Privacy Policy

1. Introduction

mpi500 ("we", "us", "our", or the "Company") operates the online betting and gaming platform accessible at https://mpi500.cam (the "Platform"). We are committed to protecting the privacy and personal data of every individual who visits, registers, or transacts on our Platform ("you", "User", or "Player").

This Privacy Policy describes in detail the categories of personal information we collect, the purposes for which that information is processed, the circumstances under which it may be disclosed to third parties, the security measures we apply, and the rights you hold over your data. This policy applies to all services operated by mpi500, including the website, mobile-optimised version, live chat system, email communications, and any future services we may offer.

By creating an account, depositing funds, or otherwise using mpi500 services, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree with any part of this policy, you must cease using the Platform immediately.

2. Definitions

The following terms carry specific meanings throughout this Privacy Policy:

• "Personal Data" — any information that identifies or can reasonably be used to identify a living individual, including name, email address, phone number, and financial account details.
• "Sensitive Personal Data" — a subset of Personal Data warranting heightened protection, including government identity numbers (KTP), financial records, and health-related information submitted in connection with responsible gaming requests.
• "Processing" — any operation performed on Personal Data, including collection, storage, use, transmission, or deletion.
• "Controller" — mpi500, the entity that determines the purposes and means of processing Personal Data.
• "Processor" — a third party that processes Personal Data on behalf of mpi500 under a data processing agreement.
• "Consent" — a freely given, specific, informed, and unambiguous indication of your agreement to the processing of your Personal Data.
• "KTP" — Kartu Tanda Penduduk, the national identity card issued to Indonesian citizens and permanent residents.

3. Personal Data We Collect

mpi500 collects Personal Data across several categories. The table below provides a structured overview of the data types, examples, and the reason each category is collected.

4. How We Collect Your Personal Data

mpi500 collects Personal Data through the following channels:

4.1 Direct Collection

You provide Personal Data directly to us when you: register an Account; complete the KYC verification process; make a deposit or withdrawal; contact our customer support team; participate in promotions or surveys; or submit a res ponsible gaming request.

4.2 Automated Collection

When you browse or use the Platform, we automatically collect Technical Data and Usage Data through server logs, cookies, web beacons, and similar tracking technologies. This collection occurs regardless of whether you are logged in to your Account. See Section 8 (Cookies & Tracking) for full details.

4.3 Third-Party Sources

We may receive Personal Data about you from third-party sources, including:

• Payment processors and Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon) for transaction verification
• E-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) for deposit and withdrawal confirmation
• Identity verification service providers used for KYC processing
• Fraud detection and anti-money laundering screening services
• Publicly available sources such as government databases, where permitted by law

5. Purpose of Processing

mpi500 processes your Personal Data only for defined, legitimate purposes. We do not use your data in ways that are incompatible with the purposes disclosed at the time of collection. Our primary processing purposes are as follows:

• Account Management: Creating, maintaining, and administering your mpi500 account, including authentication and security.
• Service Delivery: Processing bets, settling wagers, crediting winnings, and providing access to sports betting markets, live casino, and slot games.
• Payment Processing: Facilitating IDR deposits and withdrawals via local Indonesian banks and e-wallets in a secure and timely manner.
• KYC and Identity Verification: Confirming your identity and age (21+) in accordance with our Terms & Conditions and anti-fraud obligations.
• Regulatory Compliance: Meeting anti-money laundering (AML), counter-terrorism financing (CTF), and responsible gaming obligations imposed by our international operating license.
• Fraud and Security: Detecting, investigating, and preventing fraudulent transactions, multi-accounting, bonus abuse, and unauthorized access.
• Customer Support: Responding to your inquiries, resolving disputes, and improving service quality based on your feedback.
• Personalisation: Tailoring the Platform experience, including recommending games and promotions relevant to your betting preferences.
• Marketing Communications: Sending promotional offers, bonus notifications, and platform updates — only where you have given explicit consent or where permitted by applicable law.
• Responsible Gaming: Administering self-exclusion, deposit limits, loss limits, and other player protection tools.
• Platform Improvement: Analysing aggregated usage data to enhance performance, usability, and feature development.

6. Legal Basis for Processing

mpi500 processes your Personal Data on one or more of the following legal bases:

6.1 Contractual Necessity

Processing is necessary to perform our contract with you — specifically, to operate your Account, accept bets, process payments in IDR through your chosen Indonesian bank or e-wallet, and deliver the services described in our Terms & Conditions.

6.2 Legal Obligation

Certain processing is required to comply with our legal obligations, including KYC identity verification, AML transaction monitoring, record-keeping requirements mandated by our international gaming license, and responding to lawful requests from authorities.

6.3 Legitimate Interests

We may process your data where it is in our legitimate interests to do so and those interests are not overridden by your rights. This includes fraud prevention, platform security, business analytics, and improving our services for Indonesian players.

