Privacy Policy

This Privacy Policy (hereinafter referred to as the "Policy") is issued by MPO999 (hereinafter referred to as "mpo999", "the Company", "we", "us", or "our"), the operator of the online gaming platform accessible at https://mpo999.click (the "Platform"). This Policy applies to all individuals who visit, register on, or interact with the Platform in any capacity, including registered players, prospective players, and visitors (collectively referred to as "Users" or "you").

mpo999 is committed to safeguarding the privacy and personal data of all Users in accordance with internationally recognised data protection principles. We process personal data fairly, lawfully, and transparently, collecting only what is necessary for the purposes described in this Policy.

This Policy should be read alongside our Terms & Conditions and our Responsible Gambling Policy, both of which are incorporated by reference. By creating an account or using the Platform, you acknowledge that you have read and understood this Policy and consent to the data practices described herein.

For the purposes of this Policy, the following terms shall have the meanings set out below:

• Personal Data: Any information that identifies or can reasonably be used to identify a living natural person, directly or in combination with other data. This includes names, identification numbers, contact details, IP addresses, and financial information.
• Processing: Any operation performed on Personal Data, including collection, recording, organisation, storage, adaptation, retrieval, consultation, use, disclosure by transmission, dissemination, erasure, or destruction.
• Data Controller: The entity that determines the purposes and means of processing Personal Data. For the purposes of this Policy, mpo999 acts as the Data Controller in respect of User data collected through the Platform.
• Data Processor: A third party that processes Personal Data on behalf of the Data Controller in accordance with documented instructions.
• Consent: A freely given, specific, informed, and unambiguous indication of the User's agreement to the processing of their Personal Data for a defined purpose.
• Cookies: Small data files stored on a User's device by a web browser, used to maintain session state, personalise content, and collect analytical data.
• KYC: Know Your Customer — the regulatory and compliance procedure by which mpo999 verifies the identity, age, and residency of its registered players.

mpo999 collects Personal Data that is necessary for the proper provision of its Services. The categories of data we collect include but are not limited to:

We do not collect special categories of sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, or biometric data) unless specifically required by applicable law or regulation and with your explicit consent.

mpo999 collects Personal Data through several distinct channels:

• Direct Collection: When you register an account, complete KYC verification, submit a deposit or withdrawal request, contact customer support, or update your account settings, you provide data directly to mpo999.
• Automated Collection: The Platform automatically collects Technical Data (IP addresses, device information, session logs, and cookies) when you access or interact with the Platform, whether logged in or not.
• Third-Party Sources: mpo999 may receive data about you from identity verification providers, payment processors (including FPX, DuitNow, Maybank, CIMB, Public Bank, and e-wallet operators), fraud prevention services, and marketing partners — strictly where this is lawful and necessary.
• Publicly Available Sources: In limited circumstances related to fraud investigation or AML compliance, we may reference publicly available information including regulatory watchlists and sanctions databases.

mpo999 processes your Personal Data for the following specific and documented purposes:

• Account Management: Creating, maintaining, and administering your mpo999 player account, including authentication and security management.
• KYC & Identity Verification: Verifying your identity, age (21+ enforcement), and residential address as required by our licensing obligations and responsible gambling commitments.
• Payment Processing: Facilitating deposits and withdrawals in MYR via your chosen payment method, including verification of payment method ownership to prevent fraud.
• Service Delivery: Providing access to games, betting markets, bonuses, promotions, and all other Platform features you use.
• Customer Support: Responding to your enquiries, resolving disputes, processing complaints, and providing general assistance through live chat or email.
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent activity, money laundering, account abuse, and other security threats.
• Responsible Gambling: Monitoring gaming patterns to identify potential problem gambling behaviour, enforcing deposit limits, and administering self-exclusion requests.
• Legal & Regulatory Compliance: Meeting obligations imposed by our international gaming licence, anti-money laundering (AML) requirements, and any applicable court orders or regulatory directions.
• Platform Improvement: Analysing aggregated and anonymised usage data to improve the Platform's functionality, performance, and user experience.
• Marketing Communications: Sending you promotional offers, bonus notifications, and news about new games or features — only where you have opted in to receive such communications, and always with an easy opt-out mechanism.

mpo999 processes your Personal Data under one or more of the following lawful bases:

• Contractual Necessity: Processing required to perform the contract between you and mpo999 — i.e., providing the gaming services you have registered for, processing payments, and managing your account.
• Legal Obligation: Processing required to comply with our international gaming licence conditions, AML regulations, age verification requirements, and any applicable court orders.
• Legitimate Interests: Processing carried out in the legitimate interests of mpo999 or a third party, provided those interests are not overridden by your data protection rights. Legitimate interests include fraud detection, platform security, and service improvement through analytics.
• Consent: For optional processing activities such as direct marketing communications, we will seek and rely on your explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

mpo999 does not sell your Personal Data to third parties. We may disclose your data only in the circumstances listed below:

• Payment Service Providers: Financial institutions and payment processors (including FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, RHB, and Hong Leong) receive only the data necessary to process your transaction.
• Identity Verification Providers: Third-party KYC and document verification services receive identity and address data solely for the purpose of verifying your account credentials.
• Game Studio Partners: Licensed international game studios that supply games on the Platform may receive technical session data to facilitate gameplay. These partners are contractually prohibited from using this data for any purpose other than service delivery.
• IT & Infrastructure Providers: Cloud hosting, cybersecurity, and technical infrastructure vendors who process data on mpo999's behalf under strict data processing agreements and confidentiality obligations.
• Legal & Regulatory Authorities: Government bodies, law enforcement agencies, or regulators where we are legally obliged to disclose information, including in response to lawful court orders, subpoenas, or regulatory investigations.
• Corporate Transactions: In the event of a merger, acquisition, or sale of all or substantially all of mpo999's assets, Personal Data may be transferred to the acquiring entity as part of the transaction, subject to equivalent privacy protections being maintained.

