Privacy Policy — How mpogacor Handles Your Personal Data

Introduction

This Privacy Policy ("Policy") describes how mpogacor ("we", "us", "the Platform") collects, uses, stores, discloses and protects personal data relating to registered users and visitors ("you", "Player"). This Policy applies to all data processing activities conducted in connection with the mpogacor online casino and sports betting platform directed at adult Malaysian residents.

By creating an account, completing identity verification or otherwise using the mpogacor platform, you acknowledge that you have read and understood this Policy. This Policy should be read in conjunction with our Terms & Conditions, which govern the wider user agreement.

Definitions

The following terms, where used in this Policy, carry the meanings assigned below:

• "Personal Data" — any information that identifies or could reasonably be used to identify a natural person, including name, identity card number, email address, phone number, device identifiers and financial account details.
• "Processing" — any operation performed on personal data, including collection, recording, storage, retrieval, use, disclosure, restriction and deletion.
• "Data Controller" — mpogacor, as the entity that determines the purposes and means of processing personal data.
• "Data Processor" — a third party that processes personal data on behalf of mpogacor under a formal data processing arrangement.
• "KYC Data" — identity and verification documents submitted by a Player during or after registration, including but not limited to MyKad, passport copies, utility bills and payment ownership evidence.
• "Cookies" — small data files placed on a Player's device by the Platform for session management, security or analytical purposes.

Data We Collect

mpogacor collects personal data across the following categories. The specific data points collected may vary depending on the stage of account registration, verification status and the services accessed.

Collection Methods

mpogacor collects personal data through the following methods:

• Direct submission: Information you provide during registration, KYC document upload, support enquiries or when updating account details.
• Automated technical collection: IP addresses, device fingerprints, session data and browser characteristics collected automatically when you access the platform.
• Payment processing: Transaction-level data received from Malaysian payment processors including FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank and Hong Leong when deposits and withdrawals are initiated.
• Cookies and similar technologies: Data collected through cookies placed on your device during platform sessions, as described further in Section 10.
• Third-party identity verification services: Where applicable, data returned from accredited verification services engaged to confirm identity or address records.

Data Processing

Personal data collected by mpogacor is processed for the following operational purposes:

1. Creating and administering registered player accounts and verifying account eligibility.
2. Conducting identity and age verification (KYC) in compliance with applicable legal and regulatory requirements. All real-money players must be aged 21 or above.
3. Processing MYR deposits and withdrawals through supported Malaysian payment channels, including reconciliation, dispute investigation and fraud screening.
4. Operating responsible gambling tools including deposit limit management, session controls and self-exclusion administration.
5. Detecting, investigating and preventing fraud, money laundering, multi-accounting and other forms of prohibited conduct as defined in our Terms & Conditions.
6. Providing customer support and resolving account-related queries, disputes and complaints.
7. Improving platform functionality, user experience and security through aggregated, anonymised analytics where applicable.
8. Communicating with players regarding account status, security alerts and changes to this Policy or our Terms & Conditions.

Lawful Basis for Processing

mpogacor processes personal data on one or more of the following lawful bases:

• Contractual necessity: Processing required to fulfil the services described in the Terms & Conditions, including account operation, payment processing and customer support.
• Legal obligation: Processing required to comply with applicable laws including identity verification, anti-money laundering obligations and regulatory reporting requirements.
• Legitimate interests: Processing necessary for fraud prevention, platform security, abuse detection and the protection of the interests of the Platform and other users, provided those interests are not overridden by Player rights.
• Consent: Where specific optional processing activities require consent — such as marketing communications — such consent is sought separately and may be withdrawn at any time without affecting access to core platform services.

Payment Data and Malaysian Payment Channels

Financial data relating to deposit and withdrawal transactions on mpogacor is processed through third-party payment service providers that operate the relevant Malaysian payment channels, including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank and Hong Leong. These providers operate under their own privacy policies and security standards.

Key points regarding financial data handling:

• Full payment card numbers are not stored on mpogacor systems. Where card payment data is involved, it is tokenised by the relevant payment processor.
• E-wallet phone numbers and bank account numbers submitted for withdrawal are stored in association with your verified mpogacor account and are used exclusively to process legitimate withdrawal requests.
• Transaction history, including MYR amounts, timestamps and payment method references, is retained for account reconciliation, dispute resolution and regulatory compliance purposes.
• Withdrawal requests must be directed to a payment account registered in the same name as the verified mpogacor account. This requirement supports anti-money laundering compliance and protects Players from third-party payment fraud.

