01 Scope and Application
This Privacy Policy applies to personal information processed through the MPO212 website and associated services. It covers visitors, registered members, people who communicate with support, and users who participate in casino games or sports betting markets. The policy applies whether a member accesses MPO212 from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, or another location.
In this policy, “personal information” means information that identifies an individual directly or can reasonably be linked to an identifiable person. “Processing” includes collecting, recording, organising, using, analysing, disclosing, securing, retaining, correcting, and deleting information. MPO212 seeks to process personal information fairly, transparently, and only for legitimate operational, security, compliance, and service purposes.
02 Information We Collect
MPO212 may collect the following categories of personal information:
- Account information: full name, date of birth, username, password credentials, email address, Malaysian mobile number, residential address, and preferred currency.
- Identity information: details shown on a valid MyKad, driving licence, passport, selfie verification image, and proof-of-address document.
- Financial information: masked payment details, bank name, account-holder name, e-wallet identifier, transaction references, deposit history, withdrawal history, and selected payment method.
- Gaming information: casino activity, sports selections, stakes, results, bonuses, wagering progress, account balance, session duration, and responsible gambling limits.
- Technical information: IP address, device type, operating system, browser version, language settings, approximate location, timestamps, and security logs.
- Communications: support conversations, complaint details, account requests, verification enquiries, and feedback sent to MPO212.
MPO212 requests only information reasonably required to operate the service, secure user accounts, process transactions, support responsible gambling controls, and satisfy applicable verification obligations. Users should not submit information that has not been requested.
03 How Information Is Collected
Information is collected directly when a user creates or updates an MPO212 account, submits KYC documents, contacts support, chooses a deposit method, or requests a withdrawal. Information is also generated automatically when a user browses the platform or interacts with casino and sports betting features.
Transaction details may be received from approved payment channels used by Malaysian members, including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, and Hong Leong Bank. MPO212 may also receive fraud-prevention or identity-verification results from service providers acting under confidentiality and data-protection obligations.
04 Purposes of Data Processing
MPO212 may process personal information for the following purposes:
- Creating, authenticating, maintaining, and securing a user account.
- Confirming that a member satisfies the minimum age requirement of 21.
- Verifying identity, address, payment ownership, and source-of-funds information where required.
- Processing MYR deposits and withdrawals and reconciling transaction records.
- Providing live casino, slots, lottery, arcade, EPL, UFC, Liga Super Malaysia, and live football betting services.
- Detecting account takeover, fraud, collusion, payment abuse, money laundering indicators, or breaches of the Terms & Conditions.
- Operating deposit limits, loss limits, cooling-off periods, session reminders, and self-exclusion controls.
- Responding to enquiries, investigating complaints, and improving platform reliability.
- Maintaining records required for audits, disputes, security reviews, and applicable legal obligations.
MPO212 does not use identity documents for unrelated advertising. KYC information is handled separately from ordinary promotional preference data wherever reasonably practicable.
05 Lawful and Fair Processing
MPO212 processes information where it is necessary to provide requested services, administer the contractual relationship with a member, protect legitimate security interests, satisfy applicable obligations, respond to legal requests, or act with the user's consent where consent is appropriate.
Legitimate interests may include preventing fraud, protecting account balances, maintaining platform stability, resolving disputes, measuring service performance, and ensuring that promotions operate fairly. MPO212 considers the potential effect on users before relying on such interests and applies safeguards intended to limit unnecessary processing.
Where processing depends on consent, a member may withdraw that consent for future processing. Withdrawal does not affect processing already carried out lawfully, and certain information may still be retained where MPO212 has another valid operational or legal reason to do so.
06 Payments and KYC Records
Payment and identity verification are important parts of account security. MPO212 may compare the name on an account with the name attached to a Maybank, CIMB, Public Bank, Hong Leong Bank, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, card, or approved cryptocurrency transaction. Third-party payment accounts may be rejected.
KYC records may include a government-issued identity document, a recent utility bill or bank statement, and a selfie used to confirm that the applicant is the document holder. MPO212 uses these records to verify eligibility, reduce impersonation, protect withdrawals, and investigate suspicious activity. Verification records are access-controlled and should only be available to authorised personnel and approved processors with a genuine business need.
Payment processing times and transaction limits may differ by method. Privacy checks may temporarily delay a withdrawal if recipient details do not match verified account information. This safeguard is intended to prevent funds from being sent to an unauthorised party.
07 Information Sharing and Disclosure
MPO212 does not sell personal information. Information may be disclosed only where reasonably necessary to operate the platform, protect users, complete a requested transaction, satisfy an applicable requirement, or establish and defend legal rights.
Recipients may include:
- Payment processors, banks, and e-wallet operators involved in a member's deposit or withdrawal.
- Identity verification, anti-fraud, cybersecurity, hosting, storage, and customer-support providers.
- Professional advisers, auditors, insurers, or dispute-resolution personnel who owe confidentiality duties.
