Privacy Policy — mpoo7

In this Privacy Policy, the following terms carry the meanings set out below unless context requires otherwise:

• "mpoo7" / "the Platform" / "we" / "us" / "our" — the mpoo7 online gambling platform operated at https://mpoo7.net and all associated services, mobile interfaces, and communications channels made available to registered players.
• "Player" / "you" / "your" — any individual who registers an account on the mpoo7 platform or who accesses or uses any part of the platform, whether or not a registered account exists.
• "Personal Data" — any information that identifies or can reasonably be used to identify a living individual, including name, date of birth, email address, telephone number, residential address, payment account details, device identifiers, and IP addresses.
• "Processing" — any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, transmission, erasure, or destruction.
• "Data Controller" — the entity that determines the purposes and means of processing Personal Data. For all players using the mpoo7 platform, the Data Controller is mpoo7.
• "Data Processor" — any third party that processes Personal Data on behalf of mpoo7 under a written data-processing agreement, including payment service providers, KYC verification partners, and hosting infrastructure providers.
• "KYC" — Know Your Customer; the identity and age verification process applied to all mpoo7 accounts to satisfy anti-money-laundering and responsible gaming obligations.
• "Cookie" — a small text file placed on your device by the mpoo7 platform for purposes of session management, preference storage, and anonymised analytics.
• "Sensitive Data" — a subset of Personal Data requiring heightened protection, including government-issued identity document numbers (Indonesian KTP, SIN, passport), full bank account numbers, and any data relating to health or gambling disorder status collected during responsible gaming interactions.

mpoo7 operates as the Data Controller for all Personal Data collected from players who access the platform at https://mpoo7.net. As Data Controller, mpoo7 is responsible for determining the purposes for which your Personal Data is processed and for ensuring that all processing activities are conducted in a lawful, fair, and transparent manner consistent with internationally recognised data protection principles.

mpoo7 is an internationally licensed online gambling platform operating primarily in the Indonesia market. Our primary customer base consists of Indonesian players located in cities including Jakarta, Surabaya, Bandung, Medan, Yogyakarta, Bali, Semarang, Makassar, and Palembang. All player-facing communications and data-handling notices are provided in English, which is the governing language of this platform.

If you have any questions about how mpoo7 handles your data, or wish to exercise any of the rights described in Clause 9, please contact our dedicated Privacy team at [email protected].

mpoo7 collects Personal Data through several channels: directly from you when you register an account, deposit funds, or contact support; automatically when you use the platform; and from third parties such as payment processors and identity verification services. The categories of data we collect are detailed in the table below:

mpoo7 does not collect Special Category data (as defined under international data protection frameworks) such as racial or ethnic origin, political opinions, religious beliefs, or biometric data beyond what is strictly necessary for identity document verification.

mpoo7 processes your Personal Data only for specified, explicit, and legitimate purposes. We do not process your data in a manner that is incompatible with the purposes for which it was originally collected. Our processing purposes, along with the legal basis for each, are as follows:

1. Account Creation and Management. We use Registration Data to create and maintain your mpoo7 account, authenticate your login sessions, and provide you with access to all platform services. Legal basis: performance of contract.
2. Identity and Age Verification (KYC). We process Identity Verification Data to confirm that you are at least 21 years of age and are who you claim to be, in accordance with our anti-money-laundering obligations and 21+ responsible gaming policy. Legal basis: legal obligation and legitimate interest.
3. Payment Processing. We use Financial Data to process deposits and withdrawals through your nominated Indonesian bank account (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata, OCBC NISP) or e-wallet (OVO, DANA, GoPay, ShopeePay, LinkAja). Legal basis: performance of contract.
4. Fraud Prevention and Security. We use Technical Data, Financial Data, and Behavioural Data to detect and prevent fraudulent activity, bonus abuse, money laundering, and account compromise. Legal basis: legitimate interest and legal obligation.
5. Customer Support. We use Communications Data to respond to your enquiries, resolve disputes, and manage formal complaints. Legal basis: performance of contract and legitimate interest.
6. Responsible Gaming. We use Behavioural Data and Responsible Gaming Data to monitor for signs of problem gambling, enforce self-exclusion orders, and apply deposit limits or cool-off periods at your request or where our monitoring systems indicate a potential issue. Legal basis: legal obligation and legitimate interest. Visit our Responsible Gaming page for more information.
7. Platform Improvement. We use anonymised and aggregated Behavioural and Technical Data to analyse platform usage patterns, improve game offerings, and optimise the user experience. This data does not identify you individually. Legal basis: legitimate interest.
8. Promotional Communications. Where you have opted in to marketing communications, we may use your Registration Data and Behavioural Data to send you personalised promotions, bonus offers, and news about new games and features. You may withdraw consent at any time via your account settings or by contacting support. Legal basis: consent.

mpoo7 does not sell, rent, or otherwise commercially exploit your Personal Data. We share your data only in the circumstances described below, and only to the minimum extent necessary for each purpose:

