mpood Privacy Policy

1. Introduction and Scope

mpood ("we," "us," "our") is committed to protecting the privacy and security of your personal information. This Privacy Policy applies to all users of the mpood platform, accessible at https://mpood.cam, and all associated services, applications, and websites operated by mpood. This policy explains what personal data we collect, how we use it, who we share it with, and your rights regarding your data.

By registering an account, accessing the platform, or using any of our services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with our data practices, you should not use mpood's services. This policy should be read in conjunction with our Terms & Conditions, which govern your use of the platform.

2. Information We Collect

2.1 Information You Provide to Us

When you register for an mpood account, we collect the following personal information directly from you:

• Account Registration Data: Full legal name, date of birth, gender, email address, mobile phone number, residential address (including city, province, and postal code), and chosen username and password.
• Identity Verification (KYC) Documents: Government-issued identification (Indonesian National ID / KTP), proof of address (utility bill, bank statement, or government document dated within the last three months), and selfie verification photo holding your ID. These documents are required to comply with anti-money laundering regulations and confirm you are at least 21 years of age.
• Payment and Financial Information: Bank account details (bank name, account number, account holder name) for deposits and withdrawals; e-wallet account information (OVO, DANA, GoPay, ShopeePay phone numbers or IDs); transaction history including deposit amounts, withdrawal requests, and payment method used.
• Communication Data: Any information you provide when contacting customer support via email, live chat, WhatsApp, or in-app messaging, including your questions, complaints, feedback, and our responses.
• Voluntary Information: If you participate in surveys, promotions, or contests, we may collect additional information such as preferences, interests, and opinions.

2.2 Information We Collect Automatically

When you use mpood's services, we automatically collect certain technical and usage information:

• Device Information: Device type (mobile, tablet, desktop), operating system (iOS, Android, Windows, macOS), browser type and version, screen resolution, device identifiers (IP address, device ID).
• Usage Data: Pages visited, features accessed, games played, bets placed (including bet type, stake amount, odds, and outcome), session duration, click patterns, and navigation paths within the platform.
• Location Data: Approximate geographic location derived from your IP address. We do not collect precise GPS location unless you explicitly grant permission through your device settings.
• Log Files: Server logs that record your IP address, browser type, referring/exit pages, date and time stamps, and clickstream data.

2.3 Information from Third-Party Sources

We may receive information about you from third parties, including:

• Payment Processors: Confirmation of deposit and withdrawal transactions from banks (BCA, BRI, BNI, Mandiri, CIMB Niaga) and e-wallet providers (OVO, DANA, GoPay, ShopeePay).
• Game Providers: Game session data, RTP performance, and wagering activity from third-party slot, live casino, and sports betting suppliers.
• Fraud Prevention Services: Identity verification results, risk scores, and fraud alerts from specialized security providers to protect against unauthorized access and money laundering.
• Marketing Partners: If you arrive at mpood through an affiliate or referral link, we may receive information about the referring source.

3. How We Use Your Information

mpood uses your personal information for the following purposes:

3.1 Account Management and Service Delivery

• Create, maintain, and manage your mpood account;
• Verify your identity and age (21+ requirement) through KYC procedures;
• Process deposits, withdrawals, and other financial transactions;
• Enable you to place bets, play games, and access all platform features;
• Manage bonus eligibility, wagering requirements, and promotional offers;
• Maintain accurate transaction records and account balances.

3.2 Customer Support and Communication

• Respond to your inquiries, complaints, and support requests via email, live chat, or WhatsApp;
• Send transactional messages related to your account activity (deposit confirmations, withdrawal status updates, bonus notifications);
• Notify you of important changes to our services, Terms & Conditions, or Privacy Policy;
• Provide personalized assistance and troubleshooting based on your account history.

3.3 Security, Fraud Prevention, and Legal Compliance

• Detect and prevent fraudulent activity, unauthorized access, money laundering, and other illegal behavior;
• Enforce our Terms & Conditions, including investigating suspected violations such as multi-accounting, bonus abuse, or collusion;
• Comply with legal obligations, including anti-money laundering (AML) and counter-terrorist financing (CTF) regulations;
• Respond to legal requests from government authorities, law enforcement, or regulatory bodies;
• Protect the rights, property, and safety of mpood, our users, and the public.

3.4 Platform Improvement and Analytics

• Analyze user behavior to improve website functionality, user experience, and game offerings;
• Conduct research and statistical analysis to optimize betting markets, odds, and promotional strategies;
• Test new features, A/B test designs, and monitor platform performance;
• Develop and train machine learning models for personalized game recommendations and responsible gaming interventions.

3.5 Marketing and Promotional Communications (with Consent)

• Send you promotional emails, SMS, or push notifications about bonuses, tournaments, new game launches, and special offers (only if you have opted in);
• Personalize marketing content based on your betting preferences and activity history;
• Conduct surveys and request feedback to improve our services.

You can opt out of marketing communications at any time by clicking the "unsubscribe" link in emails, adjusting your account preferences, or contacting support. Opting out of marketing does not affect transactional messages (e.g., withdrawal confirmations).

4. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Contractual Necessity: Processing is necessary to fulfill our contract with you (providing gambling services, processing transactions, managing your account) as outlined in our Terms & Conditions.
• Legal Obligation: We are required by law to verify your identity (KYC), prevent money laundering, maintain transaction records, and cooperate with regulatory authorities.
• Legitimate Interests: We have legitimate business interests in preventing fraud, improving our platform, conducting analytics, and protecting our legal rights, provided these interests do not override your fundamental privacy rights.
• Consent: For marketing communications and optional data collection (such as surveys or promotions), we rely on your explicit consent, which you can withdraw at any time.

5. Data Sharing and Third-Party Disclosure

5.1 When We Share Your Information

mpood does not sell your personal information to third parties. However, we may share your data with the following categories of recipients:

5.2 Service Providers

• Payment Processors: Banks (BCA, BRI, BNI, Mandiri, CIMB Niaga) and e-wallet providers (OVO, DANA, GoPay, ShopeePay) receive your payment details to process deposits and withdrawals.
• Identity Verification Services: Third-party KYC providers verify your identity documents and perform age checks.
• Game Providers: Slot, live casino, and sports betting suppliers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, etc.) receive pseudonymized gameplay data to deliver their games.
• Cloud Hosting and IT Infrastructure: Data storage, server hosting, and database management providers process your information on our behalf.
• Customer Support Software: Live chat platforms and ticketing systems process your support communications.
• Fraud Prevention and Security Services: Specialized security providers analyze transaction patterns to detect suspicious activity.

All service providers are contractually bound to process your data only for the purposes we specify, maintain appropriate security measures, and comply with data protection laws.

5.3 Legal and Regulatory Authorities

We may disclose your information to government agencies, law enforcement, regulatory bodies, or courts if required by law, legal process, or in response to valid requests to:

• Comply with anti-money laundering (AML) or counter-terrorist financing (CTF) reporting obligations;
• Investigate suspected illegal activity or violations of our Terms & Conditions;
• Protect the rights, property, or safety of mpood, our users, or the public;
• Enforce our legal rights or defend against legal claims.

5.4 Business Transfers

If mpood undergoes a merger, acquisition, reorganization, or sale of assets, your personal information may be transferred to the acquiring entity as part of the transaction. We will notify you via email and/or prominent notice on the platform before your data is transferred and becomes subject to a different privacy policy.

5.5 Information We Do Not Share

We will never sell, rent, or lease your personal information to third parties for their own marketing purposes. We do not share your data with advertisers or data brokers.

6. Data Security and Protection Measures

mpood implements industry-leading security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction:

6.1 Technical Security Measures

• 256-bit SSL/TLS Encryption: All data transmitted between your device and our servers is encrypted using Secure Sockets Layer (SSL) technology, the same standard used by banks.
• Firewalls and Intrusion Detection: Our servers are protected by enterprise-grade firewalls and real-time intrusion detection systems that monitor for suspicious activity.
• Secure Data Storage: Personal information is stored on encrypted databases hosted in secure, access-controlled data centers.
• Password Security: User passwords are hashed and salted using industry-standard cryptographic algorithms. We never store passwords in plain text.
• Two-Factor Authentication (2FA): We offer optional 2FA to add an extra layer of security to your account login.

6.2 Organizational Security Measures

• Access Controls: Only authorized mpood employees with a legitimate business need can access personal data, and all access is logged and monitored.
• Staff Training: Our team undergoes regular training on data protection principles, security best practices, and confidentiality obligations.
• Security Audits: We conduct quarterly internal security audits and engage independent third-party firms to perform penetration testing and vulnerability assessments.
• Incident Response Plan: We maintain a documented data breach response plan to ensure rapid detection, containment, and notification in the event of a security incident.

6.3 Your Role in Security

While we implement robust security measures, you also play a critical role in protecting your account:

• Choose a strong, unique password and never share it with anyone;
• Enable two-factor authentication (2FA) in your account settings;
• Log out of your account when using shared or public devices;
• Keep your registered email address and phone number secure;
• Report any suspicious activity or unauthorized access immediately to [email protected].

7. Data Retention and Deletion

7.1 How Long We Keep Your Data

mpood retains your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods include:

• Active Accounts: Personal data is retained for the duration of your account and for as long as you continue using mpood services.
• Closed Accounts: After you close your account, we retain essential data (name, ID verification documents, transaction history) for 7 years to comply with financial record-keeping and anti-money laundering regulations.
• Transactional Records: Betting history, deposits, withdrawals, and financial transactions are retained for 7 years as required by law.
• Marketing Data: If you have opted out of marketing communications, we retain a record of your opt-out preference indefinitely to ensure we do not contact you again.
• Support Communications: Customer service interactions (emails, chat logs) are retained for 3 years for quality assurance and dispute resolution purposes.

7.2 Data Deletion

After the applicable retention period expires, we securely delete or anonymize your personal information. Deletion methods include:

• Overwriting data with random values to prevent recovery;
• Physically destroying storage media (hard drives, backups) that cannot be securely erased;
• Anonymizing data so it can no longer be linked to you as an individual.

