Privacy Policy

1.Introduction

mpoid ("we", "us", "our", "the Company") operates the online gambling and sports betting platform accessible at https://mpoid.cam (the "Platform"). We are committed to protecting the personal data and privacy of all registered players and visitors, including players located across Malaysia — in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and beyond.

This Privacy Policy ("Policy") explains in clear, accessible English what personal data we collect from you, the purposes for which we collect and use it, how long we retain it, with whom we may share it, and what rights you have in relation to your data. This Policy is incorporated by reference into our Terms and Conditions and should be read alongside them.

By accessing the Platform, creating an account, or making use of any of our Services, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree with this Policy, you must not use the Platform.

2.Definitions

In this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person ("data subject"), including name, identification number, contact details, financial data, or online identifiers.
• "Processing" means any operation performed on personal data, whether automated or manual, including collection, recording, storage, adaptation, use, disclosure, or deletion.
• "Data Controller" means the entity that determines the purposes and means of processing personal data. mpoid is the Data Controller in respect of all personal data collected through the Platform.
• "Data Processor" means a third party that processes personal data on behalf of the Data Controller under a written data processing agreement.
• "Consent" means freely given, specific, informed, and unambiguous indication of the data subject's agreement to the processing of their personal data.
• "KYC Data" means identity and document verification data collected as part of the Know Your Customer process, including government-issued identification documents such as the Malaysian MyKad.
• "Cookies" means small text files placed on your device by the Platform to store session and preference information.

3.Personal Data We Collect

mpoid collects personal data through three principal channels: data you provide directly, data generated automatically through your use of the Platform, and data received from third parties such as payment processors.

3.1 Data You Provide Directly

• Full legal name and date of birth;
• Residential address (including city, postcode, and country);
• Email address and contact phone number;
• Username and encrypted password;
• Government-issued identification documents for KYC verification (e.g., Malaysian MyKad, passport);
• Payment method information (e.g., bank account details, e-wallet identifiers for Touch 'n Go, Boost, GrabPay; DuitNow and FPX-linked banking details);
• Responsible gambling self-declarations and self-exclusion requests.

3.2 Data Collected Automatically

• IP address and geolocation data;
• Device type, operating system, and browser information;
• Session duration and login timestamps;
• Betting history, game activity logs, and transaction records;
• Cookie and tracking pixel data (see Section 7).

3.3 Data Received from Third Parties

• Identity verification results from KYC service providers;
• Transaction confirmation data from payment processors (Maybank, CIMB, Public Bank, Hong Leong, FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay);
• Fraud screening signals from anti-fraud and risk management partners.

4.Data Processing & Legal Basis

mpoid processes your personal data only where we have a valid legal basis to do so. The legal bases upon which we rely are as follows:

5.How We Use Your Personal Data

We use the personal data we collect for the following specific purposes:

• Account Management: Creating, maintaining, and securing your mpoid player account.
• Transaction Processing: Processing MYR deposits via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and linked Malaysian bank accounts; processing withdrawal requests.
• KYC & Regulatory Compliance: Verifying your identity and age (21+) as required by our licensing obligations and applicable anti-money laundering regulations.
• Customer Support: Providing assistance via live chat, email, and other support channels in English, Bahasa Melayu, and Chinese.
• Responsible Gambling: Monitoring betting patterns, enforcing deposit and loss limits, and implementing self-exclusion requests.
• Security and Fraud Prevention: Detecting and preventing unauthorised account access, fraudulent transactions, and abuse of our Platform.
• Platform Improvement: Analysing aggregated and anonymised usage data to improve the quality, performance, and features of the Platform.
• Marketing Communications: Sending promotional offers, bonus notifications, and news about mpoid products — only where you have given your consent and subject to your right to unsubscribe at any time.

6.Data Sharing & Disclosure

mpoid does not sell, rent, or trade your personal data to third parties. We share personal data only in the circumstances described below:

6.1 Service Providers and Data Processors

We engage third-party service providers to assist with the operation of the Platform under binding data processing agreements. These include payment processors (including Malaysian banks and e-wallet operators such as Touch 'n Go, Boost, and GrabPay), KYC verification providers, fraud detection and risk management companies, cloud hosting and infrastructure providers, and customer support platform operators.

