Privacy Policy MPO1221 — Your Data Protection

1 Introduction & Scope of This Policy

This Privacy Policy is published by mpo1221 ("we", "Platform", or "mpo1221") and applies to all users who register, browse, or use any part of our platform at mpo1221.vin as well as our official mobile app.

We understand that your trust is the most valuable asset you place in us. That is why we are committed to handling your personal data with full integrity, transparency and accountability. This policy explains what data we collect, why we collect it, how it is stored, when it may be shared with third parties, and your rights as the data owner.

By using the mpo1221 platform, you agree to the practices described in this Privacy Policy. If you do not agree with any part of this policy, you have the right to discontinue use of the platform and close your account.

2 Personal Data We Collect

MPO1221 only collects data that is strictly necessary to provide our services safely and efficiently. The types of data we collect are as follows:

We do not collect special category data such as health information, religious beliefs, political views or sexual orientation for the purposes of operating our platform.

3 How We Collect Your Data

Your personal data is collected through various lawful and transparent methods:

• Account Registration: Information you submit when registering a new account at mpo1221, including your name, phone number and email address.
• KYC Process: Identity verification documents you submit for account verification and withdrawal processing.
• Financial Transactions: Payment information shared when you make a deposit or withdrawal via FPX, TNG eWallet, GrabPay, Boost, ShopeePay or other supported methods.
• Platform Usage: Data automatically generated while you use the platform, including betting records, page navigation, and button interactions.
• Contact Us: Information you provide when contacting customer support via Live Chat or email.
• Cookies & Tracking Technologies: Data collected through cookies, pixels, and similar technologies while you browse our platform.

4 How We Use Your Data

The personal data we collect is used solely for legitimate purposes related to the operation of the mpo1221 platform. The following are the primary purposes for which your data is used:

• Account Management: Create, verify and maintain your account on the mpo1221 platform.
• Transaction Processing: Process deposits, withdrawals and all other financial transactions securely and accurately.
• Identity Verification (KYC): Meet legal compliance requirements and prevent fraud and money laundering.
• Platform Security: Detect, investigate and prevent fraudulent activity, unauthorised access and other security threats.
• Customer Support: Address enquiries, resolve complaints and provide technical assistance to you.
• Service Communications: Send important notifications related to your account, security updates and policy changes.
• Service Improvement: Analyse usage patterns to improve the platform's functionality, design and user experience.
• Legal Compliance: Fulfil applicable legal obligations, regulations or court orders.

We do not use your data to make automated decisions that significantly affect you without appropriate human review.

5 Third-Party Data Sharing & Disclosure

MPO1221 respects your privacy and does not sell your personal data to any third party. However, under certain limited circumstances, we may share your data with the following parties:

• Payment Service Providers: Authorised payment gateway providers (FPX, Touch 'n Go, GrabPay, and others) to securely process your financial transactions.
• Technology Service Providers: Hosting companies, cloud computing, and technical infrastructure providers that help us operate the platform securely.
• Regulatory Authorities: Government agencies or legal authorities where we are required to do so under Malaysian law.
• Identity Verification Partners: Trusted third-party KYC services for regulatory-mandated identity verification purposes.

All third parties receiving your data are bound by strict confidentiality agreements and are required to uphold data protection standards equivalent to our own. They are only permitted to use your data for purposes we have specified.

6 Cookies & Tracking Technologies

MPO1221 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you browse our website.

The types of cookies we use are:

• Essential Cookies: Required for core platform functions such as login authentication and session security. These cookies cannot be disabled.
• Performance Cookies: Help us understand how users interact with the platform for continuous improvement purposes.
• Preference Cookies: Save your settings and preferences such as language and display layout for ease of use.
• Analytics Cookies: Used to analyse traffic and usage patterns in aggregate to help us make data-driven decisions.

You can manage cookie settings through your web browser at any time. Please note that disabling certain cookies may affect the functionality and user experience of our platform.

7 Security & Data Protection

MPO1221 implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, loss, alteration or unauthorised disclosure.

Key security measures we employ include:

• Data encryption in transit using industry-recognised 256-bit TLS/SSL protocols.
• Data encryption at rest for all sensitive information stored in our databases.
• Strict role-based access control (RBAC) to ensure only authorised personnel can access user data.
• Round-the-clock security monitoring, 24 hours a day, 7 days a week, by our dedicated cybersecurity team.
• Regular penetration testing conducted by independent security auditors.
• Documented and regularly tested data incident response procedures.
• Mandatory privacy and security awareness training for all MPO1221 staff.

8 Data Retention & Deletion

MPO1221 only retains your personal data for as long as necessary to fulfil the purposes stated in this Privacy Policy or as required by applicable laws and regulations in Malaysia.

Our data retention period guidelines are as follows:

• Active Account Data: Retained for as long as your account is active and in use on the mpo1221 platform.
• Financial Transaction Data: Retained for a minimum of 7 years in line with Malaysia's financial compliance and tax law requirements.
• KYC Data: Retained for the period stipulated by regulatory authorities, generally no less than 5 years after account closure.
• Security Logs: Retained for 2 years for security investigation purposes if required.
• Customer Support Data: Retained for 3 years for reference and complaint investigations.

When the retention period expires or when you request data deletion (subject to legal requirements), your data will be securely deleted or anonymised using approved procedures.

9 Your Rights & How to Exercise Them

Under Malaysia's Personal Data Protection Act (PDPA), you have certain rights regarding your personal data held by mpo1221. These rights include:

• Right to Access: Request access to the personal data we hold about you in a readable format.
• Right to Rectification: Request correction of data that is inaccurate, incomplete or outdated.
• Right to Object: Object to the processing of your data for direct marketing or certain profiling purposes.
• Right to Restrict Processing: Request that we restrict how we process your data under certain circumstances, such as during a dispute.
• Right to Erasure: Request the deletion of your personal data subject to any legal obligations still in force.
• Right to Data Portability: Receive a copy of your data in a structured, machine-readable format.

To exercise any of the above rights, please contact our customer support team via 24/7 Live Chat or by email at [email protected]. We will process your request within 30 days of receipt.

10 Changes to This Privacy Policy

MPO1221 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data management practices, latest legal requirements or platform service improvements. Any changes made will take effect immediately upon publication of the latest version on this page.

For material or significant changes, we will notify you via:

• In-account notifications upon your next login.
• Email notification to the address registered in your account.
• A clear notice on the home page of our website.

It is your responsibility to review this Privacy Policy page periodically to stay informed about how we manage your data. The last updated date is always displayed at the top of this page for your reference.