Privacy Policy —
How mpo555 Handles Your Data

1 Introduction

mpo555 (referred to in this document as "mpo555", "we", "us", or "our") is committed to protecting the privacy and personal data of every individual who accesses or uses the mpo555 platform at https://mpo555.lat (the "Platform"). This Privacy Policy applies to all users of the Platform, including registered account holders and visitors who browse without registering (collectively referred to as "you" or "the User").

This Privacy Policy describes: the categories of personal data we collect; the purposes for which that data is processed; the legal basis for such processing; how long we retain personal data; the circumstances under which data may be shared with third parties; the security measures in place to protect your data; and the rights available to you as a data subject.

By registering an account on mpo555 or by continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with how we handle your personal data, you should discontinue use of the Platform and, where applicable, request account closure through our support team.

This Privacy Policy should be read alongside the mpo555 Terms & Conditions, which govern the overall use of the Platform and are incorporated herein by reference.

2 Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings assigned below:

"Personal Data"

Any information relating to an identified or identifiable natural person, including name, identification number, location data, or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that person.

"Data Controller"

mpo555, the entity that determines the purposes and means of processing personal data collected through the Platform.

"Data Processor"

Any third party engaged by mpo555 to process personal data on its behalf, such as payment service providers, identity verification partners, and cloud infrastructure providers.

"Processing"

Any operation or set of operations performed on personal data, including collection, storage, use, disclosure, erasure, or destruction.

"Consent"

Freely given, specific, informed, and unambiguous indication of agreement by the data subject to the processing of their personal data.

"KYC"

Know Your Customer — the regulatory identity and age verification process required before withdrawal processing on the mpo555 Platform.

"Cookie"

A small text file placed on a user's device by the Platform for purposes of session management, preference retention, or analytics.

"Third Party"

Any natural or legal person, public authority, agency, or body other than mpo555 and the User.

3 Data We Collect

mpo555 collects the following categories of personal data, depending on the nature of your interaction with the Platform:

3.1 Account Registration Data

• Full legal name
• Date of birth (required to verify 21+ age eligibility)
• Residential address, including city (e.g., Kuala Lumpur, Petaling Jaya, Penang, Johor Bahru, Shah Alam)
• Email address and mobile phone number
• Username and account credentials (passwords stored in encrypted, hashed form only)

3.2 Identity Verification (KYC) Data

• Copy of government-issued photo identification (e.g., MyKad, passport)
• Proof of residential address (utility bill or bank statement within 3 months)
• Proof of payment method ownership (e.g., bank account screenshot, e-wallet account confirmation)

3.3 Financial & Transaction Data

• Deposit and withdrawal transaction records in MYR
• Payment method references (bank account numbers, e-wallet identifiers for Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, Visa, Mastercard)
• Cryptocurrency wallet addresses (where applicable)

3.4 Gaming & Betting Activity Data

• Bet history, game session records, and win/loss data
• Bonus and promotion claim records
• Sports betting market selections (including Liga Super Malaysia, EPL, and other covered events)

3.5 Technical & Device Data

• IP address and approximate geographic location
• Device type, operating system, and browser version
• Session timestamps and Platform navigation data
• Cookie identifiers and similar tracking technologies

3.6 Communications Data

• Support chat transcripts and email correspondence
• Voluntary feedback and survey responses
• Marketing preference records (opt-in / opt-out status)

4 How Data Is Collected

mpo555 collects personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make deposits or withdrawals, place bets, contact support, or respond to surveys.
• Automatically — through cookies, web beacons, and similar technologies as you browse and interact with the Platform.
• From third-party service providers — including identity verification agencies, payment processors (e.g., FPX operators, DuitNow network, e-wallet providers), and fraud prevention services, where necessary to verify your identity or process transactions.
• From publicly available sources — where required for legal compliance, fraud investigation, or responsible gambling obligations.

5 Data Processing & Purpose

The following table summarises the key purposes for which mpo555 processes personal data and the corresponding data categories involved:

6 Legal Basis for Processing

mpo555 processes personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil our obligations under the mpo555 Terms & Conditions — including account management, payment processing, game delivery, and KYC verification.
• Legal obligation: Processing required to comply with applicable laws, including anti-money laundering (AML) regulations, age verification obligations, and licensing requirements under the governing authority.
• Legitimate interests: Processing necessary for fraud prevention, Platform security, responsible gambling monitoring, and internal analytics, where such interests are not overridden by your data protection rights.
• Consent: Processing for optional purposes where you have provided explicit consent — primarily marketing communications. You may withdraw this consent at any time without affecting the lawfulness of prior processing.