1. Payment Service Providers. To process deposits and withdrawals, we share relevant Financial Data with your nominated payment provider. For bank transfers, this includes the account name and account number associated with your mpoo7 account. For e-wallet transactions, this includes your registered OVO, DANA, GoPay, ShopeePay, or LinkAja account identifier. Each payment provider operates under its own privacy policy and applicable Indonesian banking regulations.
2. Identity Verification Partners. We may share Identity Verification Data with accredited third-party KYC verification service providers to confirm the authenticity of documents submitted during account verification. These providers are bound by strict data-processing agreements and are not permitted to use your data for any purpose other than the identity check requested by mpoo7.
3. Game Software Providers. To deliver our casino, slot, bingo, and blackjack products, your anonymised session and gaming data is transmitted to our game software partners — including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Pocket Games Soft. These providers receive only the data required to render the game experience and record outcomes; they do not receive your full identity or payment details.
4. Regulatory and Law Enforcement Authorities. mpoo7 will disclose Personal Data to competent authorities where required to do so by applicable law, court order, or legitimate regulatory request. We will notify affected players of such disclosures where we are legally permitted to do so.
5. Professional Advisers. In the course of operating our business, we may share Personal Data with legal counsel, auditors, and insurers on a confidential and need-to-know basis. All professional advisers are bound by professional secrecy obligations.
6. Business Transfers. In the event of a merger, acquisition, or sale of all or part of mpoo7's business, your Personal Data may be transferred to the acquiring entity. We will notify you in advance of any such transfer and of any resulting change to this Privacy Policy.

mpoo7 implements a layered security architecture designed to protect Personal Data against unauthorised access, accidental loss, destruction, or disclosure. Our key technical and organisational security measures include:

• Transport Encryption. All data transmitted between your device and mpoo7's servers is protected by TLS 1.2 or higher, ensuring that your login credentials, payment details, and personal information cannot be intercepted in transit.
• Encryption at Rest. Sensitive Data — including identity document scans, bank account details, and password hashes — is encrypted at rest using AES-256 encryption. Passwords are stored as salted hashes; they are never stored in plaintext and cannot be recovered even by mpoo7 staff.
• Access Controls. Access to player Personal Data within mpoo7's internal systems is restricted on a strict need-to-know basis. Staff members are granted the minimum level of data access required to perform their job function, and all access is logged and auditable.
• Two-Factor Authentication. mpoo7 supports and encourages two-factor authentication (2FA) for all player accounts. We strongly recommend enabling 2FA via your account security settings to provide an additional layer of protection beyond your password.
• Regular Security Audits. Our platform infrastructure and data-handling processes undergo regular independent security assessments, including penetration testing by certified security professionals. Critical vulnerabilities are remediated within 24 hours of discovery.
• Data Breach Response. In the event of a data breach that poses a material risk to player privacy, mpoo7 will notify affected players within 72 hours of becoming aware of the breach, providing a clear description of the nature of the breach, the categories and approximate number of players affected, and the steps mpoo7 has taken or proposes to take to address the breach.

While mpoo7 takes every reasonable step to protect your Personal Data, no internet transmission or electronic storage system is entirely impenetrable. You play an important role in your own data security: never share your mpoo7 password with anyone, use a strong and unique password for your account, and contact our support team immediately if you suspect your account has been compromised.

mpoo7 uses cookies and similar tracking technologies to operate the platform effectively and to understand how players interact with our services. The following cookie categories are in use:

mpoo7 does not use third-party advertising cookies, retargeting pixels, or social media tracking scripts. You may manage or delete cookies at any time through your browser's settings menu. Please note that disabling Essential or Security cookies will impair your ability to use the mpoo7 platform.

mpoo7 retains Personal Data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention schedules apply:

• Active Account Data. Registration Data, Financial Data, and Behavioural Data are retained for the full duration of your active account. Upon account closure, active account data transitions to the closed-account retention schedule below.
• Closed Account Data. Following voluntary account closure or termination by mpoo7, your Registration Data and Identity Verification Data are retained for a minimum of 5 years from the date of closure to satisfy anti-money-laundering record-keeping requirements.
• Transaction Records. All deposit and withdrawal transaction records are retained for a minimum of 5 years from the date of each transaction, regardless of account status, in accordance with financial record-keeping obligations.
• KYC Documents. Identity document scans and selfie photographs submitted during verification are retained for a minimum of 5 years from the date of submission, or from the date of account closure, whichever is later.
• Support Communications. Live chat transcripts, email correspondence, and support ticket records are retained for 2 years from the date of the last communication in each interaction thread.
• Responsible Gaming Data. Self-exclusion records and deposit limit histories are retained for a minimum of 7 years to enable mpoo7 to honour self-exclusion commitments and demonstrate compliance with responsible gaming obligations.
• Marketing Consent Records. Records of your opt-in and opt-out consent for marketing communications are retained for the duration of your account and for 3 years following account closure.

