MPOASIA Privacy Policy – Member Personal Data Protection

1. Introduction and Scope of This Policy

This Privacy Policy ("Policy") describes how mpoasia ("we", "the platform") collects, uses, stores, and protects your personal data when you use the mpoasia website or mobile app. This Policy applies to all registered members, website visitors, and any individuals who interact with our platform.

Mpoasia is committed to ensuring your personal data is handled responsibly and in compliance with the Malaysian Personal Data Protection Act 2010 (PDPA) and international best practices in data management. By registering or using the mpoasia platform, you agree to the terms of this Privacy Policy.

We believe transparency is the foundation of trust. This document is therefore written in plain language — so you know exactly what happens with your information, rather than being buried in confusing technical jargon.

2. Types of Personal Data We Collect

Mpoasia only collects data that is strictly necessary to operate the platform safely and effectively. The data we collect can be broken down into several categories:

2.1 Registration and Identity Information

• Full name as shown on identity card
• Malaysia identity card number (MyKad) or passport number
• Date of birth and gender
• Email address and mobile number
• Residential address

2.2 Financial and Transaction Information

• Bank account number and bank name
• E-wallet account number (Touch 'n Go eWallet, DuitNow, and others)
• Deposit and withdrawal history
• Transaction records and account balance

2.3 Platform Usage Data

• Game history and wagering activity
• Login times and access history
• Platform preferences and settings
• Communications with the customer support team

2.4 Technical Data

• IP address and device information
• Web browser type and operating system
• Cookie data and session identifiers
• General location information (country/region)

Data Category	Example Information	Primary Purpose
Identity Verification	Name, MyKad, email, phone	Identity verification & KYC
Finance	Bank account, transaction history	Deposit & withdrawal processing
Usage	Game history, activity logs	Security & platform improvements
Technical	IP, device, cookies	Fraud detection & performance

3. How We Collect Data

Mpoasia collects your personal data through several different channels:

• Direct registration – When you complete the registration form and provide information voluntarily.
• Platform usage – Automatically when you use the mpoasia website or app.
• KYC Verification – Documents you submit for the identity verification process.
• Communications – When you contact our customer support team via live chat or email.
• Cookie Technology – Information collected automatically via cookies and similar tracking technologies when you browse our platform.

4. Purposes of Personal Data Use

Every piece of data we collect has a clear and legitimate purpose. mpoasia uses your personal data for the following purposes:

• Account management – Creating, verifying, and securely maintaining your member account.
• Financial processing – Processing deposits, withdrawals, and all financial transactions accurately and promptly.
• Identity verification (KYC) – Meeting legal compliance requirements and verifying member identities to prevent fraud.
• Platform Security – Detecting and preventing unauthorised access, fraud, money laundering, and other illegal activities.
• Customer Support – Responding to your enquiries, complaints, and support requests effectively.
• Platform improvement – Analysing usage patterns to improve the user experience and platform features.
• Important communications – Sending account-related notices, terms updates, and security information.
• Legal compliance – Fulfilling legal and regulatory obligations applicable to our platform's operations.

5. Data Sharing with Third Parties

Mpoasia does not sell, transfer, or disclose your personal data to third parties without your consent, except in the following limited circumstances:

5.1 Trusted Service Providers

We share only the minimum necessary data with third-party service providers who help us operate the platform, including payment processors, cloud service providers, and security solution providers. All such providers are bound by strict confidentiality agreements and are only permitted to use your data for the specified service purposes.

5.2 Legal Requirements

Mpoasia may be required to disclose your data to government authorities, law enforcement, or regulatory bodies when mandated by Malaysian law or a valid court order.

5.3 Fraud Prevention

In cases of suspected fraud or serious security threats, we may share necessary information with fraud prevention agencies or relevant financial institutions to protect the interests of the platform and our members.

6. Data Security Measures

Mpoasia continuously invests in robust security infrastructure to keep your personal data safe. The key security measures we employ include:

• 256-bit SSL Encryption – All data transmitted between your device and our servers is protected with industry-grade encryption.
• Data-at-rest encryption – Personal data stored in our databases is encrypted using modern encryption algorithms.
• Strict access control – Only authorised personnel with a legitimate business need may access member personal data.
• 24/7 Monitoring – Automated monitoring systems operate around the clock to detect suspicious activity or intrusion attempts.
• Regular security audits – We conduct regular security audits and penetration testing to identify and address vulnerabilities.
• Two-factor authentication – An additional security layer is available to protect your account from unauthorised access.

While we take all reasonable precautions, no security system can be guaranteed 100% safe. You also play an important role in protecting your account by using a strong password and never sharing your login credentials with anyone.

7. Cookies and Tracking Technologies

Mpoasia uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

7.1 Essential Cookies

These cookies are required for core platform functions such as login session verification and security settings. The platform cannot operate properly without them and they cannot be disabled.

7.2 Performance Cookies

These cookies help us understand how members use the platform – such as which pages are visited most frequently and how long sessions typically last. This information is used to improve performance and user experience.

7.3 Functional Cookies

These cookies remember your preferences such as language, display settings, and game choices so you do not have to configure them again every time you log in.

8. Your Rights as a Data Owner

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by mpoasia:

To exercise any of the rights above, please contact our team using the details provided in Section 11. We will process your request within 14 business days.

9. Data Retention Period

Mpoasia retains your personal data for as long as necessary to fulfil the purpose for which it was collected, or as required by law. Generally:

• Active account data – Retained for the duration your account is active and for a defined period following account closure.
• Financial records – Retained for a minimum of seven (7) years in accordance with Malaysian financial regulatory requirements.
• Security logs – Retained for 12 to 24 months for security investigation purposes.
• Customer support communications – Retained for three (3) years for service reference and improvement purposes.

When data is no longer needed and there is no legal obligation to retain it, mpoasia will securely delete or anonymize that data using industry-recognized methods.

10. Amendments to This Privacy Policy

Mpoasia reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or new platform features. Any significant changes will be communicated to members via an in-platform notice or email at least 14 days before taking effect.

The "Updated" date at the top of this page indicates when this Policy was last reviewed. You are encouraged to check this page periodically to stay informed about how we protect your data.

11. Contact Us Regarding Privacy

If you have any questions, concerns, or wish to exercise your privacy rights, the mpoasia Data Protection Officer (DPO) team is ready to assist you. You can reach us via:

• Email: [email protected]
• Live Chat: Available 24/7 via the mpoasia platform
• FAQ Page: Visit our FAQ page for privacy-related frequently asked questions

We are committed to responding to all privacy-related inquiries within 3 business days. For more complex data rights requests, we aim to resolve them within 14 business days.