Privacy Policy

1. Introduction and Scope

This Privacy Policy applies to all personal information collected, processed, and stored by mpo188 ("we," "us," or "our") through our online gaming platform located at mpo188.world and any related services, mobile applications, or communication channels. By creating an account or using any mpo188 services, you acknowledge that you have read, understood, and consent to the data practices described in this Privacy Policy.

mpo188 operates as an online gaming platform serving users in Indonesia, offering sports betting, live casino games, slot games, lottery services (togel), and related gaming products. We are committed to compliance with Indonesian data protection regulations, international privacy best practices including principles derived from GDPR (General Data Protection Regulation), and industry-specific standards for financial services and online gaming.

2. Information We Collect

2.1 Information You Provide Directly

When you register for an mpo188 account or use our services, we collect personal information that you voluntarily provide, including:

• Identity Information: Full legal name, date of birth, gender, Indonesian national identification number (NIK from KTP), and nationality as required for KYC (Know Your Customer) compliance and age verification to ensure you meet the 21+ age requirement.
• Contact Information: Email address, mobile phone number, residential address (province, city, postal code), and preferred communication language for customer support and account notifications.
• Account Credentials: Username, password (stored in encrypted hash format, never in plain text), security questions and answers, and two-factor authentication settings if enabled.
• Financial Information: Bank account details (bank name, account number, account holder name) for deposits and withdrawals, e-wallet identifiers (OVO, DANA, GoPay account numbers), payment transaction history, and deposit/withdrawal records.
• KYC Documentation: Digital copies or photographs of your Indonesian KTP (national ID card), proof of address documents (utility bills, bank statements dated within 3 months), and any additional verification documents requested to comply with anti-money laundering regulations.
• Communication Records: Content of messages exchanged with our customer support team via live chat, email, WhatsApp, or other support channels, including inquiry details, complaint descriptions, and resolution outcomes for quality assurance and dispute resolution purposes.

2.2 Information Collected Automatically

When you access or use mpo188's platform, we automatically collect certain technical and behavioral information through cookies, server logs, and similar technologies:

• Device Information: Device type (smartphone, tablet, desktop), operating system (Android, iOS, Windows, macOS), browser type and version, screen resolution, device identifiers (IMEI, MAC address, advertising IDs), and mobile network information.
• Connection Information: IP address, geographic location (country, city, approximate latitude/longitude based on IP geolocation), internet service provider, connection type (WiFi, mobile data), and network quality indicators.
• Usage Information: Pages visited, features accessed, games played, bet placement timestamps, session duration, navigation paths through our platform, referring websites, search terms used, button clicks, and interaction patterns with platform elements.
• Gaming Activity: Complete history of bets placed including game type (sports betting, casino, slots, togel), stake amounts, odds selected, win/loss outcomes, bonus usage, wagering progress toward bonus requirements, deposit and withdrawal transactions, and account balance changes.
• Security Monitoring: Login attempts (successful and failed), password reset requests, account access from unusual locations or devices, suspicious betting patterns that may indicate fraud or collusion, and other security-relevant events logged for fraud prevention and account protection.

2.3 Information From Third Parties

We may receive limited information about you from third-party sources including:

• Payment Processors: Transaction confirmation, payment success/failure status, and anti-fraud screening results from Indonesian banks (BCA, BRI, BNI, Mandiri) and e-wallet providers (OVO, DANA, GoPay) to verify payment authenticity and prevent fraudulent transactions.
• Identity Verification Services: KTP validation results from Indonesian government databases (where legally accessible) to confirm that submitted identification documents are authentic and current, preventing identity theft and underage access.
• Game Providers: Game outcome data, RNG (random number generator) results, live dealer game interactions, and progressive jackpot contributions from third-party game suppliers like Pragmatic Play, Evolution Gaming, and other content providers integrated into mpo188's platform.
• Fraud Prevention Services: Risk scores, device fingerprints, and behavioral analysis data from specialized security vendors that help us detect and prevent account takeovers, bonus abuse, multiple account creation, and other fraudulent activities.

