1.Definitions
In this Privacy Policy, the following terms carry the meanings below unless the context requires otherwise:
- "Personal Data" means any information that identifies or could reasonably be used to identify a natural person, directly or indirectly, including name, identification number, location data, or online identifiers.
- "Processing" means any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, or deletion.
- "Data Controller" means mpo08, being the entity that determines the purposes and means by which Personal Data is processed.
- "Data Processor" means any third party that processes Personal Data on behalf of mpo08 under a contractual arrangement.
- "Member" / "You" means any individual who has registered or is in the process of registering an account on the mpo08 Platform.
- "Platform" means the mpo08 website (https://mpo08.cam), any associated mobile applications, and all related digital services.
- "KYC Data" means identity-verification documents and information submitted by a Member during the Know Your Customer verification process, including national identity cards (KTP Nasional), proof of address, and selfie photographs.
- "Cookies" means small data files placed on a Member's device by the Platform to support functionality, analytics, and user-experience optimisation.
2.Data Controller
2.1 mpo08 acts as the Data Controller in respect of all Personal Data collected through the Platform. As Data Controller, mpo08 is responsible for ensuring that Personal Data is processed lawfully, fairly, and transparently, and in a manner consistent with the applicable data protection laws of the jurisdiction in which mpo08 holds its international gaming licence.
2.2 mpo08's primary member base is located in Indonesia. While the Platform operates under an international licence, mpo08 acknowledges the importance of data privacy rights recognised under international data protection frameworks and endeavours to meet standards consistent with internationally accepted best practices in data governance.
2.3 All data protection queries and subject-access requests should be directed to mpo08's Data Protection contact, reachable via support [at] mpo08.cam (plain text — not a clickable link). Please mark the subject line "Data Privacy Request" to ensure priority routing.
3.Data We Collect
3.1 Registration Data. When you create an account on mpo08, we collect: your full legal name; date of birth; email address; mobile telephone number; and your preferred currency (Indonesian Rupiah, IDR/Rp) and time zone (default WIB, UTC+7).
3.2 KYC Verification Data. To satisfy our regulatory obligations and process withdrawals, mpo08 collects: a photograph or scan of your Indonesian National Identity Card (KTP Nasional — front and back); a recent proof-of-address document; and a selfie photograph in which you hold your KTP beside your face. Where applicable, we may also request bank account confirmation documents linking your verified identity to your registered payment method.
3.3 Financial Transaction Data. mpo08 records all deposit and withdrawal transactions, including the payment method used (e.g., BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay), transaction amount in IDR/Rp, transaction timestamp, and transaction reference number.
3.4 Gambling Activity Data. mpo08 maintains records of all Wagers placed on the Platform, including game type, bet amount, odds, outcome, and timestamp. This data is used for account management, dispute resolution, responsible gaming monitoring, and regulatory compliance.
3.5 Technical & Usage Data. mpo08 automatically collects technical data when you access the Platform, including: IP address; device type and operating system; browser type and version; session duration; pages visited; and referring URL. This data is used for platform security, fraud prevention, and user-experience optimisation.
3.6 Communications Data. When you contact mpo08 support via live chat, WhatsApp, or email, we retain records of those communications for quality assurance, dispute resolution, and regulatory compliance purposes.
| Data Category | Examples | Primary Purpose |
|---|---|---|
| Identity Data | Name, date of birth, KTP number | Account registration, KYC verification |
| Contact Data | Email address, phone number | Account communications, support |
| Financial Data | Bank account details, transaction history | Payments processing, AML compliance |
| KYC Documents | KTP scan, address proof, selfie | Identity verification, regulatory compliance |
| Gambling Activity | Bet history, game sessions, win/loss records | Account management, responsible gaming |
| Technical Data | IP address, device, browser, session logs | Security, fraud prevention, analytics |
| Communications | Support chat transcripts, emails | Dispute resolution, quality assurance |
4.Legal Basis for Processing
mpo08 processes your Personal Data on the following legal bases:
- Contractual Necessity: Processing required to register your account, verify your identity, process deposits and withdrawals, settle Wagers, and provide ongoing platform access — all of which are necessary for the performance of the contract between you and mpo08.
- Legal Obligation: Processing required to comply with anti-money laundering (AML) regulations, licensing obligations, and lawful regulatory or court orders — including KYC verification, transaction monitoring, and record-keeping requirements.
- Legitimate Interests: Processing carried out for mpo08's legitimate operational interests, including fraud detection, platform security, responsible gaming monitoring, and improvement of the Platform's products and services, where these interests are not overridden by your rights.
- Consent: Where mpo08 sends you marketing communications or non-essential cookies beyond those required for platform operation, this processing is based on your consent. You have the right to withdraw consent at any time without affecting the lawfulness of prior processing.
5.How We Use Your Data
mpo08 uses your Personal Data for the following purposes:
- Account Management: Creating and maintaining your mpo08 account, authenticating your identity at login, and enabling you to use all Platform features.
- Payment Processing: Facilitating deposits via BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, and other supported Indonesian payment channels; and processing withdrawal requests to your verified payment method.
