Privacy Policy mpop88 — Data Protection & Personal Information

01 Information We Collect

Mpop88 collects various types of information from members to ensure the platform operates safely, efficiently, and in compliance with regulatory requirements. The information collected falls into three main categories:

Information you provide directly:

• Full name as shown on a valid identification document.
• Active email address used during registration.
• Mobile phone number registered in your name.
• Date of birth for age verification purposes.
• Bank account or e-wallet details for processing deposits and withdrawals.
• Copy of identification document (MyKad or passport) during the KYC process.

Information collected automatically:

• Your device's IP address when accessing the platform.
• Browser type and version used.
• Device information including operating system and screen resolution.
• Session data including pages visited, session duration, and navigation patterns.
• Geolocation information based on IP address (not precise GPS location).

Transaction information:

• Deposit and withdrawal history including amounts, methods, and transaction timestamps.
• Gaming activity records including bets placed, wins, and games played.
• Bonus and promotion usage associated with your account.

02 How We Use Your Data

All information collected by mpop88 is used for clear and legitimate purposes. We do not use your data for unrelated purposes without your consent. The following are the primary purposes of data use:

You may withdraw consent for the use of your data for marketing purposes at any time by contacting our customer support team. Withdrawal of consent will not affect the validity of any processing carried out prior to withdrawal.

03 Storage & Security

Mpop88 uses industry-grade security infrastructure to protect all member personal data from unauthorized access, disclosure, alteration, or destruction. The key security measures we implement are as follows:

• Data encryption in transit using TLS 1.3 and 256-bit SSL protocols — the same standard used by major banking institutions in Malaysia.
• Encryption at rest for all sensitive information, including passwords stored in hashed form using the bcrypt algorithm.
• Role-based access control ensures only authorized staff can access member personal data, with every access logged for audit purposes.
• Regular security scans and penetration testing conducted by independent third parties to identify and address system vulnerabilities.
• An intrusion detection system active 24 hours a day, 7 days a week that sends instant alerts upon any suspicious activity.
• Scheduled regular data backups with tested disaster recovery procedures to ensure service continuity.

While mpop88 takes all reasonable steps to protect your data, no system can guarantee 100% absolute security. You also play an important role by keeping your password and account login details confidential.

04 Information Sharing

Mpop88 does not sell, rent, or trade member personal information to any third party for commercial purposes. However, there are certain situations where sharing information is necessary and legally permitted:

• Payment service providers: Required banking and transaction information is shared with authorized payment providers such as FPX, Touch 'n Go, GrabPay, and DuitNow to securely process your deposits and withdrawals.
• Technical service providers: Technology partners who help operate the platform — including hosting providers, analytics providers, and customer support systems — may access data strictly for operational purposes.
• Legal obligation: mpop88 will disclose required information to the relevant authorities (such as Bank Negara Malaysia, the Royal Malaysia Police, or judicial bodies) when required by law or a valid court order.
• Fraud and financial crime prevention: In cases involving fraud, money laundering, or suspected criminal activity, relevant information will be shared with the appropriate law enforcement agencies.

All third parties that receive mpop88 member data are bound by strict confidentiality agreements and are required to maintain data protection standards equal to or higher than those of mpop88.

05 Cookies & Tracking Technologies

Mpop88 uses cookies and similar tracking technologies to enhance the user experience, analyze platform usage patterns, and ensure login session security. The following are the types of cookies used:

• Session cookies: Temporary cookies that exist only during an active browsing session. They store login information and temporary preferences so you don't need to log in again when navigating between pages.
• Persistent cookies: Cookies stored on your device for a set period of time. They help us remember your language preferences, display settings, and login status.
• Analytics cookies: Used to collect anonymous statistical data on how members use the platform — including most frequently visited pages, session duration, and navigation patterns — for the purpose of platform improvement.
• Security cookies: Helps identify and prevent suspicious activity such as unauthorized login attempts or cyberattacks.

You can manage or delete cookies through your browser settings. Please note that disabling certain cookies may affect platform functionality and your user experience. Cookies essential to platform security and core functionality cannot be disabled.

06 Member Privacy Rights

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and mpop88's privacy policy, you as a member have the following rights regarding your personal data:

To exercise any of the above rights, please contact the mpop88 customer support team. We may need to verify your identity before processing any request to protect the security of your account.

07 Children's Data

Mpop88 is a gaming platform dedicated exclusively to adults aged 18 and above. We do not knowingly collect, process, or store any personal data from individuals under the age of 18.

The mpop88 registration process requires date of birth verification and a valid identification document to ensure all members meet the minimum age requirement. Any account found to belong to an underage individual will be closed immediately and all related data will be permanently deleted from our systems.

If you as a parent or guardian discover that your minor child has registered on our platform, please contact our customer support team immediately. We will take prompt action and delete all related data within 48 hours of verification.

08 Cross-Border Data Transfers

Certain technical operations of mpop88 may involve the transfer or storage of data on servers located outside Malaysia. In such cases, mpop88 ensures that:

• All cross-border data transfers are made only to countries or regions with an adequate level of data protection, or
• Appropriate safeguards such as standard contractual clauses or binding data processing agreements are used to protect your rights.
• All technical partners outside Malaysia who handle mpop88 member data are subject to strict confidentiality and data protection agreements that meet at least the requirements of Malaysia's PDPA.

Mpop88 continuously monitors the data protection practices of our partners to ensure ongoing compliance with established standards.

09 Data Retention Period

Mpop88 only retains your personal data for as long as it is needed for the purpose it was collected, or as required by applicable law. The following are our general data retention guidelines:

• Active account data: Retained for as long as your account is active and for a specified period after account closure.
• Financial transaction records: Retained for a minimum of 7 years to comply with anti-money laundering (AML) legal requirements and financial reporting obligations.
• KYC Documents: Retained for the period specified by the relevant regulatory body, typically no less than 5 years after account closure.
• System and security logs: Retained for 12–24 months for security investigation and digital forensics purposes if required.
• Support communication data: Support tickets and conversation records are retained for 2 years to assist in resolving any future disputes.

Once the retention period ends and there is no legal requirement to keep it, your data will be securely deleted or anonymized using methods that meet industry standards.

10 Privacy Policy Amendments

Mpop88 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or improvements in how we protect your data. Any changes made will be published on this page with a new update date.

For amendments that are material and significantly affect your rights, mpop88 will notify you via an in-platform notification or your registered email at least 7 days before the changes take effect. Continued use of the platform after the changes take effect will be considered your acceptance of the updated policy.