mpoxoPrivacy Policy

This page describes what we collect when you use mpoxo and how we keep that data protected. We at mpoxo take your privacy seriously. When you register an account, fund deposits, place wagers on Liga 1 markets or live-dealer tables, or withdraw via DANA, e-wallet, mobile banking, or bank transfer, we collect and process personal information. Our privacy policy explains what data we gather, how we use it, who has access to it, and what rights you have.

Our commitment is straightforward: we collect only the information necessary to operate your account, process your payments, and comply with local law. We do not sell your data to third parties. We do not use your personal information for marketing without your consent. Our servers may sit outside Indonesia, but your account security and data encryption remain our priority.

If you have questions about this policy or wish to exercise your privacy rights, contact us through the support section in your mpoxo account or via email.

What Data We Collect on mpoxo

We collect information in the following categories:

Account registration: Email address, password hash, full name, date of birth, phone number.
Know-Your-Customer (KYC): National ID (KTP) photo, residential address, and proof of address (utility bill or bank statement). These are mandatory before any deposit or withdrawal.
Payment information: Bank account number or e-wallet identifier (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet account), transaction history, and deposit/withdrawal timestamps.
Behavioral data: Game categories you access, wager amounts (but not individual bet details), session duration, and login timestamps.
Device and network: IP address, device type (Android, iOS, desktop), browser or app version, and geographic location inferred from IP.
Cookies: Session cookies to keep you logged in; analytics cookies to understand how our platform is used.

We do not collect sensitive data such as your password in plaintext, credit card details (we do not accept card payments), or biometric information.

How We Use Your Data on mpoxo

Our use of your data breaks down into six purposes:

Account operation: We use your email, name, and phone to manage your mpoxo account, verify your identity, and send you transactional messages (deposit confirmations, withdrawal status).
Payment processing: We share your bank or e-wallet account details with our payment processors (mobile banking, local payment, online payment, e-wallet, etc.) to execute deposits and withdrawals.
Compliance and law: We retain KYC data and transaction logs to comply with anti-money-laundering (AML) regulations and local law enforcement requests.
Fraud detection: We monitor login patterns, IP addresses, and wager behavior to detect unauthorized access or fraudulent activity.
Platform improvement: We analyze aggregated (anonymized) usage data to improve game performance, Piala AFF market updates, and live-dealer table quality.
Communication: We send you transactional emails and, with your consent, promotional messages about new games or seasonal tournaments (Idul Fitri, Idul Adha events).

Third-Party Data Sharing on mpoxo

We share your data with the following third parties:

Payment processors: mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, and local payment providers. They receive your account number and transaction details to settle deposits and withdrawals.
Bank partners: We may share your residential address with your bank for virtual account verification and compliance.
Analytics services: We use anonymized log data to track platform performance and game popularity (no personally identifiable information).
Law enforcement: If required by court order or local law, we disclose account information, transaction history, and IP logs to relevant authorities.

We do not sell your personal data to marketing agencies, data brokers, or affiliate networks. We do not share your behavioral data (game preferences, wager history) with unrelated companies.

Your Data Rights on mpoxo

Under Indonesian data protection principles and international standards, you have the right to:

Access: Request a copy of all personal data we hold about you on mpoxo.
Correction: Correct inaccurate email, phone number, or residential address in your mpoxo profile.
Deletion: Request deletion of your mpoxo account and associated data, subject to legal retention obligations (e.g., we must retain transaction logs for seven years under AML law).
Portability: Request that we export your account data in a machine-readable format.
Opt-out of marketing: Unsubscribe from promotional emails without losing access to mpoxo services.

To exercise any of these rights, contact our support team via your mpoxo account or email us directly. We will respond to requests within our standard processing window.

Data Retention: We retain KYC documents and transaction records for a minimum of seven years to comply with anti-money-laundering regulations. Account login data is retained for three years. Behavioral analytics are aggregated and anonymized after twelve months.

Cookies and Tracking

We use cookies for two purposes:

Session management: We set a session cookie when you log into mpoxo so you remain logged in as you navigate between Liga 1 markets, live blackjack tables, and esports betting. This cookie expires when you log out or after a period of inactivity.
Analytics: We use anonymized analytics cookies to count page views, track which games (Aviator, Dragon Fishing, Sweet Bonanza) are accessed most, and measure platform performance. These cookies do not store your identity or payment information.

Most browsers allow you to disable cookies. If you disable all cookies, mpoxo may not function correctly (you may be logged out unexpectedly). You can manage cookie preferences in your browser settings or opt out of analytics via your mpoxo account settings.

Data Security and Encryption

We protect your data through the following measures:

Encryption in transit: All data sent between your device and our servers is encrypted using HTTPS/TLS protocol.
Encryption at rest: Sensitive data (passwords, KYC documents, bank account numbers) is encrypted in our database.
Access controls: Only mpoxo staff with a legitimate business need can access your personal information. We use role-based access control to limit exposure.
Regular audits: We conduct periodic security audits and penetration testing to identify and fix vulnerabilities.

Our servers are hosted in data centers with physical security (locked facilities, CCTV, access logging). We do not guarantee absolute security; no system is impervious to attack. If we discover a breach, we will notify affected users within a reasonable timeframe and provide guidance on next steps.

Jurisdiction and International Data Transfers

Our mpoxo platform and database servers may be located outside Indonesia. When you use mpoxo from Jakarta, Surabaya, Bandung, Medan, or elsewhere, your data may be transferred across borders for processing and storage. By creating an mpoxo account, you consent to this transfer. We apply the same data protection standards internationally that we would apply domestically.

If you have concerns about international data transfer, contact our support team before registering an account.

Policy Updates and Amendments

We may update this privacy policy from time to time to reflect changes in our practices, local law, or technology. If we make material changes, we will notify you via email or a prominent notice on mpoxo. Your continued use of our platform after such changes constitutes acceptance of the updated policy.

Contact Us About Privacy

If you have questions about our privacy practices, wish to exercise your data rights, or report a privacy concern, contact us:

In-app support: Use the Help or Support section in your mpoxo account dashboard.
Email: Our support team is available via the contact link in your account settings.
Mailing address: Check your account settings for the current mailing address of our data protection officer.

We will acknowledge your inquiry within our standard response window and work to resolve your concern. Our services are available only where local law permits. We do not offer our services in jurisdictions where online wagering is prohibited. Users are responsible for verifying that access and use comply with their own jurisdiction's law.