mpo303 Privacy Policy — Your Personal Data, Handled Carefully

1Definitions

In this Privacy Policy, the following terms carry the meanings set out below. "mpo303", "we", "us", and "our" refer to the operator of the mpo303 platform. "Player", "you", and "your" refer to any person who accesses or registers with mpo303. "Personal data" means any information that identifies or can reasonably identify a living individual. "Processing" covers any operation performed on personal data, including collection, storage, use, disclosure, and deletion. "Third party" means any entity that is not mpo303 or the player.

2Data We Collect

mpo303 collects personal data in three principal ways: information you provide directly, information generated by your use of the platform, and information received from trusted third parties.

We do not intentionally collect sensitive categories of personal data such as racial or ethnic origin, health information, or biometric data for identification purposes beyond what a government-issued identity document inherently contains.

3Legal Basis and Purposes for Processing

Every processing activity carried out by mpo303 relies on one of the following lawful grounds:

• Contract performance: processing necessary to create and administer your account, process deposits and withdrawals, settle bets, and provide customer support.
• Legal obligation: identity verification, anti-money-laundering checks, responsible gambling controls, record-keeping requirements imposed by our licensing framework.
• Legitimate interests: fraud prevention, platform security, abuse detection, service improvement, and internal analytics — where these interests are not outweighed by your rights.
• Consent: optional marketing communications where you have given explicit, informed, and freely given consent.

Where processing relies on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

4How We Use Your Data

mpo303 uses personal data to:

• create, verify, and administer player accounts;
• process deposits, withdrawals, and refunds through DuitNow, FPX, Maybank, CIMB, Touch 'n Go eWallet, Boost, GrabPay, and other supported channels;
• verify age and identity in compliance with applicable requirements before bonus claims, higher-value transactions, or withdrawals;
• detect and prevent fraud, money laundering, account sharing, bonus abuse, and other prohibited conduct;
• operate responsible gambling tools including deposit limits, session reminders, and self-exclusion;
• provide 24/7 customer support in English, Bahasa Melayu, and Chinese;
• send essential service messages relating to security, account changes, payment status, and policy updates;
• analyse platform performance, fix technical issues, and develop new features;
• send promotional communications where you have opted in.

5Sharing Your Data

mpo303 does not sell personal data. We may share data with the following categories of recipient for the purposes described:

• Payment processors and banking partners: Maybank, CIMB, Public Bank, Hong Leong, DuitNow operators, FPX providers, and e-wallet platforms require transactional data to process deposits and withdrawals.
• Identity and fraud-verification providers: third-party KYC services that help us confirm identity documents and screen against watchlists.
• Game content providers: live dealer studios and slot providers may receive a session token and game-round data to run certified games.
• Technology and infrastructure partners: cloud hosting, content delivery, and cybersecurity service providers operating under data-processing agreements.
• Legal and regulatory authorities: where mpo303 is required by law, court order, or the demands of a competent regulatory authority to disclose information.

All third-party data processors are bound by contractual obligations to maintain appropriate security standards, use data only for the specified purpose, and not further share it without authorisation.

6Data Retention

mpo303 retains personal data for as long as your account remains active plus any additional period required by our legal and licensing obligations. As a general guide:

• Account and identity records are retained for a minimum of five years following account closure to meet anti-money-laundering and regulatory requirements.
• Transaction records, including deposits, withdrawals, and bet history, are retained for the same minimum period.
• Customer support communications are retained for up to three years from the date of the interaction.
• Technical and usage logs may be retained for up to 12 months for security and operational purposes.

When a retention period expires, data is securely deleted, destroyed, or anonymised so that it can no longer be associated with you.

7Cookies and Tracking Technologies

mpo303 uses cookies and similar technologies to operate the platform, recognise returning users, remember preferences, maintain session security, and analyse usage patterns. Cookies are small text files placed on your device by your browser.

