Privacy Policy — mpo19

This Privacy Policy ("Policy") describes how mpo19 ("we", "us", "our") collects, uses, stores, discloses, and protects the personal information of individuals ("you", "Player") who register for or use the mpo19 online betting and casino platform at https://mpo19.cam (the "Platform").

mpo19 operates as an internationally licensed online betting and casino platform serving English-preference players across Indonesia. We are committed to handling all personal data in a responsible, transparent, and secure manner consistent with internationally recognized data protection principles.

By creating an account on the Platform, making a deposit, or otherwise using our services, you acknowledge that you have read and understood this Policy, and you consent to the collection and use of your personal data as described herein. If you do not agree to the terms of this Policy, you must not use the Platform.

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information that identifies or could reasonably be used to identify a living individual, either directly or in combination with other data.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, transmission, and deletion.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data — in this context, mpo19.
• "Data Processor" means any third-party entity that processes Personal Data on behalf of mpo19 under a data processing agreement, such as KYC verification providers and payment processors.
• "Consent" means a freely given, specific, informed, and unambiguous indication of your agreement to the processing of your Personal Data for a stated purpose.
• "Cookie" means a small text file placed on your device by the Platform for the purpose of identifying your session, preferences, or usage behavior.
• "KYC" (Know Your Customer) means the identity and address verification process required to confirm a Player's identity prior to processing withdrawals or as otherwise required by our compliance obligations.

mpo19 collects only the Personal Data necessary to operate your account, fulfill our legal obligations, and deliver a secure, personalized gaming experience. The categories of data we collect are as follows:

When you create an account, we collect your full legal name, date of birth, residential address in Indonesia, active mobile number, and a valid email address. This data is required to open and maintain your account and to comply with our age verification (21+) and KYC obligations.

To process withdrawal requests and comply with anti-money-laundering requirements, we collect copies of government-issued photo identification (Indonesian National ID / KTP, passport, or driver's license), proof of residential address, and proof of ownership of the payment method used for deposits.

We record all deposits and withdrawals processed through your account, including transaction amounts in IDR (Rp), timestamps in WIB, transaction reference numbers, and the payment channel used (e.g., BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, LinkAja). We do not store full bank account credentials or e-wallet passwords — payment authentication is handled by the respective payment provider.

We maintain records of all bets placed, games played, odds accepted, outcomes, and wagering activity on your account. This data is used for account management, dispute resolution, responsible gaming monitoring, and fraud detection.

We automatically collect technical data when you access the Platform, including your IP address, browser type and version, operating system, device identifiers, screen resolution, and referring URL. This data helps us secure the Platform, prevent multi-accounting, and optimize the user experience.

When you contact our support team — whether via email, live chat, or other channels — we retain records of those communications, including the content of your messages and any files or screenshots you share with us.

Where you have opted in to receive promotional communications, we hold a record of your marketing preferences and the specific channels (email, SMS) through which you have agreed to receive them.

mpo19 collects Personal Data through the following means:

• Directly from you: when you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or update your account settings.
• Automatically: through cookies, server logs, and similar tracking technologies as you interact with the Platform (see Section 8 — Cookies & Tracking).
• From third parties: from KYC and identity verification service providers, payment processors (such as BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay), fraud detection services, and analytics platforms — all of whom are bound by appropriate data protection agreements with mpo19.

mpo19 does not purchase personal data from data brokers or any third-party marketing lists. All data we hold about you has been either provided by you directly or obtained through your interaction with the Platform and its authorized service partners.

We process your Personal Data for the following specific purposes:

• Account management: Creating, maintaining, and administering your Player account, processing your transactions, and managing your balance.
• Identity verification and KYC compliance: Confirming your identity and age (21+) in accordance with our responsible gaming obligations and anti-money-laundering standards.
• Payment processing: Facilitating deposits and withdrawals via supported Indonesian payment channels including BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, and LinkAja.
• Fraud prevention and security: Detecting and preventing unauthorized account access, multi-accounting, bonus abuse, money laundering, and other fraudulent or prohibited conduct.
• Responsible gaming: Monitoring gameplay patterns for indicators of problem gambling behavior and administering player-initiated responsible gaming tools such as deposit limits, cooling-off periods, and self-exclusion requests.
• Customer support: Responding to your inquiries, resolving disputes, and providing technical assistance.
• Legal compliance: Meeting our obligations under applicable law, responding to lawful requests from authorities, and maintaining records as required by our international operating license.
• Platform improvement: Analyzing aggregated, anonymized usage data to improve the performance, reliability, and user experience of the Platform.
• Marketing communications (opt-in only): Sending you promotional offers, bonus announcements, and seasonal promotions (such as those aligned with Idul Fitri, Ramadhan, BRI Liga 1 season events, or Indonesian Independence Day) where you have explicitly consented to receive such communications.

mpo19 processes your Personal Data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing required to fulfill the contract between you and mpo19 — i.e., to provide the account, process transactions, and deliver the gaming services you have requested.
• Legal obligation: Processing required to comply with applicable legal requirements, including KYC, anti-money-laundering obligations, and responses to lawful authority requests.
• Legitimate interests: Processing carried out in pursuit of mpo19's legitimate business interests — such as fraud detection, security monitoring, and platform analytics — where those interests are not overridden by your fundamental rights.
• Consent: Processing based on your freely given consent, specifically for marketing communications. You may withdraw consent at any time without affecting any other processing activities.

mpo19 does not sell your Personal Data. We may share your data with the following categories of third parties only where necessary and subject to appropriate data protection agreements:

Transaction data is shared with the relevant payment provider (e.g., BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, LinkAja) to the extent necessary to process your deposit or withdrawal. Each provider operates under its own privacy policy and is independently responsible for data it holds.

