Data Protection & Privacy
At mpo303, safeguarding the personal information of our players is a fundamental responsibility, not an afterthought. This Privacy Policy sets out in full how we collect, use, store, share, and protect your data when you access and use the mpo303 Platform.
mpo303 ("we", "us", "our", "the Platform") operates an English-language online betting platform serving players primarily in Indonesia. In the course of providing our services — which include sports betting, slot games, live casino, togel (Indonesia's traditional numbers lottery), and related features — we necessarily collect and process certain personal information about our registered users ("Players").
We take data privacy seriously. This Policy has been drafted to be transparent and comprehensive, giving you a clear picture of the data we hold about you, why we hold it, how long we keep it, and what rights you have in relation to it. We apply internationally recognised data protection principles — including data minimisation, purpose limitation, storage limitation, and data integrity — across all our processing activities.
This Policy should be read alongside our Terms & Conditions and our Responsible Gaming policy, which together form the complete regulatory framework governing your relationship with mpo303.
For the purposes of this Privacy Policy, the following terms carry the meanings set out below.
| Term | Meaning |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable individual — including name, date of birth, contact details, financial account information, device identifiers, and behavioural data generated through use of the Platform. |
| "Processing" | Any operation performed on Personal Data, including collection, recording, storage, use, disclosure, erasure, or destruction. |
| "Data Subject" | The individual to whom the Personal Data relates — in the context of this Policy, the registered Player. |
| "Data Controller" | The entity that determines the purposes and means of processing Personal Data — namely, mpo303 and its operating entity. |
| "Data Processor" | A third party that processes Personal Data on behalf of the Data Controller under a binding data processing agreement. |
| "Consent" | A freely given, specific, informed, and unambiguous indication by the Player that they agree to the processing of their Personal Data for one or more stated purposes. |
| "KYC Data" | Identity verification documents and associated information collected during the Know Your Customer process — including national ID card (KTP) images, selfie photographs, and proof-of-address documents. |
| "Cookie" | A small text file placed on a Player's device by the Platform for the purposes of session management, analytics, or personalisation. |
mpo303 collects only the data that is necessary for the purposes described in this Policy. The categories of Personal Data we process are as follows.
3.1 Registration Data. When you create a mpo303 account, we collect your full legal name, date of birth, email address, mobile telephone number, preferred username, and the password you set (stored in hashed, non-reversible form). This information is mandatory for account creation.
3.2 Identity Verification (KYC) Data. To comply with age verification and fraud prevention requirements, we collect scanned copies or photographs of your government-issued national identity card (KTP), selfie photographs taken alongside the KTP, and in some cases proof-of-address documents such as recent bank statements.
3.3 Financial Data. We collect records of deposit and withdrawal transactions, including the payment method used (e.g., BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata, OVO, DANA, GoPay, ShopeePay, LinkAja), transaction amounts in Indonesian Rupiah (IDR), timestamps, and the bank account or e-wallet identifier associated with each transaction. We do not store full bank account passwords or e-wallet PINs.
3.4 Transactional and Betting Data. We record details of every bet, game round, and bonus redemption made on your account, including market selections, stake amounts, odds or RTP parameters, outcomes, and timestamp data. This data is essential for dispute resolution, responsible gaming monitoring, and regulatory compliance.
3.5 Technical and Device Data. We automatically collect IP address, device type, operating system, browser type and version, screen resolution, time zone, referring URL, and session duration data each time you access the Platform.
3.6 Communication Data. If you contact our customer support team, we retain records of that interaction — including the channel used (live chat, email), the content of the communication, timestamps, and the resolution applied.
3.7 Preference and Behavioural Data. We may collect data about your navigation patterns on the Platform, the games you access most frequently, your preferred deposit methods, language settings, and notification preferences, in order to personalise your experience.
mpo303 collects Personal Data through the following channels:
We process your Personal Data for the following specific purposes. We do not process Personal Data for any purpose incompatible with those listed below without first obtaining your explicit consent.
