mpo08 Privacy Policy

This Privacy Policy applies to all personal data processed by mpo08 in connection with the mpo08 website (mpo08.one) and all related services, applications, and features offered on the Platform. It covers data collected from registered Players, prospective registrants who use the Platform without completing registration, and visitors who browse the website.

mpo08 acts as the data controller in respect of all personal data described in this Policy — meaning mpo08 determines the purposes for which and the means by which your personal data is processed. If you have questions about how mpo08 handles your data, please contact us as set out in Section 13 below.

mpo08 collects the following categories of personal data:

mpo08 does not collect sensitive special-category data (such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data for identification purposes beyond age and identity confirmation) unless expressly required by a regulatory obligation and only with your explicit consent.

mpo08 collects personal data through the following means:

• Direct provision: When you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or participate in a promotion, you provide data to mpo08 directly.
• Automated collection: When you browse or use the Platform, mpo08's servers and analytics tools automatically record technical and usage data (see Section 8 on Cookies for more detail).
• Third-party payment processors: When you transact via DANA, OVO, GoPay, ShopeePay, LinkAja, or a local bank, the payment provider shares transaction confirmation data with mpo08 to facilitate crediting or debiting your account balance.
• Identity verification providers: Where mpo08 uses a third-party KYC or fraud-detection service to verify your identity documents, that provider returns a verification outcome and supporting data to mpo08.

mpo08 processes your personal data for the following purposes:

Where mpo08 relies on consent as its legal basis (e.g., promotional email communications), you may withdraw that consent at any time by updating your notification preferences in account settings or by contacting support. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

mpo08 does not sell your personal data to unaffiliated third parties for their own marketing purposes. We share your data only in the following circumstances and only to the extent necessary:

• Payment processors: Transaction data is shared with DANA, OVO, GoPay, ShopeePay, LinkAja, BCA, BRI, BNI, Mandiri, CIMB Niaga, and BSI as required to execute deposits and withdrawals. These providers operate under their own privacy policies and are independently regulated.
• Identity verification providers: Identity documents and related data are shared with certified KYC and fraud-detection service providers engaged by mpo08 to fulfil its verification obligations.
• Game software providers: Limited technical and usage data (e.g., player session tokens) is shared with game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft to enable game functionality. These providers do not receive your full identity or financial profile.
• IT and infrastructure providers: mpo08 uses cloud hosting, database, and security service providers who process data on our behalf under strict data processing agreements that prohibit independent use of your data.
• Legal and regulatory authorities: mpo08 will disclose personal data to law enforcement, regulatory bodies, or other competent authorities when required to do so by applicable law, court order, or to protect the rights, property, or safety of mpo08, its Players, or the public.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of mpo08's business, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections. You will be notified of any such transfer.

mpo08 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by applicable law. The following general retention windows apply:

• Account and identity data: Retained for the duration of the account relationship and for a minimum of five years following account closure, to satisfy anti-money-laundering and financial record-keeping obligations.
• Transaction records: Retained for a minimum of five years from the date of the transaction in line with financial compliance requirements.
• KYC documentation: Retained for a minimum of five years following the completion of KYC, or five years after account closure, whichever is later.
• Support communications: Retained for three years from the date of the last interaction, to allow reference in the event of a follow-up complaint or dispute.
• Marketing consent records: Retained for the duration of the account and for one year following consent withdrawal, to demonstrate compliance with consent obligations.
• Technical and usage logs: Retained for up to 12 months in active form for security and fraud analysis, then archived or deleted.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any individual.

mpo08 implements technical and organisational measures designed to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. Key measures include:

• Transport Layer Security (TLS/SSL): All data transmitted between your device and the mpo08 Platform is encrypted using industry-standard 256-bit TLS encryption.
• Data encryption at rest: Sensitive stored data — including identity documents, financial records, and passwords — is encrypted at rest using AES-256 or equivalent standards.
• Access controls: Access to personal data within mpo08's systems is restricted on a strict need-to-know basis. Staff with access are subject to confidentiality obligations and regular security training.
• Intrusion detection and monitoring: mpo08's infrastructure is monitored continuously for suspicious activity, and automated alerts trigger security reviews for anomalous access patterns.
• Password hashing: Player account passwords are stored exclusively as salted cryptographic hashes. mpo08 staff cannot view your password in plain text.
• Penetration testing: The mpo08 Platform undergoes regular third-party security assessments to identify and remediate vulnerabilities.