3. How We Use Your Information

mpo188 uses your personal information for the following legitimate business purposes, all necessary to provide, secure, and improve our gaming services:

3.1 Account Management and Service Delivery

• Create, maintain, and authenticate your gaming account with secure login credentials and session management
• Process deposits from your bank accounts or e-wallets into your mpo188 account balance for gaming activities
• Process withdrawal requests from your mpo188 account balance to your designated bank account or e-wallet, including identity verification and fraud screening
• Execute bets, wagers, and gaming transactions according to your instructions and our platform rules
• Calculate and credit winnings, apply bonuses and promotions according to their terms, and maintain accurate transaction records
• Provide customer support via live chat, email, WhatsApp, and other channels to resolve issues, answer questions, and address concerns
• Administer VIP programs, loyalty rewards, tier upgrades, and exclusive benefits based on your gaming activity

3.2 Legal and Regulatory Compliance

• Verify your identity, age (21+ requirement), and Indonesian residency status through KYC procedures mandated by gambling regulations and anti-money laundering laws
• Comply with Indonesian financial regulations, international anti-money laundering (AML) standards, and counter-terrorism financing (CTF) obligations by monitoring transactions and reporting suspicious activities
• Maintain transaction records for the legally required retention period (typically 7 years) to support tax compliance, regulatory audits, and legal proceedings if necessary
• Respond to lawful requests from Indonesian law enforcement, regulatory authorities, or courts for user information in connection with criminal investigations or civil proceedings
• Enforce our Terms & Conditions, detect and prevent breaches, and protect mpo188's legal rights and interests

3.3 Security and Fraud Prevention

• Detect and prevent fraudulent activities including account takeovers, identity theft, payment fraud, bonus abuse, multiple account creation, and collusion between players
• Monitor betting patterns and gaming behavior for signs of match-fixing, insider trading, or other forms of sports betting manipulation
• Protect against unauthorized access, cyber attacks, DDoS attacks, hacking attempts, and other security threats to our platform and user accounts
• Implement risk management controls to identify high-risk transactions, unusual withdrawal patterns, and potential money laundering activities
• Investigate suspected violations of our Terms & Conditions, bonus abuse, or other forms of platform misuse

3.4 Platform Improvement and Personalization

• Analyze usage patterns, game preferences, and player behavior to improve platform functionality, optimize user experience, and develop new features that Indonesian players want
• Personalize game recommendations, promotional offers, and content based on your gaming history and preferences (you can opt out of marketing personalization while still receiving essential account notifications)
• Conduct A/B testing of interface designs, promotional messaging, and feature implementations to determine what works best for Indonesian users
• Measure platform performance, identify technical issues, diagnose bugs, and optimize loading speeds and stability across different devices and network conditions

3.5 Marketing and Communications

• Send promotional emails, SMS messages, or push notifications about bonuses, tournaments, new games, and special offers (you can opt out of marketing communications at any time while continuing to receive essential account notifications about deposits, withdrawals, and security)
• Inform you about changes to our Terms & Conditions, Privacy Policy, or other important policy updates that affect your use of mpo188 services
• Send transactional notifications about deposit confirmations, withdrawal processing, bet settlements, bonus credits, account verification status, and security alerts that you cannot opt out of as they are essential to account management

4. Legal Basis for Processing (Indonesian and International Standards)

Under Indonesian data protection principles and international privacy frameworks including GDPR concepts, we process your personal information based on the following legal grounds:

• Contractual Necessity: Processing required to fulfill our obligations under the Terms & Conditions you agreed to when creating your mpo188 account, including providing gaming services, processing payments, and customer support.
• Legal Obligations: Processing required to comply with Indonesian laws and regulations including financial record-keeping requirements, anti-money laundering obligations, age verification mandates, and cooperation with law enforcement.
• Legitimate Interests: Processing necessary for our legitimate business interests including fraud prevention, security monitoring, platform improvement, and marketing activities, balanced against your privacy rights and interests.
• Consent: Processing based on your explicit, informed, freely given consent, particularly for optional marketing communications, personalized recommendations, and non-essential cookies (you can withdraw consent at any time).

