This Privacy Policy applies to all personal data processed by mpo77 in connection with the online gaming platform accessible at https://mpo77.bio ("Platform"), including the website, any mobile-optimised interface, and all associated games, products, and customer support channels.
The data controller responsible for your personal data is the licensed operator of the mpo77 Platform ("we", "us", "our"). We are an internationally licensed online gaming company whose Indonesian-facing services are delivered in English to members who are residents of Indonesia. Our primary audience consists of Indonesian adults aged 21 and over who prefer to engage with international-standard gaming brands operating in English.
Where this policy refers to "personal data", we mean any information that identifies you or could reasonably be used to identify you, whether on its own or in combination with other data we hold — consistent with the definitions used under internationally recognised data protection frameworks including the General Data Protection Regulation (GDPR) and Indonesia's Personal Data Protection Law (UU No. 27 of 2022).
We collect personal data only to the extent necessary for the specific purposes described in Section 4 of this policy. The categories of personal data we may collect and process include the following:
When you create an mpo77 account, we collect the information you provide during registration, including your full legal name, date of birth, gender, nationality, country and city of residence (e.g., Jakarta, Surabaya, Bandung, Bali, Yogyakarta, Medan), and a unique username of your choosing. This data is required to establish your account, verify your eligibility, and comply with our Know Your Customer (KYC) obligations.
We collect your primary contact details, including your registered mobile phone number and email address. These are used to deliver account notifications, security alerts, and — where you have opted in — promotional communications. WhatsApp contact details may also be collected if you initiate support contact through our WhatsApp channel.
To comply with anti-money laundering (AML) obligations and to verify your identity before processing withdrawals, we may collect scanned copies or photographs of government-issued identification documents, including your Indonesian national identity card (KTP), passport, or driving licence (SIM). We may also collect proof of address documents such as a recent utility bill or bank statement, and proof of payment method ownership (for example, a screenshot of your BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, or DANA account showing your registered name).
We process records of all financial transactions conducted through your mpo77 account. This includes deposit and withdrawal amounts (in Indonesian Rupiah, IDR), timestamps, payment method references (bank account numbers, e-wallet identifiers for OVO, DANA, GoPay, ShopeePay, or LinkAja), and transaction status. We do not store full bank account credentials; payment authentication is handled directly by the respective payment provider.
We record all gaming and wagering activity on the Platform, including bet amounts, game selections, wager outcomes, session durations, and bonus participation history. This data is essential for account management, dispute resolution, responsible gaming monitoring, and fraud prevention.
When you access the Platform, our servers automatically record certain technical information, including your IP address, browser type and version, operating system, device type, screen resolution, referring URL, and the pages or features you interact with during each session. This data is collected via server logs and, where applicable, cookies and similar tracking technologies described in Section 9.
We retain records of communications between you and our support team, whether conducted via live chat, email, or WhatsApp. This includes the content of your messages, the date and time of each exchange, and any attachments or screenshots shared during a support interaction.
Where you make use of responsible gaming tools — such as deposit limits, session reminders, or self-exclusion — we record your preferences and the dates on which they were applied or modified. This data is used exclusively to enforce your chosen restrictions and is never used for marketing purposes.
| Data Category | Examples | Mandatory? |
|---|---|---|
| Identity & Registration | Full name, date of birth, username, nationality, city of residence | Yes — account creation |
| Contact Data | Mobile number, email address, WhatsApp number | Yes — account creation |
| KYC Documents | KTP, passport, SIM, proof of address, payment proof | Yes — before first withdrawal |
| Financial & Transaction | Deposit/withdrawal amounts, payment method references, timestamps | Yes — per transaction |
| Gaming Activity | Bet history, game selections, session durations, bonus history | Automatic — during play |
| Technical & Device | IP address, browser type, OS, device type | Automatic — on access |
| Communications | Live chat logs, email threads, WhatsApp messages | When you contact support |
| Responsible Gaming | Deposit limits set, self-exclusion dates, reality check intervals | When tools are activated |
mpo77 collects personal data through the following primary channels:
mpo77 processes your personal data only where we have a recognised legal basis for doing so. The table below sets out each primary processing purpose alongside the applicable legal basis.
| Purpose | Description | Legal Basis |
|---|---|---|
| Account Management | Creating, maintaining, and closing your mpo77 account; authenticating logins; managing account settings. | Contract performance |
| KYC & AML Compliance | Verifying your identity and age (21+); screening against financial crime watchlists; fulfilling anti-money laundering obligations. | Legal obligation |
| Payment Processing | Processing deposits and withdrawals via local Indonesian banks and e-wallets in IDR. | Contract performance |
| Fraud & Security | Detecting and preventing fraudulent transactions, account takeovers, bonus abuse, and prohibited multi-accounting. | Legitimate interests |
| Customer Support | Responding to enquiries submitted via live chat, email, or WhatsApp; resolving disputes; processing complaints. | Contract performance |
| Responsible Gaming | Enforcing deposit limits, self-exclusion, and reality check preferences; monitoring gaming patterns for harm indicators. | Legal obligation / vital interests |
| Platform Improvement | Analysing aggregated usage data to improve Platform features, game lobbies, and user experience. | Legitimate interests |
| Marketing (opt-in only) | Sending promotional communications about bonuses, new games, and seasonal offers to members who have explicitly opted in. | Consent |
| Legal Claims | Establishing, exercising, or defending legal claims in any jurisdiction where mpo77 operates. | Legitimate interests / legal obligation |
mpo77 does not sell your personal data to third parties. We share your data only in the specific, limited circumstances described below, and only to the minimum extent necessary for each purpose.
