Privacy Policy

1. Introduction

This Privacy Policy (the "Policy") applies to all personal information collected by mpoyou (the "Company", "We", "Us", "Our") through our website, mobile applications, and any related services (collectively, the "Platform"). This Policy describes how mpoyou collects, processes, stores, uses, and protects the personal data of users (the "User", "Player", "You") who access or use our online gaming services.

By creating an account on mpoyou, accessing the Platform, or using any of our services, you acknowledge that you have read, understood, and consent to the data practices described in this Privacy Policy. If you do not agree with any aspect of this Policy, you must immediately discontinue use of the Platform and refrain from creating an account.

mpoyou is committed to compliance with applicable data protection laws and regulations, including international standards for data privacy and security. We recognize that protecting your personal information is essential to maintaining your trust, and we implement comprehensive technical and organizational measures to safeguard your data against unauthorized access, disclosure, alteration, or destruction.

2. Information We Collect

mpoyou collects several categories of personal information to operate the Platform, verify user identities, process transactions, and comply with regulatory requirements. The types of information we collect include:

2.1 Information You Provide Directly

When you register an account, verify your identity, make deposits or withdrawals, or contact customer support, you voluntarily provide the following information:

• Account Registration Data: Full legal name, date of birth, email address, phone number (including country code), residential address (street address, city, province, postal code), username, password, and preferred currency (Indonesian Rupiah).
• Identity Verification (KYC) Documents: Government-issued identification documents such as KTP (Kartu Tanda Penduduk / Indonesian National Identity Card), passport, or driver's license (SIM). We may also collect selfie photographs holding your ID document, proof of address documents (utility bills, bank statements issued within the last 3 months), and additional documentation as required for enhanced due diligence.
• Financial Information: Bank account details (bank name, account holder name, account number, branch information) for Indonesian banks including BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, and Bank Permata. E-wallet account information for OVO, DANA, GoPay, ShopeePay, and LinkAja. Transaction history including deposits, withdrawals, and betting activity.
• Communication Data: Any information you provide when contacting customer support via email, live chat, phone, or other communication channels, including the content of your messages, timestamps, and support ticket history.
• Marketing Preferences: Your consent status for receiving promotional emails, SMS messages, push notifications, and other marketing communications.

2.2 Information We Collect Automatically

When you access or use the mpoyou Platform, we automatically collect certain technical and usage information:

• Device Information: Device type (smartphone, tablet, desktop computer), operating system (Android, iOS, Windows, macOS), browser type and version (Chrome, Firefox, Safari, Edge), screen resolution, device identifiers (IMEI, UDID, advertising ID), and device settings.
• Connection Information: IP address, internet service provider (ISP), geographic location (city, province, country inferred from IP address), timezone, connection type (WiFi, mobile data), and network quality metrics.
• Usage Data: Pages visited, features accessed, games played, bets placed, session duration, login timestamps, navigation patterns, click-through rates, search queries entered on the Platform, and interaction with promotional offers.
• Game Activity: Detailed logs of all gaming activity including games played, bet amounts, win/loss records, bonus activations and completions, wagering progress, game session durations, and in-game behavior patterns.
• Cookies and Similar Technologies: See Section 8 for comprehensive information on cookies, web beacons, pixel tags, and other tracking technologies used on the Platform.

2.3 Information from Third Parties

In certain circumstances, mpoyou may receive information about you from external sources:

• Payment Processors: Transaction verification data, fraud detection signals, and payment status information from our banking partners and payment gateway providers.
• Identity Verification Services: Confirmation of identity authenticity, address verification, age verification, and watchlist screening results from third-party KYC service providers.
• Marketing Partners: If you arrived at mpoyou through an affiliate or marketing campaign, we may receive information about the referral source and campaign parameters (but not your personal identity without your separate consent).
• Regulatory and Legal Sources: Information from self-exclusion registries, anti-money laundering databases, sanctions lists, and other regulatory sources that help us comply with legal obligations and protect the Platform.

3. How We Use Your Information

mpoyou processes your personal data for the following legitimate purposes:

3.1 Service Delivery and Account Management

• Creating, maintaining, and securing your player account
• Processing deposits, withdrawals, and other financial transactions
• Providing access to casino games, live dealer tables, sports betting markets, lottery draws (including togel), and other gaming products
• Calculating winnings, distributing payouts, and managing your account balance
• Processing bonus activations, tracking wagering requirements, and crediting promotional offers
• Providing customer support and responding to inquiries, complaints, or feedback

3.2 Identity Verification and Compliance

• Verifying your identity, age (21+ requirement), and residential address to comply with regulatory obligations and prevent underage gambling
• Conducting KYC (Know Your Customer) and AML (Anti-Money Laundering) checks to prevent fraud, money laundering, and terrorist financing
• Screening against self-exclusion registries, sanctions lists, and regulatory watchlists
• Fulfilling legal and regulatory reporting obligations to gaming authorities and financial regulators
• Responding to lawful requests from law enforcement agencies, courts, and government authorities

