA) 2010, you have the following rights regarding your personal data held by MPO808:

To exercise any of the above rights, contact the MPO808 support team by email at support@mpo808.im or via live chat within your account. We will process your request within 30 business days.

MPO808 retains your personal data for as long as your account remains active, and for any period required by law or legitimate business needs following account closure. The following are our general data retention guidelines:

• Active account data: Retained for as long as your account remains active on the MPO808 platform.
• Data following account closure: General personal information is deleted within 12 months of account closure, unless a longer retention period is required by law.
• Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysian financial and AML legal requirements.
• Security logs: Retained for 2 years for security investigation purposes where necessary.
• Support communication records: Retained for 3 years for reference and service improvement purposes.

The MPO808 platform is strictly for individuals aged 18 and above. We do not knowingly collect or process personal data from anyone under the age of 18. Should we discover that a minor has registered or is using the platform, we will:

• Immediately closing the account in question.
• All related personal data will be deleted within 30 days.
• Returning any deposited funds (if applicable) via an appropriate method.

Mpo808 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or service improvements. Whenever we make material changes, we will:

• Sending email notifications to all registered members at least 14 days before any changes take effect.
• Displaying a clear notice on the MPO808 homepage and within your account.
• Updating the "Last Updated" date at the top of this document.
• Providing a summary of key changes so you do not have to re-read the entire document.

Your continued use of the mpo808 platform after the effective date of any amendments constitutes your acceptance of the updated Privacy Policy.

If you have any enquiries or concerns, or wish to exercise your privacy rights, please contact the MPO808 Data Protection Officer (DPO) through the following channels:

• Privacy Email: privacy@mpo808.im
• General Support Email: support@mpo808.im
• Live Chat: Available on the mpo808 platform, 24/7
• Response Time: Privacy enquiries — within 5 business days; formal complaints — within 30 business days