| Purpose | Description |
|---|---|
| Account Management | Creating, maintaining, and administering your Player account, including authentication and password management. |
| Age & Identity Verification | Conducting KYC checks to confirm that you are at least 21 years of age and are the person you claim to be. |
| Transaction Processing | Processing deposits from and withdrawals to your nominated BCA, BRI, BNI, Mandiri, or e-wallet account denominated in IDR. |
| Service Delivery | Providing access to betting markets, slot games, live casino, togel, and other products on the Platform. |
| Fraud Prevention | Detecting and preventing account fraud, money laundering, collusion, and other prohibited conduct as defined in our Terms & Conditions. |
| Responsible Gaming | Monitoring betting patterns to identify signs of problem gambling and applying appropriate responsible gaming measures. |
| Customer Support | Responding to support enquiries, resolving disputes, and maintaining records of communications for quality assurance. |
| Marketing & Personalisation | Sending you promotional communications about mpo303 offers (where consent has been given) and personalising the Platform interface based on your preferences. |
| Platform Improvement | Analysing aggregate usage data to improve Platform performance, fix technical issues, and develop new features. |
| Legal Compliance | Fulfilling legal and regulatory obligations, including responding to lawful requests from competent authorities. |
mpo303 processes your Personal Data on one or more of the following legal bases:
mpo303 does not sell, rent, or trade your Personal Data. We share data only with trusted parties and only to the extent necessary for the purposes described in this Policy.
7.1 Payment Processors. To facilitate deposits and withdrawals, we share transactional da ta with our integrated payment gateway partners, including local Indonesian bank transfer systems and e-wallet providers such as OVO, DANA, GoPay, ShopeePay, and LinkAja. These processors receive only the data required to execute the relevant transaction and are bound by strict data processing agreements.
7.2 Game Studio Providers. Games on the mpo303 Platform are supplied by third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft. When you launch a game, a session token and minimal account identifier are passed to the relevant studio's system. Game studios do not receive your full registration profile, KYC documents, or financial details beyond what is technically required to operate the game session.
7.3 Identity Verification Partners. KYC document review may be conducted in part through a contracted third-party identity verification service. All such processors are bound by data processing agreements that prohibit use of your data for any purpose other than fulfilling the KYC function on behalf of mpo303.
7.4 Fraud Detection and Security Providers. We use specialist third-party fraud detection services that process technical session attributes (IP address, device fingerprint, behavioural signals) to generate risk scores. These providers act as Data Processors and do not retain identifiable player profiles beyond their contractually defined retention window.
7.5 Legal and Regulatory Disclosure. We may disclose your Personal Data to law enforcement agencies, regulatory authorities, or courts where we are required to do so by applicable law or a valid legal order. We will notify you of such disclosures where we are legally permitted to do so.
7.6 Business Transfers. In the event of a merger, acquisition, restructuring, or sale of assets involving mpo303, Player data may be transferred to the successor entity. We will notify affected Players in advance of any such transfer and ensure that the receiving entity is bound by privacy obligations at least equivalent to those in this Policy.
mpo303 retains Personal Data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following general retention periods apply:
| Data Category | Retention Period |
|---|---|
| Registration Data | For the duration of the account plus 5 years following account closure, to support legal and compliance obligations. |
| KYC Documents | For the duration of the account plus 5 years following account closure. Extended retention may apply where required by anti-money laundering obligations. |
| Transaction Records | 7 years from the date of each transaction, in line with standard financial record-keeping requirements. |
| Betting & Game History | 5 years from the date of each event, to support dispute resolution and responsible gaming review. |
| Support Communications | 3 years from the date of each interaction, for quality assurance and dispute evidence purposes. |
| Technical & Log Data | 90 days for standard server logs; up to 12 months for security-related logs flagged during fraud investigations. |
| Marketing Preferences | Until consent is withdrawn or the account is closed, whichever is earlier. |
Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised such that it can no longer be attributed to an identifiable individual.
mpo303 implements a layered security architecture designed to protect your Personal Data against unauthorised access, accidental loss, alteration, or disclosure. Our security measures include, but are not limited to, the following.
mpo303 uses cookies and similar technologies (such as local storage and session tokens) to operate the Platform effectively, ensure security, and improve the user experience. The following categories of cookies are in use.
| Cookie Type | Purpose | Can Be Disabled? |
|---|---|---|
| Strictly Necessary | Maintain your login session, remember your cart and game state, and enable core Platform functionality. Cannot be turned off without breaking the service. | No |
| Performance / Analytics | Collect anonymised data about how Players navigate the Platform to help us identify performance bottlenecks and improve page structure. | Yes (via settings) |
| Functional | Remember your preferences such as language settings and preferred game categories so the Platform loads to your personalised view. | Yes (via settings) |
| Security / Fraud Detection | Support session integrity checks and device fingerprinting to detect anomalous login attempts and protect your account from takeover. | No |
Most web browsers allow you to control cookie settings via the browser's privacy or settings menu. Disabling performance and functional cookies will not prevent you from using the Platform but may limit certain personalisation features. Disabling strictly necessary or security cookies will impair core Platform functionality and is not recommended.