To process deposits and withdrawals, we share transaction-related data (amount, timestamp, account reference) with the relevant Indonesian payment network, including but not limited to BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, OVO, DANA, GoPay, ShopeePay, and LinkAja. These providers process your payment data solely on our instruction and under contractual obligations that require them to maintain appropriate security standards.
Where we engage third-party KYC and AML screening vendors, we transmit the identity and document information you submit during verification. All such vendors are bound by data processing agreements that restrict their use of your data to the verification service alone.
To operate third-party games on the Platform, we share a session token and wallet balance with the relevant game studio (e.g., Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft) for the duration of your gaming session. We do not share your name, email, or payment details with game studios.
The mpo77 Platform is hosted on cloud infrastructure operated by our technology partners. These providers have access to system-level data only to the extent required to maintain, secure, and operate the underlying infrastructure, and are bound by strict confidentiality and data processing agreements.
We may disclose personal data to courts, law enforcement agencies, regulatory bodies, or other competent public authorities when we are required to do so by applicable law, court order, or legitimate regulatory demand. Where legally permissible, we will notify you of such a disclosure.
In the event of a merger, acquisition, or sale of all or substantially all of mpo77's assets, personal data held by us may be transferred to the successor entity as part of that transaction. We will notify affected members via email or in-platform notification before any such transfer takes effect, and you will retain the rights described in Section 10.
As an internationally operated platform, mpo77 may store and process your personal data on servers located outside of Indonesia. Where your data is transferred to a country that does not provide a level of data protection equivalent to that applicable in Indonesia, we ensure that appropriate safeguards are in place before the transfer takes place. These safeguards may include:
You may request a copy of the specific safeguards applicable to any international transfer of your data by contacting our Data Protection Officer using the details provided in Section 14.
We retain your personal data for no longer than is necessary for the purposes for which it was collected, subject to applicable legal and regulatory retention obligations. The following general retention periods apply:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account & Identity Data | Duration of membership + 5 years post-closure | AML / KYC regulatory obligation |
| KYC Documents | 5 years from account closure or last transaction | AML compliance & legal claims |
| Financial Transaction Records | 5 years from the date of transaction | Financial records obligation |
| Gaming Activity Logs | 3 years from the date of activity | Dispute resolution & responsible gaming audit |
| Support Communications | 2 years from the date of last interaction | Quality assurance & dispute evidence |
| Marketing Preferences | Until opt-out + 1 year | Consent audit trail |
| Technical / Server Logs | 90 days on active servers; up to 12 months in archive | Security monitoring & fraud investigation |
When the applicable retention period expires, personal data is securely deleted or irreversibly anonymised so that it can no longer be attributed to an identified individual. Anonymised and aggregated data derived from your personal data may be retained indefinitely for statistical and product improvement purposes without restriction, as it no longer constitutes personal data.
Specific security controls deployed by mpo77 include, but are not limited to:
Despite these measures, no internet-based platform can guarantee absolute security. In the event of a personal data breach that is likely to result in a significant risk to your rights and freedoms, mpo77 will notify you without undue delay and in accordance with applicable notification obligations under data protection law.
You share responsibility for the security of your account. We strongly recommend using a unique, strong password for your mpo77 account and enabling 2FA. mpo77 staff will never ask for your password through any channel. Any such request should be treated as a phishing attempt and reported immediately to [email protected].
mpo77 uses cookies and similar client-side tracking technologies to operate the Platform, enhance your experience, and analyse usage patterns. A "cookie" is a small text file placed on your device by a website server that allows the server to recognise your device on subsequent visits.
These cookies are essential for the Platform to function and cannot be disabled. They include session authentication tokens that keep you logged in during a gaming session, CSRF protection tokens that prevent cross-site request forgery attacks, and load-balancing cookies that direct your traffic to the correct server node. No personal data collected by strictly necessary cookies is used for marketing or analytics.
Functional cookies remember preferences you have set, such as your preferred language, display settings, and responsible gaming notification intervals. These cookies improve your experience but are not strictly required for the Platform to operate. You may disable them via your browser settings, though doing so may affect certain features.
We use anonymised analytics tools to understand how members navigate the Platform — for example, which game categories are most popular, where users encounter difficulties, and how quickly pages load. Analytics data is aggregated and does not identify individual users. We do not share raw analytics data with third-party advertising networks.
Most web browsers allow you to control cookie storage via your browser settings. You can configure your browser to refuse all cookies, accept only first-party cookies, or notify you before a cookie is stored. Please note that disabling strictly necessary cookies will prevent you from logging in to the Platform. For guidance on managing cookies in your specific browser, refer to the browser developer's official support documentation.
