Privacy Policy — mp007

Introduction

This Privacy Policy ("Policy") explains how mp007 ("the Operator", "we", "us", "our"), the operator of the online betting and casino platform available at mp007.bet ("the Platform"), collects, uses, stores, shares, and protects the personal data of registered Players and visitors in connection with their use of the Platform.

We are committed to handling your personal data with integrity, transparency, and in accordance with internationally recognized data protection principles. This Policy is designed to give you a clear, complete, and honest account of our data practices so that you can make informed decisions about your use of the mp007 Platform.

By registering an Account on mp007, logging in, making a deposit, or otherwise using any feature of the Platform, you confirm that you have read and understood this Privacy Policy and agree to the collection and use of your personal data as described herein. If you do not agree, you must not use the Platform.

Definitions

The following terms carry the meanings set out below throughout this Policy:

Personal Data We Collect

mp007 collects the following categories of Personal Data in connection with your use of the Platform:

2.1 Registration and Account Data

• Full legal name (as it appears on your Indonesian national identity card, KTP).
• Date of birth (to verify the minimum age requirement of 21 years).
• Gender.
• Email address.
• Mobile phone number registered in Indonesia.
• Username and encrypted password.
• City and province of residence within Indonesia (e.g., Jakarta, Surabaya, Bandung, Bali, Yogyakarta, Medan).

2.2 Identity Verification (KYC) Data

• Indonesian national identity card (KTP) number and image.
• Selfie photograph taken alongside the KTP for liveness verification.
• Any additional government-issued documents requested during enhanced due diligence.

2.3 Financial and Transaction Data

• Bank account details (bank name — e.g., BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata — account number, and account holder name).
• E-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja).
• Deposit and withdrawal history, including transaction amounts (in IDR), timestamps, and payment channel used.
• Bonus and promotion claim history.

2.4 Betting and Gaming Activity Data

• Sports bets placed, including event, market, odds, stake, and settlement outcome.
• Casino game sessions, including game title, studio (e.g., Pragmatic Play, Evolution Gaming), bet amounts, and results.
• Slot game history, including titles played, session duration, and RTP outcomes.
• Virtual sports wager history.

2.5 Technical and Device Data

• IP address and approximate geolocation derived from IP.
• Device type, operating system, and browser type/version.
• Session timestamps and duration.
• Cookies and similar tracking identifiers (see Section 10).
• Referring URL and navigation path within the Platform.

2.6 Communications Data

• Content of live chat interactions with the mp007 support team.
• Email correspondence between you and the mp007 support team.
• Feedback, complaints, and dispute records.

2.7 Responsible Gaming Data

• Deposit limits, loss limits, session time reminders, cooling-off periods, and self-exclusion status activated by the Player.
• Problem gambling risk assessments conducted by the support team.

How We Collect Your Data

mp007 collects Personal Data through the following means:

• Directly from you: When you complete the Account registration form, submit KYC documents, make deposits or withdrawals, contact the support team, or activate responsible gaming tools.
• Automatically: Through Cookies, server logs, and analytics tools as you navigate and interact with the Platform. Technical data such as IP address, device identifiers, and session data are collected automatically upon each visit.
• From third-party payment providers: When you initiate a deposit or withdrawal via a bank transfer (BCA, BRI, BNI, Mandiri, etc.) or e-wallet (OVO, DANA, GoPay, ShopeePay, LinkAja), the relevant payment provider returns transaction confirmation data to mp007 — including the payer's name and transaction reference — to enable account crediting and reconciliation.
• From KYC and identity verification partners: When you submit KYC documents, a third-party verification service processes your identity documents and returns a pass/fail verification result and associated metadata to mp007.
• From fraud prevention and anti-money-laundering services: mp007 may receive risk signals or screening results from third-party compliance partners in connection with specific transactions or account activities that trigger a review.

Purposes of Processing

mp007 processes your Personal Data for the following purposes:

Legal Basis for Processing

mp007 processes your Personal Data on the following legal bases:

• Contractual necessity: Processing required to perform the agreement between you and mp007 — including Account creation, identity verification, transaction processing, and customer support.
• Legitimate interests: Processing necessary for our legitimate business interests — including fraud prevention, anti-money-laundering compliance, Platform security, responsible gaming monitoring, and internal analytics — where those interests are not overridden by your fundamental rights and freedoms.
• Legal obligation: Processing required to comply with applicable law, regulatory requirements, or lawful orders from competent authorities.
• Consent: Processing for purposes that are not strictly necessary for the performance of our contract with you — primarily direct marketing communications — where we have obtained your explicit opt-in consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Data Sharing & Third-Party Processors

mp007 does not sell, rent, or trade your Personal Data to third parties for their own marketing or commercial purposes. We share your data only with trusted partners who process it strictly on our behalf and under contractual data processing obligations, or where disclosure is required by law.

