Mpoid Privacy Policy – Personal Data Protection for Malaysian Players

1 Introduction

Welcome to the Privacy Policy MPOID. This document is written to provide a clear and honest explanation to all users of our platform about how their personal data is managed from the very first moment they interact with mpoid.run.

We understand that trust is the most valuable asset in the online betting industry. When you register an account at MPOID, you are trusting us with your personal information — your name, phone number, payment details, and more. We take that responsibility seriously.

This Policy applies to all users who access the platform MPOID via our website, mobile app (where available), or any other digital channel. This also covers information you provide when contacting our customer support team or participating in promotions we run.

This Policy is drawn up in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA), the primary legislation governing the processing of personal data in Malaysia. In the event of any conflict between this Privacy Policy and the requirements of the PDPA, the PDPA shall prevail.

2 Data We Collect

MPOID collects several categories of personal data depending on how you interact with our platform. Below is a full breakdown of each data type:

2.1 Data You Provide Directly

• Registration Information: Your full name, date of birth, Malaysian phone number, email address, and the username you chose when registering your MPOID account.
• Identity Verification (KYC) Information: A copy of your MyKad (Malaysian identity card), bank statement, proof of address, or any other verification document requested during the KYC process.
• Payment Information: E-wallet account numbers (Touch 'n Go, GrabPay, Boost, ShopeePay), DuitNow account numbers, or FPX account details (Maybank2u, CIMB Clicks) that you register for deposits and withdrawals.
• Communications: The content of any messages you send to the MPOID customer support team via live chat, email, or other provided channels.

2.2 Automatically Collected Data

• Usage Data: Your betting activity records, including bets placed, games played, amounts wagered, and outcomes received on the mpoid platform.
• Technical Data: IP address, device type, operating system, browser type, screen resolution, and other technical information automatically transmitted by your device when you access the MPOID website.
• Location Data: General location information derived from your IP address to verify that you are accessing the platform from a permitted region. We do not collect your precise GPS location.
• Session Data: Login times, session duration, pages visited, and actions taken within the platform during each active session.
• Cookie Data: Information stored via cookies and similar tracking technologies that we use to improve the user experience and analyse platform performance.

3 How We Use Your Data

The personal data we collect is used for the following purposes, all of which are necessary to deliver safe, high-quality mpoid services to Malaysian players:

3.1 Account Management & Services

• Creating and managing your account MPOID you, including identity and age verification
• Processing deposits and withdrawals via your chosen Malaysian local payment methods
• Providing access to all platform games and services, including Sports Betting, Live Casino, poker, and virtual sports
• Enables our customer support team to provide relevant, personalised assistance whenever you contact us

3.2 Security & Fraud Prevention

• Detecting and preventing fraud, money laundering, and platform abuse
• Verifying user identity during withdrawal requests or account information changes
• Monitoring suspicious activity, including duplicate accounts and bonus abuse
• Complying with anti-money laundering (AML) reporting requirements set by Malaysian authorities

3.3 Responsible Gaming

Your usage records and betting activity at MPOID used to monitor gambling patterns and identify early signs of problem gambling. This allows us to provide timely, appropriate support and to alert users who may need attention. This is not surveillance — it is our responsibility as a platform that genuinely cares about user wellbeing.

3.4 Service Communications

• Sending important account-related notifications such as deposit confirmations, withdrawal notices, and security alerts
• Notifying you of changes to our Terms & Conditions or Privacy Policy MPOID
• Sending promotional information and the latest offers — only with your consent, and you may unsubscribe at any time

3.5 Platform Improvements

Aggregated usage data (with no individual identification) is used to analyse how users interact with the platform MPOID, identify technical issues, and plan feature and performance improvements to the platform for a better user experience.

4 Legal Basis for Data Processing

Under Malaysia's Personal Data Protection Act 2010 (PDPA), MPOID processes your personal data on the following legal bases:

• Consent: For marketing communications and optional data collection purposes, we base processing on your explicitly given consent.
• Contract Performance: Processing required to provide the MPOID services you have requested — including account management and payment processing — is based on contractual necessity.
• Legal Obligation: Certain data processing activities such as KYC and AML reporting are mandatory under Malaysian law, and we are unable to exempt ourselves from these obligations.
• Legitimate Interests: Processing for security, fraud prevention, and responsible gaming purposes is based on legitimate interests MPOID and our user community as a whole.

5 Data Sharing with Third Parties

MPOID does not sell, rent, or trade your personal data to any third party for their own purposes. However, there are limited circumstances in which we may need to share your information:

5.1 Trusted Service Providers

We work with carefully selected third-party companies to help us operate the platform — including payment processors that facilitate transactions via Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and FPX, as well as identity verification service providers for KYC purposes. All such providers are bound by strict confidentiality agreements and may only use your data for the specified purposes.

5.2 Legal Requirements

MPOID may disclose your personal data if required to do so by Malaysian law, court order, or direction from a competent authority such as Bank Negara Malaysia, the police, or other relevant enforcement bodies. We will endeavour to notify you prior to any such disclosure unless prohibited from doing so by law.

5.3 Business Transfers

If MPOID involved in a merger, acquisition, or asset sale, users' personal data may be transferred as part of that transaction. In such cases, we will notify you by email or in-platform notification before your data is transferred and becomes subject to a different Privacy Policy.