Subject to applicable law and certain conditions, you have the following rights in relation to your personal data held by mpo77. To exercise any of these rights, please contact our Data Protection Officer using the details in Section 14. We will respond to valid requests within 30 days of receipt.
You have the right to request a copy of the personal data mpo77 holds about you, together with information about how it is being processed. This is commonly known as a Subject Access Request (SAR). We will provide the data in a structured, commonly used, machine-readable format where technically feasible.
If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it without undue delay. For account profile data (name, contact details, residential city), you may update certain fields directly via your account settings. For KYC document corrections, please contact our support team.
In certain circumstances — for example, where your data is no longer necessary for the purpose for which it was collected and no legal retention obligation applies — you may request that we delete your personal data. Note that we are generally unable to fully erase data that we are required to retain under AML/KYC or financial records obligations for the periods specified in Section 7.
You may request that we limit the processing of your personal data in certain circumstances, such as while a rectification request is being resolved or where you have objected to processing based on legitimate interests pending our review. Restricted data is stored but not actively used.
Where processing is based on your consent or the performance of a contract, and is carried out by automated means, you have the right to receive your personal data in a portable format and to have it transmitted directly to another controller where technically feasible.
You may object at any time to the processing of your personal data where we rely on legitimate interests as our legal basis. You also have an unconditional right to object to the processing of your data for direct marketing purposes; we will cease marketing communications immediately upon receipt of a valid objection.
Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time by updating your notification preferences in your account settings or by contacting our support team. Withdrawal of consent does not affect the lawfulness of processing conducted prior to the withdrawal.
Age verification is conducted as part of the registration process and reinforced through our KYC programme. If mpo77 becomes aware that an account has been registered by, or is being used by, a person under the age of 21, we will immediately suspend the account, void any pending bets, return any real-money deposits to the originating payment method where practicable, and permanently delete the personal data associated with that account.
If you believe that a minor has registered on the mpo77 Platform, please contact us immediately at [email protected] so that we can investigate and act without delay.
The mpo77 Platform may display game content embedded from licensed third-party game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft, and others). While mpo77 selects partners who meet our security and data protection standards, each studio operates its own infrastructure and may collect certain technical data (such as session identifiers) directly within the game frame. We recommend reviewing the privacy policies of individual game studios if you have concerns about data they may collect independently.
The mpo77 Platform does not display advertising banners, affiliate links, or embedded third-party social media widgets that would result in your browsing data being shared with advertising networks or social platforms without your knowledge.
mpo77 reviews and updates this Privacy Policy periodically to reflect changes in our data processing practices, applicable law, or the structure of our Platform. When we make material changes — meaning changes that significantly affect your rights or the way we use your personal data — we will provide advance notice via an in-platform notification and/or an email to your registered address at least 14 days before the revised policy takes effect.
The "Last Updated" date at the top of this page indicates when the current version came into force. Your continued use of the mpo77 Platform after the effective date of a revised Privacy Policy constitutes your acknowledgement of the updated terms. If you do not accept a material change, you must stop using the Platform and request account closure prior to the effective date of the amendment; your real-money balance will be refunded to your verified payment method.
For non-material changes — such as corrections of typographical errors, clarifications of existing practices that do not alter the substance of this policy, or updates to contact information — we may update this document without advance notice. We encourage you to review this Privacy Policy periodically to remain informed of how mpo77 protects your data.
For any questions, concerns, or requests related to this Privacy Policy or the processing of your personal data by mpo77, please contact our Data Protection Officer (DPO) or support team through the following channels. All data rights requests are handled by our DPO and will be acknowledged within 5 business days and resolved within 30 calendar days of receipt.
Data Protection Officer: dpo@mpo77 .bio
General Support: [email protected]
WhatsApp: +62 811 0777 777
Live Chat: Available 24/7 (WIB) via the Platform
When submitting a data rights request, please include your registered username and email address so that we can locate your account efficiently. We may need to verify your identity before processing certain requests, particularly Subject Access Requests and erasure requests, to ensure we do not disclose or delete data in response to fraudulent or unauthorised submissions.
If you are not satisfied with our response to your request or complaint, you have the right to escalate the matter to the competent data protection supervisory authority in your jurisdiction, as noted in Section 10.
Six pillars that underpin how mpo77 handles your personal data every day.
All data in transit is protected by TLS 1.3, and stored records use AES-256 encryption — the same standard trusted by global financial institutions.
We collect identity documents only when required for AML compliance and withdrawal verification. KYC files are stored in encrypted vaults and purged automatically at retention expiry.
mpo77 does not sell, rent, or trade your personal data to advertising networks, data brokers, or any third party for commercial purposes — ever.
Access, correct, export, or request deletion of your data at any time. Manage marketing preferences directly from your account settings with immediate effect.
Deposits and withdrawals via BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, and other local providers are processed without sharing your full banking credentials with mpo77.
Promotional emails and notifications are sent exclusively to members who have actively opted in. Unsubscribe instantly at any time — no dark patterns, no re-subscription loops.
Now that you understand how we protect your data, dive into the full mpo77 experience.