All third-party data processors are contractually required to process your data only in accordance with mpo999's documented instructions, to maintain appropriate security standards, and to respect the confidentiality of your information.

mpo999 uses cookies and similar tracking technologies on the Platform for functional, analytical, and security purposes. The types of cookies we deploy include:

• Essential Cookies: Required for the Platform to function correctly. These enable session management, authentication, and security features. They cannot be disabled without impairing Platform functionality.
• Analytical Cookies: Used to collect aggregated, anonymised data about how Users interact with the Platform — such as pages visited, session duration, and navigation paths — to help us identify areas for improvement.
• Functional Cookies: Remember your preferences such as language settings, notification choices, and favourite game categories to personalise your experience.
• Security Cookies: Help detect and prevent fraudulent activity, including flagging unusual login patterns or multiple simultaneous sessions from different locations.

You may manage cookie preferences through your browser settings. Please be aware that disabling certain cookies may affect the functionality and security of the Platform. Continued use of the Platform following your review of this Policy constitutes your consent to our use of cookies as described above.

mpo999 retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or licensing obligations. The following general retention periods apply:

• Account Data: Retained for the duration of your active account relationship with mpo999, plus a minimum of five (5) years following account closure, to meet AML record-keeping and regulatory audit requirements.
• Financial Transaction Records: Retained for a minimum of five (5) years in accordance with anti-money laundering obligations and international licensing requirements.
• KYC Documentation: Retained for the duration of the account relationship and for a minimum of five (5) years thereafter, or longer where required by applicable law.
• Customer Support Communications: Retained for up to three (3) years following resolution of the relevant matter, for quality assurance and dispute resolution purposes.
• Technical & Log Data: Generally retained for up to twelve (12) months for security monitoring and fraud analysis purposes.
• Marketing Preferences: Retained until you withdraw consent or request deletion, whichever is earlier.

Upon expiry of the applicable retention period, Personal Data will be securely deleted or anonymised in a manner that prevents re-identification.

mpo999 implements a comprehensive set of technical and organisational security measures designed to protect your Personal Data against unauthorised access, accidental loss, destruction, or disclosure. Key measures include:

• Encryption in Transit: All data transmitted between your device and the mpo999 Platform is encrypted using Transport Layer Security (TLS) protocols, providing a secure channel resistant to interception.
• Encryption at Rest: Sensitive Personal Data stored on mpo999 servers, including financial information and identity documents, is encrypted at rest using industry-standard algorithms.
• Access Controls: Access to Personal Data within mpo999 is strictly limited to authorised personnel who require it for legitimate operational purposes. Role-based access controls and multi-factor authentication are enforced for all staff accessing sensitive data.
• Regular Security Audits: mpo999's infrastructure undergoes periodic independent security assessments and penetration testing to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: mpo999 maintains a documented data breach response procedure. In the event of a security incident affecting your Personal Data, mpo999 will notify affected individuals and relevant authorities in accordance with applicable requirements and within applicable timeframes.

As a User of the mpo999 Platform, you hold the following rights in respect of your Personal Data. You may exercise any of these rights at any time by contacting our Customer Support team:

mpo999 will respond to all verifiable data rights requests within thirty (30) days of receipt. Where a request is complex or mpo999 receives a high volume of requests, this period may be extended by a further thirty (30) days, in which case we will notify you accordingly.

mpo999 operates under international online gaming licensing and may store and process your Personal Data in jurisdictions outside of Malaysia. Where Personal Data is transferred to countries that do not provide an equivalent level of data protection, mpo999 ensures that appropriate safeguards are in place, including:

• Standard contractual clauses or equivalent data transfer mechanisms with receiving entities
• Contractual obligations requiring the recipient to apply equivalent data protection standards
• Transfers only to recipients who are subject to binding corporate rules or equivalent certification schemes

By using the mpo999 Platform, you acknowledge and consent to the transfer of your Personal Data to jurisdictions outside of Malaysia where necessary for the provision of the Services described in this Policy.

The mpo999 Platform is strictly intended for individuals who are 21 years of age or older. mpo999 does not knowingly collect Personal Data from individuals under the age of 21. If you are under 21, you must not register an account or use the Platform in any capacity.

If mpo999 becomes aware that Personal Data has been collected from a person under the age of 21, that data will be deleted as promptly as possible, the relevant account will be suspended, and any funds associated with that account will be handled in accordance with applicable law.

Parents or guardians who believe a minor may have registered on the Platform are encouraged to contact mpo999 Customer Support immediately via live chat or email so that the matter can be investigated and resolved promptly.

mpo999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or operational requirements. Where changes are material — meaning they affect how we use your data in a way that could be significant to you — we will provide advance notice through one or more of the following channels:

• A prominent notice displayed on the Platform
• An email notification sent to your registered email address
• An in-platform notification upon your next login

The date of the most recent revision is always displayed at the top of this page. Continued use of the Platform following notification of a material change constitutes your acceptance of the revised Policy. If you do not agree with any changes, you should cease using the Platform and request account closure through Customer Support.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how mpo999 handles your Personal Data, please contact us through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, directly through the mpo999 Platform. This is the fastest way to reach our support team for privacy-related enquiries.
• Email: [email protected] — our team aims to acknowledge all privacy-related enquiries within 48 hours and to provide a substantive response within 30 days.

When contacting us about a data rights request, please include your registered account username and a clear description of the request. This will help us locate your records and process your request efficiently.

This Privacy Policy was last reviewed and updated on 1 January 2026. Your continued use of the mpo999 Platform confirms your acceptance of this Policy as of that date.