6.2 Regulatory and Legal Disclosure

We may disclose your personal data to regulatory authorities, law enforcement agencies, courts, or other government bodies where required by applicable law, court order, or regulatory direction — including requirements arising from our gaming licence, anti-money laundering obligations, or fraud investigations.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or substantially all of the Company's assets, your personal data may be transferred to the successor entity as part of that transaction. We will endeavour to notify you of any such transfer and any material changes to this Policy that may result.

7.Cookies & Tracking Technologies

mpoid uses cookies and similar tracking technologies to operate the Platform, remember your preferences, and understand how players interact with our site. The following types of cookies are used:

• Strictly Necessary Cookies: Essential for the Platform to function. These cannot be disabled as they enable core features such as session authentication and security.
• Functional Cookies: Remember your preferences such as language settings, preferred payment methods, and display options.
• Analytics Cookies: Collect anonymised data about how players use the Platform to help us improve performance and usability. We use aggregated data only.
• Security Cookies: Used to detect fraud, bot activity, and suspicious login behaviour.

You may control non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. mpoid does not use third-party advertising or cross-site tracking cookies.

8.Data Security

mpoid implements robust technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers;
• Encryption of sensitive data at rest within our database infrastructure;
• Multi-factor authentication for all administrative access to player data systems;
• Regular security audits and penetration testing by independent security professionals;
• Strict access controls limiting employee access to personal data on a need-to-know basis;
• Continuous monitoring for suspicious account activity and automated fraud signals.

While we take all reasonable precautions to protect your data, no system is entirely immune to security risks. If you suspect that your account has been compromised, please contact us immediately at [email protected].

9.Data Retention

We retain personal data for no longer than is necessary to fulfil the purposes described in this Policy, subject to any applicable legal, regulatory, or licensing retention requirements. The following retention periods apply as a general guide:

• Active Account Data: Retained for the duration of your account relationship with mpoid.
• KYC Documentation: Retained for a minimum of 5 years following account closure in accordance with standard anti-money laundering compliance obligations.
• Transaction Records: Retained for a minimum of 5 years following the date of each transaction.
• Support Communications: Retained for up to 3 years from the date of the last interaction.
• Marketing Consent Records: Retained until you withdraw consent and for a reasonable period thereafter as evidence of consent.

Following the expiry of the applicable retention period, personal data will be securely deleted or anonymised in a manner that prevents re-identification.

10.Your Rights

As a data subject, you hold the following rights in relation to your personal data held by mpoid. You may exercise any of these rights by contacting us at [email protected]:

We will respond to all verified data rights requests within a reasonable timeframe, typically within 30 days of receipt. We may require identity verification before fulfilling any request to protect against fraudulent access.

11.Minors & Age Verification

The mpoid Platform is strictly intended for adults aged 21 and above. We do not knowingly collect or process personal data from individuals under the age of 21. Age verification is a mandatory component of our KYC process — you will be required to provide a valid government-issued ID confirming your date of birth before any withdrawal is processed.

If we discover that a registered account is held by a person under 21 years of age, we will immediately close the account, void all balances and winnings, and securely delete or anonymise the personal data associated with that account, subject to any applicable legal retention requirements.

12.International Data Transfers

mpoid may transfer your personal data to third-party service providers and infrastructure partners located outside of Malaysia where necessary to operate the Platform. Where such transfers occur, we take steps to ensure that your data receives an equivalent level of protection to that provided under applicable data protection law, including through the use of contractual safeguards such as data processing agreements with standard contractual clauses.

We do not transfer personal data to countries or jurisdictions that do not provide an adequate level of data protection without appropriate safeguards in place.

13.Amendments to This Policy

mpoid reserves the right to update this Privacy Policy at any time. Where material changes are made, we will notify registered players via the email address associated with their account and/or by displaying a prominent notice on the Platform prior to the changes taking effect.

The version of this Policy bearing the most recent "Last Updated" date at the top of this page shall be the version in force. We encourage you to review this page periodically to stay informed about how we protect your data. Your continued use of the Platform following any update constitutes your acceptance of the revised Policy.

14.Contact Us

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or wish to raise a privacy concern, please contact the mpoid Data Privacy team:

• Email: [email protected]
• Channel: Live Chat (24/7) — available directly on the Platform
• Support Languages: English, Bahasa Melayu, 中文
• Response Commitment: Data rights requests acknowledged within 3 business days; resolved within 30 days

We are committed to addressing all privacy enquiries promptly and transparently. Our support team operates on Malaysia Standard Time (MST, UTC+8) and is available around the clock via live chat for urgent matters.