KYC documents are shared with our contracted identity verification service providers, who process this data solely for the purpose of completing verification on mpo19's behalf and are bound by strict data processing agreements.

Technical and behavioral data may be shared with fraud prevention and cybersecurity service providers to help identify and block fraudulent activity, multi-accounting, and unauthorized access.

Gameplay data (such as your player ID, bet history, and session data) may be shared with third-party game studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft — to the extent necessary to deliver their games within the Platform. These providers act as data processors under agreement with mpo19.

We may disclose Personal Data to law enforcement agencies, regulatory bodies, courts, or other competent authorities where required by law, court order, or where we reasonably believe disclosure is necessary to prevent serious harm, fraud, or criminal activity.

In the event of a merger, acquisition, or sale of mpo19's business or assets, Personal Data held by mpo19 may be transferred to the acquiring entity. You will be notified of any such transfer and of any material changes to this Policy that may result from it.

mpo19 uses cookies and similar tracking technologies to operate the Platform, maintain your session, remember your preferences, and analyze usage patterns. The following types of cookies are used:

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to use the Platform. Disabling analytics or functional cookies will not prevent you from accessing core betting and gaming features.

mpo19 retains Personal Data for as long as is necessary to fulfill the purposes described in this Policy, subject to the following retention standards:

• Account data: Retained for the duration of your active account and for a minimum of 5 years following account closure, to comply with our anti-money-laundering record-keeping obligations.
• KYC documents: Retained for a minimum of 5 years from the date of the most recent transaction associated with the verified account.
• Transaction and betting records: Retained for a minimum of 5 years from the date of the transaction.
• Support communications: Retained for 3 years from the date of the communication, unless the content is relevant to an ongoing dispute or legal proceeding.
• Marketing data: Retained until you withdraw consent or request deletion, whichever occurs first.
• Technical / session data: Retained for up to 24 months in anonymized or pseudonymized form for analytics purposes.

When Personal Data is no longer required, mpo19 will securely delete or anonymize it in accordance with our internal data disposal standards.

As a Player, you hold the following rights with respect to your Personal Data held by mpo19. To exercise any of these rights, contact us at [email protected]. We will respond to all verified requests within 30 calendar days.

mpo19 implements a layered set of technical and organizational security measures designed to protect your Personal Data against unauthorized access, accidental loss, destruction, or disclosure. These measures include:

• TLS/SSL encryption on all data transmitted between your browser or device and mpo19's servers;
• Encrypted storage of sensitive data at rest, including KYC documents and payment references;
• Access controls restricting internal access to Personal Data on a strict need-to-know basis, with access logs maintained and reviewed regularly;
• Multi-factor authentication for staff accounts with access to production data systems;
• Regular penetration testing and security audits conducted by qualified third-party security professionals;
• Intrusion detection and monitoring systems operating continuously to identify and respond to suspicious activity in real time;
• Incident response procedures requiring that any confirmed personal data breach affecting your rights be reported to you without undue delay.

Despite these measures, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your own account credentials. If you suspect your account has been compromised, contact support immediately at [email protected].

The mpo19 Platform is strictly intended for adults aged 21 and over. We do not knowingly collect, process, or retain any Personal Data from individuals under the age of 21. Age verification is conducted during the registration process and as part of ongoing KYC compliance.

If mpo19 becomes aware that a Player account has been created by or on behalf of an individual under 21 years of age, the account will be closed immediately, all funds will be forfeited, and any Personal Data associated with the account will be deleted in accordance with our data retention procedures.

If you have reason to believe that a minor has registered on the Platform, please contact us immediately at [email protected] so that we may investigate and take prompt action.

The Platform may reference or integrate services operated by third-party game studios, payment providers, or analytics tools. Where such integrations exist, those third parties may independently collect certain technical data (such as your IP address or device identifiers) in the course of delivering their services within the Platform environment.

mpo19 is not responsible for the privacy practices of third-party providers operating under their own terms of service and privacy policies. We recommend reviewing the privacy policies of any third-party service you interact with. Where those providers act as data processors on our behalf, they are bound by appropriate contractual safeguards.

mpo19 reserves the right to update or amend this Privacy Policy at any time. When material changes are made — such as a change in the categories of data collected, the purposes of processing, or the third parties with whom data is shared — we will provide advance notice to registered Players via the email address on file or via a prominent in-platform notification. The "Last Updated" date at the top of this page will reflect the date of the most recent revision.

Your continued use of the Platform following the effective date of any amendment constitutes acceptance of the revised Policy. If you do not agree to the updated terms, you should discontinue use of the Platform and may request the withdrawal of any confirmed real-money balance by contacting support.

For any questions, concerns, or formal requests relating to this Privacy Policy or the exercise of your data rights, please contact mpo19's data protection and compliance team. All formal written notices must be submitted in English.

For information on responsible gaming tools including deposit limits, self-exclusion, and cooling-off periods, visit our Responsible Gaming page. For general platform questions, visit our FAQ page.