mpo19 Privacy Policy

mpo19 acts as the data controller for all personal information collected through the mpo19.club platform. As data controller, mpo19 determines the purposes for which personal data is processed and is responsible for ensuring that processing is conducted lawfully, fairly, and transparently in accordance with this Policy.

For all privacy-related inquiries, requests to exercise data subject rights, or concerns about how your data is being handled, please contact the mpo19 privacy team at: [email protected] (plain text — not a clickable link). Responses to formal privacy requests will be provided within 14 business days of receipt.

mpo19 collects personal data through three primary channels: information you provide directly during registration and account use; data generated automatically through your interaction with the Platform; and information received from third-party payment processors and identity verification services.

mpo19 processes your personal data only where a lawful basis for doing so exists. The primary bases on which mpo19 relies are set out below, together with the corresponding purposes:

• Contractual Necessity: Processing required to perform the contract between you and mpo19 — including account registration, processing deposits and withdrawals, settling wagers, crediting bonuses, and providing customer support. Without this processing, mpo19 cannot deliver the services described in the Terms & Conditions.
• Legal Obligation: Processing required to comply with applicable legal and regulatory obligations, including Know Your Customer (KYC) age and identity verification, anti-money-laundering (AML) checks, and transaction record retention required under international financial regulation standards.
• Legitimate Interests: Processing carried out in pursuit of mpo19's legitimate business interests, provided those interests do not override your privacy rights. This includes fraud detection and prevention, platform security monitoring, responsible gaming oversight, and platform analytics used to improve product quality.
• Consent: Where mpo19 sends you promotional communications about bonuses, new game releases, or seasonal campaigns, it does so on the basis of your consent. You may withdraw consent for marketing communications at any time by contacting support.

mpo19 does not use your personal data for automated individual decision-making or profiling that produces legal or similarly significant effects, beyond standard fraud screening algorithms that flag accounts for human review.

mpo19 does not sell, rent, or share personal data with third parties for their own marketing or commercial purposes. Data is shared with third parties only in the following limited circumstances:

• Payment Processors: Indonesian bank partners (BCA, BRI, BNI, Mandiri, CIMB Niaga) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) receive the minimum data necessary to process authorized deposits and withdrawals — typically account identifiers and transaction amounts. These institutions are independently regulated and maintain their own data protection standards.
• Game Content Providers: Licensed game studios (including Pragmatic Play, Evolution Gaming, Pocket Games Soft, NetEnt, Microgaming, and Spribe) may receive anonymized session data required to deliver game content to your device. These providers do not receive your identity documents, bank account numbers, or contact details.
• Identity Verification Services: Third-party KYC vendors may assist mpo19 in verifying the authenticity of identity documents submitted during account verification. These vendors are contractually bound to process data solely for that purpose and to delete documents after verification is complete.
• Fraud Prevention Networks: Anonymized risk signals (not full identity records) may be shared with cross-platform fraud prevention services to identify patterns of abuse that span multiple gaming platforms.
• Legal Authorities: Where mpo19 receives a valid legal demand — such as a court order or a request from a recognized financial intelligence authority — it may be required to disclose specific account information. mpo19 will only comply with lawful, properly served legal process and will notify affected players where legally permissible to do so.

mpo19.club uses cookies and similar tracking technologies to enable core platform functionality and to understand how players navigate the site. The categories of cookies used are as follows:

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication tokens that keep you logged in and security cookies that protect against cross-site request forgery. These cannot be disabled without breaking core platform functionality.
• Functional Cookies: Store your in-session preferences such as last-visited game category, preferred language setting, and notification dismissal state. These enhance your experience but are not critical to platform operation.
• Analytics Cookies: Collect anonymized data about page visits, session duration, navigation paths, and device type to help the mpo19 product team understand how the platform is used and where improvements can be made. No individual player identity is tied to analytics data.
• Security Cookies: Support mpo19's fraud detection systems by tracking login frequency, IP consistency, and access pattern anomalies that may indicate account compromise or automated bot activity.

