mpo22 Privacy Policy

In this Privacy Policy, the following terms carry the meanings defined below:

• "mpo22," "Platform," "We," "Us," or "Operator" refers to the internationally incorporated entity that owns, operates, and is responsible for the mpo22 online gaming platform accessible at mpo22.app.
• "You," "Member," or "User" means any natural person who visits, registers on, or interacts with the mpo22 Platform.
• "Personal Data" means any information that identifies or could reasonably be used to identify a specific natural person, directly or indirectly. This includes, but is not limited to, name, date of birth, email address, phone number, national identity number, payment details, IP address, and device identifiers.
• "Processing" means any operation or set of operations performed on Personal Data, including collection, recording, storage, alteration, retrieval, use, disclosure, transmission, or deletion.
• "Data Controller" means the entity that determines the purposes and means of Processing Personal Data — in this context, mpo22.
• "Data Processor" means any third party that processes Personal Data on behalf of mpo22 under a written data processing agreement.
• "KYC" (Know Your Customer) means the identity and age verification process mpo22 applies to comply with anti-money laundering and responsible gaming obligations.
• "Cookies" means small text files stored on your device by your web browser when you access the Platform, used to facilitate functionality, analytics, and session management.

This Privacy Policy applies to all Personal Data collected and processed by mpo22 in connection with your use of the Platform — including the website at mpo22.app, all associated subdomains, mobile web interfaces, and any communication you have with the mpo22 support team.

mpo22 acts as the Data Controller for all Personal Data collected directly from members and visitors. Where mpo22 engages third-party service providers to carry out specific processing activities on its behalf — such as payment processors, identity verification providers, and analytics platforms — those parties act as Data Processors under contractual obligations that restrict their use of your data to the specific purposes authorised by mpo22.

mpo22 is an internationally operated platform with a significant membership base across Indonesia, including in Jakarta, Surabaya, Bandung, Medan, Bali, Yogyakarta, Semarang, and Makassar. This policy is written with the data privacy expectations of Indonesian members in mind, while also reflecting internationally recognised best practices for personal data protection.

mpo22 collects Personal Data across several categories. The table below summarises what we collect and the primary reason for each category:

mpo22 does not collect sensitive categories of Personal Data such as racial or ethnic origin, political opinions, religious beliefs, health information, or biometric data unless specifically required for KYC verification and with your explicit consent.

mpo22 collects Personal Data through the following channels:

• Direct Submission: Information you provide when registering an account, completing KYC, making a deposit or withdrawal, contacting support, or responding to a promotion.
• Automated Technical Collection: Data gathered automatically when you access the Platform, including IP address, device identifiers, browser metadata, and session activity logs collected via server logs and cookie technologies.
• Third-Party Payment Providers: Transaction confirmation data received from Indonesian payment processors including bank transfer gateways (BCA, BRI, BNI, Mandiri) and e-wallet providers (OVO, DANA, GoPay) when you initiate a deposit or withdrawal.
• Identity Verification Partners: Where mpo22 uses a third-party KYC provider, that provider may share verification outcome data (for example, confirmation that a presented document matches the Member's registered details) with mpo22 in a privacy-preserving format.
• Gaming Software Providers: Game studios such as Pragmatic Play, Evolution Gaming, and PG Soft may share session-level technical data with mpo22 for the purposes of dispute resolution and responsible gaming monitoring.

mpo22 processes your Personal Data on one or more of the following legal bases:

• Contractual Necessity: Processing required to fulfil the contract between mpo22 and the Member — specifically, to operate your account, accept deposits, settle withdrawals, and provide access to games.
• Legal Obligation: Processing required to comply with anti-money laundering (AML) regulations, KYC requirements, and any other applicable legal or regulatory obligations.
• Legitimate Interests: Processing carried out for mpo22's legitimate business interests, including platform security, fraud prevention, product improvement, and responsible gaming monitoring, provided these interests are not overridden by your privacy rights.
• Consent: Processing based on your freely given, specific, and informed consent — for example, where mpo22 sends you marketing communications about promotions or new games. You may withdraw consent at any time by contacting support.

mpo22 uses the Personal Data it collects for the following specific purposes:

