Privacy Policy

1Introduction

mpo323 ("we", "us", "our") operates the online betting platform accessible at mpo323.cam. We are committed to protecting the personal data of all registered users and visitors, with particular regard to the privacy expectations of our primary user base across Indonesia — including users in Jakarta, Surabaya, Bandung, Medan, Bali, Yogyakarta, Semarang, Makassar, and Palembang.

This Privacy Policy is designed to give you a clear, honest account of our data practices. We write it in plain English — not opaque legalese — because we believe informed users are better protected users. Where technical or legal terms are unavoidable, we define them below.

By registering an account on mpo323, completing KYC verification, making a deposit, or otherwise using the platform, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein. If you do not agree, please do not use the platform.

2Definitions

• "Personal Data" — any information that identifies or could reasonably be used to identify a living natural person, directly or indirectly.
• "Processing" — any operation performed on Personal Data, including collection, storage, retrieval, use, disclosure, alteration, and deletion.
• "Data Controller" — mpo323, as the entity that determines the purposes and means of processing your Personal Data.
• "Data Processor" — a third party that processes Personal Data on behalf of mpo323, under our documented instructions (e.g., payment processors, cloud hosting providers).
• "User", "You", "Your" — any individual who registers an account on, visits, or otherwise uses the mpo323 platform.
• "KYC" — Know Your Customer identity verification, required under our international licence obligations and anti-money-laundering compliance framework.
• "Cookie" — a small data file stored on your device by a web browser, used to maintain session state, remember preferences, and support analytics.
• "Sensitive Data" — a subset of Personal Data warranting heightened protection, including government-issued identity document numbers (such as KTP numbers), financial account details, and health-related information provided in the context of responsible gaming self-exclusion requests.

3Data We Collect

The categories of Personal Data we collect from mpo323 users are set out in the table below:

We do not collect Special Category Data (as defined under international privacy frameworks, such as racial or ethnic origin, political opinions, religious beliefs, or biometric data) unless it appears incidentally in a document submitted for KYC, in which case it is treated with the highest level of protection and is not used for any profiling purpose.

4How We Collect Data

mpo323 collects Personal Data through the following channels:

• Direct submission: Information you provide when registering an account, completing KYC, making a deposit or withdrawal, contacting customer support, or participating in a promotion.
• Automated collection: Technical and Usage Data collected automatically as you browse and interact with the platform, via server logs, cookies, and session-tracking technology.
• Third-party verification: Identity verification results returned by our KYC technology partner when you submit documents for review.
• Payment processors: Transaction confirmation data returned by Indonesian banking channels (BCA, BRI, BNI, Mandiri) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) when you complete a deposit or withdrawal.
• Fraud and AML screening: Limited data may be received from internationally recognised sanctions screening and fraud prevention databases to fulfil our anti-money-laundering obligations under our gaming licence.

5Purposes of Processing

We process your Personal Data for the following purposes, each of which is nece ssary and proportionate to the legitimate interests of running a secure, fair, and compliant online betting platform:

• Account Management: Creating and maintaining your mpo323 account, authenticating your identity at login, and managing account preferences.
• KYC & Age Verification: Verifying that you are at least 21 years of age and confirming your identity in accordance with our international licence obligations.
• Payment Processing: Facilitating deposits and withdrawals via Indonesian bank transfer and e-wallet channels, reconciling transactions, and preventing payment fraud.
• Platform Operation: Delivering the betting and gaming services you have requested, including sports markets (BRI Liga 1, EPL, Champions League), live casino tables, slot titles, and togel (Indonesia's traditional numbers lottery) markets.
• Customer Support: Responding to your enquiries, resolving disputes, and maintaining a record of communications for quality assurance purposes.
• Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling, enforcing self-exclusion requests, and administering deposit and session limits you have set.
• Fraud Prevention & Security: Detecting and preventing cheating, multi-accounting, bonus abuse, money laundering, and unauthorised access to accounts.
• Legal & Regulatory Compliance: Meeting our obligations under our international gaming licence, including record-keeping, suspicious activity reporting, and responding to lawful requests from competent authorities.
• Marketing Communications (with consent): Sending promotional offers, bonus notifications, and event-related communications — such as Idul Fitri promotions or Piala AFF special markets — to users who have opted in.
• Platform Improvement: Analysing aggregated, anonymised usage data to improve site performance, game selection, and user experience.

6Legal Basis for Processing

For each processing purpose, mpo323 relies on one or more of the following legal bases:

7Data Sharing & Disclosure

mpo323 does not sell, rent, or trade your Personal Data. We share your data only in the following circumstances, and only to the minimum extent necessary:

• Payment Processors: We share your name, bank account or e-wallet identifier, and transaction amount with the relevant Indonesian payment channel (e.g., BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay) solely to process your requested transaction.
• KYC Verification Partners: Identity documents and biographic data are shared with our certified KYC technology partner to perform document authentication and sanctions screening. All KYC partners are bound by strict confidentiality agreements.
• Game Software Providers: Aggregated gameplay data (bets placed, game titles accessed) may be shared with providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Pocket Games Soft, and Spribe for technical support, RTP auditing, and game integrity verification. No identity or financial data is shared for this purpose.
• Cloud Infrastructure Providers: Our platform is hosted on enterprise-grade cloud infrastructure. Hosting providers act as Data Processors under our documented instructions and are contractually prohibited from accessing or using your data for their own purposes.
• Legal and Regulatory Authorities: We may disclose Personal Data to law enforcement agencies, regulatory bodies, or courts where required by law, court order, or the terms of our gaming licence — including disclosures related to anti-money-laundering investigations.
• Business Transfers: In the event of a merger, acquisition, or sale of substantially all of mpo323's assets, your Personal Data may be transferred to the acquiring entity. You will be notified of any such transfer via the email address on file at least 30 days in advance.

