Mpoid Privacy Policy – Personal Data Protection for Malaysian Players

Mpoid believes that privacy is a fundamental right for every individual, not merely a legal compliance requirement. This Privacy Policy was developed with the goal of giving every Malaysian member complete clarity on how their personal data is managed on the mpoid platform — from the very first moment you visit our website through to every transaction, bet, and interaction with our support team.

This policy applies to all users of the mpoid platform, including those browsing the website without a registered account, registered members who are actively playing or placing bets, and those interacting with mpoid's customer support team through any communication channel. By using the mpoid platform in any capacity, you acknowledge that you have read and understood this Privacy Policy.

This policy is guided by the principles of Malaysia's Personal Data Protection Act 2010 (PDPA 2010) and international best practices in data protection. mpoid acts as both data processor and data controller for all personal information collected through our platform.

Mpoid only collects data that is strictly necessary to provide platform services, ensure account security, process transactions, and comply with legal requirements. The following are the categories of data we may collect:

• Full name as it appears on your Malaysian identity card (MyKad) or passport.
• An active Malaysian mobile number for OTP verification.
• The email address used for account communications and important notifications.
• Date of birth for verification that you meet the minimum age requirement of 18 years.
• Passwords are stored in a hashed format that cannot be read by anyone, including mpoid's own team.

When required, mpoid may collect copies of identity documents such as a MyKad or passport, recent bank or e-wallet statements, and any other supporting documents needed for identity and source-of-funds verification. This data is collected solely for anti-money laundering compliance and identity verification purposes — not for marketing or third-party sharing.

• Records of all deposits made via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, Maybank2u, CIMB Clicks, and FPX.
• Records of all withdrawals including date, time, amount, and withdrawal method.
• Account balance history and overall financial activity within the mpoid platform.
• Transaction reference numbers for all financial activity, for audit and dispute resolution purposes.

Mpoid keeps a full record of all your gaming and betting activity, including your Live Casino history (baccarat, blackjack, roulette, sic bo, and other table games), Sports Betting records covering the Malaysia Super League, EPL, cricket, badminton, and esports, as well as overall gameplay statistics. This data is used to resolve disputes, detect signs of problem gambling, and maintain platform integrity.

• Your current IP address when accessing the mpoid platform.
• Device type (Android, iOS, Windows, Mac) and web browser used.
• Operating system and screen resolution information for display optimisation purposes.
• Login and logout timestamps, along with general platform usage patterns.

Mpoid uses collected data only for legitimate and relevant purposes. We do not use your data for purposes you have not consented to, and we do not permit its use for third-party marketing without your explicit consent.

Your data is primarily used to enable mpoid to deliver its services effectively. This includes managing your account, processing deposits and withdrawals via your chosen Malaysian payment methods, displaying your game history and transaction records, and giving you seamless access to all games and features on the mpoid platform.

Much of the technical data we collect — such as IP addresses, device information, and login patterns — is used exclusively for security purposes. mpoid's systems automatically analyse this data to detect suspicious activity, including login attempts from unusual locations, simultaneous access attempts from multiple IP addresses, and abnormal transaction patterns that may indicate fraud or money laundering.

Mpoid has legal obligations to retain and process certain data as part of compliance with anti-money laundering (AML) regulations and identity verification (KYC) requirements imposed on digital financial and entertainment platform operators. This data is retained for the period prescribed by applicable Malaysian law and may only be shared with the relevant authorities when required by law.

Mpoid uses your contact information (phone number and email) to send important account-related notifications, such as deposit and withdrawal confirmations, security alerts for any suspicious activity, and important updates regarding the Privacy Policy or Terms & Conditions. You can opt out of receiving optional marketing communications at any time from your account settings.

Your gaming activity data on mpoid is also used for purposes that benefit you — our system monitors gameplay patterns to identify early signs of problem gambling. If the system detects a concerning pattern, mpoid's responsible gaming team may reach out with information about available self-control tools. This is done out of care, not control.

Mpoid does not sell, rent, or share members' personal data with third parties for marketing purposes. However, there are limited situations where sharing data with certain parties is necessary to provide our services or meet legal obligations.

When you make a deposit or withdrawal using Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, Maybank2u, CIMB Clicks, or FPX, the necessary transaction details will be shared with the relevant payment service provider to process the transaction. This sharing is kept to a minimum and limited strictly to the information required for the transaction. All payment providers we work with adhere to strict data security standards.

To deliver a high-quality live casino experience on mpoid — including baccarat, blackjack, roulette, and other table games — our platform integrates with internationally licensed game providers. Minimum account information required to verify your identity and balance may be shared with these providers in a secure, encrypted environment. These providers do not have access to your full financial history or KYC documents.

Mpoid may disclose your personal data to government authorities, law enforcement agencies, or relevant regulatory bodies if required to do so by a court order, warrant, or valid provision of Malaysian law. In such cases, mpoid will endeavour to notify you of the disclosure request as promptly as permitted by law, unless we are prohibited from doing so by a court order or directive from the relevant authority.

