Privacy Policy
mpo2qq Platform

mpo2qq ("the Platform", "we", "us", "our") is committed to protecting the privacy and personal data of every individual who visits, registers with, or transacts on the mpo2qq website at https://mpo2qq.cam. This Privacy Policy sets out a comprehensive account of our data practices in plain, accessible language while meeting the formal requirements of an internationally compliant privacy notice.

This Policy applies to all personal data processed by mpo2qq in connection with the delivery of its online sports betting, casino gaming, togel (Indonesia's traditional numbers lottery), and payment services to members located primarily in Indonesia and other permitted jurisdictions. It applies regardless of the device or access method used — desktop browser, mobile browser, or any future native application.

By registering for an account or continuing to use the Platform, you acknowledge that you have read, understood, and agreed to the data practices described in this Privacy Policy. This Policy should be read in conjunction with our Terms & Conditions, which govern the overall contractual relationship between you and mpo2qq.

For the purposes of this Privacy Policy, the following terms carry the meanings assigned below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, national identity number, date of birth, contact details, financial account information, and device identifiers.
• "Processing" means any operation performed on Personal Data — including collection, recording, storage, adaptation, retrieval, use, disclosure, transmission, erasure, or destruction.
• "Data Controller" means mpo2qq, the entity that determines the purposes and means of Processing your Personal Data.
• "Data Processor" means any third party that processes Personal Data on behalf of mpo2qq under a written data processing agreement, such as a payment gateway or cloud-hosting provider.
• "Member" means a registered account holder on the mpo2qq Platform.
• "KYC Data" means identity verification documents and associated data collected in fulfillment of Know Your Customer obligations.
• "Cookies" means small text files placed on a user's device by a web server that facilitate session management, analytics, and personalization functions.
• "Sensitive Personal Data" means Personal Data that warrants heightened protection, including national identity numbers (KTP numbers), financial account details, and health-related information submitted in the context of responsible gaming tools.

mpo2qq collects the following categories of Personal Data, grouped by the context in which they are obtained:

mpo2qq collects Personal Data through the following channels:

• Directly from you: When you complete the registration form, submit KYC documentation, make a deposit or withdrawal request, contact our support team, or update your account settings.
• Automatically during platform use: Technical Data such as IP addresses, device identifiers, and session logs are collected automatically via server logs, cookies, and similar tracking technologies each time you access the Platform.
• From payment processors: When you initiate a deposit or withdrawal, our payment partners (including Indonesian bank gateways and e-wallet providers such as OVO, DANA, GoPay, ShopeePay, and LinkAja) share transaction confirmation data with us to reconcile your account balance.
• From fraud prevention and KYC service providers: mpo2qq works with licensed third-party identity verification and anti-fraud services that may supplement your submitted KYC documents with database-sourced verification signals.
• From publicly available sources: In limited circumstances, mpo2qq may consult publicly available records — such as sanctions lists or adverse-media databases — as part of its anti-money laundering compliance obligations.

mpo2qq processes your Personal Data for the following specific and documented purposes:

• Account creation and management: To register, authenticate, and maintain your Member account, including enabling secure login and account recovery.
• Identity verification (KYC): To verify your identity, age (21+ requirement), and residential address in compliance with our international licensing obligations and anti-money laundering standards.
• Payment processing: To process deposits received from and withdrawals sent to your registered Indonesian bank accounts (BCA, BRI, BNI, Mandiri, CIMB Niaga, and others) and e-wallets.
• Service delivery: To provide access to sports betting markets — including bandar bola (football bookmaking) on BRI Liga 1 and international leagues — live casino games, togel draws, and slot products.
• Fraud prevention and security: To detect, investigate, and prevent unauthorized account access, bonus abuse, money laundering, and other forms of fraud or platform manipulation.
• Regulatory compliance: To fulfill our obligations under applicable anti-money laundering (AML), counter-terrorist financing (CTF), and responsible gaming regulations imposed by our licensing authority.
• Customer support: To respond to your enquiries, resolve disputes, and maintain records of support interactions for quality assurance and audit purposes.
• Responsible gaming: To enforce self-exclusion periods, deposit limits, and other member-activated responsible gaming tools, and to identify early indicators of problem gambling behavior in order to reach out proactively.
• Platform improvement: To analyze aggregated, anonymized usage data in order to improve the Platform's performance, user experience, and game selection.
• Service communications: To send you essential transactional communications — deposit confirmations, withdrawal status updates, security alerts, and policy change notices.
• Promotional communications (opt-in only): To send you marketing messages about bonuses, promotions, and new product launches — only where you have explicitly opted in, and subject to your right to withdraw consent at any time.