8International Data Transfers

mpo323 operates as an internationally licensed platform, and some of the third parties to whom we disclose data (as described in Section 7) may be located in countries outside Indonesia. When Personal Data is transferred internationally, mpo323 ensures that appropriate safeguards are in place, including:

• Standard contractual clauses approved by recognised international data protection authorities, incorporated into our agreements with all Data Processors located outside Indonesia;
• Binding corporate rules, where the receiving entity is part of a group that has adopted such rules;
• Transfer to jurisdictions that provide an adequate level of data protection as recognised under applicable international frameworks.

You may request a copy of the safeguards in place for any specific international transfer by contacting us at the details in Section 16.

9Data Retention Periods

We retain your Personal Data for no longer than is necessary for the purposes for which it was collected, taking into account our legal and regulatory obligations. The standard retention periods applicable to mpo323 user data are:

Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised in accordance with our internal data destruction procedures.

10Security Measures

mpo323 implements a layered set of technical and organisational security measures to protect your Personal Data against unauthorised access, alteration, disclosure, or destruction:

• Encryption in Transit: All communications between your browser or app and our servers are encrypted using TLS 1.2 or higher with 256-bit encryption keys. Connections over unencrypted HTTP are automatically redirected to HTTPS.
• Encryption at Rest: Sensitive data fields — including KTP numbers, bank account numbers, and e-wallet identifiers — are encrypted at the database level using AES-256.
• Access Controls: Access to Personal Data is restricted to mpo323 staff and contractors on a strict need-to-know basis. All access is logged and audited. Privileged access requires multi-factor authentication.
• Penetration Testing: Our infrastructure undergoes independent security penetration testing at least annually, with critical findings remediated within 30 days.
• Incident Response: We maintain a documented data breach response plan. In the event of a breach that poses a risk to your rights, you will be notified without undue delay and in any case within 72 hours of our becoming aware of the incident.
• Staff Training: All mpo323 staff with access to Personal Data receive mandatory data protection training upon onboarding and annually thereafter.

11Cookies & Tracking Technologies

mpo323 uses cookies and similar tracking technologies to operate the platform, maintain your session, remember your preferences, and generate anonymised analytics that help us improve the service. The cookies we use fall into the following categories:

• Strictly Necessary Cookies: Essential for the platform to function. These include session authentication cookies, CSRF protection tokens, and load-balancing cookies. They cannot be disabled without breaking core functionality.
• Functional Cookies: Remember your preferences such as language setting (English / Bahasa Indonesia), display resolution, and last-visited game category. These persist across sessions.
• Analytics Cookies: Used to collect aggregated, anonymised data on how users navigate the platform — which pages are most visited, where users encounter errors, and how long sessions last. This data does not identify individual users.
• Security Cookies: Support our fraud detection systems by flagging unusual device fingerprint changes, login anomalies, or account access patterns that deviate from your established behaviour.

mpo323 does not use third-party advertising cookies or cross-site tracking pixels. You may manage cookie preferences via your browser settings; however, disabling strictly necessary cookies will prevent you from logging in and using the platform.

12Your Rights

As a user of the mpo323 platform, you have the following rights with respect to your Personal Data. To exercise any of these rights, contact us using the details in Section 16. We will acknowledge your request within 48 hours WIB and provide a substantive response within 30 calendar days.

13Minors

The mpo323 platform is strictly intended for users who are 21 years of age or older. We do not knowingly collect Personal Data from individuals under the age of 21. If we discover or are notified that Personal Data has been provided by a minor, we will immediately suspend the relevant account, delete all associated Personal Data, and — where applicable — return any deposited funds to the payment method used.

If you are a parent or guardian and believe that a minor in your care has registered an account on mpo323, please contact us immediately at the details provided in Section 16. We treat all such reports with the utmost urgency.

14Third-Party Links & Services

The mpo323 platform may display game content delivered by third-party providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Pocket Games Soft, Spribe, and others). While these providers are subject to contractual data protection obligations when processing data on our behalf, their own independent privacy practices — where they collect data directly from you through their own interfaces — are governed by their respective privacy policies, which are separate from this document.

mpo323 does not control, and is not responsible for, the privacy practices of any third-party software provider, payment processor, or external website that may be linked to from the platform. We encourage you to review the privacy policies of any third party whose services you use in connection with your mpo323 account.

15Changes to This Privacy Policy

mpo323 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform functionality. Where changes are material — for example, introducing a new category of data collection or a new sharing arrangement — we will notify all registered users via the email address on file at least 14 days before the updated policy takes effect.

For minor or clarificatory changes (such as correcting a typographical error or improving readability without altering substance), the updated policy will be published on this page immediately, with the "Last Updated" date revised accordingly.

Your continued use of the mpo323 platform after the effective date of any revision constitutes acceptance of the updated Privacy Policy. We recommend reviewing this page periodically to remain informed of our current data practices.

16Contact

If you wish to exercise any of your data rights, raise a privacy concern, request a copy of our data processing records, or report a suspected data breach, please contact the mpo323 Data Protection team using the details below. All privacy-related requests are handled with strict confidentiality.

For general platform questions not related to privacy, please visit our FAQ page or review our Terms & Conditions.