MasterMPO Privacy Policy – Malaysian User Data Protection

Introduction

MasterMPO ("we", "platform", "mastermpo") is committed to protecting the privacy of everyone who uses our services. This Privacy Policy explains how we collect, use, store, and safeguard your personal information when you use our online entertainment platform at mastermpo.best.

We operate entirely within Malaysia and comply with the Personal Data Protection Act 2010 (PDPA), enacted by the Malaysian Parliament. Every aspect of this Privacy Policy is designed to fully protect your privacy rights as a Malaysian user.

Continued use of the platform mastermpo after this Privacy Policy is updated will be considered your acceptance of the changes made. We will notify you of material changes via email or in-platform notification before they take effect.

Types of Personal Data We Collect

MasterMPO collects your personal data across three main categories. Below is a detailed description of each category:

A. Data You Provide Directly

• Full name as stated on your MyKad or Malaysian passport
• National Identity Card number (MyKad) or passport number for KYC verification purposes
• Date of birth for age verification (21 and above)
• An active Malaysian mobile phone number
• A valid email address that is currently in use by you
• Malaysian residential address (state and city)
• Malaysian bank account or eWallet details for payment processing (bank name, account number)
• Account passwords stored in encrypted form – we do not store passwords in plain text

B. Automatically Collected Data

• The IP address of your device when accessing the platform
• Device type, operating system, and web browser used
• Session log data — login time, logout time, and session duration
• In-platform game history and betting activity
• Deposit, withdrawal, and complete financial transaction history
• Cookie data and similar tracking technologies (see Section 9 for details)

C. Data from Approved Third Parties

• Verification information from approved KYC service providers — to confirm your identity in compliance with AML requirements
• Payment processing data from approved eWallet and FPX providers – Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and Malaysian banking institutions

How We Use Your Personal Data

Mastermpo uses your personal data solely for the following clearly stated and legitimate purposes:

• Account management – registration, identity verification, profile management, and account recovery
• Transaction processing — deposits via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, FPX, and withdrawal processing to your bank account or eWallet
• Service delivery – allows you to access and enjoy all games and services on the mastermpo platform, including casino, slots, jackpot, poker, football, and e-sports
• Customer support – resolving your enquiries, complaints, and support requests via live chat or email
• Security and fraud prevention — to detect and prevent unauthorised access, financial fraud, money laundering, and platform abuse
• Legal compliance – fulfil obligations under PDPA 2010, AML/CFT requirements, and directives from relevant regulatory bodies
• Service communications – sending important account notifications, promotions you have subscribed to, and platform policy updates
• Platform improvement – analyses aggregated, anonymised usage patterns to improve the mastermpo user experience

Legal Basis for Data Processing

Under the Personal Data Protection Act 2010 (PDPA) of Malaysia, mastermpo processes your personal data on the following legal bases:

• Your consent – you provide explicit consent at the point of account registration and may withdraw consent for specific types of processing at any time
• Contract performance – processing is required to fulfil our obligations to you as a platform member, including payment processing and delivery of the services you have subscribed to
• Legitimate interests – processing for security purposes, fraud prevention, and service improvement that does not infringe on your privacy rights
• Legal obligation – processing required to comply with applicable Malaysian laws, including KYC and AML/CFT requirements

You have the right to know the specific legal basis for each category of data processing we carry out. Contact our privacy team for more information.

Data Sharing with Third Parties

MasterMPO does not sell your personal data. However, in limited circumstances and for legitimate operational purposes, we may share your data with the following categories of third parties:

• Payment service providers – including Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, and Malaysian banking institutions that process your transactions. Such sharing is limited to the minimum data necessary to complete the transaction.
• Identity verification (KYC) providers — accredited identity verification companies that assist us in verifying your information to meet AML/CFT legal requirements. All such providers are bound by strict confidentiality agreements.
• Game providers — internationally accredited game providers that supply gaming platforms to mastermpo may receive session data necessary for game delivery. No full identity data is shared.
• Malaysian authorities – data will be shared with the relevant Malaysian authorities only where there is a clear legal obligation, such as a court order or official directive from a competent regulatory body.

We do not share your data with parent companies, subsidiaries, or business partners for cross-marketing purposes without your explicit prior consent.

Data Protection Security Measures

We invest seriously in our security infrastructure to ensure your personal data remains protected at all times. The following are the security layers we have implemented on the platform mastermpo:

• 256-bit SSL/TLS Encryption – all communications between your device and mastermpo's servers are encrypted using the same standard adopted by Malaysia's major banks
• Data encryption at rest – sensitive data stored in our databases is encrypted using AES-256, ensuring it remains unreadable even to unauthorised personnel
• Role-based access control – only mastermpo staff with a clearly defined and approved operational need may access user data, and every access is logged for audit purposes
• 24/7 Security Monitoring – an automated monitoring system detects and immediately alerts against any unauthorised access attempts or suspicious activity
• Penetration testing periodically by independent cybersecurity firms to identify and address any system vulnerabilities before they can be exploited
• Two-factor authentication (2FA) for internal mastermpo staff access to systems that store user data

Data Retention Period

Mastermpo retains your personal data only for as long as necessary to fulfil the purposes set out in this Privacy Policy, or as required by applicable Malaysian law.