7 Data Sharing & Disclosure

mpo555 does not sell, rent, or trade your personal data with any third party for commercial purposes. We share personal data with third parties only in the following limited and defined circumstances:

• Payment processors and financial institutions: To facilitate MYR deposits and withdrawals via FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank, Visa, Mastercard, and cryptocurrency networks. Data shared is limited to what is required to complete the transaction.
• Identity verification partners: To conduct KYC checks as required by our licensing obligations. These partners are contractually bound to process data only for verification purposes.
• Fraud and AML screening providers: To screen transactions and account activity against fraud indicators and regulatory watchlists.
• Cloud infrastructure and technology providers: Who host and maintain Platform infrastructure on our behalf, subject to strict data processing agreements.
• Regulatory and law enforcement authorities: Where we are legally required to disclose data in response to a lawful request, court order, or regulatory investigation.
• Responsible gambling organisations: Limited identifying information may be shared with self-exclusion registries where a user has enrolled in a cross-platform responsible gambling programme.

8 Data Retention

mpo555 retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, subject to overriding legal retention requirements. The following general retention periods apply:

• Active account data: Retained for the duration of the account and for a minimum of five (5) years following account closure, in line with AML and regulatory record-keeping obligations.
• KYC and identity documents: Retained for a minimum of five (5) years from the date of submission or account closure, whichever is later.
• Financial transaction records: Retained for a minimum of five (5) years from the date of transaction.
• Marketing preference data: Retained until you withdraw consent or request deletion, after which suppression records are kept to honour opt-out status.
• Technical and device logs: Retained for up to twelve (12) months from collection, unless extended for fraud investigation or legal proceedings.
• Support communications: Retained for two (2) years from the date of the last interaction, or longer if relevant to an unresolved dispute.

9 Data Security

mpo555 implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers.
• Encryption of sensitive data at rest, including password hashes and financial record stores.
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis.
• Two-factor authentication (2FA) available for User accounts and mandatory for internal administrative access.
• Regular third-party penetration testing and security audits of Platform infrastructure.
• Automated fraud monitoring and anomaly detection on all transaction activity.
• Incident response procedures for prompt identification, containment, and notification of any data security breach.

In the event of a data breach that poses a risk to your rights and freedoms as a data subject, mpo555 will notify affected users without undue delay and in accordance with applicable regulatory requirements.

10 Cookies & Tracking Technologies

mpo555 uses cookies and similar tracking technologies to provide core Platform functionality, improve user experience, and analyse traffic patterns. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for Platform operation, including session authentication, security token management, and load balancing. These cannot be disabled without impairing core functionality.
• Functional Cookies: Remember your language preferences, interface settings, and login state to provide a consistent experience across sessions.
• Analytical Cookies: Collect aggregated, anonymised data on how users navigate the Platform to inform improvements to design and content. No personally identifying data is transmitted through analytical cookies.
• Responsible Gambling Cookies: Used to store deposit limit settings, session timer preferences, and self-exclusion status across devices.

You may manage non-essential cookie preferences through your browser settings at any time. Please note that disabling functional cookies may affect your ability to use certain features of the Platform.

11 Your Rights

As a user of the mpo555 Platform, you have the following rights in relation to your personal data. Requests may be submitted at any time through our customer support team and will be processed within thirty (30) days of receipt.

12 Minors & Age Policy

The mpo555 Platform is strictly intended for persons aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. During registration and KYC verification, mpo555 actively verifies the date of birth of all registrants using government-issued identity documents.

If mpo555 becomes aware that personal data has been collected from a person under 21 without valid parental or guardian consent under applicable law, we will take immediate steps to delete that data and close the associated account. All funds in such accounts will be returned through the original deposit method.

13 International Data Transfers

The mpo555 Platform serves Malaysian players and its primary infrastructure is operated to serve the Malaysian market. However, certain data processors engaged by mpo555 — including cloud infrastructure providers, identity verification services, and payment processing partners — may be located in jurisdictions outside Malaysia.

Where personal data is transferred to processors in other countries, mpo555 ensures that appropriate safeguards are in place to protect your data, including contractual data processing agreements requiring the processor to maintain security standards and process data only for specified purposes.

By using the mpo555 Platform, you acknowledge and consent to the transfer of your personal data to third-party processors in other jurisdictions as described in this section, where such transfers are necessary for the operation of services you have requested.

14 Policy Amendments

mpo555 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or business operations. Where changes are material, we will provide notice to registered Users via email or a prominent Platform notification at least seven (7) days before the updated policy takes effect.

Continued use of the Platform following the effective date of an updated Privacy Policy constitutes acceptance of that updated policy. The effective date at the top of this document reflects the date of the most recent substantive revision.

We recommend reviewing this Privacy Policy periodically. Archived versions of prior policies are available upon request by contacting our support team.

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by mpo555, please contact us through the following channels:

• Live Chat: Available 24/7 directly through the mpo555 Platform. This is the fastest channel for data subject requests and account-related enquiries.
• Email: [email protected] (plain text — not a clickable link). Responses are typically provided within 24 hours on business days.

When submitting a data subject request (e.g., access, deletion, or portability), please specify the nature of your request clearly and include the email address associated with your mpo555 account. Identity verification may be required before your request is actioned.

For general information about your rights as a consumer and data subject under applicable Malaysian data protection law, you may refer to the Personal Data Protection Act 2010 (PDPA) guidelines published by the Department of Personal Data Protection Malaysia.