Categories of third parties with whom mp007 shares Personal Data include:

• Payment processors and banking partners: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) receive the minimum data necessary to execute deposit and withdrawal transactions.
• KYC and identity verification services: Third-party providers that process your identity documents and return verification results. These providers are contractually bound to use your data solely for verification purposes.
• Fraud prevention and AML compliance services: Specialized compliance technology providers that screen transactions and account activities against risk databases to prevent financial crime.
• Game content providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft receive limited session data (e.g., Player ID, stake amounts) necessary to operate and settle game rounds. These providers operate under strict contractual obligations and their own applicable licenses.
• Cloud infrastructure and hosting providers: The Operator's cloud service providers who store and process Platform data on secure, access-controlled infrastructure under data processing agreements.
• Analytics providers: Providers that process pseudonymized or aggregated usage data to help us understand Platform performance. These providers do not receive data that directly identifies you.
• Legal and regulatory authorities: Where required by applicable law or a lawful order from a competent court, regulator, or law enforcement body, mp007 will disclose the minimum Personal Data necessary to comply with that obligation.

International Data Transfers

As an internationally operated platform serving Players primarily based in Indonesia, mp007 may transfer your Personal Data to servers and service providers located outside Indonesia. Such transfers may occur to jurisdictions where the Operator holds its gaming license, where its cloud infrastructure is hosted, or where its third-party service providers are established.

When Personal Data is transferred internationally, mp007 takes appropriate safeguards to ensure that the receiving party provides an adequate level of data protection. These safeguards include contractual data processing agreements incorporating standard data protection clauses, and — where applicable — reliance on the receiving country's adequacy determination or equivalent recognized framework.

By using the mp007 Platform, you acknowledge and consent to the transfer of your Personal Data to servers and processors located outside Indonesia for the purposes described in this Policy.

Data Retention

mp007 retains your Personal Data for as long as is necessary to fulfill the purposes described in this Policy, or as required by applicable law and our operational obligations. The following general retention periods apply:

• Account and KYC data: Retained for a minimum of five years from the date of Account closure or last transaction, to satisfy anti-money-laundering record-keeping requirements.
• Transaction and financial data: Retained for a minimum of five years from the transaction date.
• Betting and gaming activity logs: Retained for a minimum of three years from the date of each activity record, or longer if required for dispute resolution or regulatory inquiry.
• Customer support communications: Retained for two years from the date of the interaction, or longer if related to an open dispute or complaint.
• Marketing consent records: Retained for the duration of the consent and for two years after withdrawal, to demonstrate compliance with consent obligations.
• Self-exclusion and responsible gaming records: Retained permanently to ensure that self-excluded Players cannot be re-enrolled without completing the applicable reinstatement process.
• Technical logs (IP addresses, session data): Retained for up to 90 days for security monitoring purposes, then deleted or anonymized.

At the end of the applicable retention period, Personal Data is securely deleted or anonymized so that it can no longer be associated with an identifiable individual.

Your Privacy Rights

Subject to applicable law and certain limited exceptions (such as where compliance with a legal obligation requires us to retain data), you have the following rights in relation to your Personal Data held by mp007:

• Right of Access: You may request a copy of the Personal Data mp007 holds about you, along with information about how it is being processed.
• Right to Rectification: You may request that inaccurate or incomplete Personal Data be corrected or updated. For Account name or date-of-birth corrections, KYC re-verification may be required.
• Right to Erasure: You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, and where no overriding legal retention obligation applies. Note that financial and KYC data must be retained for the periods stated in Section 8 regardless of an erasure request.
• Right to Restrict Processing: You may request that mp007 limit the processing of your Personal Data in certain circumstances — for example, while a rectification request is being assessed.
• Right to Data Portability: Where processing is based on your consent or contractual necessity and carried out by automated means, you may request that your Personal Data be provided to you in a structured, machine-readable format.
• Right to Object: You may object to processing based on legitimate interests, including direct marketing. Where you object to direct marketing, mp007 will cease sending promotional communications immediately.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time through your Account settings or by contacting the support team. Withdrawal does not affect the lawfulness of any processing carried out prior to withdrawal.