• Account Management: To create, maintain, and administer your mpo22 Member account, including processing login sessions and managing your account balance.
• Transaction Processing: To process deposits via BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja, and other supported payment methods, and to process withdrawal requests to your registered payment account.
• Identity Verification: To verify that you meet the 21+ age requirement and to confirm your identity in compliance with KYC obligations before releasing withdrawals above applicable thresholds.
• Security & Fraud Prevention: To detect, investigate, and prevent fraudulent activity, unauthorised account access, money laundering, bonus abuse, collusion, and other prohibited conduct as defined in the mpo22 Terms & Conditions.
• Responsible Gaming: To monitor gaming patterns that may indicate problem gambling behaviour, to apply deposit limits and self-exclusion requests you have set, and to contact you if our responsible gaming monitoring identifies concerning activity.
• Customer Support: To respond to your queries, complaints, and dispute submissions, and to maintain records of those interactions for quality assurance and legal compliance purposes.
• Platform Improvement: To analyse aggregated and anonymised usage data — including game performance metrics, navigation patterns, and device-level analytics — to improve the platform's stability, design, and game catalogue.
• Marketing Communications: To send you promotional emails, bonus notifications, or personalised offers where you have consented to receive marketing communications. You may opt out at any time.

mpo22 does not sell your Personal Data. We may share your data with third parties only in the following limited circumstances:

• Payment Processors: Your banking and e-wallet details are shared with payment gateway partners — including providers servicing BCA, BRI, BNI, Mandiri, OVO, DANA, and GoPay — strictly to process your deposit and withdrawal instructions.
• KYC & Identity Verification Providers: Identity document data may be shared with our contracted third-party KYC verification partners for the sole purpose of confirming your identity and age. These partners are contractually prohibited from using your data for any other purpose.
• Game Studio Partners: Minimal technical session data — such as Member ID and wager amount — may be shared with licensed game providers such as Pragmatic Play and Evolution Gaming to facilitate game sessions, resolve game disputes, and maintain audit trails.
• Legal & Regulatory Disclosure: mpo22 may disclose Personal Data to law enforcement authorities, regulators, or courts when required to do so by law, court order, or official regulatory request. mpo22 will, where legally permissible, notify the Member of such a disclosure request.
• Business Transfer: In the event of a merger, acquisition, or sale of all or substantially all of mpo22's assets, Member data may be transferred to the acquiring entity. Members will be notified in advance of any such transfer and will have the option to close their accounts.
• Group Companies: mpo22 may share data with entities within its corporate group where necessary for the purposes described in this policy and subject to equivalent data protection obligations.

All third-party Data Processors engaged by mpo22 are required to enter into written data processing agreements that restrict their use of Member data to the specific tasks assigned by mpo22 and mandate appropriate technical and organisational security measures.

mpo22 uses cookies and similar tracking technologies to operate the Platform, maintain your session, and gather analytics data. The following categories of cookies are used:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function. They enable features such as session authentication, shopping cart equivalents (for bonus selections), and secure area access. You cannot opt out of these cookies without losing access to core Platform functionality.
• Functional Cookies: These cookies remember your preferences, such as language settings and display options, to provide a personalised experience across sessions. They are not required for the Platform to operate but improve usability.
• Analytics Cookies: mpo22 uses analytics tools to understand how members navigate the Platform, which pages are most visited, and where technical errors occur. This data is collected in aggregated and anonymised form where possible. You may opt out of analytics cookies.
• Security Cookies: Cookies that support fraud detection, CSRF (cross-site request forgery) protection, and rate-limiting functions used to protect your account from unauthorised access.

You can manage cookie preferences through your browser settings. Note that disabling strictly necessary or security cookies may impair Platform functionality and may affect your ability to log in or process transactions. mpo22 does not use third-party advertising or tracking cookies that report to external ad networks.

mpo22 implements a layered security architecture to protect your Personal Data against unauthorised access, accidental loss, alteration, and disclosure. Key security measures include:

• Transport Security: All data transmitted between your device and mpo22 servers is encrypted using TLS 1.3 with strong cipher suites. mpo22 enforces HTTP Strict Transport Security (HSTS) to prevent protocol downgrade attacks.
• Data Encryption at Rest: Personal Data and financial records stored on mpo22 servers are encrypted at rest using AES-256 encryption. Encryption keys are managed through a dedicated key management system with strict access controls.
• Password Security: Member account passwords are hashed using bcrypt with a high work factor before storage. mpo22 never stores plaintext passwords and cannot retrieve your password — only reset it via a secure, time-limited reset link sent to your registered email.
• Access Controls: Access to production systems and Member data is restricted to authorised personnel on a strict need-to-know basis. All internal access is logged and audited. Administrative actions that affect Member accounts require multi-factor authentication.
• Fraud Monitoring: Real-time anomaly detection systems monitor account activity for suspicious patterns, including unusual login locations, rapid deposit-withdrawal sequences, and betting patterns inconsistent with normal member behaviour.
• Incident Response: mpo22 maintains a documented data breach response procedure. In the event of a data breach that poses a risk to Member rights and freedoms, mpo22 will notify affected Members without undue delay and will take immediate steps to contain and remediate the breach.