If you request deletion of your account and personal data before the retention period expires, we will honor your request to the extent permitted by law. However, we may be legally required to retain certain data (such as KYC documents and transaction records) for regulatory compliance.

8. Your Privacy Rights

You have the following rights regarding your personal information:

8.1 Right of Access

You have the right to request a copy of the personal data we hold about you. To exercise this right, contact us at [email protected] with the subject line "Data Access Request." We will provide the information within 30 days in a commonly used electronic format.

8.2 Right to Rectification

If your personal information is inaccurate or incomplete, you can update it directly in your account settings or contact support to make corrections. We will update your data promptly and notify any third parties with whom we have shared the information.

8.3 Right to Erasure (Right to Be Forgotten)

You can request deletion of your personal data if it is no longer necessary for the purposes for which it was collected, or if you withdraw consent for processing. However, we may be legally required to retain certain data for regulatory compliance (e.g., transaction records for 7 years). Contact support to request data deletion.

8.4 Right to Restrict Processing

You can request that we restrict how we use your data in certain circumstances, such as if you contest the accuracy of the data or if you object to processing based on legitimate interests. During the restriction period, we will store the data but not actively process it.

8.5 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, machine-readable format (such as CSV or JSON) and transmit it to another service provider. This right applies only to data you provided to us and that we process based on your consent or to fulfill our contract with you.

8.6 Right to Object

You can object to processing of your personal data when we rely on legitimate interests as the legal basis, particularly for marketing purposes. If you object, we will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.

8.7 Right to Withdraw Consent

If we process your data based on consent (e.g., marketing emails), you can withdraw consent at any time by adjusting your account preferences or clicking "unsubscribe" in emails. Withdrawal of consent does not affect the lawfulness of processing that occurred before withdrawal.

8.8 How to Exercise Your Rights

To exercise any of these rights, contact us at:

• Email: [email protected]
• Subject Line: Specify your request (e.g., "Data Access Request," "Data Deletion Request")
• Verification: We may ask you to verify your identity by providing your registered email address, account username, and a copy of your government-issued ID to prevent unauthorized disclosure of personal information.

We will respond to your request within 30 days. If your request is complex or we receive multiple requests, we may extend the response time by an additional 30 days and will notify you of the extension.

9. Cookies and Tracking Technologies

9.1 What Are Cookies?

Cookies are small text files stored on your device when you visit the mpood website. Cookies help us recognize your device, remember your preferences, and improve your user experience.

9.2 Types of Cookies We Use

• Essential Cookies: Required for the website to function properly (e.g., session management, authentication, security). You cannot disable these cookies.
• Performance Cookies: Collect anonymous data about how you use the site (pages visited, time spent, errors encountered) to help us improve functionality.
• Functionality Cookies: Remember your preferences (language, time zone, layout settings) to provide a personalized experience.
• Advertising Cookies: Track your browsing activity to deliver targeted advertisements (if you have consented to marketing communications).

9.3 Managing Cookies

Most web browsers automatically accept cookies, but you can modify your browser settings to decline cookies or alert you when cookies are being sent. Note that disabling cookies may affect site functionality and prevent you from accessing certain features. To manage cookies:

• Chrome: Settings > Privacy and security > Cookies and other site data
• Firefox: Options > Privacy & Security > Cookies and Site Data
• Safari: Preferences > Privacy > Manage Website Data

9.4 Third-Party Tracking

We may use third-party analytics services (such as Google Analytics) to understand user behavior and improve our platform. These services may set their own cookies and have their own privacy policies. We do not control third-party cookies and recommend reviewing their policies separately.

10. International Data Transfers

mpood primarily serves users in Indonesia; however, some of our service providers (cloud hosting, game providers, payment processors) are located outside Indonesia. When we transfer your personal data internationally, we ensure appropriate safeguards are in place:

• Standard Contractual Clauses (SCCs) approved by data protection authorities;
• Certification under recognized data protection frameworks;
• Adequacy decisions confirming that the destination country provides an equivalent level of data protection.

All international data transfers comply with applicable data protection laws. If you have questions about international transfers, contact us at [email protected].

11. Children's Privacy

mpood services are strictly intended for individuals aged 21 years and older. We do not knowingly collect personal information from anyone under 21. If we become aware that we have inadvertently collected data from a user under 21, we will delete that information immediately and close the associated account.

If you believe a minor has registered on mpood, please contact us immediately at [email protected] with the subject line "Underage Account Report."

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes, we will:

• Update the "Last Updated" date at the top of this policy;
• Notify you via email to your registered address;
• Display a prominent notice on the mpood homepage and in your account dashboard.

Your continued use of mpood after the updated Privacy Policy takes effect constitutes your acceptance of the changes. We encourage you to review this policy periodically to stay informed about how we protect your information.

13. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: [email protected] (for privacy inquiries, data requests, and general questions)
• Live Chat: Available 24/7 via the website footer or account dashboard
• WhatsApp Support: +62 812 3456 7890 (for urgent privacy concerns)
• Support Hours: 24/7, 365 days per year (WIB timezone)

Consent: By creating an account and using mpood's services, you acknowledge that you have read, understood, and agree to the collection, use, and disclosure of your personal information as described in this Privacy Policy.