3.3 Security and Fraud Prevention

• Detecting and preventing fraudulent activity, including account takeover attempts, payment fraud, bonus abuse, and collusion between players
• Monitoring gameplay for patterns consistent with cheating, automated play (bots), or exploitation of software vulnerabilities
• Protecting the integrity of the Platform and ensuring fair play for all users
• Investigating suspected violations of our Terms & Conditions and taking appropriate enforcement actions
• Protecting mpoyou's legal rights and defending against legal claims

3.4 Communications and Marketing

• Sending transactional communications related to your account, such as deposit confirmations, withdrawal notifications, password reset emails, and security alerts
• Providing customer support communications, including responses to your inquiries and resolution updates
• Sending promotional communications about new games, bonus offers, tournaments, and special events (only with your explicit consent, which you can withdraw at any time)
• Personalizing marketing messages based on your gaming preferences, betting history, and engagement with previous promotions
• Conducting satisfaction surveys and requesting feedback to improve our services

3.5 Platform Improvement and Analytics

• Analyzing user behavior, gameplay patterns, and platform usage to improve user experience, optimize performance, and develop new features
• Conducting A/B testing and product experiments to enhance interface design and functionality
• Generating aggregated, anonymized statistics and reports for business intelligence purposes (these aggregated reports do not identify individual users)
• Troubleshooting technical issues, identifying bugs, and maintaining system stability
• Training machine learning models to improve fraud detection, customer support automation, and personalized recommendations

3.6 Responsible Gaming and Player Protection

• Monitoring for signs of problem gambling behavior (e.g., sudden increases in deposit frequency, extended session durations, chasing losses)
• Implementing deposit limits, session time reminders, and other responsible gaming tools you configure
• Enforcing self-exclusion requests and preventing access to the Platform during self-exclusion periods
• Providing educational resources and support information if we detect concerning gambling patterns

4. Data Sharing and Disclosure

mpoyou does not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we may share your data with the following categories of recipients under limited circumstances:

4.1 Service Providers and Business Partners

We engage trusted third-party service providers to support our operations. These providers process your data solely on our behalf and under strict contractual obligations:

• Payment Processors: Banks, payment gateways, and e-wallet providers (BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, LinkAja) to process deposits and withdrawals.
• Game Providers: Licensed gaming software developers (Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Ezugi, Spribe, Pocket Games Soft) who host and deliver games on our Platform. These providers may collect limited gameplay data to ensure game integrity and RNG fairness.
• Identity Verification Services: Third-party KYC and AML compliance providers who verify your identity documents and screen against regulatory databases.
• Cloud Hosting and IT Infrastructure: Data center operators and cloud service providers who host our servers, databases, and backup systems.
• Customer Support Tools: Live chat software, ticketing systems, and CRM platforms that enable our support team to assist you effectively.
• Marketing and Analytics Services: Email service providers, analytics platforms, and marketing automation tools (only for users who have consented to marketing communications).

4.2 Legal and Regulatory Obligations

We may disclose your information to governmental authorities, regulators, or law enforcement agencies when:

• Required by applicable law, regulation, or legal process (court order, subpoena, warrant)
• Necessary to comply with gaming licensing requirements or regulatory audits
• Needed to investigate or prevent illegal activity, fraud, or threats to public safety
• Required to enforce our Terms & Conditions or protect our legal rights
• Necessary to protect the safety, rights, or property of mpoyou, our users, or the public

4.3 Business Transfers

In the event of a merger, acquisition, corporate restructuring, sale of assets, or bankruptcy, your personal information may be transferred to the acquiring entity. We will provide notice and ensure the new entity continues to honor this Privacy Policy.

4.4 With Your Consent

We may share your information with other third parties when you provide explicit, informed consent for a specific purpose (e.g., participating in a co-marketed promotion with a partner brand).

5. Data Security Measures

mpoyou implements industry-leading technical and organizational measures to protect your personal data:

• Encryption: All data transmitted between your device and our servers is encrypted using SSL/TLS protocols. Sensitive data at rest (passwords, KYC documents, financial information) is encrypted using AES-256 encryption standards.
• Access Controls: Personal data is accessible only to authorized mpoyou employees and contractors who require it to perform their job functions. All access is logged and audited regularly.
• Authentication: Your account is protected by password authentication. We strongly encourage you to use a unique, complex password and enable two-factor authentication (2FA) if available.
• Secure Infrastructure: Our servers are hosted in secure, access-controlled data centers with 24/7 monitoring, redundant power supplies, fire suppression systems, and physical security measures.
• Regular Security Audits: We conduct regular penetration testing, vulnerability assessments, and security audits to identify and remediate potential weaknesses.
• Employee Training: All mpoyou employees undergo mandatory data protection and information security training to ensure they understand their responsibilities.
• Incident Response: We maintain a documented incident response plan to quickly detect, contain, and mitigate any data breaches or security incidents.