You may adjust cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to use the Platform. mpo19 does not use third-party advertising cookies or behavioral tracking cookies for retargeting purposes.

mpo19 retains personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable regulatory and legal obligations. The general retention periods applied by mpo19 are as follows:

• Active Account Data: Retained for the duration of the account's active status plus a minimum of five years following permanent account closure, in accordance with standard anti-money-laundering record-keeping requirements.
• KYC Documents: Identity documents and verification records are retained for a minimum of five years from the date of the player's last transaction, after which they are securely destroyed.
• Transaction Records: Full deposit, withdrawal, and wager records are retained for five years following the date of each transaction.
• Support Communications: Live chat transcripts and email correspondence are retained for three years from the date of the interaction, or until the matter to which they relate is fully resolved, whichever is later.
• Technical Logs: Server access logs, IP records, and security event logs are retained for up to 12 months and then automatically purged unless flagged as part of an ongoing investigation.

Once a retention period has expired and no legal hold is in place, mpo19 will securely delete or anonymize the relevant data so that it can no longer be linked to any identifiable individual.

mpo19 implements a layered set of technical and organizational security measures to protect personal data against unauthorized access, accidental loss, alteration, disclosure, and destruction. Key measures include:

• 256-bit TLS encryption on all data in transit between players' devices and mpo19 servers.
• Encryption at rest for all stored sensitive data fields, including identity document images and payment account identifiers.
• Role-based access controls that limit internal staff access to personal data on a strict need-to-know basis.
• Multi-factor authentication requirements for all mpo19 internal staff accounts with access to player data systems.
• Rate-limiting and anomaly detection on the mpo19 login system to block brute-force credential attacks.
• Regular internal security audits and penetration testing of the mpo19 platform infrastructure.

While mpo19 takes all reasonable measures to protect your data, no online platform can provide an absolute guarantee against every conceivable security breach. In the event of a data breach that is likely to result in a high risk to your rights, mpo19 will notify affected players without undue delay and will take immediate steps to contain the incident.

As a player whose personal data is processed by mpo19, you hold a set of rights in relation to that data. mpo19 is committed to honoring these rights within the timeframes stated below. To exercise any of the rights listed, contact the mpo19 support team at [email protected] with the subject line "Data Rights Request".

mpo19 may decline a request where fulfilling it would conflict with a legal obligation (for example, a requirement to retain transaction records for anti-money-laundering purposes). In such cases, mpo19 will explain the specific legal basis for the refusal.

The mpo19 Platform is strictly restricted to individuals aged 21 years and over. mpo19 does not knowingly collect personal data from individuals under the age of 21. If mpo19 discovers that personal data has been collected from a minor — whether through incorrect age declaration at registration or any other means — the account will be closed immediately, all data associated with it will be securely deleted (subject only to any mandatory legal retention obligations), and any deposited funds will be returned to the original payment source.

If you believe that a minor has created an mpo19 account, please notify the support team immediately at [email protected]. mpo19 takes the protection of minors extremely seriously and will act on any such report without delay.

mpo19 is an internationally operated platform. Some of the third-party service providers engaged by mpo19 — including game studios and KYC verification vendors — may be based outside Indonesia. Where personal data is transferred to a jurisdiction outside Indonesia, mpo19 takes reasonable steps to ensure that the recipient provides an adequate level of data protection through contractual data processing agreements, standard contractual clauses, or equivalent mechanisms.

By using the mpo19 Platform, you acknowledge that your personal data may be processed in jurisdictions that may not have data protection laws equivalent to those in Indonesia. mpo19 mitigates this risk through binding contractual obligations placed on all third-party data processors.

mpo19 reserves the right to update or amend this Privacy Policy at any time. When material changes are made, mpo19 will notify registered players via the email address on file at least 7 days before the revised Policy takes effect. The effective date displayed at the top of this document will be updated accordingly.

Continued use of the mpo19 Platform after the revised Policy's effective date constitutes your acceptance of the updated terms. If you do not agree with any changes, you should close your account and cease using the Platform before the new Policy takes effect.

For all privacy-related inquiries, data subject rights requests, or complaints about how mpo19 has handled your personal information, please contact us through the following channel:

• Live Chat: Available 24/7 inside the mpo19 platform — fastest response channel for urgent data concerns, with Indonesian-speaking agents on duty at all times.
• Email: [email protected] — for formal data subject rights requests and written privacy complaints. mpo19 will acknowledge receipt within 2 business days and provide a substantive response within 14 business days.

mpo19 will work in good faith to resolve any privacy concern raised by a player. Where a concern relates to how mpo19 handles data subject rights or processes data under this Policy, and mpo19's response is unsatisfactory, you retain the right to escalate the matter through applicable legal channels in your jurisdiction.