5. How We Share Your Information

mpo188 does not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we may share your information with the following categories of recipients as necessary to operate our platform and comply with legal obligations:

5.1 Service Providers and Business Partners

• Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) receive your payment information to process deposits and withdrawals securely.
• Game Providers: Third-party game suppliers like Pragmatic Play, Evolution Gaming, Microgaming, and other content partners receive limited information (username, bet amounts, game selections) to deliver live casino streams, slot games, and other gaming content.
• Identity Verification Services: KYC verification vendors receive copies of your KTP and other identity documents to authenticate your identity, confirm your age, and prevent identity fraud.
• Cloud Hosting and IT Infrastructure: Data center providers and cloud service vendors host our servers, databases, and backups, maintaining physical and digital security according to international standards.
• Customer Support Tools: Live chat platforms, ticketing systems, and communication tools used by our support team to manage customer inquiries efficiently while maintaining conversation confidentiality.
• Fraud Prevention and Security: Specialized cybersecurity vendors and fraud detection services that analyze transaction patterns, device fingerprints, and behavioral data to protect against fraudulent activities.

All service providers are bound by strict confidentiality obligations and contractually required to process your information only for the specific purposes we authorize, maintaining security standards equivalent to those described in this Privacy Policy.

5.2 Legal and Regulatory Authorities

We may disclose your personal information to Indonesian government authorities, law enforcement agencies, regulatory bodies, or courts when legally required or reasonably necessary to:

• Comply with valid legal processes including subpoenas, court orders, warrants, or regulatory investigations
• Report suspicious transactions under anti-money laundering and counter-terrorism financing obligations
• Respond to lawful requests from Indonesian police, tax authorities, or other government agencies investigating criminal activity or tax compliance
• Protect mpo188's legal rights, enforce our Terms & Conditions, or defend against legal claims and litigation
• Prevent imminent harm to public safety, national security, or individual welfare in emergency situations

5.3 Business Transfers

In the event of a merger, acquisition, corporate restructuring, sale of assets, or bankruptcy proceeding involving mpo188, your personal information may be transferred to the acquiring entity or successor organization. We will notify you via email and prominent website notice before your information becomes subject to a different privacy policy.

6. Data Security Measures

mpo188 implements comprehensive technical, administrative, and physical security measures to protect your personal information against unauthorized access, disclosure, alteration, or destruction:

6.1 Technical Security Controls

• Encryption: All data transmitted between your device and mpo188's servers uses TLS/SSL encryption (bank-grade 256-bit encryption) preventing interception by third parties. Sensitive data including passwords, KTP numbers, and financial information are encrypted at rest in our databases using AES-256 encryption.
• Secure Authentication: Passwords are stored using industry-standard bcrypt hashing algorithms with strong salting, never in plain text or reversible encryption. Optional two-factor authentication (2FA) adds an additional security layer requiring both your password and a temporary code sent to your mobile phone.
• Firewalls and Intrusion Detection: Multi-layer firewall protection, intrusion detection systems (IDS), and intrusion prevention systems (IPS) monitor network traffic 24/7 to identify and block unauthorized access attempts, DDoS attacks, and malicious activities.
• Regular Security Audits: Independent third-party security firms conduct annual penetration testing, vulnerability assessments, and security audits to identify and remediate potential weaknesses before they can be exploited.
• Access Controls: Strict role-based access controls (RBAC) ensure that mpo188 employees can only access personal information necessary for their specific job functions. All access is logged, monitored, and regularly audited.