As a Player whose Personal Data is processed by mpo303, you hold a number of rights in respect of that data. We are committed to honouring these rights in a timely and transparent manner. To exercise any of the rights below, contact us using the details in Section 16.
Request a copy of the Personal Data mpo303 holds about you and information about how it is processed.
Request correction of inaccurate or incomplete Personal Data held on your account without undue delay.
Request deletion of your Personal Data where processing is no longer necessary or where consent has been withdrawn, subject to legal retention obligations.
Request that we restrict processing of your data — for example, while an accuracy dispute is being resolved.
Receive a structured, machine-readable copy of data you have provided to mpo303 and transmit it to another provider.
Object to processing based on legitimate interests — including direct marketing. We will cease such processing unless compelling grounds exist to continue.
We aim to respond to all valid data rights requests within 30 calendar days. Where a request is complex or we have received a high volume of requests, we may extend this period by a further 60 days, with prior notification to you. We do not charge a fee for processing data rights requests unless a request is manifestly unfounded or excessive.
The mpo303 Platform is strictly for adults aged 21 and over. We do not knowingly collect Personal Data from individuals under the age of 21. Our KYC process is specifically designed to verify that all registered Players meet this age threshold before they may deposit or play.
If mpo303 discovers or has reasonable grounds to believe that a Player is under 21 years of age, we will immediately suspend the account, conduct a full review, and — where the suspicion is confirmed — close the account permanently. Any funds deposited by a minor will be handled in accordance with our Terms & Conditions and, where required, returned to the source payment method after deducting any amounts already withdrawn.
We encourage parents and guardians to install internet filtering and parental control software on devices that may be accessible to minors, to prevent underage access to online gambling platforms.
The mpo303 Platform may reference third-party brands, payment providers, and game studios by name for informational purposes. However, the Platform does not contain hyperlinks to external third-party websites, and this Privacy Policy applies exclusively to data processed by mpo303 in connection with its own Platform.
Where third-party game studios or payment processors operate their own data collection as part of the service they provide — for example, a game studio's RNG server receiving session tokens — those parties' own privacy policies govern their independent data processing activities. mpo303 takes reasonable steps through contractual agreements to ensure that third-party processors handle your data responsibly, but we cannot accept liability for the independent data practices of third parties acting outside the scope of their processing agreement with mpo303.
mpo303 is an internationally operated platform and some of the third-party service providers we engage — including game studios, cloud infrastructure providers, and fraud detection services — may process data in jurisdictions outside Indonesia. Where Personal Data is transferred internationally, mpo303 ensures that appropriate safeguards are in place, such as:
We do not transfer Personal Data to jurisdictions that do not provide an adequate level of data protection without implementing the safeguards described above.
mpo303 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform functionality. When material changes are made, we will update the "Last Updated" date at the top of this page and, where appropriate, notify registered Players via email or an on-Platform notice.
Continued use of the Platform following publication of a revised Privacy Policy constitutes acceptance of the updated terms. We encourage Players to review this page periodically. If you object to any change, you should cease using the Platform and contact us to request account closure in accordance with the Terms & Conditions.
If you have any questions about this Privacy Policy, wish to exercise a data subject right, or have a concern about how mpo303 has handled your Personal Data, please contact our Data Protection team using the details below. Our support team operates 24 hours a day, 7 days a week, in both English and Indonesian (WIB, UTC+7).
Where you are not satisfied with mpo303's response to a privacy complaint, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction or to seek resolution through the dispute mechanism outlined in our Terms & Conditions.
Our Commitment
Six core principles that underpin every data protection decision we make at mpo303.
All data in transit is protected by TLS 1.2+ encryption. Sensitive data stored on our servers — including KYC documents — is encrypted at rest with AES-256, the same standard used by leading global financial institutions.
Every player undergoes identity and age verification before withdrawals are enabled. KYC documents are stored securely and accessed only by authorised personnel on a need-to-know basis.
mpo303 does not sell, lease, or trade your personal information to advertisers or data brokers. Your data is used exclusively to deliver and improve your betting experience on our Platform.
You hold clear rights over your data — access, rectification, erasure, portability, and the right to object. Submit a request to our support team and receive a substantive response within 30 days.
We keep your data only as long as necessary. Transaction records are retained for 7 years per financial compliance standards; other data categories are subject to shorter, purpose-specific retention windows.
Any third party that processes your data on our behalf — payment gateways, game studios, fraud detection services — is bound by a data processing agreement prohibiting use of your data beyond its authorised purpose.
Keep Exploring
Our support team is available around the clock to handle data rights requests and privacy enquiries. You can also review our Terms & Conditions or visit our FAQ for quick answers.