- Competent authorities where disclosure is required by a valid and applicable legal process.
- A successor organisation if MPO212 undergoes a lawful restructuring, merger, or transfer of business, subject to appropriate privacy safeguards.
Service providers are expected to process information only for authorised purposes and to apply suitable confidentiality and security controls. MPO212 seeks to limit disclosures to the information necessary for the relevant task.
08 Cookies and Device Information
MPO212 may use cookies and similar technologies to maintain secure sessions, remember preferences, measure website performance, identify unusual login patterns, and improve navigation. Essential cookies support functions such as authentication, account security, and transaction continuity.
Analytics information may show how pages perform in aggregate without being used to publicly identify an individual. Users can adjust browser settings to restrict non-essential cookies, although disabling essential storage may prevent login, account verification, or other platform functions from working correctly.
Device Security
Technical records may be compared with previous login activity to detect an unexpected device, unusual location, or automated access attempt. MPO212 may request additional verification where an activity pattern presents a reasonable security concern.
09 Data Security Measures
MPO212 uses administrative, organisational, and technical safeguards designed to protect personal information against unauthorised access, alteration, disclosure, loss, or destruction. Measures may include encrypted transmission, access restrictions, credential controls, monitoring, secure backups, staff confidentiality duties, and periodic security reviews.
No internet service can guarantee absolute security. Members also have an important role in protecting their information. Users should choose a unique password, keep account credentials private, sign out on shared devices, review transaction history, and notify MPO212 promptly if unauthorised access is suspected.
10 Data Retention
MPO212 retains personal information only for as long as reasonably required for the purpose for which it was collected, including account administration, payment reconciliation, KYC verification, fraud prevention, responsible gambling enforcement, dispute management, and applicable record-keeping obligations.
Retention periods may differ according to the type of information. Security logs may be kept for a shorter period than transaction or identity-verification records. If a member closes an account, some data may remain restricted in secure records where necessary to resolve outstanding payments, maintain a self-exclusion instruction, prevent duplicate-account abuse, or respond to a lawful request.
When information is no longer required, MPO212 will take reasonable steps to delete it, anonymise it, or place it beyond ordinary operational use.
11 User Rights and Choices
Subject to applicable requirements and identity verification, a user may ask MPO212 to provide information about the personal data held in relation to their account. A member may also request correction of inaccurate or incomplete information, withdraw eligible marketing consent, or ask whether certain processing can be limited.
Depending on the circumstances, a user may request:
- Access to personal information associated with the account.
- Correction of an inaccurate name, address, mobile number, or other account detail.
- Deletion of information that is no longer required and is not subject to a valid retention need.
- Restriction of certain processing while an accuracy or privacy concern is reviewed.
- Withdrawal from direct promotional communications.
- An explanation of a significant account decision where appropriate.
MPO212 may request proof of identity before acting on a privacy request. This protects account information from disclosure to an impersonator. Some requests may be limited where fulfilling them would compromise security, conflict with a self-exclusion record, affect another person's rights, or breach a valid retention obligation.
12 Marketing Preferences
MPO212 may send eligible members information about platform updates, casino offers, sports promotions, VIP benefits, or payment features where the member has agreed to receive such communications or where another permitted basis applies. Promotional preferences do not affect essential account, security, withdrawal, or responsible gambling messages.
A member may ask to stop promotional messages at any time through account preferences or by contacting support. MPO212 may retain a minimal suppression record so that an opt-out choice can continue to be respected.
MPO212 will not intentionally direct promotional gambling content to a person known to be under 21 or to a member whose account is subject to active self-exclusion.
13 Age Restriction and Minors
MPO212 services are strictly intended for people aged 21 and above. The platform does not knowingly permit minors to register, deposit, gamble, or receive promotional communications. Age information and identity documentation may be checked before withdrawals and whenever account eligibility requires confirmation.
If MPO212 has reasonable grounds to believe that information belongs to a person under 21, the relevant account may be suspended while the matter is investigated. A parent or guardian who believes a minor has provided information to MPO212 should contact support using the details in this policy.
14 Changes to This Privacy Policy
MPO212 may update this Privacy Policy when services, payment methods, security practices, or applicable requirements change. The current version will be published on this page with a revised effective or review date.
Where a change materially affects how personal information is used, MPO212 may provide an additional notice through the platform or an appropriate account communication. Members are encouraged to review this page periodically.
15 Contact Us
Questions about this Privacy Policy, an MPO212 account, or a personal-data request may be directed to the privacy and support team. The website email is displayed below as plain text:
Email: [email protected]
Please include enough information for MPO212 to identify the relevant account and understand the request, but do not include a password or unnecessary identity-document details in the initial message. MPO212 may ask for additional verification through a secure process before releasing account information or changing personal details.
Privacy enquiries are reviewed as promptly as reasonably possible. Complex matters involving payment records, fraud checks, or account disputes may require additional investigation.