When data reaches the end of its applicable retention period, it is securely deleted or anonymised in a manner that makes re-identification impossible. Anonymised, aggregated data derived from player activity may be retained indefinitely for platform analytics purposes, as it no longer constitutes Personal Data.

As an mpoo7 player, you have the following rights over your Personal Data. To exercise any of these rights, please contact our Privacy team at [email protected]. We will acknowledge your request within 24 hours and respond substantively within 30 days.

1. Right of Access. You have the right to request a copy of the Personal Data mpoo7 holds about you, along with information about how it is being used, who it has been shared with, and how long it will be retained.
2. Right to Rectification. If any of the Personal Data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update most of your account information directly via your account dashboard; for changes to identity-verified fields (such as your legal name or date of birth), contact support directly.
3. Right to Erasure. You have the right to request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where processing is unlawful. This right is subject to our legal obligation to retain certain records (see Clause 8); in such cases, we will delete the data as soon as the legal retention period expires.
4. Right to Restrict Processing. You may request that mpoo7 restrict its processing of your Personal Data in certain circumstances — for example, where you contest the accuracy of the data or where you have objected to processing and we are considering whether our legitimate interests override your rights.
5. Right to Data Portability. You have the right to receive a copy of the Personal Data you provided to mpoo7 in a structured, machine-readable format (such as CSV or JSON), and to transmit that data to another service provider where technically feasible.
6. Right to Object. You have the right to object to mpoo7's processing of your Personal Data where that processing is based on legitimate interest, including profiling for platform personalisation. You may object to marketing communications at any time, with immediate effect.
7. Right to Withdraw Consent. Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing that occurred prior to withdrawal.

mpoo7 strictly enforces a 21+ age policy across all services. Our platform is not directed at, and we do not knowingly collect Personal Data from, individuals under 21 years of age. Age verification is a mandatory step in our registration and KYC process, and accounts where the player's age cannot be confirmed as 21 or above will be suspended until satisfactory proof of age is provided.

If mpoo7 becomes aware that Personal Data has been collected from an individual under the age of 21 without parental or guardian consent, we will take immediate steps to delete that data and close the associated account. If you believe that a person under 21 has registered an mpoo7 account, please contact us immediately at [email protected] so that we may investigate and act accordingly.

Parents and guardians who are concerned about underage gambling are encouraged to make use of internet filtering tools and parental control software to restrict access to gambling websites. The Responsible Gaming page contains further resources and guidance.

As an internationally operating platform serving the Indonesia market, mpoo7 may transfer your Personal Data to servers or data-processing partners located outside Indonesia. Such transfers are necessary to deliver core services including game software provision (Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, Pocket Games Soft), cloud hosting infrastructure, and independent security monitoring.

Wherever Personal Data is transferred internationally, mpoo7 ensures that appropriate safeguards are in place to maintain a level of data protection equivalent to the standards described in this Privacy Policy. These safeguards may include standard contractual clauses, binding corporate rules, or data-processing agreements that impose obligations on recipient entities equivalent to those accepted by mpoo7. mpoo7 does not transfer Personal Data to jurisdictions that lack adequate data protection frameworks without implementing additional contractual safeguards.

mpoo7 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or service offerings. Where amendments are material — meaning they substantively affect your privacy rights or how your data is used — mpoo7 will provide at least 7 days' advance notice via a prominent banner on the platform and, where technically feasible, by email to your registered address.

Continued use of the mpoo7 platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. The most current version of this policy is always available at https://mpoo7.net/privacy-policy. The "Last updated" date at the top of this page reflects the date of the most recent revision. If you do not agree with any changes to this Privacy Policy, please cease using the platform and contact support to request account closure in accordance with the Terms & Conditions.

For any questions, concerns, or requests relating to this Privacy Policy or mpoo7's handling of your Personal Data, please contact our Privacy and Data team through the following channels:

• Email: [email protected] — mark your subject line as "Privacy Request — [Your Account Username]" for fastest routing to our Privacy team. Responses are typically provided within 4 hours during normal operating hours (WIB, UTC+7) and within 24 hours at all other times.
• Live Chat: Available 24/7 within your mpoo7 account dashboard. For privacy-related queries requiring document exchange, email is the preferred channel; however, live chat agents can guide you through the process of submitting a formal request.
• Formal Data Rights Requests: Submit your request by email to [email protected] with the subject line "Data Rights Request — [Right Type] — [Your Account Username]" (e.g., "Data Rights Request — Erasure — player123"). mpoo7 will acknowledge the request within 24 hours and action it within 30 calendar days, in accordance with Clause 9 of this Privacy Policy.

mpoo7's support team includes native Indonesian-speaking agents and operates around the clock, including all Indonesian public holidays such as Idul Fitri, Idul Ad ha, Nyepi, and Indonesian Independence Day (17 August). While the platform itself is in English, our support agents are fully equipped to assist Indonesian-speaking players with any privacy or data-protection concern.