• Active account data – retained for the duration your account remains active and for a further 7 years after account closure to meet financial record-keeping and legal compliance requirements
• Transaction records – retained for 7 years from the date of transaction to meet Malaysia's accounting and AML legal requirements
• Customer support communication logs – retained for 3 years from the date of interaction for reference and dispute resolution purposes
• Security log data – retained for 2 years for digital forensics and security investigation purposes if required
• Non-essential cookie data – retained for up to 13 months or until you delete it, whichever comes first

Once the retention period has ended, your data will be securely deleted or converted into anonymised data that can no longer be linked back to you. The deletion process uses methods that ensure the data cannot be recovered.

Your Rights Under PDPA 2010

As a data subject under the Personal Data Protection Act 2010 (PDPA) of Malaysia, you have the following rights regarding your personal data on the platform mastermpo:

• Right of Access – request a copy of the personal data we hold about you in a readable format
• Right to Rectification — to request correction of inaccurate or incomplete personal data
• Right to Erasure – request the deletion of your personal data under certain circumstances, subject to legal obligations that prevent such deletion
• Right to Restrict Processing – request a temporary restriction on the processing of your data while a dispute is being resolved
• Right to Object – object to the processing of your data for specific purposes such as direct marketing
• Right to Withdraw Consent – withdraw consent for data processing at any time without affecting the lawfulness of processing carried out prior to withdrawal

To exercise any of these rights, contact our data privacy team via live chat or email at support@mastermpo.best. We will process your request within 14 business days and notify you of the action taken.

Cookies & Tracking Technologies

Platform mastermpo uses cookies and similar tracking technologies to ensure the platform runs smoothly and to deliver a better user experience. The following are the types of cookies we use:

• Essential cookies – required for core platform operations, including login session authentication and security. Cannot be disabled as the platform will not function without it.
• Performance cookies – collects aggregated, anonymised information about how you use the mastermpo platform for improvement purposes. This contains no information that can personally identify you.
• Functionality cookies – saving your preferences such as display language and interface settings so you do not have to reconfigure them each time you log in.

You can manage your cookie settings through your web browser settings. Disabling essential cookies may affect platform functionality. For guidance on managing cookies in popular browsers such as Chrome, Firefox, or Safari, refer to your browser's help section.

Cross-Border Data Transfers

In platform operations mastermpo, your personal data may need to be transferred to and stored on servers located outside Malaysia – particularly for certain technical service providers such as the cloud computing infrastructure we utilise.

Whenever your personal data is transferred outside Malaysia, we ensure that protection equivalent to or greater than the PDPA 2010 is in place through one of the following mechanisms:

• Data transfer agreements that comply with international data protection standards
• Verification that the recipient country maintains a comparable level of data protection
• Use of standard contractual clauses approved by the relevant data protection authority

You may request information regarding any cross-border data transfers relating to your data by contacting our privacy team.

Children's Privacy

Platform mastermpo is a service restricted to individuals aged 21 and above. We do not knowingly collect, process, or store any personal data from individuals under the age of 21.

Our age verification system is designed to prevent registration by underage individuals. However, we acknowledge that no system is perfect, and we rely on users to provide accurate age information at the point of registration.

Changes to This Privacy Policy

MasterMPO reserves the right to update this Privacy Policy from time to time to reflect changes in our data collection practices, new legal requirements, or service improvements. Each updated version will display a new "Updated" date at the top of this document.

For material changes — those that significantly affect how we handle your personal data — we will:

• Sending email notifications to all registered members at least 14 days before the changes take effect
• Displaying a prominent notice on the mastermpo platform when you log in
• In cases where changes involve using your data for a new and different purpose, we will seek fresh consent from you before that new purpose is implemented.

Continued use of the platform mastermpo after the effective date of any changes will be considered your acceptance of the updated Privacy Policy. If you do not agree with the changes, you have the right to close your account and discontinue use of the platform.

Contact the MasterMPO Privacy Team

For any questions, concerns, or requests relating to your data privacy on the platform mastermpo, you may contact us through the following channels:

• Live Chat – available 24 hours a day, 7 days a week via the chat icon within the mastermpo platform. Response times are typically between 5 and 15 minutes.
• Email – support@mastermpo.best. Response within 24 hours for general enquiries, and 48 hours for formal privacy rights requests.

When submitting a privacy rights request, please include your full name, registered phone number, and a clear description of your request so we can process it promptly and accurately.

This Privacy Policy is drawn up in Bahasa Melayu and constitutes the authoritative version for Malaysian users. Should a version in another language exist, the Bahasa Melayu version shall take precedence in the event of any interpretive conflict.