Your privacy matters to us. This Privacy Policy explains exactly what personal data mpoapi collects, why we collect it, how it is used, who it is shared with, and what rights you have over your own information. We encourage all players to read this document in full before registering an account.
These six principles underpin everything in our Privacy Policy. They do not replace the full document — please read all sections below.
mpoapi collects only the personal data that is genuinely necessary to operate your account, process payments, and comply with our responsible gambling and anti-money laundering obligations.
All data is stored on encrypted servers and transmitted over TLS-secured connections. We apply industry-standard technical and organisational measures to prevent unauthorised access, disclosure, or loss.
mpoapi does not sell, rent, or trade your personal data to third parties for their own marketing purposes. Data sharing is limited to service providers, regulators, and fraud prevention partners operating under strict data processing agreements.
Every category of data we collect is linked to a specific, documented purpose. We do not collect data speculatively or for undefined future use. If our purposes change, we will notify you and, where required, obtain your consent.
You have the right to access, correct, export, and request deletion of your personal data. Marketing preferences can be updated at any time through your account settings or by contacting our support team directly.
We retain personal data only for as long as necessary to fulfil the purpose it was collected for, or as required by applicable law. Account data is retained for a minimum period following account closure to satisfy regulatory obligations.
This Privacy Policy ("Policy") is issued by mpoapi ("we", "us", "our", "the Platform") and applies to all personal data collected through the mpoapi website accessible at mpoapi.click, any associated mobile applications, and any related services provided by mpoapi to registered players and visitors ("you", "User", "Player").
mpoapi operates an online casino and sports betting platform serving players across Malaysia, including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, and Shah Alam. In operating this platform, we necessarily collect and process personal data belonging to our players and visitors. This Policy sets out the full details of that processing in a clear, honest, and accessible manner.
This Policy should be read alongside our Terms & Conditions and our Responsible Gambling Policy, both of which form part of the overall agreement governing your use of the mpoapi platform.
Your Consent: By registering an account with mpoapi, completing a deposit, or continuing to use the platform after this Policy has been made available to you, you confirm that you have read and understood this Privacy Policy and consent to the data practices described herein, where consent is the applicable legal basis for that processing.
For the purposes of this Privacy Policy, the following terms carry the meanings set out below:
mpoapi collects the following categories of personal data in the course of operating the platform:
Payment Method Data: mpoapi does not store complete credit or debit card numbers, CVV codes, or full bank account numbers. Payment transactions are processed via third-party payment service providers including GrabPay, Touch 'n Go eWallet, Boost, DuitNow, FPX, and participating Malaysian banks. Those providers are subject to their own data protection frameworks.
mpoapi collects personal data through the following means:
The table below sets out the purposes for which mpoapi processes your personal data, together with the primary legal basis relied upon for each processing activity:
| Purpose | Data Categories Used | Legal Basis |
|---|---|---|
| Account registration and ongoing account management | Identity, contact, technical | Contract performance |
| Processing deposits and withdrawals via GrabPay, TNG, FPX, bank transfer, and cryptocurrency | Financial, identity, transaction | Contract performance |
| KYC identity verification and age verification (21+ requirement) | Identity, KYC documentation | Legal obligation / contract |
| Anti-money laundering monitoring and suspicious transaction reporting | Financial, transaction, identity | Legal obligation |
| Responsible gambling programme (deposit limits, self-exclusion, problem gambling monitoring) | Gaming behaviour, account settings | Legal obligation / legitimate interests |
| Platform fraud detection and security monitoring | Technical, transaction, gaming behaviour | Legitimate interests |
| Customer support and dispute resolution | All relevant categories | Contract performance / legal obligation |
| Sending account-critical service communications (transaction confirmations, security alerts, policy updates) | Identity, contact | Contract performance / legal obligation |
| Sending promotional and marketing communications (bonuses, offers, new game announcements) | Identity, contact, gaming behaviour | Consent (withdrawable at any time) |
| Platform analytics, performance optimisation, and user experience improvement | Technical, behavioural (aggregated/anonymised where possible) | Legitimate interests |
mpoapi does not sell, rent, or commercially trade your personal data to any third party for their own marketing or commercial purposes. Data sharing is strictly limited to the categories of recipient described below, and in each case is governed by appropriate contractual safeguards.
mpoapi engages third-party service providers to assist in operating the platform. These providers act as data processors and are contractually restricted to processing personal data only on mpoapi's documented instructions. Categories of service provider include:
mpoapi may disclose personal data to competent regulatory authorities, law enforcement agencies, courts, or other public bodies where required to do so by applicable law, court order, or enforceable governmental request. Such disclosures are made only to the extent strictly necessary and, where legally permissible, mpoapi will notify you of any such disclosure.
In the event of a merger, acquisition, restructuring, or sale of assets involving mpoapi, personal data held on the platform may be transferred to the acquiring or successor entity as part of that transaction. In such circumstances, mpoapi will provide reasonable advance notice and ensure that the receiving entity is bound by privacy commitments no less protective than those set out in this Policy.
No Third-Party Marketing: Your personal data — including your contact details and gaming behaviour data — will never be disclosed to unaffiliated third parties for their own advertising or marketing activities without your explicit and separately obtained consent.
mpoapi operates internationally and some of the service providers we engage may be located in, or process data from, jurisdictions outside Malaysia. Where personal data is transferred to countries that may not provide an equivalent level of data protection to that available under Malaysian personal data protection frameworks, mpoapi implements appropriate safeguards to ensure that your data remains adequately protected.