While mpo22 takes all reasonable technical and organisational measures to protect your data, no internet-based platform can guarantee absolute security. You share responsibility for securing your own account by keeping your password confidential and enabling any available two-factor authentication features.

mpo22 retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention guidelines apply:

• Active Member Data: Identity, contact, and financial data are retained for the duration of the Member's active account relationship with mpo22.
• Transaction Records: Financial transaction records, including deposit and withdrawal history, are retained for a minimum of five (5) years following the transaction date to meet AML record-keeping requirements.
• KYC Documentation: Identity verification documents are retained for a minimum of five (5) years following the closure of the Member's account or the last KYC review, whichever is later.
• Support Communications: Customer support chat logs and email correspondence are retained for three (3) years following the close of the relevant support interaction, for quality assurance and dispute evidence purposes.
• Gaming Activity Logs: Detailed bet and game session records are retained for five (5) years to support dispute resolution, responsible gaming audits, and regulatory compliance.
• Analytics Data: Aggregated and anonymised analytics data may be retained indefinitely as it no longer constitutes Personal Data. Non-anonymised session-level analytics data is retained for a maximum of 24 months.
• Closed Accounts: Following voluntary account closure or termination by mpo22, Personal Data is retained for the minimum period required by applicable law, after which it is securely deleted or irreversibly anonymised.

As an mpo22 member, you hold the following rights with respect to your Personal Data. To exercise any of these rights, contact the mpo22 support team at [email protected] with the subject line "Privacy Rights Request." We will respond within 30 days of receiving a valid request.

Where mpo22 processes your data based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing that occurred before withdrawal. Withdrawal of consent for processing that is necessary for account operation (such as KYC verification) may require account closure.

mpo22 is strictly an adults-only platform. Registration and access are prohibited for persons under 21 years of age. mpo22 does not knowingly collect Personal Data from individuals under the age of 21.

Where mpo22 discovers or has reasonable grounds to believe that a Member is under 21, the Account will be suspended immediately, all Bonus Funds and winnings will be voided, and the Member's Personal Data will be handled in accordance with applicable minor data protection obligations. The Member's real-money deposit balance will be reviewed and handled on a case-by-case basis.

Account holders are responsible for ensuring that no minor accesses their mpo22 Account or uses their device to access the Platform. mpo22 recommends the use of device-level parental control software where minors may have access to shared devices.

mpo22 is an internationally operated platform. Your Personal Data may be transferred to and processed in jurisdictions outside Indonesia where mpo22's servers, affiliated entities, or contracted Data Processors are located. These jurisdictions may apply different data protection laws from those applicable in Indonesia.

Where such transfers occur, mpo22 ensures that appropriate safeguards are in place to protect your Personal Data to a standard at least equivalent to that provided by this policy. These safeguards may include contractual data protection clauses, use of processors located in jurisdictions with adequate data protection frameworks, or other legally recognised transfer mechanisms.

By registering an mpo22 Account and accepting this Privacy Policy, you acknowledge and consent to the international transfer of your Personal Data as described in this section.

mpo22 reserves the right to update this Privacy Policy at any time to reflect changes in platform operations, legal obligations, or data processing practices. Where changes are material — meaning they affect how your data is used in ways that are less protective than the current policy or extend the scope of data collection — mpo22 will notify registered Members by email at least 14 days before the changes take effect.

The "Last Updated" date displayed at the top of this page indicates when the most recent version was published. Continued use of the mpo22 Platform following notification of a policy update constitutes your acceptance of the revised terms. If you do not accept the revised Privacy Policy, you should close your Account before the effective date of the changes.

Historical versions of this Privacy Policy are available upon written request to [email protected].

For any privacy-related queries, data rights requests, or concerns about how mpo22 handles your Personal Data, please contact us through the following channel. All privacy requests are handled confidentially by a dedicated team member.

For questions specifically about our Terms & Conditions, responsible gaming tools, or general account management, please visit the respective pages linked in the footer below.