Privacy Policy

MPO88Asia ("we", "us", "our", "the Platform") operates the online gaming and sports betting platform accessible at https://mpo88asia.cam. We act as the data controller in respect of all personal data collected from users ("you", "your", "Member") who register for or interact with our services.

This Privacy Policy has been prepared in accordance with applicable data protection principles and explains our practices regarding the collection, use, storage, disclosure, and protection of personal data. It applies to all individuals who access or use the Platform, including registered Members and visitors from Malaysia and other jurisdictions.

By creating an account on MPO88Asia, or by continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to our processing of your personal data as described herein. If you do not agree with any part of this Policy, you should discontinue use of the Platform and contact us to close your account.

For the purposes of this Privacy Policy, the following terms shall carry the meanings set out below:

• "Personal Data" means any information that identifies or could reasonably be used to identify a living individual, either directly or in combination with other data.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, transmission, and deletion.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data — in this case, MPO88Asia.
• "Data Processor" means a third party that processes Personal Data on behalf of the Data Controller, subject to contractual obligations.
• "Consent" means a freely given, specific, informed, and unambiguous indication of agreement to the processing of Personal Data.
• "Cookies" means small text files stored on your device by a website to enable functionality, track behaviour, and improve user experience.
• "KYC" means Know Your Customer — the process of verifying a Member's identity and source of funds to comply with anti-money laundering and responsible gambling obligations.
• "Sensitive Data" means categories of Personal Data that warrant heightened protection, including government-issued identification numbers, financial account details, and data relating to health or gambling behaviour.

MPO88Asia collects only the personal data that is necessary to provide, maintain, and improve our services, and to fulfil our legal and regulatory obligations. The categories of data we collect are described in the table below.

We do not collect Sensitive Data beyond what is strictly necessary for KYC compliance and responsible gambling obligations. We do not collect biometric data, racial or ethnic origin data, or data relating to political opinions or religious beliefs.

MPO88Asia collects Personal Data through the following methods:

• When you complete the account registration form on the Platform.
• When you submit identity documents for KYC verification.
• When you make a deposit or request a withdrawal via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, or USDT TRC20.
• When you contact our customer support team via live chat, email, or WhatsApp.
• When you participate in surveys, promotions, or feedback requests.

• Server logs that record your IP address, device type, and session data each time you access the Platform.
• Cookies and similar tracking technologies embedded in Platform pages (see Section 8 for details).
• Gaming activity data generated automatically as you navigate and play on the Platform.

• Identity and fraud screening services used during KYC verification to confirm the authenticity of submitted documents.
• Payment processors and financial institutions who may provide verification of transaction details.
• Regulatory or law enforcement bodies where we are legally required to receive or disclose information.

MPO88Asia processes your Personal Data only for specified, explicit, and legitimate purposes. The table below sets out our primary processing purposes and the legal basis for each:

MPO88Asia does not sell, rent, or trade your Personal Data to third parties for their own marketing or commercial purposes under any circumstances. We may share your data only in the limited circumstances described below:

• Payment Service Providers: We share necessary financial and identity data with payment processors including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, and USDT TRC20 networks to facilitate deposits and withdrawals. These providers process your data solely to complete the requested transaction.
• Identity Verification Services: During KYC procedures, your identity documents and personal details may be shared with third-party verification providers who confirm their authenticity. These providers are contractually bound to process data only for verification purposes.
• Game Content Providers: Aggregated, anonymised gaming session data may be shared with game studios for quality assurance and RTP auditing purposes. No personally identifiable information is included in these transfers.
• Fraud and Security Service Providers: Technical data including IP addresses and device identifiers may be shared with cybersecurity and fraud prevention services to protect the Platform and its members.
• Legal and Regulatory Authorities: We may disclose Personal Data to law enforcement agencies, regulatory bodies, or government authorities where we are legally required to do so, including for the purposes of anti-money laundering compliance and fraud investigation.
• Professional Advisers: Legal counsel, auditors, and accountants may access relevant data under strict confidentiality obligations in connection with their professional services to MPO88Asia.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of the Platform's assets, your Personal Data may be transferred as part of that transaction, subject to the same privacy protections outlined in this Policy.

All third parties who receive Personal Data from MPO88Asia are required to process it in accordance with applicable data protection standards and our contractual requirements.

MPO88Asia retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our standard retention periods are as follows:

• Account and identity data is retained for the duration of your active membership and for a minimum of five (5) years following account closure, to satisfy anti-money laundering and regulatory record-keeping requirements.
• Transaction and financial records are retained for a minimum of seven (7) years from the date of each transaction, in line with standard financial record-keeping obligations.
• Gaming activity records are retained for a minimum of three (3) years following your last gaming session, for responsible gambling monitoring and dispute resolution purposes.
• Customer support communications are retained for a minimum of two (2) years following the resolution of each case.
• Technical and log data is typically retained for up to twelve (12) months from the date of collection, subject to security and fraud investigation requirements.

Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised. Where data is subject to a legal hold — for example, in connection with an ongoing investigation or legal proceeding — it will be retained until that hold is lifted.