- KYC & Compliance: Verifying your identity and age (21+) in accordance with mpo08's regulatory obligations; conducting ongoing transaction monitoring for AML compliance purposes; and maintaining required records for the applicable statutory retention periods.
- Platform Security & Fraud Prevention: Detecting and preventing unauthorised account access, fraudulent transactions, bonus abuse, multiple-account registration, and other prohibited conduct as defined in the Terms & Conditions.
- Responsible Gaming: Monitoring gambling patterns to identify potential indicators of problem gambling and proactively contacting Members where responsible gaming concerns arise, in accordance with mpo08's obligations under its gaming licence.
- Customer Support: Processing and responding to your support queries, complaints, and feedback submitted via live chat, WhatsApp, or email.
- Communications: Sending you transactional notifications (deposit confirmations, withdrawal updates, KYC status), service announcements, and — where you have provided consent — promotional communications regarding mpo08 offers and VIP program updates.
- Product Improvement: Analysing aggregated, anonymised usage data to improve the Platform's functionality, game offering, payment infrastructure, and user experience.
6.Data Sharing & Disclosure
6.1 mpo08 does not sell, rent, or trade your Personal Data to any third party for commercial purposes. Disclosure of your Personal Data is limited to the following categories of recipients:
- Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga) and e-wallet providers (OVO, DANA, GoPay, ShopeePay) receive the minimum data necessary to process your transactions.
- Identity Verification Partners: Third-party KYC service providers engaged to assist with document verification and age-check processes. These providers operate under strict data processing agreements and are prohibited from using your data for any purpose beyond the provision of verification services to mpo08.
- IT Infrastructure Providers: Cloud hosting and data storage providers that process data on mpo08's behalf under contractual data processing agreements, subject to security and confidentiality obligations equivalent to those applied by mpo08.
- Regulatory and Law Enforcement Authorities: Where mpo08 is required by law, court order, or valid regulatory instruction to disclose Personal Data, we will do so. Where legally permissible, we will notify the affected Member of such a request.
- Group Companies: Where mpo08 operates as part of a corporate group, Personal Data may be shared with affiliated entities for internal administrative and compliance purposes, subject to the same data protection standards as this Policy.
6.2 In the event of a merger, acquisition, or sale of all or a material portion of mpo08's business, Personal Data held by mpo08 may be transferred to the acquiring entity as part of that transaction. Affected Members will be notified via the Platform or by email prior to any such transfer becoming effective.
7.International Data Transfers
7.1 mpo08 operates as an internationally licensed platform. Consequently, your Personal Data may be processed and stored in jurisdictions outside Indonesia, including the jurisdiction in which mpo08's gaming licence is held and the locations of our cloud infrastructure and third-party service providers.
7.2 Where Personal Data is transferred to jurisdictions that may not provide a level of data protection equivalent to that applicable in your country of residence, mpo08 implements appropriate safeguards to protect your data, including contractual clauses that impose data protection obligations on the receiving party.
7.3 By registering an Account with mpo08, you acknowledge and consent to the international transfer of your Personal Data as described in this section, subject to the safeguards outlined above.
8.Data Retention
8.1 mpo08 retains your Personal Data for as long as your Account remains active, and for a defined period thereafter as required by our regulatory, legal, and operational obligations. Specific retention periods applicable to the main data categories are as follows:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account Registration Data | Duration of account + 5 years post-closure | Regulatory / AML obligation |
| KYC Documents | Duration of account + 5 years post-closure | Gaming licence requirement |
| Financial Transaction Records | Duration of account + 5 years post-closure | AML / financial regulation |
| Gambling Activity Records | Duration of account + 3 years post-closure | Dispute resolution / licence obligation |
| Support Communications | 3 years from date of communication | Dispute resolution / quality assurance |
| Technical / Session Logs | 12 months from collection | Security / fraud prevention |
| Marketing Consent Records | Until consent is withdrawn + 3 years | Consent compliance |
8.2 Upon expiry of the applicable retention period, Personal Data will be securely deleted or irreversibly anonymised so that it can no longer be linked to an identifiable individual. Where anonymisation is not practicable, data will be securely destroyed.
9.Security Measures
9.1 mpo08 implements a layered approach to data security to protect your Personal Data against unauthorised access, disclosure, alteration, or destruction. Key technical and organisational measures include:
- Encryption at Rest: All databases containing Personal Data and KYC documents are encrypted using AES-256 encryption.
- Encryption in Transit: All data transmitted between your device and the Platform is protected by TLS 1.2+ (256-bit SSL). Connections that do not meet this standard are rejected.
- Access Controls: Access to systems containing Personal Data is restricted to authorised personnel on a need-to-know basis. All access is logged and subject to regular audit.
- Two-Factor Authentication: mpo08 offers two-factor authentication (2FA) for all Member accounts and mandates 2FA for all administrative staff access to data-holding systems.
- Penetration Testing: mpo08 commissions regular independent penetration tests and vulnerability assessments of its Platform and data infrastructure.