• Essential cookies are strictly necessary for the platform to function — including session management, login state, and security tokens. These cannot be disabled without breaking core functionality.
• Functional cookies remember your language preference, display settings, and last-visited section.
• Analytics cookies collect aggregated, anonymised data about how players navigate mpo303, helping us improve performance and fix issues.

You may control non-essential cookies through your browser settings or device privacy controls. Blocking functional or analytics cookies may affect certain features. mpo303 does not use third-party advertising or behavioural profiling cookies.

8Security Measures

mpo303 implements technical and organisational measures proportionate to the risk involved in processing your personal data. These include:

• 256-bit SSL/TLS encryption for all data in transit between your device and mpo303 servers;
• encryption at rest for stored identity documents, financial records, and sensitive account data;
• role-based access controls ensuring that only personnel with a business need can access specific categories of data;
• two-factor authentication options for player accounts;
• continuous monitoring for suspicious access patterns, intrusion attempts, and system anomalies;
• regular penetration testing and vulnerability assessments by independent security professionals.

While mpo303 takes these measures seriously, no online transmission is completely secure. You are responsible for keeping your account credentials confidential and notifying us promptly if you suspect unauthorised access.

9Your Rights as a Data Subject

Depending on applicable law, you may be entitled to exercise the following rights in relation to your personal data held by mpo303:

• Right of access: request a copy of the personal data mpo303 holds about you.
• Right to rectification: request correction of inaccurate or incomplete data.
• Right to erasure: request deletion of your data where it is no longer necessary, where you withdraw consent, or where processing is unlawful — subject to any overriding legal obligation to retain records.
• Right to restriction: request that mpo303 pause processing of your data while a dispute or verification request is resolved.
• Right to object: object to processing carried out on the basis of legitimate interests, including profiling.
• Right to data portability: receive a machine-readable copy of data you provided to mpo303 where processing is based on consent or contract performance.
• Right to withdraw consent: withdraw any consent you have given without affecting the lawfulness of prior processing.

To exercise any of the above rights, contact mpo303 customer support. You will need to verify your identity before a request can be fulfilled. mpo303 will respond within a reasonable period. Exercising your rights will not result in any penalty to your account, provided the request is made in good faith.

10Minors and Age Restrictions

mpo303 is strictly a 21+ platform. We do not knowingly collect personal data from any person under the age of 21. Age verification is a mandatory step in the account registration and withdrawal process. If mpo303 discovers that an account has been created by a person under 21, the account will be suspended, any associated funds will be reviewed in accordance with our Terms & Conditions, and the relevant data will be handled in compliance with applicable law.

11Responsible Gambling and Data Processing

To support responsible gambling, mpo303 processes certain usage and behavioural data to identify patterns that may indicate problem gambling — for example, rapid increases in deposit frequency, extended session lengths, or repeated reversal of withdrawal requests. Where such patterns are detected, our responsible gambling team may reach out.

When a player activates a self-exclusion, deposit limit, or cooling-off period, the details of that restriction are retained for the duration and for a reasonable period after to prevent premature removal. If you request help through our responsible gambling page, any communication related to that request is handled with particular sensitivity and access is restricted to authorised personnel.

12Changes to This Privacy Policy

mpo303 may update this Privacy Policy to reflect changes in legal requirements, our data practices, new products, or security improvements. When material changes are made, the updated policy will be published with a revised effective date, and registered players will be notified through their account email or a platform notice.

Your continued use of mpo303 after the effective date of a revised policy constitutes acceptance of the updated terms. We encourage you to review this page periodically.

13Contact Us

If you have a question about this Privacy Policy, wish to exercise a data subject right, or want to report a privacy concern, please contact the mpo303 support team. Our customer support is available 24 hours a day, 7 days a week.

You may reach our team by email at [email protected] — please include "Privacy Request" in your subject line along with your registered username so that we can locate your account and respond efficiently. We aim to acknowledge all privacy-related requests within two business days.

For matters that cannot be resolved through our support team, you retain the right to escalate a complaint to the applicable data protection authority or licensing regulatory body.