Section 1
Introduction
mpo04 ("we", "us", "our") operates the online betting and gaming platform accessible at https://mpo04.pro. We are committed to protecting the privacy and personal data of every individual who visits, registers with, or transacts on the platform
("you", "Member", "User").
This Privacy Policy explains what personal data mpo04 collects, the purposes for which we process it, how long we retain it, who we share it with, and the rights available to you as a data subject. Please read this document carefully before creating an account or using any of our Services.
By registering an account on mpo04 or by continuing to use the Platform after this Privacy Policy has been published or updated, you confirm that you have read, understood, and accepted the practices described herein. If you do not agree with any part of this Privacy Policy, you must discontinue use of the Platform and close your account in accordance with the Terms & Conditions.
Scope: This Privacy Policy applies to all personal data collected and processed through the mpo04 website, mobile-optimised web interface, live chat support system, email communications, and any other channel through which you interact with mpo04. It does not apply to third-party websites linked from the Platform (if any) — those sites operate under their own privacy policies.
Section 2
Definitions
For the purposes of this Privacy Policy, the following terms have the meanings set out below:
- "Personal Data" means any information that identifies or could reasonably be used to identify a living individual, directly or indirectly — including name, email address, phone number, device identifiers, IP address, and financial account details.
- "Processing" means any operation performed on Personal Data, including collection, recording, storage, alteration, retrieval, use, disclosure, transmission, restriction, erasure, or destruction.
- "Data Controller" means mpo04, which determines the purposes and means of processing your Personal Data.
- "Data Processor" means a third party that processes Personal Data on behalf of mpo04 under a data processing agreement, such as a KYC verification provider or a payment gateway.
- "Sensitive Data" means a subset of Personal Data that warrants heightened protection, including government-issued identity document numbers (e.g., Indonesian KTP number, passport number) and financial account credentials.
- "Cookies" means small text files placed on your device by the Platform to store session and preference information.
- "KYC" means Know Your Customer — the identity verification process required prior to processing withdrawals and in other circumstances described in the Terms & Conditions.
- "Services" means all products and features available on mpo04, including sports betting, live casino, slots, fish shooting, and Bandar Q card games.
Section 3
Data We Collect
mpo04 collects the following categories of Personal Data:
3.1 Registration & Identity Data
- Full legal name as it appears on a government-issued identity document.
- Date of birth (used to verify you are 21 years of age or older).
- Email address (used as primary account identifier and communication channel).
- Indonesian mobile phone number (used for account security and SMS notifications where applicable).
- City and province of residence within Indonesia (e.g., Jakarta, Surabaya, Medan, Bandung, Bali, Yogyakarta).
- Username and encrypted password.
3.2 Identity Verification (KYC) Data
- Scanned or photographed copy of a government-issued photo ID (Indonesian KTP or valid passport).
- Proof of residential address (bank statement, utility bill, or official correspondence).
- Bank account statements or e-wallet profile screenshots confirming account name (required where deposits have been made via BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata, OVO, DANA, GoPay, ShopeePay, or LinkAja).
- Selfie or liveness-check image (where required by our KYC provider to match against identity documents).
3.3 Financial & Transaction Data
- Deposit and withdrawal amounts, timestamps, and payment method references.
- Bank account numbers, e-wallet account IDs, and cryptocurrency wallet addresses used for transactions.
- Betting history, game play records, and account balance history.
- Bonus uptake, wagering progress, and promotion participation records.
3.4 Technical & Device Data
- IP address and geolocation derived from IP address.
- Browser type, version, and language setting.
- Operating system and device type (desktop, mobile, tablet).
- Session timestamps, page views, and click-path data collected via analytics cookies.
- Device fingerprint data used for fraud detection and account security purposes.
3.5 Communications Data
- Live chat transcripts and email correspondence between you and mpo04 support staff.
- Feedback, dispute, or complaint submissions.
- Responses to surveys or promotional campaigns (where you choose to participate).
