Privacy Policy mpoasia — Malaysian User Data Protection

Mpoasia ("we", "Platform", "company") is fully committed to protecting the privacy and personal data of every user who registers or uses our services. This Privacy Policy explains our practices regarding the collection, use, storage, and protection of your personal information.

This policy applies to all users who access the MPOASIA platform through our official website, mobile app for Android and iOS, or any of our customer service channels. By using any MPOASIA service, you agree to the privacy practices described here.

We periodically update this policy to reflect changes in our privacy practices, legal requirements, or new technologies. The latest version will always be posted on this page with a clear update date.

Mpoasia collects data necessary to provide you with a secure, efficient, and personalized service. Below is a summary of the data we collect and its sources:

The data we collect is used for specific and legitimate purposes. Below is the complete list of data usage purposes at MPOASIA:

• Verification and KYC: To verify your identity in compliance with anti-money laundering legislation and consumer protection requirements.
• Transaction processing: To securely and efficiently process deposits, withdrawals, and any other financial transactions carried out through the mpoasia platform.
• Account management: To maintain your account, process customer support requests, and provide relevant information about your account.
• Personalization: To personalise your gaming experience, including game recommendations and relevant promotions based on your usage history.
• Platform security: To detect and prevent fraud, unauthorised access, and platform abuse.
• Legal compliance: To fulfil legal obligations, including reporting to the relevant authorities when required by law.
• Service communications: To send important notices about platform changes, terms updates, and security information.

We do not use your data to make automated decisions that significantly affect you without appropriate human review.

Mpoasia does not sell or rent your personal data to any third party for marketing purposes. However, in certain limited situations, we may share your data with the following parties:

• Payment service providers: To process financial transactions — including Malaysian banks, e-wallet providers, and payment gateways. They are bound by strict confidentiality agreements.
• Technology service providers: Companies that help us operate the platform's technical infrastructure, with data access limited strictly to the scope of their work.
• Legal Authority: We will disclose data when required by court order, police directive, or valid legal requirements in Malaysia.
• Independent auditor: In the context of security or financial audits required for platform licensing compliance.

Mpoasia continuously invests in cybersecurity infrastructure to ensure your personal data is always protected to the highest standard. The security measures we implement include:

• 256-bit SSL encryption: All communications between your device and mpoasia servers are encrypted using the latest TLS protocol.
• Encrypted data storage: Sensitive data such as financial information and KYC documents are stored in encrypted form on secured servers.
• Internal access control: Access to user data within MPOASIA is restricted on a need-to-know basis — only staff who require access for their specific duties are permitted.
• 24/7 monitoring: A cybersecurity threat monitoring system operates around the clock to detect any unauthorised access attempts or suspicious activity.
• Regular security audits: Independent security assessments are conducted periodically by third parties to identify and address potential vulnerabilities.
• Two-factor authentication (2FA): You can enable 2FA on your MPOASIA account for an extra layer of security during login.

That said, no security system is entirely foolproof. In the event of a data breach affecting your information, mpoasia will notify you and the relevant authorities within the timeframe stipulated by applicable law.

Mpoasia uses cookies and similar technologies to enhance your experience on our platform. Understanding how cookies are used helps you make more informed decisions about your privacy settings.

Types of cookies we use:

• Essential cookies: Required for core platform functions such as login session verification and security. These cookies cannot be disabled without affecting platform functionality.
• Performance cookies: Collects information on how users interact with the platform to help us identify and resolve technical issues.
• Functional cookies: Stores user preferences such as preferred language and display settings to deliver a more personalized experience.
• Analytical cookies: Helps us understand aggregate platform usage patterns for continuous service improvement.

As an mpoasia user, you have the following rights regarding your personal data under the Personal Data Protection Act 2010 (PDPA) of Malaysia:

Mpoasia does not retain your personal data longer than necessary. Our retention periods are based on operational needs and legal obligations:

• Active account data: Retained for as long as your account is active and for the required period after account closure to meet legal obligations.
• Financial transaction records: Retained for a minimum of seven (7) years in accordance with Malaysian accounting and tax legislation.
• KYC and identity verification logs: Retained for five (5) years after the business relationship ends in accordance with anti-money laundering legal requirements.
• Support conversation logs: Retained for two (2) years for service quality and dispute resolution purposes.
• Aggregated analytics data: De-identified data may be retained indefinitely as it cannot be linked to any individual.

The mpoasia platform may contain links or integrations with third-party services such as payment providers, game providers, and affiliate marketing platforms. This Privacy Policy not applicable to the privacy practices of those third parties.

Every third-party provider working with mpoasia has its own privacy policy. We recommend reading the privacy policy of each third-party service you use. mpoasia is not responsible for the privacy practices of those external entities.

All third-party providers we engage are bound by data processing agreements requiring them to handle mpoasia user data in accordance with our standards and applicable legal requirements.