6. Data Retention and Storage

mpoyou retains your personal data for as long as necessary to fulfill the purposes outlined in this Privacy Policy and to comply with legal obligations:

• Active Account Data: While your account remains active, we retain all account information, transaction history, and gameplay records to provide ongoing services.
• Closed Account Data: After you close your account, we retain certain information for up to 7 years to comply with financial record-keeping regulations, tax laws, and anti-money laundering requirements. This includes transaction records, KYC documents, and account activity logs.
• Marketing Data: If you consent to marketing communications, we retain your contact information and preferences until you withdraw consent or your account is closed.
• Legal Obligation Data: Data required for ongoing legal proceedings, regulatory investigations, or dispute resolution is retained until the matter is fully concluded.
• Aggregated Data: Anonymized, aggregated data that cannot be linked back to individual users may be retained indefinitely for analytical and research purposes.

After the applicable retention period expires, your personal data will be securely deleted or anonymized such that it can no longer identify you.

7. Your Privacy Rights

As a mpoyou user, you have the following rights regarding your personal data:

• Right of Access: You may request a copy of the personal data we hold about you, including account details, transaction history, and KYC documents.
• Right to Rectification: If your personal information is inaccurate or incomplete, you can request corrections. You can update most information directly through your account settings.
• Right to Erasure (Right to be Forgotten): You may request deletion of your personal data, subject to our legal obligations to retain certain records (financial transactions, KYC documents) for regulatory compliance.
• Right to Restriction of Processing: You can request that we limit how we use your data in certain circumstances (e.g., while disputing the accuracy of information).
• Right to Data Portability: You may request a machine-readable copy of your personal data to transfer to another service provider.
• Right to Object: You can object to processing of your data for direct marketing purposes at any time. You may also object to other processing activities based on our legitimate interests.
• Right to Withdraw Consent: Where we process your data based on consent, you may withdraw that consent at any time (e.g., unsubscribing from marketing emails).
• Right to Lodge a Complaint: If you believe we have violated your privacy rights, you may file a complaint with the relevant data protection authority in your jurisdiction.

To exercise any of these rights, please contact our Data Protection Officer using the contact information in Section 12. We will respond to your request within 30 days.

8. Cookies and Tracking Technologies

mpoyou uses cookies, web beacons, pixel tags, and similar technologies to enhance your experience, analyze platform usage, and deliver personalized content.

8.1 Types of Cookies We Use

• Essential Cookies: Required for core functionality such as login authentication, session management, and security features. These cannot be disabled without impairing Platform functionality.
• Performance Cookies: Collect anonymous usage statistics (pages visited, features used, errors encountered) to help us optimize the Platform. Examples: Google Analytics, Hotjar.
• Functional Cookies: Remember your preferences (language, currency, display settings) to provide a personalized experience.
• Marketing Cookies: Track your interaction with advertising campaigns and deliver targeted promotional content (only with your consent).

8.2 Managing Cookie Preferences

Most web browsers allow you to control cookies through their settings. You can typically choose to accept all cookies, reject all cookies, or receive notifications when cookies are set. Note that disabling certain cookies may limit your ability to use some Platform features. Mobile users can manage tracking through their device settings (iOS: Limit Ad Tracking; Android: Opt Out of Ads Personalization).

9. Children's Privacy

mpoyou services are strictly intended for adults aged 21 years or older. We do not knowingly collect personal information from individuals under 21 years of age. If we discover that a user is underage, we will immediately suspend the account, void all transactions, and delete all associated personal data. Parents or guardians who believe their child has created an account on mpoyou should contact us immediately at [email protected].

10. International Data Transfers

mpoyou operates internationally, and your personal data may be transferred to, stored in, and processed in countries outside Indonesia. These countries may have data protection laws that differ from Indonesian regulations. When we transfer your data internationally, we ensure appropriate safeguards are in place, such as:

• Transferring data only to jurisdictions recognized as providing adequate data protection
• Using Standard Contractual Clauses (SCCs) approved by data protection authorities
• Implementing additional security measures to protect data in transit and at rest

By using mpoyou services, you consent to the international transfer of your personal data as described in this Policy.

11. Changes to This Privacy Policy

mpoyou reserves the right to modify, amend, or update this Privacy Policy at any time to reflect changes in our practices, technologies, legal requirements, or business operations. Material changes will be communicated through:

• Email notification to your registered email address
• Prominent notice on the mpoyou homepage
• In-platform notification upon your next login

The "Last Updated" date at the top of this Policy indicates when the most recent changes were made. We encourage you to review this Policy periodically to stay informed about how we protect your data. Your continued use of the Platform after changes are posted constitutes acceptance of the updated Privacy Policy.

12. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or how mpoyou handles your personal data, please contact us:

• Email: [email protected] (Subject: Privacy Inquiry)
• Data Protection Officer: For formal privacy rights requests or complaints, email [email protected]
• Live Chat: Available 24/7 via the chat icon on the mpoyou website
• Postal Address: mpoyou Data Protection Team, [Address will be provided upon formal request]

We aim to respond to all privacy inquiries within 30 days. For urgent matters (suspected data breach, unauthorized account access), please indicate "URGENT" in your subject line for prioritized handling.

By using mpoyou services, you acknowledge that you have read, understood, and consent to the data practices described in this Privacy Policy.