MPO88Asia uses cookies and similar tracking technologies to operate the Platform, improve performance, and understand how users interact with our services. The categories of cookies we use are set out below:

• Strictly Necessary Cookies: Essential for the Platform to function correctly. These include session authentication cookies and security tokens. They cannot be disabled without materially affecting your ability to use the Platform.
• Functional Cookies: Remember your preferences and settings — such as language choice, last game played, and display preferences — to improve your experience on return visits.
• Analytical Cookies: Collect aggregated, anonymised data about how the Platform is used — including page views, session durations, and navigation paths — to help us identify areas for improvement.
• Security Cookies: Track IP addresses and device fingerprints to detect suspicious activity, prevent fraud, and protect the Platform from bot traffic and account takeover attempts.

You may control cookie settings through your browser. Most browsers allow you to block or delete cookies, though doing so may impact Platform functionality. Strictly necessary cookies cannot be declined. We do not use third-party advertising cookies or sell cookie-derived data to advertisers.

The security of your Personal Data is a top priority for MPO88Asia. We implement a layered approach to data security, combining technical, organisational, and procedural measures to protect against unauthorised access, disclosure, alteration, or destruction of your data.

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the Platform is encrypted in transit using industry-standard Transport Layer Security (TLS) protocols.
• Data-at-Rest Encryption: Sensitive personal and financial data stored in our databases is encrypted at rest to prevent unauthorised access in the event of a system breach.
• Access Controls: Access to Personal Data is restricted on a strict need-to-know basis. Staff with access to Member data are subject to confidentiality obligations and receive regular data protection training.
• Incident Response: We maintain a documented incident response procedure. In the event of a data breach that poses a risk to your rights, we will notify affected Members and relevant authorities in accordance with applicable requirements.
• Penetration Testing: The Platform undergoes regular security assessments, including penetration testing and vulnerability scanning, to identify and remediate potential weaknesses before they can be exploited.

Subject to applicable law and our legitimate regulatory obligations, you have the following rights in respect of your Personal Data held by MPO88Asia. To exercise any of these rights, please contact our Data Privacy team through the channels described in Section 14.

We will respond to verified data rights requests within 30 calendar days of receipt. Where a request is complex or involves a high volume of data, we may extend this period by an additional 60 days, in which case we will notify you of the extension and the reason for it. There is no charge for submitting a data rights request in standard circumstances.

Please note that certain rights are subject to exceptions. For example, we cannot delete data that we are legally required to retain under AML or financial record-keeping regulations. Where we cannot fulfil a request, we will explain the reason clearly in our response.

MPO88Asia is strictly an adults-only platform. Access to and registration on the Platform is prohibited for any individual under the age of 21 years. We do not knowingly collect, process, or retain Personal Data from any person under the age of 21.

All new account registrations are subject to age verification as part of our KYC process. Where we discover, at any point, that a Member has provided false information regarding their age and is under 21, we will immediately suspend the account, forfeit any outstanding balance derived from gaming activity, and securely delete the data of the underage individual in accordance with our legal obligations.

Parents and guardians who believe a minor has accessed or registered on the Platform should contact us immediately at the email address provided in Section 14 so that we may take prompt remedial action.

As an online platform serving users across Malaysia, certain Personal Data may be processed or stored on servers or by service providers located outside of Malaysia. This may include data processed by payment service providers, identity verification vendors, or cloud infrastructure providers operating in other jurisdictions.

Where Personal Data is transferred internationally, MPO88Asia ensures that appropriate safeguards are in place to protect the data. These safeguards may include contractual data protection clauses, vendor due diligence assessments, and technical security measures that meet or exceed the standards applicable in Malaysia.

By using the Platform, you acknowledge and consent to the transfer of your Personal Data to jurisdictions outside Malaysia where it is necessary for the provision of services described in this Privacy Policy, provided that such transfers are carried out in accordance with applicable data protection standards.

MPO88Asia reviews and updates this Privacy Policy periodically to reflect changes in our data processing practices, applicable law, or Platform functionality. Where updates are material — meaning they substantively change how we collect or use your Personal Data — we will provide notice by posting the updated Policy on the Platform and updating the "Last Updated" date at the top of this page.

For significant changes that affect your fundamental privacy rights, we will make additional efforts to bring the update to your attention, such as through a notification on login or a communication to your registered email address.

Your continued use of the Platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. We recommend reviewing this Policy periodically. The current version is always available at https://mpo88asia.cam/privacy-policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data by MPO88Asia, please reach out to us through any of the following channels. We will always respond in English, and our team is also available in Bahasa Melayu and Mandarin.

• Email (Data Privacy Inquiries): [email protected] — Mark your email subject with "Privacy Policy Inquiry" or "Data Rights Request" for prioritised routing. We aim to acknowledge receipt within 24 hours and respond fully within 30 calendar days.
• Live Chat: Available 24/7 directly on the Platform. Suitable for general privacy questions, data rights requests, and marketing opt-out requests. Average response time is under 5 minutes.
• WhatsApp: Available 24/7 in English, Bahasa Melayu, and Mandarin for Members who prefer a messaging-based channel.