1 Introduction
This Privacy Policy ("Policy") is issued by MPO777 ("we", "us", "our"), the operator of the online gaming and sports betting platform accessible at mpo777.casa ("the Platform"). This Policy governs the collection, use, storage, disclosure, and protection of personal data relating to registered Users ("you", "your", "Member") and visitors to the Platform.
MPO777 takes data privacy seriously. We operate in accordance with internationally recognised data protection principles and our obligations under the applicable laws of our licensing jurisdiction. As a platform serving primarily Malaysian users — including members across Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and beyond — we are also mindful of the principles of Malaysia's Personal Data Protection Act 2010 (PDPA) in our data handling practices, even where we operate under international licensing.
By creating an MPO777 account, accessing the Platform, or otherwise providing personal data to us, you acknowledge that you have read and understood this Policy and consent to the data practices described herein. If you do not agree with this Policy, please cease use of the Platform and contact us to arrange account closure.
This Policy should be read in conjunction with MPO777's Terms & Conditions. In the event of any conflict between the two documents, the Terms & Conditions shall prevail unless this Policy specifically provides otherwise.
2 Definitions
The following definitions apply throughout this Privacy Policy:
| Term | Meaning |
|---|---|
| Personal Data | Any information that can be used, directly or indirectly, to identify a natural person, including but not limited to name, identification number, contact details, financial information, and online identifiers. |
| Data Controller | MPO777, the entity that determines the purposes and means of processing personal data collected via the Platform. |
| Data Processor | Any third-party service provider that processes personal data on behalf of MPO777 under a written data processing agreement. |
| Processing | Any operation performed on personal data, including collection, recording, storage, use, disclosure, erasure, or destruction. |
| Consent | A freely given, specific, informed, and unambiguous indication of agreement to the processing of personal data for a defined purpose. |
| KYC Documents | Identity verification documents submitted by Users as part of the Know Your Customer process, such as a MyKad, passport, or utility bill. |
| Cookies | Small text files placed on a User's device by the Platform or third-party services to store information about browsing behaviour and preferences. |
3 Data We Collect
MPO777 collects only the personal data that is necessary to provide our gaming services, process transactions, comply with regulatory obligations, and maintain a secure platform. We do not engage in excessive or unnecessary data collection.
| Category | Examples of Data Collected |
|---|---|
| Account Data | Full name, date of birth, username, email address, mobile number, registered address, and account password (stored in hashed form only). |
| Identity Verification | Copies of government-issued photo ID (MyKad, passport, driving licence), proof of address documents, and selfie photographs submitted for KYC purposes. |
| Financial Data | Bank account details, payment method identifiers (e.g., Maybank account number, CIMB account details, Touch 'n Go registered number), transaction history, deposit and withdrawal records, and win/loss history. |
| Gaming Activity | Game session logs, betting history, wagering amounts, bonus usage records, and responsible gambling tool settings. |
| Technical Data | IP address, device type and operating system, browser type and version, session timestamps, and referral source data. |
| Communications Data | Records of live chat conversations, email correspondence, and support ticket content. |
| Marketing Preferences | Opt-in or opt-out status for promotional emails, SMS notifications, and platform push notifications. |
4 How We Collect Data
MPO777 collects personal data through the following channels:
4.1 — Directly from You
The majority of personal data we hold is provided directly by you during account registration, KYC verification, the completion of deposits and withdrawals, interactions with our customer support team, and responses to surveys or promotions.
4.2 — Automated Technical Collection
When you access the Platform, certain technical data is collected automatically via server logs and cookies, including your IP address, device identifiers, and browsing behaviour on the Platform. This data is used for security, fraud prevention, and service optimisation purposes.
4.3 — Third-Party Sources
In limited circumstances, MPO777 may receive personal data from third-party sources in order to fulfill our regulatory and compliance obligations. These sources include identity verification service providers, fraud detection platforms, payment processors (such as FPX and DuitNow), and licensing compliance bodies. Data obtained from these sources is handled with the same standard of care as directly collected data.
5 Purpose & Legal Basis for Data Processing
MPO777 processes personal data only for defined, legitimate purposes. The primary purposes and their corresponding legal bases are set out below:
- Account management and service delivery: Processing is necessary to perform our contractual obligations to you as a registered MPO777 member, including processing transactions in MYR and maintaining your account balance.