6.2 Administrative Security Controls

• Comprehensive employee training on data protection, privacy principles, phishing awareness, and security best practices for all staff members handling personal information
• Confidentiality agreements and non-disclosure obligations binding all employees, contractors, and service providers with access to user data
• Background checks and security clearances for employees in sensitive roles including customer support, payment processing, and system administration
• Incident response procedures and data breach notification protocols ensuring rapid detection, containment, and remediation of security incidents
• Data retention policies limiting how long personal information is stored to the minimum necessary for legal, business, and regulatory purposes

6.3 Physical Security Controls

• Data centers hosting mpo188's servers maintain ISO 27001 certification, 24/7 physical security with biometric access controls, video surveillance, and environmental controls preventing hardware damage
• Redundant backup systems and disaster recovery plans ensure data availability and integrity even in case of hardware failure, natural disaster, or catastrophic events
• Geographic distribution of servers and databases across multiple locations preventing single points of failure and enabling rapid recovery from localized incidents

7. Data Retention and Deletion

mpo188 retains your personal information only as long as necessary to fulfill the purposes described in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements:

7.1 Active Account Data

While your account remains active and in good standing, we retain all account information, transaction history, gaming activity, and communications to provide ongoing services, process transactions, and maintain accurate records.

7.2 Closed Account Data

When you close your mpo188 account voluntarily or we terminate your account for policy violations, we retain specific information for mandatory legal periods:

• Financial Transaction Records: 7 years from the date of transaction as required by Indonesian financial regulations for tax compliance and audit purposes
• KYC Documentation: 5 years from account closure as required by anti-money laundering regulations
• Account Activity Logs: 3 years for fraud prevention and dispute resolution purposes
• Marketing Preferences: Indefinitely to honor your opt-out requests and prevent unwanted marketing even if you return in the future

After mandatory retention periods expire, we securely delete or anonymize your personal information using industry-standard data destruction methods including cryptographic erasure for encrypted data and multi-pass overwriting for unencrypted data.

7.3 Backup and Archived Data

Personal information contained in backup systems and archived data may persist for technical reasons beyond the active retention period, but this archived data is not accessed for operational purposes and is eventually purged according to our backup rotation schedules (typically within 90 days of the active data deletion).

8. Your Privacy Rights and Choices

Under Indonesian data protection principles and international privacy standards, you have the following rights regarding your personal information held by mpo188:

8.1 Right to Access

You can request a copy of all personal information mpo188 holds about you, including account details, transaction history, KYC documents, communication records, and any profiling or automated decision-making applied to your account. We will provide this information in a structured, commonly used, machine-readable format (typically PDF and CSV files) within 30 days of your verified request.

8.2 Right to Rectification

You can correct inaccurate or incomplete personal information directly through your account settings or by contacting customer support. For KYC information (name, date of birth, KTP number), you must provide supporting documentation demonstrating the correction to prevent identity fraud.

8.3 Right to Erasure ("Right to Be Forgotten")

You can request deletion of your personal information when it is no longer necessary for the purposes for which it was collected, you withdraw consent for processing, or you object to processing and we have no overriding legitimate grounds. However, we may retain certain information when legally required (financial records, KYC documents) or necessary to defend legal claims.

8.4 Right to Restriction of Processing

You can request that we temporarily restrict processing of your personal information in specific circumstances, such as while we verify the accuracy of disputed information or assess whether our legitimate interests override your objection to processing.

8.5 Right to Data Portability

You can request export of your personal information in a portable format that can be transmitted to another service provider. We will provide account data, transaction history, and other information you provided to us in CSV and JSON formats suitable for transfer.

8.6 Right to Object

You can object to processing of your personal information for direct marketing purposes (we will immediately cease marketing communications), and you can object to processing based on legitimate interests (we will cease unless we demonstrate compelling legitimate grounds that override your interests).

8.7 Right to Withdraw Consent

For processing based on your consent (marketing communications, optional personalization, non-essential cookies), you can withdraw consent at any time through account settings, email unsubscribe links, or by contacting support. Withdrawal does not affect the lawfulness of processing conducted before withdrawal.