- Incident Response: mpo08 maintains a documented data breach response procedure. In the event of a breach affecting Member data, affected individuals and relevant authorities will be notified in accordance with applicable legal requirements.
9.2 While mpo08 applies industry-standard security measures, no digital platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your Account credentials. mpo08 will never request your password via email, live chat, or any other channel.
10.Cookies & Tracking Technologies
10.1 mpo08 uses cookies and similar tracking technologies to operate the Platform, maintain session security, and improve the user experience. The categories of cookies used by mpo08 are as follows:
10.2 mpo08 does not use third-party advertising cookies or permit third-party advertising networks to place cookies on the Platform. All cookies used by mpo08 serve an operational or analytical purpose directly related to the Platform.
10.3 You can manage cookie preferences via your browser settings. Disabling strictly necessary cookies will prevent the Platform from functioning correctly. Instructions for managing cookies in common browsers are available via the browser provider's help documentation.
11.Your Privacy Rights
Subject to applicable law and mpo08's legal obligations, you hold the following rights in relation to your Personal Data:
Right of Access
You may request a copy of the Personal Data mpo08 holds about you, together with information about how it is used and shared.
Right to Rectification
You may request correction of inaccurate or incomplete Personal Data. Account details can be updated directly in your Account settings or via support.
Right to Erasure
You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to mpo08's legal retention obligations.
Right to Restriction
You may request that mpo08 restricts processing of your data in certain circumstances — for example, while accuracy is being contested or an objection is being assessed.
Right to Data Portability
Where processing is based on consent or contract and carried out automatically, you may request your data in a structured, machine-readable format.
Right to Object
You may object to processing based on legitimate interests, including profiling for responsible gaming monitoring. mpo08 will assess each objection on its merits.
11.1 How to Exercise Your Rights. Requests to exercise any of the above rights should be submitted in writing to support [at] mpo08.cam, with the subject line "Data Rights Request." mpo08 will acknowledge your request within five (5) business days and will provide a substantive response within thirty (30) calendar days. Where a request is complex or numerous, this period may be extended by a further two months; mpo08 will notify you of any extension and the reasons for it.
11.2 Identity Verification. To protect your privacy, mpo08 will verify your identity before acting on any data rights request. You will be asked to confirm details associated with your registered account.
12.Minors & Age Restriction
12.1 mpo08 is strictly an adults-only platform. No individual under the age of 21 is permitted to register an account or use the Platform in any capacity. mpo08 does not knowingly collect Personal Data from individuals under 21.
12.2 Age verification is a mandatory step in the KYC process. Where mpo08 discovers or has reasonable grounds to suspect that a Member is under 21, the Account will be immediately suspended, all associated data will be secured pending investigation, and any funds held in the Account will be withheld. mpo08 will report confirmed cases of underage access to the relevant authorities where legally required.
12.3 If you are aware that a minor may be accessing mpo08, please notify us immediately via support [at] mpo08.cam.
13.Third-Party Links & Services
13.1 The Platform may, in limited circumstances, reference third-party services — such as payment processors or identity verification providers — in the course of delivering its functionality. These third parties operate under their own privacy policies, which mpo08 does not control.
13.2 mpo08 is not responsible for the privacy practices or content of any third-party service accessed in connection with the Platform. You are encouraged to review the privacy policies of any third-party service with which your data is shared as part of the payment or verification process.
14.Complaints & Supervisory Authority
14.1 If you have a concern about how mpo08 handles your Personal Data, we encourage you to contact us in the first instance via support [at] mpo08.cam. We will investigate all privacy complaints diligently and aim to resolve them within ten (10) business days.
14.2 If you are not satisfied with mpo08's response, you have the right to lodge a complaint with the relevant data protection supervisory authority in the jurisdiction in which you reside or where you believe the alleged infringement has taken place. mpo08 will cooperate fully with any such supervisory authority investigation.
15.Policy Amendments
15.1 mpo08 reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, our data processing practices, or the services we offer. The date of the most recent revision is displayed at the top of this page.
15.2 Where material changes are made to this Policy — for example, changes to the types of data collected, the purposes for which data is used, or the categories of third parties with whom data is shared — mpo08 will notify Members via the Platform notification system and/or by email with reasonable advance notice.
15.3 Continued use of the Platform following notification of a material amendment constitutes acceptance of the revised Privacy Policy. If you do not accept the revised Policy, please cease using the Platform and contact support to close your Account.
16.Contact Us
For any questions, concerns, or requests relating to this Privacy Policy or mpo08's data processing activities, please contact us using the details below:
- Email: support [at] mpo08.cam (plain text — not a clickable link)
- Subject Line for Data Requests: "Data Privacy Request" or "Data Rights Request"
- Subject Line for Complaints: "Privacy Complaint"
- Response Time: 5 business days for acknowledgement; 30 days for substantive response
- Support Hours: Live chat available 24/7; email handled during WIB (UTC+7) business hours
For information about mpo08's Terms & Conditions, please visit our Terms & Conditions page. For responsible gaming resources, please visit our Responsible Gaming page.