Mpoid continually invests in cybersecurity infrastructure to ensure members' personal and financial data is protected to the highest possible standard. Data security is not a one-off project — it is an ongoing process involving regular review, enhancement, and testing.

• 256-bit SSL/TLS encryption for all communications between your browser and mpoid's servers — no data can be read in transit.
• Passwords are stored using a strong one-way hashing algorithm — even if mpoid's servers were accessed without authorisation, your password cannot be recovered.
• Two-factor authentication (2FA) is available for all mpoid accounts — we strongly recommend activating it.
• A multi-layered firewall and intrusion detection system (IDS) that monitors suspicious traffic 24/7.
• Databases storing sensitive personal data are encrypted at rest, not just in transit.
• Internal and external security audits are conducted regularly by independent third-party specialists.

While mpoid takes all reasonable technical measures to protect your data, account security also depends on your own actions. We recommend using a strong and unique password for your mpoid account, enabling two-factor authentication, not sharing your login credentials with anyone, logging out after each session especially on shared devices, and contacting mpoid support immediately if you suspect any unauthorised activity on your account.

Mpoid uses cookies and similar technologies to keep the platform running smoothly, enhance the user experience, and understand how the platform is used overall. Below is an explanation of the types of cookies we use and their purposes.

These cookies are necessary for the mpoid platform to function. They store your login session information so you don't need to log in again each time you navigate between pages, retain your language and currency preferences, and enable security features such as CSRF protection. These cookies cannot be disabled without affecting the platform's core functionality.

Mpoid uses internal analytics cookies to understand how members use the platform — which pages are visited most, how long sessions typically last, and where users encounter navigation difficulties. This information is used solely for platform improvement and is not shared with third parties. Analytics data is collected in aggregate and is not linked to your individual profile.

You can manage and delete cookies through your web browser settings at any time. Please note, however, that disabling essential cookies will affect your ability to log in and use the core features of the mpoid platform properly. For guidance on managing cookies in your specific browser, refer to your browser's help documentation.

Mpoid retains your personal data for as long as necessary to fulfil the purposes outlined in this Privacy Policy, or as required by applicable Malaysian law. The following are general data retention guidelines for different data categories.

• Active Account Data: For as long as your account remains active on the mpoid platform, all account-related data is retained to ensure uninterrupted and seamless service.
• Financial Transaction History: At least 7 years from the transaction date, in line with Malaysia's anti-money laundering compliance requirements.
• KYC Documents: At least 5 years after account closure, or longer if required by applicable law.
• Support Communication Logs: 2 years from the date of last interaction, for quality control and dispute resolution purposes.
• Technical Data (IP Logs): 90 days for active security monitoring, after which it is archived in aggregated form that cannot be individually identified.
• After Account Closure: The minimum data required by law is retained for the prescribed period. Data beyond legal retention requirements will be securely deleted within 30 days of an account closure request.

As an mpoid member, you have specific rights regarding your personal data. mpoid is committed to facilitating the exercise of these rights in a straightforward, timely, and reasonably fee-free manner.

The mpoid platform is strictly for individuals aged 18 and above. mpoid does not knowingly collect, process, or store personal data from individuals under 18 years of age. If you suspect that a minor has registered an account on mpoid using false information, please contact us immediately at support@mpoid.bid so that appropriate action can be taken.

Should mpoid determine that data collected belongs to an individual who is underage, the account will be closed immediately and all associated data will be deleted in accordance with applicable legal requirements. mpoid employs an age verification process during registration and may request proof of age at any time as an additional safeguard.

The mpoid platform may contain links to certain third-party websites or services, such as payment service providers. This Privacy Policy applies solely to the mpoid platform and does not cover the privacy practices of any third-party websites or services you may access through links on our platform.

Mpoid has no control over the content, privacy policies, or practices of third-party websites. We recommend reading the privacy policy of each website or service you access separately to understand how your data may be collected and used by those parties. The presence of a link from the mpoid platform to another website does not imply that mpoid endorses or is responsible for the content or privacy practices of that site.

Mpoid reserves the right to update or amend this Privacy Policy at any time when required due to changes in legislation, shifts in business practices, or in response to member feedback. Any material changes to this Privacy Policy will be communicated to all registered members via email or in-account notification at least 7 calendar days before those changes take effect.

The "last updated" date shown at the top of this page always reflects the most current version of mpoid's Privacy Policy. Your continued use of the mpoid platform after any changes to the Privacy Policy take effect will be considered your acceptance of the updated policy. We encourage you to review this page periodically.

If you have any questions about this Privacy Policy, wish to submit a request regarding your personal data, or would like to report a privacy concern, please reach out to the mpoid team through the channels below. We are committed to taking all privacy enquiries seriously and responding within a reasonable timeframe.