At MPO500, we take the privacy of our players seriously. This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, and what rights you have over your information as a user of the MPO500 platform.
These cards highlight our core data protection commitments. Please read the full policy below for complete details.
We collect only the personal information that is strictly necessary to operate your account, process transactions, and meet our regulatory obligations. We do not collect data speculatively.
MPO500 does not sell, rent, or trade your personal data to third-party marketers under any circumstances. Your information is used solely to operate and improve the MPO500 platform.
All data transmitted between your device and MPO500 servers is protected with 256-bit SSL/TLS encryption. Sensitive data at rest is stored with equivalent-grade protection.
You have the right to access, correct, port, and request deletion of your personal data. We honour these requests in a timely manner as described in Section 8of this policy.
We use cookies to improve your experience and measure platform performance. You can manage your cookie preferences at any time. We do not use cookies to track you across unrelated third-party websites.
We retain personal data only for as long as necessary to fulfil the purpose it was collected for, or as required by applicable law. Detailed retention periods are set out in Section 7 below.
This Privacy Policy ("Policy") issued by MPO500 ("MPO500", "we", "us", "our") and applies to all personal data collected through the MPO500 online gaming platform accessible at mpo500.lat, including all associated pages, features, and services (collectively, the "Platform").
MPO500 is committed to protecting the privacy and personal information of all users of the Platform, including registered players, visitors, and prospective players. This Policy describes, in clear terms, the categories of personal data we collect, the legal bases and purposes for which we process that data, with whom we share it, how long we keep it, and the rights available to you as a data subject.
By registering an account, depositing funds, or otherwise using the MPO500 Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree with any aspect of this Policy, you should discontinue use of the Platform and contact us to request account closure.
For the purposes of this Privacy Policy, the following terms carry the meanings assigned below:
MPO500 collects personal data in several categories depending on your interaction with the Platform. The categories, specific data points, and collection basis are set out in the table below:
| Category | Data Points | When Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, government-issued ID number | Registration & KYC verification |
| Contact Data | Email address, mobile phone number, residential address (including city, state, postcode) | Registration & KYC verification |
| Financial Data | Payment method identifiers (e-wallet IDs, masked bank account numbers, masked card numbers), transaction history, deposit and withdrawal records | Deposits, withdrawals & payment processing |
| KYC Documents | Copies of Malaysian MyKad, passport, driver's licence, utility bills, bank statements, selfie images | Identity verification process |
| Usage Data | Login timestamps, IP address, device type, browser type and version, session duration, pages visited, games played, wager amounts, game outcomes | Continuous — during Platform use |
| Communication Data | Records of support communications via live chat, email, and WhatsApp, including content, timestamps, and resolution outcomes | When you contact support |
| Cookie & Technical Data | Cookie identifiers, session tokens, referal source, UTM parameters, geolocation data (country/region level) | On Platform access |
The majority of personal data we hold about you is provided directly by you at the point of account registration, during KYC verification, when making deposits or requesting withdrawals, when contacting our support team, or when responding to surveys or promotions.
When you access and use the MPO500 Platform, certain technical data is collected automatically through server logs, cookies, session tracking technologies, and analytics tools. This includes your IP address, device identifiers, browser characteristics, pages visited, game activity, and session timestamps. This data is collected to ensure Platform security, maintain service quality, and enable fraud detection.
MPO500 may receive limited personal data from authorised third parties in the following circumstances:
MPO500 processes personal data only where a legitimate legal basis exists. The primary purposes for which we process your data, and the corresponding legal bases, are as follows:
| Purpose | Legal Basis |
|---|---|
| Account registration, login authentication, and account management | Performance of contract |
| Processing deposits, withdrawals, and payment reconciliation | Performance of contract |
| KYC identity verification and age verification (21+) | Legal obligation; legitimate interest |
| Anti-money laundering (AML) screening and fraud detection | Legal obligation; legitimate interest |
| Responsible gambling monitoring and intervention | Legitimate interest; legal obligation |
| Customer support communications | Performance of contract; legitimate interest |
| Platform analytics, performance monitoring, and security | Legitimate interest |
| Sending promotional communications and bonus offers | Consent (where required); legitimate interest |
| Compliance with applicable regulatory and reporting requirements | Legal obligation |
MPO500 does not sell, rent, or trade personal data to any third party for marketing or commercial purposes. We may share your personal data with the following categories of third parties only where necessary and under appropriate safeguards:
To process deposits and withdrawals, we share transaction-relevant data with our payment partners, including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX-connected Malaysian banks (Maybank, CIMB, Public Bank, RHB, Hong Leong Bank), and cryptocurrency processing services. These providers act as Data Processors under agreements that restrict them from using your data for any purpose other than completing the relevant payment instruction.