Section 4
How We Collect Data
mpo04 collects Personal Data through the following channels:
- Directly from you: When you complete the registration form, submit KYC documents, make a deposit or withdrawal request, contact our support team, or respond to a promotion.
- Automatically: When you browse or interact with the Platform, our servers and analytics tools automatically log Technical & Device Data as described in Section 3.4.
- From payment partners: When you initiate a transaction via a supported Indonesian bank (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP) or e-wallet (OVO, DANA, GoPay, ShopeePay, LinkAja), the payment partner may share limited transaction confirmation data with mpo04 to verify the transfer.
- From KYC and fraud-prevention providers: Third-party identity verification partners may return a verification result, risk score, or document validity status to mpo04 after processing the documents you submit.
- From cookies and tracking technologies: As described in Section 10, mpo04 uses first-party cookies and aggregated analytics tools to collect session and behavioural data.
Voluntary Provision: Providing accurate Personal Data is a condition of creating and maintaining an mpo04 account. If you decline to provide data required for KYC verification, mpo04 may be unable to process withdrawal requests or may need to restrict your account until verification is completed.
Section 5
Purposes of Processing
mpo04 processes your Personal Data for the following purposes:
- Account management: Creating, maintaining, and administering your mpo04 member account, including processing login, password resets, and account preference updates.
- Identity verification & KYC compliance: Verifying that you are who you claim to be, that you meet the minimum age requirement of 21 years, and that your account and payment methods are registered in your own name.
- Payment processing: Crediting deposits to your account balance and processing withdrawal requests to your nominated Indonesian bank account, e-wallet, or cryptocurrency wallet.
- Fraud prevention & security: Detecting and preventing unauthorised account access, multi-accounting, bonus abuse, money laundering, and other prohibited conduct as defined in the Terms & Conditions.
- Regulatory compliance: Meeting anti-money-laundering (AML) obligations, maintaining transaction records for the periods required under applicable law, and responding to lawful requests from regulatory or law enforcement authorities.
- Customer support: Responding to your queries, resolving disputes, and maintaining records of support interactions.
- Responsible gaming: Monitoring account activity for signs of problem gambling and implementing self-exclusion, deposit limits, or cool-off periods as requested by you or as required by our responsible gaming obligations.
- Platform improvement: Using aggregated, anonymised analytics data to understand how Members use the Platform and to improve functionality, game selection, and user experience.
- Marketing communications: Sending you promotional emails or in-platform notifications about bonuses, new games, and seasonal campaigns — but only where you have given explicit consent to receive such communications. You may withdraw consent at any time by updating your notification preferences or contacting support.
No Automated Decision-Making: mpo04 does not make decisions about your account status, credit worthiness, or eligibility for services solely by automated means where those decisions would have a significant legal or similarly significant effect on you, without providing a means for human review.
Section 6
Legal Basis for Processing
mpo04 processes your Personal Data on the following legal bases:
- Contractual necessity: Processing required to perform the contract between you and mpo04 — including account creation, payment processing, game provision, and customer support — is carried out because it is necessary for the performance of that contract.
- Legal obligation: Processing required to comply with applicable law — including AML/KYC regulations, record-keeping obligations, and responses to lawful law-enforcement requests — is carried out because mpo04 is legally required to do so.
- Legitimate interests: Processing carried out for fraud prevention, platform security, and aggregated analytics is based on mpo04's legitimate interest in maintaining a safe, fair, and high-quality service, provided that this interest is not overridden by your privacy rights.
- Consent: Processing carried out for direct marketing communications and for the use of non-essential cookies is based on your explicit consent. You may withdraw this consent at any time without affecting the lawfulness of processing carried out before withdrawal.
Section 7
Data Sharing & Disclosure
7.1 mpo04 does not sell, rent, or trade your Personal Data to any third party for commercial purposes. We share Personal Data only in the circumstances described below:
- Payment processors: Your name, account number, and transaction amount are shared with your chosen Indonesian bank (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata) or e-wallet provider (OVO, DANA, GoPay, ShopeePay, LinkAja) or cryptocurrency network solely to process the relevant deposit or withdrawal transaction.
