Privacy Policy MPO25 — Personal Data Protection for Malaysian Players

This Privacy Policy ("Policy") is issued by mpo25 and applies to all users of the mpo25 platform, including the mpo25.fun website, Android and iOS mobile apps, and all related services we provide.

This Policy describes how mpo25 collects, stores, uses, discloses, and protects your personal data in accordance with the Malaysia Personal Data Protection Act 2010 (PDPA) and relevant legal provisions.

By registering a mpo25 account, using our services, or simply browsing our platform, you acknowledge that you have read and understood this Privacy Policy.

Mpo25 collects your personal data through several means, including information you provide directly, data collected automatically during platform use, and information from legitimate third-party sources.

The personal data we collect is used solely for purposes related to providing mpo25 services. The following are the primary purposes for which your data is used:

• Account Management: Create, manage and verify your mpo25 account, including required KYC processes
• Service Delivery: Enables you to access and use all features of the mpo25 platform, including games, deposits and withdrawals
• Payment Processing: Process your deposits and withdrawals securely via your chosen payment method
• Security & Fraud: Detect and prevent fraudulent activity, money laundering and platform abuse
• Customer Support: Respond to enquiries, resolve complaints and provide technical assistance
• Service Communications: Send important notifications related to your account, security and changes to terms
• Platform Improvements: Analyse usage patterns to improve user experience and platform features
• Legal Compliance: Fulfil regulatory obligations and applicable legal reporting requirements

Mpo25 does not use your data for third-party marketing purposes without your explicit consent. Any marketing communications from mpo25 itself will include an option to unsubscribe.

Mpo25 does not sell your personal data to any third party. However, there are certain situations where we may need to share your data with specific parties, as follows:

• Payment Service Providers: Information required to process your deposits and withdrawals is shared with appointed payment processors, subject to strict confidentiality agreements
• Game Providers: Minimum technical data required to operate games is shared with game studios used on the mpo25 platform
• Technology Providers: Cloud infrastructure providers and technical service vendors we use have limited access to data necessary to operate those services
• Authorities: mpo25 will disclose data when required by law, court order, or a valid request from law enforcement authorities.
• Fraud Prevention: In certain cases, minimum information may be shared with fraud prevention agencies to protect the platform and other players

Mpo25 implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction.

• Encryption of Data in Transit: All communications between your device and mpo25 servers are secured with industry-standard 256-bit TLS/SSL encryption.
• Encryption of Stored Data: Sensitive data such as payment information and identity documents are stored in encrypted format in our database
• Access Control: Access to player personal data is restricted to mpo25 staff with a legitimate need only, with audit logs recorded
• Continuous Monitoring: Our systems are monitored 24/7 to detect any suspicious activity or intrusion attempts.
• Regular Security Audits: Security assessments and penetration testing are conducted periodically by independent security experts
• Incident Management: A clear incident response procedure is in place to address any data security breaches promptly and effectively

Mpo25 uses cookies and similar tracking technologies to enhance user experience, analyse platform performance, and ensure the security of your login session.

Types of cookies we use:

• Essential Cookies: Required for core platform functions such as login sessions and security preferences. These cookies cannot be disabled
• Performance Cookies: Collect information on how you use the platform (pages visited, time spent) to help us improve our services
• Preference Cookies: Save your preferences such as language, display settings and other preferences to deliver a more personalised experience

You can control or disable cookies through your web browser settings. However, disabling essential cookies may affect the functionality of the mpo25 platform. For mobile apps, you can manage tracking permissions through your device settings.

As a data subject under Malaysia's PDPA, you have the following rights regarding the personal data we hold:

• Right of Access: You have the right to obtain a copy of the personal data we hold about you, along with information on how it is used
• Right to Rectification: You have the right to request correction of inaccurate or incomplete personal data within a reasonable timeframe
• Right to Erasure: In certain circumstances, you have the right to request deletion of your personal data when it is no longer required for the original purpose of collection
• Right to Restrict Processing: You have the right to request that we stop processing your data for direct marketing purposes at any time
• Right to Withdraw Consent: Where data processing is based on your consent, you have the right to withdraw that consent at any time

To exercise any of these rights, please contact the mpo25 support team via live chat or email. Your request will be processed within 14 business days. We may need to verify your identity before processing any data-related request.

Mpo25 only retains your personal data for as long as necessary for the purposes stated in this policy, or as long as required to fulfil our legal obligations.

• Active Account Data: Retained for as long as your account is active on the mpo25 platform
• Financial Transaction Data: Retained for a minimum of 7 years from the transaction date in line with Malaysia's financial regulatory requirements
• Closed Account Data: After account closure, personal data is retained for 5 years for regulatory compliance purposes before being securely deleted.
• Customer Support Logs: Support conversation records are retained for 2 years from the date of the last interaction
• Technical Log Data: System and technical logs are retained for 90 days for security and troubleshooting purposes

When the retention period expires, data is securely deleted using methods that ensure recovery is not possible.

The mpo25 platform is exclusively for individuals aged 18 and above. mpo25 strictly does not knowingly collect or process personal data from anyone under the age of 18.

If we find that personal data has been collected from someone under the age of 18, we will take immediate steps to delete that data and close the account in question. If you believe a minor has registered an account on our platform, please contact us immediately.

Mpo25 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our business practices, legal requirements, or technologies used.

For material changes, we will notify you via in-platform notification or email to the address registered on your account at least 14 days before the changes take effect. The "Updated" date at the top of this document always reflects the latest version of this policy.

Continued use of the mpo25 platform after any changes to this Privacy Policy constitutes acceptance of the updated policy.

If you have any questions, concerns, or complaints about how mpo25 handles your personal data, or if you wish to exercise any of the rights stated in this policy, please contact us via:

• Live Chat: Available 24 hours a day, 7 days a week, directly from the mpo25 platform or app.
• Privacy Email: [email protected] — please state "Data Privacy Enquiry" in the email subject line for faster processing.

We are committed to addressing all privacy-related inquiries seriously and within a reasonable timeframe. For complaints that cannot be resolved directly with us, you have the right to refer the matter to the Department of Personal Data Protection (JPDP) Malaysia.