We engage third-party KYC and identity verification providers to assist with document verification and age confirmation. These providers process identification data solely for the purpose of verification and do not retain data beyond the scope agreed in our processing contracts.
MPO500 may be required to disclose personal data to regulatory bodies, law enforcement agencies, or other public authorities where required by law, in response to a valid court order, or where disclosure is necessary to protect the safety, rights, or property of MPO500, its players, or the public.
We use third-party technology partners for hosting, cloud infrastructure, analytics, and cybersecurity services. These providers operate under strict data processing agreements and may only process data in accordance with MPO500's documented instructions.
MPO500 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law or regulation. The following retention periods apply as general guidelines:
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our data destruction procedures.
As a user of the MPO500 Platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us using the details in Section 15. We will respond to all verified requests within thirty (30) days.
Request a copy of the personal data MPO500 holds about you and information on how it is processed.
Request correction of any inaccurate or incomplete personal data held your account profile.
Request deletion of your personal data where it is no longer necessary for the purpose collected and no overiding legal obligation requires retention.
Request a structured, machine-readable copy of personal data you provided to MPO500, where technically feasible.
Request that MPO500 limit processing of your data in certain circumstances, such as while accuracy is disputed.
Object to processing of your data for direct marketing purposes. You may opt out of promotional communications at any time via Account Settings.
Cookies are small text files stored on your device by web browser when you visit a website. MPO500 uses cookies and similar tracking technologies (including session tokens, local storage, and analytics pixels) to operate the Platform effectively, remember your preferences, and understand how users navigate the site.
You can manage or delete cookies at any time through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to use the Platform. For instructions on managing cookies, consult the help documentation for your browser (Chrome, Firefox, Safari, Edge, or equivalent).
MPO500 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security framework includes:
In the event of a personal data breach that poses a risk to your rights and freedoms, MPO500 will notify affected users and relevant authorities in accordance with applicable data protection obligations.
The MPO500 Platform is strictly intended for individuals aged21 years and above. We do not knowingly collect, process, or retain personal data from individuals under the age of 21. Age verification is conducted as part of the KYC process for all accounts.
If MPO500 becomes aware that personal data has been collected from an individual who is under 21 years of age without verified parental or guardian consent, we will take immediate steps to delete that data, suspend the associated account, and return any deposited funds to the original payment source where technically possible.
If you believe that a person under 21 has registered or attempted to register an account on MPO500, please contact us immediately using the details in Section 15.
MPO500 operates as an internationally licensed platform. In the course of providing services to Malaysian players, personal data may be transferred to and processed in jurisdictions outside Malaysia, including countries where MPO500's servers or authorised Data Processors are located.
Where personal data is transferred internationally, MPO500 ensures that appropriate safeguards are in place, including:
By using the MPO500 Platform, you acknowledge and consent to the international transfer of your personal data as described in this section.
The MPO500 Platform may contain references to or integrations with third-party services, such as payment processors. MPO500 is not responsible for the privacy practices of any third-party service provider.
When you interact with a third-party payment service — for example, authenticating a Touch 'n Go eWallet, Boost, or GrabPay transaction through the respective provider's application — that provider's own privacy policy governs the handling of your data within their system. We recommend reviewing the privacy policies of any third-party services you use in connection with MPO500.
MPO500 reserves the right to update or revise this Privacy Policy at any time. When material changes are made, we will notify registered players via email or through a prominent notice displayed on the Platform, at least seven (7) days before the changes take effect, except where an immediate update is required to address a security, legal, or regulatory matter.
The "Last Updated" date at the top of this page indicates when this Policy was most recently revised. We encourage you to review this page periodically to stay informed of any changes. Your continued use of the Platform following a published revision constitutes acceptance of the updated Privacy Policy.
For all privacy-related enquiries, data subject rights requests, or concerns about how MPO500 handles your personal information, please contact us through the following channels. All privacy requests will be acknowledged within 72 hours and resolved within 30 days.
Available 24/7 on the Platform
Average response: 3–5 minutes
Available 24/7
English, Bahasa Melayu & 中文
Acknowledge within 72 hours
Full resolution within 30 calendar days
For information about responsible gambling tools and self-exclusion options, please visit our Responsible Gambling page. For the full terms governing your account, please review our Terms & Conditions.
We handle your personal information with the same care we bring to every part of the platform. Join120,000+ Malaysian players who trust MPO500.
Play responsibly. 21+ only. By using MPO500, you agree to this Privacy Policy.