Privacy Policy

MPO1221 ("we", "us", "our") operates the online casino and sports betting platform accessible at https://mpo1221.buzz. We are committed to protecting the privacy and personal data of every individual who accesses or uses our platform, whether as a registered Member or a visitor.

This Privacy Policy ("Policy") describes in detail how MPO1221 collects, uses, stores, shares, and protects your personal data in connection with your use of the platform and associated services. It also sets out your rights in relation to the personal data we hold about you and explains how you can exercise those rights.

By registering an account on MPO1221, making a deposit, or continuing to use our services, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, please discontinue use of the platform and contact us to close your account.

This Policy should be read alongside our Terms & Conditions, which govern the overall legal relationship between you and MPO1221.

For the purposes of this Privacy Policy, the following terms have the meanings set out below:

• Personal Data any information that relates to an identified or identifiable natural person, including but not limited to name, identification number, contact details, location data, and online identifiers.
• Processing any operation performed on personal data, including collection, recording, organisation, structuring, storage, adaptation, retrieval, use, disclosure, erasure, or destruction.
• Data Controller MPO1221, being the entity that determines the purposes and means of processing your personal data.
• Data Processor a third party that processes personal data on behalf of MPO1221 and under its documented instructions (e.g., KYC providers, payment processors).
• Member any individual who holds a registered account on the MPO1221 platform.
• KYC Know Your Customer — identity and address verification procedures required for regulatory compliance and fraud prevention.
• Cookies small text files placed on your device by the platform to store information about your session, preferences, or browsing behaviour.
• Consent a freely given, specific, informed, and unambiguous indication of your agreement to the processing of your personal data for one or more specific purposes.

MPO1221 collects only the personal data necessary to deliver our services, meet our legal obligations, and protect the security of the platform and its Members. The categories of data we collect are outlined in the table below:

We do not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, genetic data, or biometric data beyond what is strictly required for identity verification purposes.

MPO1221 collects personal data through the following channels:

• Direct interactions: Data you provide when registering an account, completing KYC, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated technologies: Technical data collected automatically when you access the platform, including IP addresses, device identifiers, cookie data, and session logs.
• Third-party sources: Identity verification data from KYC service providers; fraud and risk data from financial screening partners; payment confirmation data from FPX, DuitNow, and e-wallet providers such as Touch 'n Go, Boost, and GrabPay.
• Public sources: Publicly available information used to verify identity details or fulfil anti-money laundering (AML) obligations, where permitted by law.

MPO1221 processes your personal data for the following purposes:

• Service delivery: Creating and managing your account, processing deposits and withdrawals in MYR, providing access to casino games and sports betting markets, and delivering customer support.
• Identity and age verification: Confirming that you are who you claim to be and that you meet the minimum age requirement of 21 years to use the platform.
• Regulatory compliance: Meeting our obligations under applicable anti-money laundering (AML) regulations, know-your-customer (KYC) requirements, and responsible gambling legislation.
• Fraud prevention and security: Detecting and investigating suspicious account activity, multiple account registrations, payment fraud, and unauthorised platform access.
• Responsible gambling monitoring: Identifying patterns of behaviour that may indicate problem gambling and proactively offering support tools such as deposit limits and self-exclusion.
• Platform improvement: Analysing usage data to improve game performance, navigation, and the overall member experience on mobile and desktop.
• Communications: Sending transactional notifications (deposit confirmations, withdrawal updates, account alerts) and, with your consent, promotional communications about bonuses, new games, and special offers.
• Dispute resolution: Retaining records of transactions and communications necessary to investigate and resolve complaints or legal claims.

MPO1221 processes your personal data on one or more of the following legal bases, depending on the specific purpose of processing:

• Contractual necessity: Processing required to deliver the services you have requested under the MPO1221 Terms and Conditions — including account management, payment processing, and customer support.
• Legal obligation: Processing required to comply with applicable laws, including AML obligations, KYC requirements, and data retention mandates imposed by financial regulators.
• Legitimate interests: Processing conducted for MPO1221's legitimate business interests, including fraud prevention, platform security, responsible gambling monitoring, and internal analytics — where these interests are not overridden by your rights and freedoms.
• Consent: Processing based on your explicit consent, such as the receipt of promotional marketing communications. You may withdraw your consent at any time without affecting the lawfulness of prior processing.

MPO1221 does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. We may, however, share your data with the following categories of third parties strictly for the purposes outlined in this Policy:

• Payment service providers: Banks and e-wallet operators (including Maybank, CIMB, Public Bank, Hong Leong, FPX, DuitNow, Touch 'n Go eWallet, Boost, and GrabPay) to facilitate deposits and withdrawals. These providers process your financial data under their own privacy frameworks.
• KYC and identity verification providers: Third-party services used to verify your identity documents, confirm your age (21+ requirement), and conduct watchlist screening for AML compliance.
• Fraud prevention and risk management services: Providers who assist in detecting suspicious transactions, multiple account registrations, and other integrity risks.
• Technology and infrastructure providers: Hosting, cloud storage, and content delivery services that support the operation of the MPO1221 platform. These providers act as data processors and are contractually bound to process your data only under our instructions.
• Regulatory and law enforcement authorities: We may be required to disclose personal data to government bodies, regulators, or law enforcement agencies where we are legally compelled to do so, or where disclosure is necessary to protect the rights, safety, or property of MPO1221, its Members, or the public.
• Professional advisers: Legal, accounting, and auditing firms who provide services to MPO1221 and are bound by confidentiality obligations.

All third parties with whom we share personal data are required to maintain appropriate technical and organisational security measures and to use the data only for the specific purpose for which it was shared.