8.8 How to Exercise Your Rights

To exercise any of these rights, contact our Data Protection Officer via email at [email protected] (use subject line "Privacy Rights Request") or through the 24/7 live chat in your account dashboard. We may require identity verification to prevent unauthorized disclosure of personal information. We will respond to verified requests within 30 days or inform you if we need additional time (up to 90 days for complex requests).

9. Cookies and Tracking Technologies

mpo188 uses cookies, web beacons, and similar tracking technologies to enhance your experience, analyze platform usage, and deliver personalized content. You can control cookie preferences through your browser settings, though disabling essential cookies may impair platform functionality.

9.1 Types of Cookies We Use

Cookie Type	Purpose	Duration	Can You Opt Out?
Essential Cookies	Enable core platform functions like login, account authentication, shopping cart, and secure payment processing	Session / Up to 1 year	No - Required for platform to function
Performance Cookies	Collect anonymous usage statistics, page load times, error reports to improve platform performance	Up to 2 years	Yes - Via browser settings or cookie banner
Functional Cookies	Remember your preferences (language, odds format, time zone) for enhanced personalization	Up to 1 year	Yes - Via browser settings, but may impact experience
Marketing Cookies	Track which promotions you viewed, clicked, or engaged with to deliver relevant offers	Up to 1 year	Yes - Via cookie banner or account settings

10. International Data Transfers

Your personal information is primarily stored on servers located in Indonesia to ensure fast access and comply with data localization preferences. However, some service providers (cloud hosting, game providers, payment processors) may process data in servers located outside Indonesia including Singapore, Hong Kong, Europe, and the United States.

When we transfer data internationally, we implement appropriate safeguards including:

• Standard Contractual Clauses (SCCs) approved by international data protection authorities requiring equivalent protection standards
• Verification that recipient countries provide adequate legal protections for personal data comparable to Indonesian standards
• Encryption of data in transit and at rest ensuring security regardless of geographic location
• Contractual obligations requiring service providers to maintain Indonesian-equivalent privacy standards and cooperate with Indonesian regulatory investigations

11. Children's Privacy

mpo188's services are exclusively intended for individuals aged 21 years and older in compliance with Indonesian gambling age restrictions. We do not knowingly collect, use, or store personal information from individuals under 21 years of age. Our KYC verification process is designed to prevent underage account creation by validating KTP birth dates.

If we discover that we have inadvertently collected information from an individual under 21, we will immediately delete that information, close the associated account, and refund any deposits. Parents or guardians who believe their child under 21 has provided information to mpo188 should contact us immediately at [email protected] for prompt account closure and data deletion.

12. Changes to This Privacy Policy

mpo188 may update this Privacy Policy periodically to reflect changes in our practices, technologies, legal requirements, or business operations. Material changes that significantly affect your privacy rights will be communicated prominently through:

• Email notification to all registered users at least 30 days before changes take effect
• Prominent banner on the mpo188 homepage directing users to review the updated policy
• In-account notification requiring acknowledgment before continuing to use services if changes materially affect how we handle sensitive information

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. The "Last Updated" date at the top of this policy indicates when it was most recently revised. Your continued use of mpo188 services after changes take effect constitutes acceptance of the revised Privacy Policy.

13. Contact Information and Data Protection Officer

If you have questions, concerns, or complaints about this Privacy Policy, our data practices, or wish to exercise your privacy rights, please contact mpo188's Data Protection Officer:

• Email: [email protected] (use subject line "Privacy Inquiry" for faster routing)
• 24/7 Live Chat: Available directly within your mpo188 account dashboard for immediate assistance
• WhatsApp: Contact details available in your account dashboard for verified members

Our Data Protection Officer and privacy team are committed to addressing your privacy concerns promptly and transparently. We typically respond to privacy inquiries within 5 business days and resolve most issues within 30 days. If you are unsatisfied with our response, you have the right to lodge a complaint with Indonesian data protection authorities.