While mpo08 takes all reasonable steps to secure your data, no online system can guarantee absolute security. You are responsible for keeping your account credentials confidential and for notifying mpo08 immediately if you suspect unauthorised access to your account.

mpo08 uses cookies and similar tracking technologies on the Platform to support core functionality, enhance your experience, and gather aggregated analytics. The following cookie categories are in use:

• Strictly necessary cookies: Required for the Platform to function. They maintain your login session, remember your language preference, and route requests to the correct server. These cannot be disabled without preventing the Platform from working.
• Functional cookies: Store your preferences (e.g., preferred deposit method, notification settings) so that the Platform remembers your choices across sessions.
• Analytics cookies: Collect aggregated, anonymised information about how Players use the Platform — which pages are visited most, where sessions originate, and which features are most popular. This data is used exclusively to improve the mpo08 experience and is not linked to individual identities.
• Security cookies: Help mpo08 detect fraudulent account activity, bot traffic, and unusual login patterns.

mpo08 does not use third-party advertising or retargeting cookies. You may configure your browser to block or delete cookies at any time; however, disabling strictly necessary cookies will prevent you from logging in to your mpo08 account.

As a Player whose personal data is processed by mpo08, you hold the following rights. To exercise any of them, contact mpo08 at support@mpo08.one with the subject line "Data Rights Request". mpo08 will respond within 30 calendar days.

The mpo08 Platform is strictly prohibited to persons under the age of 21. mpo08 does not knowingly collect personal data from individuals under 21 years of age. If mpo08 discovers or is notified that personal data has been collected from a person who was under 21 at the time of registration, mpo08 will immediately suspend the account, delete all associated personal data to the extent permitted by law, and return any withdrawable balance to the originating payment source.

If you are a parent or guardian and you believe your child has registered an account on the mpo08 Platform, please contact us immediately at support@mpo08.one with the subject line "Underage Account Report". We will act on all such reports within 24 hours.

mpo08 operates with hosting infrastructure and service providers that may be located outside Indonesia. Where personal data is transferred to jurisdictions that may not provide the same level of data protection as Indonesia, mpo08 ensures that appropriate safeguards are in place, including:

• Standard contractual clauses requiring the recipient to process data to an equivalent standard of protection.
• Contractual obligations on all data processors to implement technical and organisational security measures consistent with those described in Section 7 of this Policy.
• Restricting cross-border transfers to service providers whose jurisdictions have been assessed as providing adequate data protection.

By using the mpo08 Platform, you acknowledge that your personal data may be processed in jurisdictions outside Indonesia. mpo08 remains accountable for that data and ensures it is protected in transit and at rest regardless of where processing occurs.

mpo08 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform features. When material changes are made, we will notify registered Players by email to the address on their account at least seven days before the updated Policy takes effect. The revised Policy will also be published on this page with an updated effective date.

Your continued use of the mpo08 Platform after the effective date of a revised Policy constitutes acceptance of the changes. If you do not accept the revised Policy, you must cease using the Platform and request account closure before the effective date.

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please contact mpo08 through the following channels:

• Email: support@mpo08.one — please include "Privacy" in the subject line for faster routing.
• Live Chat: Available 24 hours a day, 7 days a week via the Platform.
• Indonesian-Speaking Agents: Available daily from 08:00 to 24:00 WIB.

mpo08 will acknowledge data-related requests within 24 hours and provide a substantive response within 30 calendar days. For complex requests that require additional time, mpo08 will notify you of the extended timeline and reason within the initial 30-day window.