- KYC and identity verification providers: Document images and biometric check data are shared with our contracted third-party KYC verification partner to produce a verification result. This partner is bound by a data processing agreement that limits them to using your data only for the purpose of verification on our behalf.
- Fraud prevention and risk management services: Device fingerprint, IP address, and behavioural data may be shared with contracted fraud-detection providers to generate risk assessments. These providers are contractually prohibited from using the data for any other purpose.
- Regulatory and law enforcement authorities: mpo04 will disclose Personal Data to competent regulatory, tax, or law enforcement authorities where required to do so by applicable law, court order, or regulatory direction. Where legally permissible, mpo04 will notify you of such a disclosure.
- Corporate transactions: In the event of a merger, acquisition, or sale of all or substantially all of mpo04's assets, your Personal Data may be transferred to the acquiring entity, provided the acquiring entity agrees to honour the terms of this Privacy Policy.
7.2 International Transfers. Some of mpo04's contracted service providers — particularly KYC and fraud-detection partners — may be located outside Indonesia. Where such transfers occur, mpo04 ensures that appropriate contractual safeguards are in place to protect your Personal Data to a standard equivalent to that required under applicable data protection law.
Section 8
Data Retention
mpo04 retains your Personal Data for as long as is necessary to fulfil the purposes described in this Privacy Policy, subject to the following minimum retention periods:
- Account and registration data: Retained for the duration of your account and for a minimum of 5 years following account closure, to comply with AML record-keeping obligations.
- KYC documents: Retained for a minimum of 5 years following the completion of the KYC process, or longer if required by applicable law or a regulatory direction.
- Transaction records (deposits, withdrawals, bets): Retained for a minimum of 5 years following the date of each transaction.
- Customer support correspondence: Retained for 3 years from the date of the last interaction in the relevant thread, unless the correspondence relates to an unresolved dispute, in which case it is retained until the dispute is finally resolved plus 1 year.
- Analytics and technical data: Aggregated analytics data is retained indefinitely in anonymised form. Raw technical log data (including IP addresses) is retained for 90 days, after which it is anonymised or deleted.
- Marketing consent records: Retained for 3 years from the date of consent or from the date of withdrawal of consent, whichever is later, to demonstrate compliance with our marketing consent obligations.
When Personal Data is no longer required for any lawful purpose and no longer subject to a mandatory retention period, mpo04 will securely delete or irreversibly anonymise it.
Section 9
Security Measures
mpo04 implements a layered set of technical and organisational measures to protect your Personal Data against unauthorised access, loss, destruction, alteration, or disclosure. These measures include:
- Encryption in transit: All data transferred between your device and mpo04's servers is encrypted using Transport Layer Security (TLS 1.2 or higher). Our SSL certificate status is publicly verifiable.
- Encryption at rest: Sensitive Personal Data — including identity document images and financial account details — is encrypted at rest using AES-256 or equivalent symmetric encryption.
- Access controls: Access to Personal Data within mpo04's internal systems is restricted on a strict need-to-know basis. Staff members are granted the minimum level of data access required to perform their job function, and all access is logged and audited.
- Two-factor authentication (2FA): mpo04 strongly encourages all Members to enable 2FA on their accounts. 2FA is mandatory for all mpo04 internal staff who access member data.
- Penetration testing and vulnerability scanning: mpo04's platform and infrastructure undergoes regular third-party security assessments to identify and remediate vulnerabilities.
- Incident response: mpo04 maintains a data breach incident response plan. In the event of a breach that is likely to result in a risk to your rights and freedoms, mpo04 will notify affected Members and relevant authorities within the timeframes required by applicable law.
Your Responsibility: You are responsible for keeping your account password confidential and for ensuring that you log out of your account on shared or public devices. mpo04 will never ask for your password via email, live chat, or any other communication channel. If you suspect your account has been compromised, contact support via live chat immediately.
Section 10
Cookies & Tracking Technologies
mpo04 uses the following categories of cookies and similar tracking technologies on the Platform:
- Strictly necessary cookies: These cookies are essential to the operation of the Platform. They maintain your session state, remember your login status during a session, and enable core functionality such as the bet slip, deposit flow, and live chat widget. These cookies cannot be disabled without impairing your use of the Platform.