Sharing Personal Data with Third Parties

mpogacor does not sell personal data to unrelated third parties for their independent commercial use. Personal data may be disclosed to third parties in the following limited circumstances:

• Payment processors: Data necessary to initiate, complete and reconcile MYR transactions through supported Malaysian payment channels.
• Identity verification services: KYC documents and associated data shared with accredited verification providers engaged by mpogacor to confirm player identity and age.
• Technology and hosting providers: Service providers engaged to operate, maintain and secure the Platform's infrastructure, acting as Data Processors under formal agreements.
• Legal and regulatory authorities: Data disclosed in response to lawful requests from Malaysian regulatory bodies, law enforcement agencies or courts, where mpogacor is legally obligated to comply.
• Professional advisers: Legal, accounting and audit professionals engaged by mpogacor, subject to professional confidentiality obligations.

Retention and Deletion

mpogacor retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. General retention principles are as follows:

• Active account data is retained for the duration of the account relationship and for a defined period following account closure to satisfy regulatory requirements.
• KYC documents are retained for the period required under applicable anti-money laundering and identity verification obligations, which may extend several years beyond account closure.
• Transaction records including deposit and withdrawal histories in MYR are retained for compliance and audit purposes for the applicable statutory retention period.
• Support communications are retained for a reasonable period to support dispute resolution and quality review.
• Technical and device data collected for security and fraud prevention may be retained in anonymised or aggregated form beyond the standard account retention window.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to an identifiable individual.

Cookies and Tracking Technologies

mpogacor uses cookies and similar client-side technologies to support essential platform functions, maintain session security and gather aggregated technical data about how the Platform is used. The following categories of cookies may be present:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication cookies and security tokens. They cannot be disabled without impairing core platform functionality.
• Functional cookies: Store user preferences such as language settings, remembered login states and selected display options to improve the browsing experience across sessions.
• Analytical cookies: Collect anonymised or aggregated data about Platform usage patterns, such as page visits and error rates, to help mpogacor identify and resolve technical issues.
• Security cookies: Support fraud detection and account protection by identifying unusual device or session behaviour that may indicate unauthorised access attempts.

Most browsers allow you to manage cookie preferences through browser settings. Disabling strictly necessary cookies may result in reduced platform functionality or the inability to maintain a secure logged-in session.

Data Security

mpogacor implements technical and organisational security measures proportionate to the nature of the personal data processed and the risks involved. These include:

• Encryption of data in transit using TLS protocols across all platform connections.
• Access controls limiting internal data access to personnel with a demonstrated operational need.
• Secure storage practices for KYC documents and financial records.
• Regular security review processes to identify and address vulnerabilities in platform systems.

No data transmission or storage system is completely immune to risk. In the event of a data security incident that materially affects player data, mpogacor will take prompt remediation steps and notify affected individuals as required by applicable law.

Your Rights

Malaysian players have rights in relation to the personal data held about them by mpogacor. Depending on the applicable legal framework, these may include:

• Right of access: The right to request confirmation of whether mpogacor holds personal data about you and, if so, to receive a copy of that data.
• Right to correction: The right to request correction of inaccurate or incomplete personal data held by mpogacor.
• Right to deletion: The right to request deletion of personal data that is no longer necessary for the purpose for which it was collected, subject to overriding legal or regulatory retention obligations.
• Right to restrict processing: The right to request that mpogacor restricts the processing of your data in certain circumstances, for example while a correction request is pending review.
• Right to withdraw consent: Where processing is based on consent, the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Right to lodge a complaint: The right to raise a complaint with an applicable data protection authority if you believe your data has been processed in a manner inconsistent with your rights.

To exercise any of the above rights, contact mpogacor support through the on-platform channel. mpogacor will acknowledge your request promptly and respond within a reasonable timeframe consistent with applicable obligations. Identity verification may be required before certain requests are actioned to protect player data from unauthorised access.

Children and Minors

mpogacor is strictly intended for use by adults aged 21 and above. The Platform does not knowingly collect personal data from individuals below the age of 21. Age verification is a mandatory component of the registration and KYC process.

If mpogacor determines that personal data has been collected from an individual who does not meet the minimum age requirement, such data will be deleted promptly and the associated account will be closed. If you are a parent or guardian and believe your child has accessed mpogacor, please contact support immediately.

Policy Updates

mpogacor may update this Privacy Policy periodically to reflect changes in applicable law, regulatory guidance, platform functionality or internal data handling practices. The "Last reviewed" date at the top of this page indicates when the Policy was most recently updated.

Material changes to this Policy will be communicated to registered players through on-platform notification or by email to the registered address where reasonably practicable prior to the effective date. Continued use of the platform following publication of an updated Policy constitutes acceptance of the revised terms. If you do not accept the revised Policy, you should contact support to close your account.

Contact Us

If you have any questions, concerns or requests relating to this Privacy Policy or the personal data mpogacor holds about you, please contact our support team through the on-platform live chat channel, which is available 24 hours a day, seven days a week.

You may also contact us by email. Our website support email address is displayed as plain text in the footer of this page. Please note that sensitive personal documents — such as KYC verification materials — should be submitted only through the secure on-platform support channel and not by standard email.