Such safeguards may include standard contractual clauses agreed between mpoapi and the recipient entity, binding corporate rules where applicable to group entities, or other approved transfer mechanisms. Details of the specific safeguards applied to any particular international transfer are available upon written request to our data protection contact.
Game software and live dealer streaming infrastructure may be hosted by providers operating data centres in Europe, Asia-Pacific, or other regions. All such infrastructure providers are subject to data processing agreements requiring them to maintain security standards consistent with this Policy.
mpoapi uses cookies and similar tracking technologies on its platform. Cookies allow us to deliver a functional and personalised experience, maintain your logged-in session, remember your preferences, and analyse how the platform is used.
You may manage your cookie preferences through your browser settings at any time. Please note that disabling strictly necessary cookies will affect your ability to use core platform features including account login. Most modern browsers provide tools to view, manage, and delete cookies stored by visited websites.
mpoapi retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law or regulation. The following general retention periods apply:
Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where anonymisation is not technically feasible for all data components, the data is restricted from active processing and deleted at the earliest practicable opportunity.
mpoapi employs a multi-layered approach to data security. Technical and organisational measures include:
Your Role in Security: You are responsible for maintaining the confidentiality of your account login credentials. Do not share your password with any other person. If you suspect that your account has been accessed without your authorisation, contact mpoapi support immediately via live chat or at [email protected].
As a data subject whose personal data is processed by mpoapi, you hold a number of rights in relation to that data. These rights are described below. To exercise any of these rights, please contact mpoapi through the channels described in Section 15.
You have the right to request a copy of the personal data mpoapi holds about you, along with information about how that data is being processed. We will respond to verified access requests within 30 calendar days.
If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. You can update basic account information directly through your account profile settings.
In certain circumstances, you have the right to request that mpoapi delete the personal data we hold about you. This right is subject to limitations where retention is required by law (e.g., anti-money laundering record-keeping requirements) or where the data is necessary for the establishment, exercise, or defence of legal claims.
You may request that mpoapi temporarily suspend its processing of your personal data in specific circumstances — for example, while the accuracy of data you have contested is being verified, or pending a determination of an objection you have raised.
Where processing is carried out by automated means on the basis of your consent or contract performance, you have the right to receive a copy of the personal data you provided to mpoapi in a structured, commonly used, and machine-readable format.
You have the right to object to processing of your personal data where mpoapi relies on legitimate interests as the legal basis. You also have an absolute right to object to the processing of your data for direct marketing purposes at any time, without needing to provide a reason.
Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
The mpoapi platform is strictly restricted to individuals aged 21 years and above. We do not knowingly collect personal data from persons under the age of 21. Age verification is enforced through our KYC process, which requires submission of a government-issued identity document confirming date of birth for all accounts prior to withdrawal processing.
If mpoapi becomes aware that personal data has been collected from a person under the age of 21 — whether through registration, deposit, or any other means — all associated data will be deleted immediately and the account will be permanently closed. Any funds deposited by an underage user will be returned to the originating payment method where technically possible.
If you are a parent or guardian and believe that a person under 21 may have created an account on the mpoapi platform using your details or independently, please contact our support team immediately at [email protected] or via live chat. We will investigate and act promptly.
The mpoapi platform may, in limited circumstances, contain references to or integrations with third-party services — such as payment gateways operated by GrabPay, Touch 'n Go eWallet, Boost, DuitNow, FPX, and participating Malaysian banks. When you interact with those third-party services, you are subject to their own privacy policies and terms of service, which operate independently from this Policy.
mpoapi is not responsible for the privacy practices, data handling standards, or content of any third-party service. We encourage you to review the privacy documentation of any third-party service you interact with, including your payment provider.
Game software provided by third-party studio partners is delivered through the mpoapi platform under licence agreements. Game studios do not receive individually identifiable player data from mpoapi except in the context of necessary technical game delivery and outcome verification functions, and those transfers are governed by appropriate contractual data protection provisions.
mpoapi reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform operations. All revisions will be published on this page with an updated "Last Updated" date shown in the header.
Where changes are material — that is, they significantly affect the nature, scope, or legal basis of data processing, or affect your rights as a data subject — mpoapi will notify registered players by email to the address associated with their account and/or by displaying a prominent notice upon next login to the platform, prior to the changes taking effect.
Your continued use of the mpoapi platform following notification of material amendments constitutes acceptance of the revised Policy. If you do not agree with any amendment, you should cease using the platform and may request account closure by contacting our support team.
Previous versions of this Privacy Policy are available upon written request to our data protection contact at [email protected].
If you have any questions, concerns, or requests relating to this Privacy Policy or to mpoapi's processing of your personal data, please contact us through the following channels:
mpoapi aims to acknowledge all privacy-related requests within two (2) business days and to provide a substantive response within thirty (30) calendar days. Complex requests may require additional time, in which case we will provide an interim update within the initial 30-day window.
Our support team serves players across Malaysia — including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, and Shah Alam — and all privacy communications are handled in English by trained personnel with access to relevant account records.
Responsible Gambling Data: If your privacy enquiry relates specifically to responsible gambling data — including self-exclusion records, deposit limit history, or problem gambling monitoring data — please refer to our Responsible Gambling page for additional context and flag the nature of your request clearly when contacting us. These requests receive priority handling.
Have a question about how mpoapi handles your personal data? Our support team is available 24/7 to help — or visit our homepage to learn more about the platform. For players aged 21 and above only.