Mpoasia Privacy Policy – How We Protect the Personal Data of Malaysian Members

This Privacy Policy explains how mpoasia ("we", "the platform") collects, uses, stores, and protects the personal information you provide when using the mpoasia.click platform. This Policy applies to all registered members and visitors to our website.

By registering as an mpoasia member or continuing to use the platform after this policy has been updated, you agree to the data processing practices described in this document. If you do not agree with any part of this policy, you have the right to close your account and stop using mpoasia's services.

Mpoasia collects personal information in several different ways. Below is a comprehensive overview of the data we collect:

We only collect data that is genuinely necessary for the stated purposes. We do not collect sensitive information such as biometric data or health information except in very specific circumstances and with your explicit consent.

The personal data we collect is used for the following purposes:

• Account management: Creating, verifying, and managing your mpoasia member account, including the login process, identity verification, and account security.
• Transaction processing: Processing deposits and withdrawals in MYR via Malaysian local payment methods including Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, and FPX Maybank2u / CIMB Clicks.
• Service provision: Enabling you to access all mpoasia games and services, including Live Casino, slots, Sports Betting covering Malaysian Super League and EPL football, lottery, Roulette and cricket.
• Customer support: Resolving enquiries, complaints, and disputes submitted to the mpoasia support team.
• Security and fraud prevention: Detecting and blocking suspicious activity, fraud, money laundering and platform abuse.
• Legal compliance: Fulfil legal obligations relating to anti-money laundering (AML), Know Your Customer (KYC), and other statutory reporting requirements.
• Personalisation and service improvement: Understanding usage patterns to improve the platform experience and offer more relevant promotions to you.
• Marketing communications: Sending information about promotions, bonuses and new offers — only if you have agreed to receive them, and you can opt out at any time.

Mpoasia never sells your personal data to any party. Limited data sharing occurs only in the following circumstances:

• Payment service providers: Transaction data necessary for processing is shared with payment processors that provide eWallet and FPX services to facilitate your deposits and withdrawals. These providers are bound by strict confidentiality agreements with mpoasia.
• Game providers: Session information required for gameplay is shared with game software providers such as Evolution Gaming, Pragmatic Play Live and other partners to enable smooth game functionality. This data is limited strictly to what is technically necessary.
• Regulatory authorities: mpoasia will disclose data to Malaysian law enforcement agencies, courts or regulatory bodies when required by law, court order or a legitimate official investigation. Any such disclosure is limited to the minimum scope necessary.
• Audit and compliance: Independent auditors and compliance firms that assist mpoasia in maintaining industry standards may access the data necessary for audit purposes, subject to confidentiality agreements.

All third parties that receive data from mpoasia are contractually bound to use that information only for the specified purposes and may not disclose it further without mpoasia's written authorisation.

Mpoasia applies multiple layers of security to protect your personal data:

• Encryption in transit: All data transmitted between your device and mpoasia's servers is encrypted using TLS 1.3 with AES-256 encryption — no one can read this data while it is in transit.
• Storage encryption: Sensitive data stored in mpoasia's databases, including identity information and transaction history, is encrypted at rest.
• Access controls: Only mpoasia staff who require access to specific data in order to carry out their duties are permitted to do so. Role-based access control (RBAC) is strictly enforced.
• Two-factor authentication: mpoasia uses two-factor authentication for all internal access to systems containing member data, adding an extra layer of protection beyond passwords alone.
• Continuous monitoring: An automated threat detection system monitors all activity on the mpoasia platform around the clock to identify and respond to any unauthorised access attempts.
• Regular security audits: Independent security assessments are conducted periodically by accredited third-party firms to identify and address any system vulnerabilities before they can be exploited.

Mpoasia uses cookies and similar tracking technologies to enhance your experience on the platform. Below are the types of cookies we use:

• Essential cookies: Required for core mpoasia platform functions such as maintaining your login session, remembering your language preference, and securing transactions. These cookies cannot be disabled without affecting platform functionality.
• Analytics cookies: Helps mpoasia understand how members use the platform — which pages are visited most, how long play sessions last, and where users encounter difficulties. This data is used to improve the overall user experience.
• Preference cookies: Saves your preferences such as display theme, language, and other interface settings so you don't have to reconfigure them each time you log in to mpoasia.
• Security cookies: Helping to detect suspicious login activity, unauthorised access attempts and patterns associated with fraud in order to protect your account.

You can manage your cookie settings through your web browser. However, disabling essential cookies may affect the functionality of the mpoasia platform. Visiting mpoasia.click after accepting the cookie notice is considered your consent to the use of cookies as described.

As an mpoasia member and data subject under Malaysia's PDPA, you have the following rights regarding your personal information:

To exercise any of the above rights, contact us by email at support@mpoasia.click or via live chat within the mpoasia platform. We will respond to data rights requests within 30 business days. In complex cases, this period may be extended with prior notice to you.

Mpoasia retains your personal data for as long as necessary for the stated purposes or to comply with applicable legal requirements:

• Active account data: Stored for as long as your mpoasia account remains active, and for a reasonable period thereafter to resolve any outstanding issues or disputes.
• Financial transaction records: Retained for a minimum of 7 years after the transaction date, in line with Malaysian financial and tax legal requirements.
• Identity verification records (KYC): Retained for a minimum of 5 years after the end of the business relationship, in line with anti-money laundering (AML) requirements.
• Game activity logs: Stored for 2 years for dispute resolution and security audit purposes.
• Customer support records: Stored for 3 years to allow historical reference for resolving recurring issues more efficiently.
• Marketing data: Retained until you withdraw consent or request deletion, whichever comes first.

When data is no longer needed and there is no legal obligation to retain it, mpoasia will securely delete or anonymise that data.

Mpoasia reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or new platform features:

• Material changes — such as new ways we use your data or changes to who can access it — will be communicated to members via email or in-platform notification at least 14 days before it takes effect.
• Minor changes such as language updates or typographical corrections may take effect immediately without specific notice.
• The "Updated" date at the top of this document always reflects the date of the most recent revision.
• Your continued use of the mpoasia platform after an updated policy takes effect will be considered your acceptance of those changes.
• If you do not agree with the changes made, you have the right to close your account before the date those changes take effect.

We encourage you to review this page periodically to stay informed about how mpoasia protects your privacy.

For any enquiries, concerns, or requests relating to this Privacy Policy or the processing of your personal data by mpoasia, please reach us through the following channels:

• Privacy email: support@mpoasia.click — include "Privacy Enquiry" in the subject line to ensure your message is routed to the relevant team promptly.
• Live chat: Available directly within the mpoasia platform, 24 hours a day, 7 days a week. The fastest way to get answers to urgent questions about your account and data.

Our Bahasa Malaysia-proficient team will respond to privacy-related enquiries within 3 business days. For more complex data rights requests such as full access requests or data deletion, please allow up to 30 business days for a complete response. mpoasia is committed to handling every privacy-related enquiry seriously, transparently, and within a reasonable timeframe.