MPO1221 uses cookies and similar tracking technologies to operate the platform effectively, remember your preferences, and analyse how our services are used. The types of cookies we use are as follows:

• Strictly necessary cookies: Essential for the platform to function. These enable core features such as user authentication, session management, and security controls. They cannot be disabled without affecting your ability to use the platform.
• Functional cookies: Used to remember your preferences such as language settings, display options, and previously accessed game categories, providing a more personalised experience.
• Analytics cookies: Collect anonymised or pseudonymised data about how Members interact with the platform — pages visited, features used, session duration — to help us identify areas for improvement.
• Security cookies: Used to detect and prevent fraud, automated bot activity, and multiple account abuse by associating sessions with device and network identifiers.

You can control or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may limit the functionality of the MPO1221 platform on your device. Instructions for managing cookies are available in the help documentation of most browsers (Chrome, Firefox, Safari, Edge, and others).

MPO1221 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or for as long as required by applicable law. Our general retention periods are as follows:

• Active account data: Retained for the full duration of your account with MPO1221, plus a period of up to five (5) years following account closure to satisfy legal and regulatory record-keeping requirements.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction in accordance with applicable AML and financial services regulations.
• KYC and identity documents: Retained for the period required by applicable KYC regulations, typically five (5) years from the date of account closure or the conclusion of the business relationship.
• Support and communications records: Retained for up to three (3) years from the date of the interaction, or longer if required for ongoing dispute resolution or legal proceedings.
• Marketing consent records: Retained for as long as you remain opted in to marketing communications, plus a reasonable period following opt-out to demonstrate compliance with your preferences.

When personal data is no longer required, it is securely deleted, anonymised, or pseudonymised in accordance with our data disposal procedures. Anonymised data that no longer identifies any individual may be retained indefinitely for statistical and analytical purposes.

MPO1221 implements a range of technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and our servers.
• Encrypted storage of sensitive personal data and financial records on access-controlled server infrastructure.
• Two-factor authentication (2FA) available on all Member accounts to prevent unauthorised login.
• Access controls: Internal access to Member personal data is limited to authorised personnel with a legitimate need, subject to role-based permission systems.
• Regular security audits: Our platform undergoes periodic third-party security assessments and penetration testing to identify and address vulnerabilities.
• Incident response procedures: We maintain documented procedures for responding to data security incidents, including notification to affected Members and relevant authorities where required by law.

While MPO1221 takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is completely secure. We encourage you to maintain the confidentiality of your account credentials and to contact us immediately if you suspect any unauthorised activity on your account.

Subject to applicable data protection laws, you have the following rights in relation to the personal data MPO1221 holds about you:

• Right of access: You may request a copy of the personal data we hold about you, together with information about how and why it is processed.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data we hold about you.
• Right to erasure: In certain circumstances, you may request deletion of your personal data. This right is subject to limitations where we are required to retain data by law (e.g., AML record-keeping obligations).
• Right to restriction: You may request that we restrict the processing of your personal data in certain circumstances, for example while a correction request is being resolved.
• Right to data portability: Where processing is based on your consent or on a contract, you may request a machine-readable copy of the personal data you have provided to us.
• Right to object: You may object to processing carried out on the basis of legitimate interests, including the use of your data for direct marketing purposes.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact our support team via live chat or email as detailed in the Contact section of this Policy. We will respond to all data rights requests within a reasonable timeframe and in any event within 30 days. In complex cases, we may extend this period by a further 30 days, in which case we will notify you accordingly.

The MPO1221 platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. Our registration process includes age verification steps, and all accounts are subject to KYC verification that confirms the member's date of birth.

If we become aware that personal data has been collected from an individual under the age of 21, we will immediately suspend the account, delete or anonymise the associated personal data, and refund any deposited funds to the original payment source. We may also report the matter to appropriate authorities where required.

MPO1221 operates internationally, and in the course of delivering our services, your personal data may be transferred to and processed in jurisdictions outside of Malaysia. This may include transfers to server infrastructure, KYC providers, and technology partners located in other countries.

Where personal data is transferred internationally, MPO1221 ensures that appropriate safeguards are in place to protect the data, including:

• Contractual agreements with data processors that require them to apply data protection standards equivalent to those described in this Policy.
• Transfer to jurisdictions that are recognised as providing an adequate level of data protection under applicable law.
• Technical measures including encryption and pseudonymisation applied to data in transit and at rest.

By using the MPO1221 platform, you acknowledge that your personal data may be transferred internationally as described above.

MPO1221 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or operational requirements. When material changes are made, we will update the "Last Updated" date at the top of this page and, where practicable, provide notice to affected Members via in-platform notification or email.

We encourage you to review this Policy periodically to remain informed about how your personal data is being protected. Your continued use of the MPO1221 platform following the publication of an updated Policy constitutes your acceptance of the revised terms.

If you have any questions or concerns about changes to this Policy, please contact our support team before continuing to use the platform.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact the MPO1221 data protection team through any of the following channels:

• Live Chat: Available 24 hours a day, 7 days a week via the live chat widget on the MPO1221 platform. Our team operates on Malaysia Time (MYT, UTC+8) and is available through Malaysian public holidays.
• Support Email (plain text — not a link): [email protected]

When submitting a data rights request or privacy-related query, please include your registered username, a clear description of your request, and any supporting information that would help us respond accurately and efficiently. We are committed to responding to all privacy enquiries promptly and in accordance with our obligations under applicable data protection law.

For general Terms and Conditions queries, please refer to our Terms & Conditions page. For responsible gambling support resources, please visit our Responsible Gambling page.