Privacy Policy MPO383 –
Malaysia User Data Protection

Mpo383 values the privacy of every individual who uses our platform. This Privacy Policy is established to ensure users fully understand how their personal data is managed — from collection through to deletion — in a responsible, transparent, and secure manner.

As an online gaming platform serving users in Malaysia, mpo383 complies with applicable data protection laws including Malaysia's Personal Data Protection Act 2010 (PDPA) and internationally recognised standards adopted in the online gaming industry.

This policy covers all information you provide directly, information we collect automatically as you use the platform, and information we receive from trusted third parties in limited and legitimate contexts.

Mpo383 collects information across several categories based on platform operational requirements and legal compliance obligations:

We only collect information that is strictly necessary for the stated purposes. You are not required to provide optional information, however some platform features may not be fully accessible without it.

Mpo383 uses collected information solely for legitimate purposes relevant to platform operations. The following are the primary purposes for which your data is used:

• Account Management: Creates, verifies, and manages your user account including the required KYC process.
• Transaction Processing: Processes all deposits, withdrawals, and financial transactions securely and accurately.
• Legal Compliance: Fulfils anti-money laundering (AML) compliance obligations and other applicable legal requirements.
• Platform Security: Detects and prevents fraud, multi-account usage, and suspicious activity.
• Customer Support: Helps resolve enquiries, complaints, and technical issues efficiently.
• Service Improvement: Analyses usage patterns to improve user experience and platform features.
• Marketing Communications: Sends offers, promotions, and platform-related information — only where you have given your consent.

Mpo383 does not use your data to make automated decisions that have a serious impact on your rights without appropriate human intervention.

Mpo383 does not sell, rent, or disclose your personal data to third parties for marketing or commercial purposes without your explicit consent. However, there are limited situations where sharing information is necessary and lawful:

• Payment Providers: Required financial information is shared with approved payment providers solely to process your transactions securely.
• Game Providers: Minimum required data is shared with game software providers solely to enable your access to games on the platform.
• Legal Requirement: mpo383 will disclose information to the relevant authorities when required by law, court order, or for the purpose of financial crime investigations.
• Identity Verification Services: Identity information is shared with trusted third-party KYC service providers for verification purposes only.
• Business Transfers: In the event of a merger, acquisition, or asset sale, user data may be transferred as part of the transaction, subject to notification to users.

All third parties that receive mpo383 user data are required to comply with data security standards equal to or higher than our own, and are only permitted to use that data for purposes specified under contract.

User data security is the top priority at mpo383. We invest in the latest security infrastructure to ensure your information is always protected against cyber threats and unauthorised access.

The technical security measures we implement include:

• 256-bit SSL/TLS encryption for all data transmitted between your browser and our servers.
• Data-at-rest encryption for all sensitive information stored in our databases.
• Use of multi-layered firewalls and an intrusion detection system (IDS) operating around the clock.
• Two-factor authentication (2FA) is available for all user accounts as an added layer of security.
• Real-time account activity monitoring to detect unusual or suspicious access.
• Regular security assessments and penetration testing conducted by independent experts.

While we take extensive measures to protect your data, it is important that you also play your part by keeping your password confidential and not sharing your login credentials with anyone.

Mpo383 uses cookies and similar tracking technologies to enhance user experience, analyze platform traffic, and ensure the security of your login sessions.

Types of cookies we use:

• Essential Cookies: Required for core platform functions such as login verification and session security. These cookies cannot be disabled.
• Performance Cookies: Collects anonymous information on how users interact with the platform to help us improve the overall experience.
• Functional Cookies: Saves your preferences such as language and display settings so you do not need to reconfigure them each time.
• Analytics Cookies: Helps us understand aggregate platform usage patterns to make informed improvement decisions.

You can manage or disable cookies through your web browser settings at any time. However, disabling certain cookies may affect the functionality of some parts of the platform.

Mpo383 recognises and respects users' rights regarding their personal data. You have the following rights, which may be exercised at any time by contacting our support team:

Mpo383 retains users' personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy or as required by applicable law.

In general, data retention periods are as follows:

• Active Account Data: Retained for the duration of the active account and for three (3) years after account closure.
• Financial Transaction Records: Retained for seven (7) years in accordance with financial and anti-money laundering legal requirements.
• KYC Documents: Retained for five (5) years after the business relationship ends, in line with compliance requirements.
• Support Communication Logs: Retained for two (2) years for reference and quality control purposes.
• Cookie & Analytics Data: Session data is deleted after 90 days; aggregated analytics data may be retained longer in anonymised format.

Upon expiry of the retention period, data is securely deleted using methods that ensure it cannot be recovered by any party.

The mpo383 platform is exclusively for users aged 21 and above. We do not knowingly collect or process personal data from individuals below the stipulated age limit.

If we discover that personal data of an individual who does not meet the age requirement has been collected, we will take immediate steps to delete that data and close the account in question. If you believe that a child or minor has registered on our platform, please contact our support team immediately.

Mpo383 may contain references to game provider or payment services. This Privacy Policy applies only to information collected directly by mpo383 and does not cover the privacy practices of any third parties.

Mpo383 is not responsible for the content, privacy practices, or security policies of any external parties. We encourage users to independently read the privacy policy of each third-party service they use.

Mpo383 reserves the right to update this Privacy Policy from time to time to reflect changes in our data processing practices, legal requirements, or service improvements. The "Last Updated" date at the top of this document will be revised whenever changes are made.

For material changes that significantly affect your privacy rights, we will notify you via a prominent notice on the platform or to your registered email address at least seven (7) days before the changes take effect. Continued use of the platform after that date constitutes your acceptance of the latest version of this Privacy Policy.

If you have any questions, concerns, or wish to exercise your privacy rights, mpo383's dedicated data privacy team is ready to assist you. You can reach us via live chat on the platform or by email at [email protected].

We aim to respond to all privacy-related enquiries within seven (7) business days. For more complex requests such as data access or account deletion, processing may take up to thirty (30) business days depending on the complexity of the case.