mpo4d Privacy Policy

mpo4d ("we", "us", "our") is committed to protecting the privacy and personal data of every individual who interacts with our platform at https://mpo4d.bio (the "Platform"). This Privacy Policy sets out in plain, precise terms how we collect, use, store, share, and protect your personal information, and what rights you hold in relation to that information.

This Policy applies to all personal data processed by mpo4d in connection with the operation of the Platform, including data provided at registration, during the Know Your Customer (KYC) process, in the course of financial transactions, through customer support interactions, and via the technical operation of the website itself.

By registering an account on the Platform or by continuing to use the Platform after this Policy has been updated, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this Policy, you should not create an account and should cease using the Platform.

mpo4d acts as the data controller in respect of all personal data processed through the Platform. As data controller, mpo4d determines the purposes and means of processing your personal information and bears responsibility for ensuring that such processing is carried out lawfully, fairly, and transparently.

If you have any questions about this Privacy Policy or wish to exercise any of your data rights, you may contact our Data Protection team using the contact details set out in Section 16 of this Policy.

mpo4d collects personal data in several categories depending on your level of engagement with the Platform. The table below summarises the categories of data collected and the context in which each arises.

mpo4d does not collect sensitive special-category data (such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data) except where a Member voluntarily discloses such information during a customer support interaction, in which case it is used solely for the purpose of resolving the Member's enquiry and is not retained beyond that purpose.

mpo4d collects personal data through the following channels:

• Direct submission: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal request, submitting a support ticket, or communicating with our team via live chat or email.
• Automated technical collection: Data collected automatically through cookies, web beacons, server logs, and similar tracking technologies as you interact with the Platform. This includes IP address, device identifiers, and browsing behaviour. See Section 10 for full details on cookies.
• Third-party providers: Data received from our KYC verification partners, fraud detection services, payment processors, and game providers where such data is necessary to verify your identity, process transactions, or detect abuse on the Platform.
• Publicly available sources: In limited circumstances, mpo4d may cross-reference information against publicly available databases for fraud prevention or sanctions screening purposes.

mpo4d processes your personal data only where a lawful basis exists. The primary legal bases we rely upon are: performance of a contract (operating your account and delivering the services you have requested); compliance with a legal obligation (KYC, anti-money-laundering, and regulatory reporting requirements); legitimate interests (fraud prevention, platform security, and service improvement); and, where applicable, your explicit consent (marketing communications).

mpo4d does not sell or rent your personal data to any third party. We share personal data only in the following circumstances and only to the extent strictly necessary for the stated purpose:

• KYC and identity verification providers: We share identity documents and personal details with certified third-party verification services to confirm your age and identity as required prior to withdrawal processing.
• Payment processors and banking partners: Financial data is shared with BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata, OVO, DANA, GoPay, ShopeePay, LinkAja, and other active payment providers solely to facilitate the deposit or withdrawal transaction you have initiated.
• Game providers: Technical session data (user identifier, session token, wager amounts) is shared with third-party game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, PG Soft, and Spribe to the minimum extent required to deliver gameplay and record outcomes.
• Fraud detection and security services: Technical and usage data may be shared with fraud prevention platforms to identify and block abusive or unlawful activity on the Platform.
• Regulatory and law enforcement authorities: mpo4d will disclose personal data to competent authorities where required by law, court order, or regulatory directive. We will notify you of such disclosure where legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of mpo4d's business assets, personal data may be transferred to the acquiring entity, subject to equivalent privacy protections being maintained.

All third-party service providers who process personal data on mpo4d's behalf are required to do so under a written data processing agreement that obliges them to process data only on mpo4d's documented instructions, to maintain appropriate security measures, and to return or delete data upon termination of the service relationship.

Some of mpo4d's service providers — including certain game studios and fraud detection vendors — operate servers located outside Indonesia. Where personal data is transferred internationally, mpo4d ensures that appropriate safeguards are in place to maintain a level of protection equivalent to the standards applied within Indonesia, including:

• Contractual clauses that bind the recipient to data protection standards consistent with mpo4d's obligations under this Policy.
• Transfers to jurisdictions that maintain recognised data protection frameworks and infrastructure security standards.
• Technical measures including end-to-end encryption for data in transit.

You may request information about the specific safeguards applied to any international transfer of your personal data by contacting us using the details in Section 16.

mpo4d retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following indicative retention periods apply:

Where data is no longer required, it is securely deleted or anonymised in accordance with mpo4d's internal data disposal procedures. Anonymised, aggregated data (from which individual Members cannot be identified) may be retained indefinitely for statistical and analytical purposes.

mpo4d implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. Our security framework includes:

• Encryption: All data transmitted between your browser and the mpo4d Platform is encrypted using TLS 1.3. Sensitive data at rest — including KYC documents and financial records — is encrypted using AES-256.
• Access controls: Access to personal data is restricted to authorised mpo4d personnel and contractors on a strict need-to-know basis. All access is logged and subject to periodic audit.
• Network security: mpo4d's infrastructure is protected by firewalls, intrusion detection systems, and continuous security monitoring. Vulnerability assessments and penetration tests are conducted on a regular schedule.
• Password security: Member passwords are stored as salted cryptographic hashes and are never stored or transmitted in plain text. mpo4d staff cannot retrieve your password; they can only trigger a password reset.
• Incident response: mpo4d maintains a documented incident response plan. In the event of a confirmed data breach that poses a risk to your rights and freedoms, affected Members will be notified promptly in accordance with applicable law.