- Preference cookies: These cookies remember your settings and preferences — such as your preferred language display, odds format, and notification preferences — so you do not have to re-enter them on each visit.
- Analytics cookies: mpo04 uses first-party analytics cookies to collect aggregated, anonymised data on how Members navigate the Platform — including page views, session duration, and feature engagement. This data is used solely to improve Platform performance and user experience. Raw analytics data is not linked to individual member identities.
- Security and fraud-detection cookies: These cookies collect device fingerprint and behavioural signals used by mpo04's fraud-detection systems to identify suspicious activity patterns and protect your account.
mpo04 does not use third-party advertising cookies or retargeting pixels. Your browsing behaviour on the Platform is not shared with any advertising network.
You may control cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to use the Platform. Disabling preference or analytics cookies will not prevent you from using core betting and gaming features.
Section 11
Your Data Rights
Subject to applicable law and certain conditions, you have the following rights in relation to your Personal Data held by mpo04:
- Right of access: You may request a copy of the Personal Data mpo04 holds about you, along with information about how it is processed. We will respond to verified access requests within 7 business days.
- Right to rectification: If any Personal Data we hold about you is inaccurate or incomplete, you may request that we correct or complete it. You can update most of your account details directly through the Account Settings page; for KYC-related corrections please contact support.
- Right to erasure: You may request that mpo04 delete your Personal Data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where processing is unlawful. Note that mpo04 may be required by law to retain certain data for a minimum period even after you request erasure, as described in Section 8.
- Right to restriction: You may request that mpo04 restrict the processing of your Personal Data in certain circumstances — for example, while the accuracy of the data is contested or while a complaint is being investigated.
- Right to data portability: Where processing is based on your consent or on contractual necessity, you may request a copy of your Personal Data in a structured, commonly used, machine-readable format.
- Right to object: You may object to processing based on legitimate interests at any time. You also have an unconditional right to object to the processing of your Personal Data for direct marketing purposes.
- Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications, non-essential cookies), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
To exercise any of the rights above, please contact mpo04 via the live chat function in your member dashboard or by email at [email protected]. We may ask you to verify your identity before processing your request. We will respond within 7 business days of receiving a complete and verified request.
No Fee for Requests: mpo04 does not charge a fee for processing data subject rights requests unless the request is manifestly unfounded, repetitive, or excessive, in which case we reserve the right to charge a reasonable administrative fee or to decline to act on the request.
Section 12
Minors
The mpo04 Platform and all its Services are strictly intended for individuals who are 21 years of age or older. mpo04 does not knowingly collect Personal Data from any person under the age of 21.
If mpo04 discovers or has reasonable grounds to believe that Personal Data has been submitted by or on behalf of a person under the age of 21, we will immediately suspend the associated account, delete the relevant data to the extent permitted by our regulatory obligations, and — where required by applicable law — report the matter to the appropriate authorities.
If you are a parent or guardian and believe that a minor has created an account on mpo04 or has submitted their Personal Data to the Platform, please contact us immediately at [email protected] so we can investigate and take appropriate action.
Age Verification: mpo04 uses KYC document checks and date-of-birth validation to enforce the 21+ age requirement. Any account found to have been opened by or on behalf of a person under 21 will be closed immediately and all associated funds forfeited.
Section 13
Changes to This Privacy Policy
mpo04 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable law, regulatory requirements, or Platform features. The "Last Updated" date at the top of this page will be revised each time a material change is made.
Where a change is material — meaning it significantly affects your rights or the way we handle your Personal Data — mpo04 will provide at least 7 days' advance notice by displaying a prominent notice on the Platform and, where reasonably practicable, by sending a notification to your registered email address.
Your continued use of the Platform after the effective date of any revised Privacy Policy constitutes your acceptance of the changes. If you do not agree with the revised Privacy Policy, you must stop using the Platform and close your account in accordance with the Terms & Conditions.