- KYC and identity verification: Processing is required to comply with our legal and regulatory obligations under our international gaming licence, including mandatory anti-money-laundering (AML) procedures and age verification (21+ minimum).
- Fraud prevention and platform security: Processing is carried out on the basis of MPO777's legitimate interest in protecting the Platform, its members, and financial systems from fraudulent, abusive, or criminal activity.
- Customer support: Processing of communications data is necessary to fulfil our contractual obligation to provide support services to registered members.
- Responsible gambling compliance: Processing of gaming activity data is required to operate responsible gambling tools including deposit limits, self-exclusion, and problem gambling detection — which is a condition of our operating licence.
- Marketing communications: Where you have opted in, we process your email or mobile number to send promotional offers and platform updates. You may withdraw this consent at any time.
- Analytics and service improvement: Aggregated, anonymised technical data is processed on the basis of MPO777's legitimate interest in understanding platform usage and improving the Member experience.
MPO777 does not make automated decisions that produce legal or similarly significant effects based solely on automated processing of personal data without human review, except where such processing is expressly required for fraud prevention or regulatory compliance.
6 Data Sharing & Disclosure
MPO777 does not sell, rent, or trade your personal data to any third party for commercial purposes. Personal data is shared only in the following limited circumstances:
6.1 — Service Providers (Data Processors)
We engage third-party service providers to assist with specific operational functions, including payment processing (FPX, DuitNow, Touch 'n Go eWallet integrations), KYC verification, fraud detection, cloud infrastructure, email delivery, and live chat platform operation. All such providers are engaged under written data processing agreements that restrict their use of personal data to the specific service being provided.
6.2 — Regulatory and Legal Disclosure
MPO777 may be required to disclose personal data to regulatory authorities, law enforcement agencies, or courts in accordance with applicable laws, court orders, or our licensing obligations. In such cases, disclosure will be limited to the specific data required to satisfy the relevant legal obligation.
6.3 — Business Transfers
In the event of a merger, acquisition, or transfer of substantially all of MPO777's assets, personal data held by MPO777 may be transferred to the successor entity as part of the transaction, subject to equivalent privacy protections being maintained by the successor.
6.4 — With Your Consent
Where MPO777 wishes to share your personal data for a purpose not described in this Policy, we will seek your explicit consent before doing so.
7 International Data Transfers
As an internationally licensed gaming operator, MPO777 may store or process personal data on servers or through service providers located outside of Malaysia. In such cases, MPO777 takes appropriate steps to ensure that personal data is afforded an adequate level of protection, including through contractual safeguards with data processors in accordance with internationally recognised standards.
Malaysian Users should be aware that data transferred outside Malaysia may be subject to the laws of the destination jurisdiction, which may differ from Malaysian law. By using the MPO777 Platform, you acknowledge and accept that your personal data may be transferred internationally as described in this section.
8 Data Retention
MPO777 retains personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following general retention periods apply:
- Active account data: Retained for the duration of your registered account with MPO777.
- KYC and identity documents: Retained for a minimum of five (5) years following account closure, in accordance with anti-money-laundering regulatory requirements applicable to our licensing jurisdiction.
- Transaction and financial records: Retained for a minimum of five (5) years following the relevant transaction date.
- Customer support communications: Retained for a minimum of three (3) years from the date of the communication.
- Marketing preferences and opt-out records: Retained indefinitely to honour opt-out requests and prevent future unsolicited marketing.
- Technical and usage logs: Retained for up to twelve (12) months, or longer where required for security investigations or legal proceedings.
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with MPO777's data destruction procedures.
9 Cookies & Tracking Technologies
MPO777 uses cookies and similar tracking technologies on the Platform to support essential functionality, enhance your experience, and gather aggregated usage analytics. The main categories of cookies used are as follows:
Essential Cookies
These cookies are strictly necessary for the Platform to function, including maintaining your logged-in session, remembering your language preference, and supporting secure payment transactions. You cannot opt out of essential cookies without disabling Platform access.
Analytics Cookies
These cookies collect anonymised data about how Users interact with the Platform — which pages are visited most frequently, how long sessions last, and where Users navigate from. This data is used in aggregate form to improve Platform performance and user experience.