6 Data Security

Protecting your personal data is our top technical priority. MPOID implements a range of technical and organisational security measures to protect your data against unauthorised access, modification, disclosure, or destruction:

6.1 Technical Security Measures

• 256-bit SSL Encryption: All communication between your device and the server MPOID encrypted using the latest SSL/TLS standards — the same protocols used by Malaysia's leading banks.
• Data-at-Rest Encryption: Sensitive data stored in our databases – including payment details and KYC documents – is encrypted using AES-256 standards.
• Firewall & IDS: Our servers are protected by enterprise-grade firewalls and an Intrusion Detection System that monitors traffic around the clock.
• Two-Factor Authentication: Internal staff access to systems containing user data requires two-factor authentication, without exception.

6.2 Organisational Security Measures

• Role-based access control (RBAC) — each staff member can only access the data necessary for their specific role
• Regular cybersecurity training for all staff who handle user data
• Regular third-party security audits to identify and address system vulnerabilities
• A clearly defined incident response procedure to ensure any data breach is addressed promptly

6.3 Your Responsibilities

While we take all reasonable steps to protect your data, account security also depends on your own actions. Use a strong, unique password for your MPOID your account, enable two-factor authentication (2FA), never share your login credentials with anyone, and log out of your account when using a shared device.

7 Data Retention Period

MPOID retains your personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, or as required under Malaysian law:

• Active Account Data: Retained for the duration of your active account plus 5 years following account closure, to meet legal and tax reporting obligations.
• KYC Documents: Retained for a minimum of 6 years from the date of the last transaction, in compliance with Malaysia's anti-money laundering legal requirements.
• Transaction Records: Deposit, withdrawal, and betting activity records are retained for 7 years for audit, dispute resolution, and tax compliance purposes.
• Communication Logs: Customer support conversation records are retained for 2 years from the date of communication.
• Technical Data & Logs: Technical logs such as IP address records and session activity are typically retained for no longer than 12 months.

Once the retention period expires, data will be securely deleted or anonymised so that it can no longer be linked to you personally.

8 Your Rights Under Malaysia's PDPA

The Malaysian Personal Data Protection Act 2010 grants you several important rights in relation to the personal data held by MPOID. We are committed to making it straightforward for you to exercise these rights:

To exercise any of the rights above, please contact us by email at support@mpoid.run with the subject line "Privacy Rights Request" and include your full name and account number MPOID you for identity verification purposes. We will respond within 21 business days.

9 Cookies & Tracking Technologies

Platform MPOID uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions correctly. Below is an explanation of the types of cookies we use:

9.1 Types of Cookies

• Essential Cookies: Required for core platform functions — login, session security, and basic navigation. These cookies cannot be disabled as they are fundamental to the operation of the MPOID platform.
• Preference Cookies: Saves your preferences such as display language, currency, and other display settings so you do not need to reconfigure them each time you log in.
• Analytics Cookies: Collects aggregated information on how users interact with the platform to help us assess platform performance and plan improvements.
• Security Cookies: Used to detect suspicious activity and protect user accounts from unauthorised access.

9.2 Cookie Controls

You can control and manage cookies through your browser settings. Please note, however, that disabling certain cookies may affect the functionality of the platform MPOID. Essential cookies cannot be disabled without disrupting your use of the platform.

10 International Data Transfers

In the course of its operations, MPOID may store or process your personal data on servers located outside Malaysia, specifically in data centres operated by the cloud service providers we use.

When data is transferred outside Malaysia, we ensure that a level of protection equivalent to the PDPA 2010 is maintained through appropriate safeguards, such as data processing agreements incorporating standard contractual clauses and binding security requirements.

We do not transfer your personal data to countries that lack an adequate data protection framework without appropriate contractual safeguards in place. If you have questions about international data transfers, please contact us at support@mpoid.run.

11 Children's Privacy

Platform MPOID is intended exclusively for adults aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18.

If we discover that we have collected personal data from a minor, we will promptly delete that information and close the associated account. If you believe that a minor has registered an account at MPOID, please contact us immediately at support@mpoid.run and we will act on it promptly.

Parents and guardians are advised to take active steps to prevent minors in their care from accessing online betting platforms, including MPOID. Use parental control software available on devices accessible to children.

12 Privacy Policy Amendments

MPOID reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or developments in the technologies we use.

When we make material changes to this Privacy Policy, we will provide you with clear notice via the email address registered to your account or through a prominent notification within the platform MPOID. The "Last Updated" date at the top of this document will be revised to reflect the date of the latest amendment.

Continued use of the platform MPOID after amendments to the Privacy Policy are posted and notice has been given will be considered acceptance of the revised terms. We encourage you to review this page periodically. If you do not agree with any changes, you should stop using the platform and contact us to close your account.

13 Contact Us for Privacy Enquiries

If you have any questions, concerns, or complaints regarding how MPOID handle your personal data, or if you wish to exercise any of your privacy rights, please reach out to us through the following channels:

• Privacy Email: support@mpoid.run (include "Privacy Inquiry" in the email subject line)
• Live Chat: Available on the mpoid platform 24 hours a day, 7 days a week

We will endeavour to address all privacy enquiries within 21 business days. For more complex requests, such as full data access or data deletion requests, the response time may be longer, but we will notify you if this is the case.

If you are dissatisfied with our response to your privacy complaint, you have the right to refer the matter to Malaysia's Personal Data Protection Department (JPDP) or the relevant regulatory body under the Ministry of Communications and Digital Malaysia.