To exercise any of these rights, please contact the mp007 Data Protection contact via live chat (available 24/7 in your Account dashboard) or by email at support@mp007.bet. We will respond to verified requests within 30 days. We may need to verify your identity before processing a request.

Cookies & Tracking Technologies

mp007 uses Cookies and similar tracking technologies (such as web beacons and local storage objects) to operate core Platform functionality, remember your preferences, maintain your authenticated session, and analyze how Players interact with the site.

The following categories of Cookies are used on the mp007 Platform:

• Strictly Necessary Cookies: Essential for the Platform to function. These Cookies enable secure login sessions, maintain your Account authentication state, and support core security features. They cannot be disabled without breaking the Platform.
• Functional Cookies: Remember your preferences — such as your preferred language display or notification settings — so that you do not need to reconfigure them on each visit.
• Analytics Cookies: Collect pseudonymized data about how Players navigate the Platform — pages visited, time on page, referral sources — to help us improve the user experience. This data is aggregated and does not identify individual Players.
• Security and Fraud Detection Cookies: Assist in detecting suspicious activity, identifying unusual session patterns, and protecting the Platform and its Players from fraudulent behavior.

mp007 does not use third-party advertising or behavioral tracking Cookies to profile Players for the purpose of serving targeted advertisements on other websites or platforms.

You can control or delete Cookies through your browser settings. Disabling strictly necessary Cookies will impair your ability to log in and use the Platform. All other Cookie categories can be disabled without preventing access to the Platform, though some functionality may be reduced.

Data Security

mp007 implements a comprehensive set of technical and organizational security measures designed to protect your Personal Data against unauthorized access, accidental loss, destruction, alteration, or disclosure. Our security framework includes:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the mp007 Platform.
• Encrypted password storage using industry-standard hashing algorithms. mp007 staff cannot view your password in plain text.
• Access controls: Personal Data is accessible only to mp007 staff and authorized processors who have a legitimate business need to access it, under role-based access control policies.
• Two-factor authentication (2FA) available for Player Accounts and mandatory for all administrative access to internal systems.
• Regular security assessments and vulnerability scanning of the Platform infrastructure.
• Incident response procedures: In the event of a data breach that is likely to result in a risk to your rights and freedoms, mp007 will notify affected Players without undue delay, in accordance with applicable law.

While mp007 maintains robust security practices, no Internet-based platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your login credentials and for promptly notifying us of any suspected unauthorized access to your Account.

Minors

The mp007 Platform is strictly restricted to individuals who are 21 years of age or older. We do not knowingly collect Personal Data from anyone under the age of 21. Age verification is a mandatory step in the Account registration and KYC process.

If mp007 discovers — through KYC review, parental notification, or any other means — that Personal Data has been collected from an individual under 21 years of age, we will immediately close the associated Account, void any wagers placed, return any net deposits (less any winnings derived from underage play, which are forfeited), and permanently delete all Personal Data associated with that Account from our active systems, subject to any legal retention obligations.

If you believe a minor may have registered or used an mp007 Account, please contact our support team immediately via live chat or at the email address provided in Section 16 of this Policy.

Third-Party Links

The mp007 Platform does not include outbound links to third-party websites. All navigation within the Platform stays within the mp007.bet domain. Game content delivered by third-party studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft, and others) is rendered within an embedded interface on the Platform and does not redirect Players to external domains.

This Privacy Policy applies exclusively to data collected and processed by mp007. The Operator accepts no responsibility for the privacy practices of any third-party service provider operating their own separately branded platform.

Policy Amendments

mp007 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform functionality. When material changes are made, we will notify registered Players by email to their registered address and/or by a prominent notice on the Platform, with a minimum of seven days' advance notice before the amended Policy takes effect.

The effective date at the top of this Policy will be updated to reflect the date of the most recent revision. Your continued use of the Platform after the effective date of any amendment constitutes your acceptance of the revised Policy. If you do not accept the revised Policy, you must close your Account before the effective date of the amendment.

Contact & Data Protection Officer

For questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data by mp007, please contact us through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week via your mp007 Account dashboard. Typical response time: under 2 minutes. Our support team includes Indonesian-speaking agents on every shift.
• Email: support@mp007.bet (plain text — not a clickable link). Typical response time: under 4 hours. Operating in WIB (UTC+7), Jakarta timezone.

When submitting a privacy-related request, please include your registered Account username and the mobile number associated with your Account so that our team can verify your identity and process your request efficiently. We handle all privacy inquiries with strict confidentiality.