mpo2qq processes your Personal Data on the following legal bases, depending on the purpose:

• Contractual necessity: Processing required to fulfill our obligations under the Member agreement — including account management, payment processing, game access, and customer support.
• Legal obligation: Processing required to comply with applicable law, including KYC verification, AML reporting, and record-keeping obligations imposed by our licensing authority.
• Legitimate interests: Processing necessary to pursue mpo2qq's legitimate business interests — including fraud prevention, platform security, and anonymized analytics — provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — applicable primarily to promotional marketing communications and to certain non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

mpo2qq does not sell, rent, or trade your Personal Data to third parties for their own commercial purposes. We share data only in the following limited circumstances, and only to the extent strictly necessary:

• Payment processors and financial institutions: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) receive the transaction data necessary to process your deposits and withdrawals.
• KYC and identity verification providers: Licensed third-party verification services receive your submitted KYC documents and identity data for the purpose of confirming your identity and age.
• Game content providers: Studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft may receive anonymized session and bet data necessary to deliver their game content within the Platform environment.
• Cloud infrastructure and hosting providers: mpo2qq's server infrastructure is provided by reputable, contractually bound cloud providers who process data solely on our instructions.
• Fraud prevention and AML services: Specialist providers that help mpo2qq detect suspicious transactions, verify sanctions-list status, and comply with anti-money laundering obligations.
• Regulatory and law enforcement authorities: Where legally required, mpo2qq will disclose Personal Data to licensing authorities, financial intelligence units, or law enforcement agencies. We will notify you of such disclosures where permitted by law.
• Professional advisors: Lawyers, auditors, and compliance consultants who are bound by professional secrecy obligations and who require access to data in the course of providing services to mpo2qq.

All third-party Data Processors engaged by mpo2qq are bound by written data processing agreements that require them to process your data only on mpo2qq's documented instructions, to implement appropriate technical and organizational security measures, and to delete or return data upon termination of the service relationship.

As an internationally licensed platform serving Members primarily based in Indonesia, mpo2qq may transfer certain categories of Personal Data to servers, processors, or service providers located outside Indonesia. Such transfers occur in the following contexts:

• Cloud infrastructure hosted in international data centers operated by contracted cloud providers.
• KYC verification services whose processing infrastructure is located in jurisdictions with recognized data protection standards.
• Game content providers whose technical systems operate from international hosting environments.

Where Personal Data is transferred internationally, mpo2qq ensures that appropriate safeguards are in place — including contractual data protection clauses equivalent to recognized international standards — to ensure that your data receives a level of protection consistent with this Privacy Policy regardless of where it is processed.

mpo2qq retains Personal Data for as long as is necessary to fulfill the purposes for which it was collected, subject to the following specific retention periods:

• Account and KYC data: Retained for a minimum of 5 years following account closure or the last transaction, as required by our licensing authority's AML record-keeping obligations.
• Transaction and financial records: Retained for a minimum of 5 years from the date of each transaction, consistent with standard financial record-keeping requirements.
• Gaming activity logs: Retained for a minimum of 3 years from the date of each session or bet, for dispute resolution, audit, and responsible gaming monitoring purposes.
• Customer support records: Retained for 3 years from the date of the interaction, for quality assurance and dispute resolution purposes.
• Responsible gaming data: Self-exclusion records are retained indefinitely to prevent re-registration during an active exclusion period, and for a minimum of 7 years following the expiry of a self-exclusion.
• Marketing preference data: Retained until you withdraw consent or close your account, after which it is deleted within 30 days.
• Technical and log data: Retained for up to 12 months from collection for security monitoring and fraud detection purposes.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymized such that it can no longer be attributed to an identifiable individual.

mpo2qq implements a multi-layered technical and organizational security framework designed to protect your Personal Data against unauthorized access, accidental loss, disclosure, alteration, or destruction. Key security measures include:

• TLS/SSL encryption: All data transmitted between your device and the mpo2qq Platform is encrypted using Transport Layer Security (TLS 1.2 or higher), preventing interception in transit.
• Encryption at rest: Sensitive Personal Data — including KYC documents, financial account details, and authentication credentials — is encrypted at rest using industry-standard AES-256 encryption.
• Access controls: Access to Personal Data within mpo2qq's systems is restricted to personnel with a documented business need. Role-based access controls and multi-factor authentication are enforced for all internal system access.
• Penetration testing and vulnerability management: mpo2qq's infrastructure is subject to regular third-party security assessments and a continuous vulnerability management program.
• Data breach response: mpo2qq maintains a documented data breach response procedure. In the event of a breach that is likely to result in a high risk to your rights and freedoms, we will notify affected Members without undue delay and will report to the relevant authority as required.
• Staff training: All mpo2qq staff with access to Personal Data complete mandatory data protection training and are bound by contractual confidentiality obligations.

mpo2qq uses cookies and similar tracking technologies to operate the Platform, maintain session security, and improve user experience. The categories of cookies we use are as follows:

• Strictly necessary cookies: Essential for the Platform to function — including session authentication, fraud prevention tokens, and load balancing. These cookies cannot be disabled without impairing core Platform functionality.
• Functional cookies: Remember your preferences such as language settings and display options to provide a more personalized experience.
• Analytics cookies: Collect anonymized, aggregated data about how Members use the Platform — including pages visited, session duration, and feature usage — to inform Platform improvements. No personally identifiable information is included in analytics data.
• Security cookies: Used to detect and prevent fraudulent sessions, bot activity, and multi-account behavior.

mpo2qq does not use third-party advertising or behavioral tracking cookies. Your Platform browsing activity is not shared with advertising networks.

You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent you from accessing the Platform. For functional and analytics cookies, you may opt out without affecting core Platform access.

As a Member of mpo2qq, you hold meaningful rights over your Personal Data. mpo2qq is committed to honoring these rights promptly and without undue barrier. Your rights include:

To exercise any of these rights, please contact our Data Protection team at [email protected] with the subject line "Data Rights Request". We will acknowledge your request within 72 hours and provide a substantive response within 30 calendar days. Where requests are complex or numerous, we may extend this period by a further 30 days with prior notification.

Exercising your rights is free of charge. mpo2qq will never penalize a Member for making a legitimate data rights request.

The mpo2qq Platform is strictly intended for adults aged 21 years or older. We do not knowingly collect or process Personal Data from individuals under the age of 21. Age verification is a mandatory component of the KYC process for all Members.

If mpo2qq becomes aware that Personal Data has been collected from a person under 21 without the verification safeguards having been effective, we will take immediate steps to delete that data, close the associated account, and return any deposited funds to the originating payment method where identification of the account holder is possible.

If you are a parent or guardian and believe that a person under 21 in your care has registered on mpo2qq without authorization, please contact us immediately at [email protected]. We treat such reports with the highest priority.

The mpo2qq Platform may contain references to third-party services — such as game studios, payment method providers, or sports data feeds — that operate under their own independent privacy policies. mpo2qq does not control and is not responsible for the privacy practices of any third-party service.

We encourage you to review the privacy policy of any third-party service before providing them with your Personal Data. The presence of a third-party reference on the Platform does not constitute an endorsement of that party's data practices by mpo2qq.

mpo2qq reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or our licensing obligations. The "Last Updated" date at the top of this page will be revised whenever material changes are made.

Where changes are significant — for example, where we introduce a new processing purpose or a new category of data sharing — we will notify active Members via their registered email address at least 7 days before the revised Policy takes effect. For minor clarifications that do not affect the substance of our data practices, we may update the Policy without advance notice.

Continued use of the Platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you disagree with any amendments, you should discontinue use of the Platform and submit a voluntary account closure request in accordance with our Terms & Conditions.

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data by mpo2qq, please contact our Data Protection team through the following channel:

• Email: [email protected] — please use the subject line "Privacy Enquiry" or "Data Rights Request" to ensure prompt routing.
• Live Chat: Available 24/7 via the Platform interface, staffed by Indonesian-speaking agents at all hours across WIB, WITA, and WIT time zones.

We aim to acknowledge all privacy-related enquiries within 24 hours and to provide a full response within 30 calendar days. If you are not satisfied with our response to a data protection complaint, you have the right to escalate your complaint to the relevant data protection supervisory authority in your jurisdiction.