mpo4d uses cookies and similar tracking technologies to operate the Platform, remember your preferences, maintain session continuity, and gather aggregate analytics data. The categories of cookies deployed are as follows:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication cookies, load-balancing cookies, and security tokens. These cannot be disabled without rendering the Platform unusable.
• Functional cookies: Remember your language preferences, display settings, and last-used payment method to improve your experience across sessions.
• Analytics cookies: Collect aggregated, anonymised data about how Members interact with the Platform — page visit counts, navigation paths, session durations — enabling us to identify and fix usability issues and improve overall performance.
• Fraud prevention cookies: Assist in identifying devices associated with suspicious or abusive activity, helping to protect the Platform and its Members from fraud.

mpo4d does not deploy third-party advertising or behavioural profiling cookies for the purpose of serving targeted advertisements on external websites. Analytics data collected through cookies is processed in aggregate form and is not used to build individual Member profiles for sale or disclosure to advertisers.

You may manage or delete cookies through your browser settings at any time. Note that disabling strictly necessary cookies will prevent you from logging in and using the Platform.

Subject to applicable law, you hold the following rights in relation to your personal data held by mpo4d. To exercise any of these rights, please submit a written request to our Data Protection team using the contact details in Section 16. We will verify your identity before processing any request and will respond within 30 calendar days.

• Right of access: You may request a copy of all personal data mpo4d holds about you, together with information about the purposes for which it is processed, the categories of data involved, and the recipients to whom it has been disclosed.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that we correct or update it. You may also update many account details directly through your account dashboard.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where processing is unlawful. This right is subject to overriding legal retention obligations — for example, we are required to retain KYC and transaction records for a minimum of five years after account closure.
• Right to restriction: You may request that we restrict processing of your data in certain circumstances, such as where you contest the accuracy of the data or have objected to processing pending verification of our legitimate grounds.
• Right to data portability: Where processing is based on your consent or on a contract and is carried out by automated means, you may request that we provide your personal data in a structured, commonly used, machine-readable format.
• Right to object: You may object at any time to processing based on legitimate interests. mpo4d will cease such processing unless we can demonstrate compelling legitimate grounds that override your rights, or where processing is necessary for the establishment or defence of legal claims.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

The mpo4d Platform is strictly intended for adults aged 21 years or older. mpo4d does not knowingly collect or process personal data from individuals under the age of 21. Age verification is enforced at registration and through the KYC process.

If mpo4d becomes aware that personal data has been collected from an individual under the age of 21, we will immediately close the associated account, delete or securely destroy all personal data collected in connection with it, and — where legally required — notify the appropriate authorities.

If you are a parent or guardian and believe that a minor under your care has accessed the Platform and provided personal data without your knowledge, please contact our support team immediately at support@mpo4d.bio so that we can take prompt action.

mpo4d may send you promotional communications — including bonus offers, seasonal promotions tied to events such as Idul Fitri, Ramadhan, and Imlek, and new game announcements — via email or in-Platform notifications, where you have provided explicit consent to receive such communications at registration or at a later point.

You may withdraw your consent to receive marketing communications at any time by:

• Clicking the unsubscribe link included at the foot of any marketing email you receive from mpo4d.
• Updating your communication preferences in your account settings on the Platform.
• Contacting our support team via live chat or email and requesting removal from marketing lists.

Withdrawal of marketing consent does not affect your ability to continue using the Platform or to receive transactional communications (such as deposit confirmations, withdrawal notifications, or KYC status updates), which are sent on the basis of contractual necessity rather than consent.

The mpo4d Platform does not contain links to third-party websites for commercial or advertising purposes. Where references are made to third-party payment providers or game studios, these are informational only and do not constitute an endorsement of the third party's privacy practices.

mpo4d accepts no responsibility for the privacy practices of any third-party service providers whose tools operate on or in connection with the Platform. We strongly encourage you to review the privacy policies of any third-party service you interact with in connection with your use of mpo4d, including your banking provider and e-wallet operator.

mpo4d reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, or our data processing practices. Where a change materially affects your rights, we will notify registered Members by email to the address on file or via a prominent notice on the Platform at least 7 calendar days before the change takes effect.

The date of the most recent revision is displayed at the top of this page. Your continued use of the Platform after any amendment constitutes your acknowledgement of the revised Policy. We encourage you to review this page periodically to stay informed about how we protect your data.

If you have questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a privacy-related concern, please contact the mpo4d Data Protection team through the following channel:

Email: support@mpo4d.bio
Live Chat: Available 24/7 on the Platform — Indonesian-speaking agents available at all hours.
Response Time: Data rights requests are acknowledged within 5 business days and resolved within 30 calendar days (WIB, UTC+7).

mpo4d will investigate all privacy complaints promptly and in good faith. Where a complaint cannot be resolved to your satisfaction through our internal process, you may escalate the matter to the relevant data protection supervisory authority in your jurisdiction.