Preference Cookies
These cookies remember your personalisation settings, such as preferred game categories and display options, so that the Platform can remember your choices on return visits.
You may manage cookie settings through your browser preferences. However, disabling certain categories of cookies may affect Platform functionality. MPO777 does not use cookies for cross-site advertising or to build profiles for sale to third parties.
10 User Rights
Subject to applicable law and limited exceptions (such as where compliance with a legal obligation requires continued processing), MPO777 Members have the following rights in relation to their personal data:
Right of Access
You may request a copy of the personal data MPO777 holds about you, along with information about how it is processed.
Right to Rectification
You may request correction of any inaccurate or incomplete personal data held about you. Some corrections can be made directly via your account settings.
Right to Erasure
You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
Right to Restrict Processing
You may request that MPO777 restricts the processing of your data in certain circumstances, such as where accuracy is contested or where you have objected to processing.
Right to Data Portability
Where technically feasible, you may request a machine-readable copy of personal data you have provided to MPO777, to transfer to another service provider.
Right to Withdraw Consent
Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.
To exercise any of the above rights, please contact MPO777 via the contact details in Section 15. Requests will be acknowledged within five (5) business days and fulfilled within thirty (30) days, subject to identity verification.
11 Children's Privacy
The MPO777 Platform is strictly intended for individuals aged 21 years and above. MPO777 does not knowingly collect personal data from any person under the age of 21. Age verification is a mandatory step in the account registration and KYC process, and any account found to belong to an individual under 21 will be immediately suspended and all associated data will be handled in accordance with our legal obligations.
If you are a parent or guardian and believe that your child has provided personal data to MPO777 without your consent, please contact us immediately using the details in Section 15. We will take appropriate action to investigate and, where confirmed, to delete the relevant data.
Important: Gambling services are for adults only. MPO777 enforces a hard minimum age of 21 with no exceptions. Please review our Responsible Gambling page for further information on our age-enforcement procedures.
12 Security Measures
MPO777 implements appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes:
- 256-bit SSL/TLS encryption for all data in transit between your device and the MPO777 Platform;
- Encryption at rest for all sensitive personal and financial data stored in our systems;
- Hashed password storage — passwords are never stored in plaintext and cannot be retrieved by MPO777 staff;
- Two-factor authentication (2FA) available for all registered accounts;
- Role-based access controls restricting internal access to personal data to staff with a documented operational need;
- Regular third-party security penetration testing of Platform infrastructure and application layers;
- Intrusion detection and monitoring systems operating continuously across MPO777 infrastructure.
Notwithstanding the above measures, no internet transmission or electronic storage system can be guaranteed to be entirely secure. Users are responsible for maintaining the confidentiality of their login credentials and should contact MPO777 immediately if they suspect unauthorised access to their account.
13 Third-Party Links
The MPO777 Platform may contain references to third-party payment systems (such as FPX, DuitNow, Maybank2u, and Touch 'n Go eWallet infrastructure) that operate under their own privacy policies. MPO777 is not responsible for the privacy practices of these third-party services and recommends that Users review the privacy policies of any payment provider before initiating transactions through those systems.
MPO777 does not maintain third-party advertising networks on the Platform and does not use your personal data to serve targeted advertising via external advertising platforms.
14 Policy Amendments
MPO777 reserves the right to update or amend this Privacy Policy at any time. Material changes will be communicated to registered Members via email notification or a prominent notice on the Platform no less than 14 days prior to the effective date of the change, except where immediate amendment is required to comply with a legal or regulatory obligation.
The effective date of the most recent version of this Policy is displayed at the top of this page. We recommend reviewing this Policy periodically to stay informed about how MPO777 handles your personal data. Your continued use of the Platform following the effective date of any amended Policy constitutes your acceptance of the revised terms.
15 Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data by MPO777, please contact us using the following details:
Data Privacy Enquiries
- [email protected] (plain text — not a link)
- Live Chat — 24/7, available directly on the Platform
- Email response target: within 2 hours during business hours; within 12 hours after hours
For formal data rights requests (access, erasure, portability), please include "Data Rights Request" in the subject line of your email to ensure proper routing. We will request identity verification before processing any data rights request.
For privacy-related legal correspondence, please include "Privacy Legal Notice" in the subject line. MPO777 is committed to responding to all privacy enquiries in a timely and transparent manner.