MPO1881 Privacy Policy – Member Personal Data Protection

Welcome to the mpo1881 Privacy Policy. This document is our written commitment to you as a trusted member. We understand that trust is the foundation of the relationship between a platform and its users — and protecting your personal information is part of that responsibility.

Mpo1881 operates in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). Every process involving your personal data — from account registration through to fund withdrawal — is designed with your security and privacy as the priority.

This Privacy Policy applies to all use of the mpo1881 platform, including the official website, mobile app, and any of our official communication channels. By registering or using mpo1881 services, you agree to the terms set out in this Privacy Policy.

Mpo1881 only collects personal data that is genuinely necessary to provide a safe, efficient, and regulatory-compliant service. We do not collect excessive or irrelevant data beyond the purpose of the service.

Below are the categories of data we collect and their purposes:

Every piece of data we collect has a clear and legitimate purpose. mpo1881 does not use your data for purposes unrelated to the services you use. Below is a detailed breakdown of how your data is used:

• Account Management: Identification and contact data is used to create, verify, and manage your mpo1881 account. This includes the login process, two-factor authentication, and account recovery.
• Payment Processing: Financial data is used solely to process your deposits and fund withdrawals through payment channels registered in your name.
• Fraud Prevention: Technical and usage data is continuously analysed by our systems to detect and prevent unauthorised access, fraud, and money laundering.
• Legal Compliance: Some data is retained and used to fulfil reporting obligations to relevant authorities in Malaysia, including Anti-Money Laundering (AML) and Know Your Customer (KYC) requirements.
• Service Enhancement: Anonymised usage data is used to understand platform usage patterns for the purpose of product improvement and user experience enhancement.
• Service Communications: Your email and phone number are used to send important account-related notifications, including transaction confirmations, security alerts, and policy updates.
• Responsible Gaming: Gaming activity data is used to identify usage patterns that may require responsible gambling intervention to safeguard your wellbeing.

Mpo1881 does not sell or trade your personal data. However, there are limited situations where we need to share certain information with trusted third parties to ensure our services operate smoothly and remain legally compliant.

Third parties we work with and their data sharing requirements:

• Payment Processors: Transaction information is shared with FPX, DuitNow, Touch 'n Go eWallet, GrabPay, and Boost, which are licensed payment providers in Malaysia. This sharing is limited strictly to the data required to complete each transaction.
• Game Provider: Usernames and session IDs are shared with game software providers to enable your access to games on the platform. These providers are bound by strict confidentiality agreements.
• KYC Services: Identity verification documents are shared with licensed, internationally compliant third-party KYC service providers for verification purposes only.
• Legal Authority: mpo1881 will disclose your personal data to the relevant authorities where required by Malaysian law or court order.
• Cloud Services: Data is stored on cloud servers located in the Southeast Asia region with high-grade physical and digital protection.

The security of your personal data is mpo1881's top priority. We continuously invest in the latest cybersecurity infrastructure to ensure your information is protected at all times, both in transit and at rest.

Security measures we implement include:

• Data Encryption in Transit: All communications between your device and mpo1881 servers are encrypted using TLS 1.3 protocol with AES-256-bit encryption, ensuring no third party can intercept your data during transmission.
• Data Encryption at Rest: Sensitive data such as financial information and verification documents is stored in encrypted form within our database. User passwords are stored using the one-way bcrypt hashing algorithm, which cannot be decrypted.
• Tiered Access Control: Access to members' personal data within our systems is restricted based on the principle of least privilege. Only staff who require access to carry out their responsibilities are granted permission.
• Real-Time Monitoring: Our security monitoring system operates 24/7 to detect any unauthorised access attempts, suspicious login patterns, and other cybersecurity threats.
• Regular Penetration Testing: mpo1881 conducts regular penetration testing by independent security auditors to identify and address any system vulnerabilities before they can be exploited.
• Two-Factor Authentication (2FA): All member accounts are supported with 2FA functionality to provide an additional layer of security beyond passwords.

Mpo1881 does not retain your personal data longer than necessary. Our data retention periods are determined based on operational requirements, legal obligations, and our legitimate interests.

• Active Account Data: While your account remains active, your personal data will be retained to ensure continuity of service and account security.
• Post-Account Closure Data: Upon account closure, core account data is retained for a minimum of 7 years in accordance with Malaysia's Anti-Money Laundering (AMLA) legal requirements.
• Financial Transaction Records: All transaction records are retained for 7 years from the date of transaction for financial audit and tax compliance purposes.
• Technical Logs: System access and security logs are retained for 90 days, after which they are automatically deleted unless required for an active investigation.
• KYC Documents: Identity verification documents are retained for the duration of the active account and for 7 years after account closure, in accordance with regulatory requirements.
• Marketing Data: If you withdraw consent to receive marketing communications, your data held for that purpose will be deleted within 30 days.

As a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have specific rights regarding the personal data we hold. mpo1881 respects and fully facilitates the exercise of these rights.

Your rights include:

• Right of Access: You have the right to obtain a copy of your personal data that we hold. Data access requests can be submitted via our official email.
• Right to Correction: If your personal data is inaccurate or outdated, you have the right to request that we correct or update it.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time.
• Right to Withdraw Consent: Where data processing is based on your consent, you have the right to withdraw that consent at any time without affecting the validity of processing carried out prior to withdrawal.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the Malaysia Department of Personal Data Protection if you believe your rights have been violated.

Mpo1881 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

• Essential Cookies: Required for core platform functions such as login authentication, session management, and security. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collects information on how you use our platform in aggregated, non-identifiable form to help us improve website performance.
• Preference Cookies: Saves your preferences such as interface language and display settings so you do not need to reconfirm them on every login.
• Analytics Cookies: Helps us understand traffic patterns and platform usage through analytics tools configured to anonymize user data.

You can manage cookies through your web browser settings. However, blocking essential cookies may affect your ability to fully use certain features of the mpo1881 platform.

Mpo1881 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or new platform features. All amendments take effect as soon as they are published on our website.

How we notify you of changes:

• A prominent notice will be displayed on the platform's home page for significant changes to how we process your personal data.
• An email notification will be sent to the email address registered to your account.
• The "Last Updated" date at the top of this document will be updated to reflect the date of the latest amendment.

We encourage you to review this Privacy Policy periodically. Continued use of the mpo1881 platform after any changes are published will be considered your acceptance of the updated policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, our Data Protection Officer (DPO) team is ready to assist.

• Privacy Email: [email protected] (use subject: "Privacy Enquiry")
• Live Chat: Available 24/7 directly within the mpo1881 platform – average response time under 2 minutes
• Supported Languages: Malay, English, and Chinese

For formal complaints regarding personal data protection that we are unable to resolve, you may contact the Department of Personal Data Protection Malaysia (JPDP) through their official website.