6.4 Consent

Where we rely on your consent — for example, to send marketing emails or to use non-essential cookies — you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal. To withdraw consent, contact us at [email protected] or update your Account notification preferences.

7. Data Sharing and Disclosure

mpi500 does not sell or rent your Personal Data to any third party for commercial purposes. We may disclose your information to the following categories of recipients, solely for the purposes described in this policy:

7.1 Service Providers and Processors

We engage carefully selected third-party service providers who process Personal Data on our behalf under strict contractual data processing agreements. These include:

• Payment gateways and Indonesian banking partners for transaction processing
• KYC and identity verification providers
• Cloud hosting and data storage infrastructure providers
• Customer support platform providers (live chat, ticketing systems)
• Fraud detection and cybersecurity service providers
• Game content providers (Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Pocket Games Soft) — limited to game session data required for gameplay and dispute resolution

7.2 Legal and Regulatory Authorities

We may disclose your Personal Data to government authorities, law enforcement agencies, or regulatory bodies when required to do so by law, court order, or in connection with investigations into fraud, money laundering, or other criminal activity. We will notify you of such disclosures where legally permitted to do so.

7.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of mpi500's business, your Personal Data may be transferred to the acquiring entity. You will be notified of any such transfer and the privacy terms that will govern your data going forward.

7.4 Aggregate and Anonymised Data

We may share aggregated, anonymised data that does not identify any individual with business partners, research organisations, or the public. This data is used for purposes such as industry analysis, benchmarking, and service improvement.

8. Cookies and Tracking Technologies

mpi500 uses cookies and similar tracking technologies to operate the Platform effectively, enhance your user experience, and gather analytical insights. By using the Platform, you consent to our use of cookies as described below.

8.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication tokens, security cookies, and load-balancing cookies. These cannot be disabled without impairing core functionality.
• Functional Cookies: Remember your preferences such as language settings, currency display (IDR), and UI layout choices to provide a personalised experience.
• Analytics Cookies: Collect aggregated data about how Players use the Platform — pages visited, time spent, click paths — to help us improve performance and usability.
• Security Cookies: Support our fraud detection systems by tracking session integrity, device fingerprint consistency, and anomalous activity patterns.

8.2 Managing Cookies

You can control non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies; however, disabling strictly necessary cookies will impair your ability to log in and use the Platform. Detailed instructions for managing cookies in Chrome, Firefox, Safari, and other browsers are available in each browser's help documentation.

9. Data Retention

mpi500 retains your Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention schedules apply:

• Active Account Data: Retained for the full duration of your Account relationship with mpi500.
• KYC and Identity Documents: Retained for a minimum of 5 years following Account closure, in compliance with AML and regulatory record-keeping requirements.
• Transaction Records: Retained for a minimum of 5 years from the date of each transaction.
• Customer Support Communications: Retained for 3 years from the date of the last interaction, to support dispute resolution.
• Marketing Consent Records: Retained for 3 years from the date of consent or until withdrawn, whichever is earlier.
• Technical and Usage Logs: Retained for up to 12 months in identifiable form; thereafter anonymised for aggregate analysis.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in accordance with our internal data destruction procedures.

10. Security Measures

The security of your Personal Data is a top priority at mpi500. We implement a layered set of technical and organisational security measures proportionate to the nature and sensitivity of the data we hold:

• 256-bit SSL/TLS Encryption: All data transmitted between your browser and our servers is encrypted in transit, preventing interception.
• Encryption at Rest: Sensitive Personal Data — including KTP numbers and financial records — is encrypted in our database storage.
• Access Controls: Strict role-based access controls ensure that only authorised personnel with a legitimate need can access your Personal Data.
• Multi-Factor Authentication (MFA): MFA is enforced for internal staff accessing production systems containing Personal Data.
• Regular Security Audits: Our platform undergoes periodic penetration testing and vulnerability assessments by independent security specialists.
• Fraud Detection Systems: Automated systems monitor transactions, login patterns, and betting activity in real time to detect and respond to suspicious behavior.
• Incident Response Plan: In the event of a data breach, we have a documented incident response procedure. If a breach is likely to result in a risk to your rights and freedoms, we will notify you without undue delay.

11. Your Data Rights

As a User of mpi500, you hold the following rights with respect to your Personal Data. To exercise any of these rights, contact our Data Privacy team at [email protected] with the subject line "Data Rights Request".

11.1 Right of Access

You have the right to request a copy of the Personal Data we hold about you, along with information about how it is processed. We will respond to access requests within 30 days.

11.2 Right to Rectification

If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it. For Account details such as contact information, you may also update these directly through your Account settings.

11.3 Right to Erasure

You may request the deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where you object to processing and there are no overriding legitimate grounds. Please note that certain data must be retained to comply with our legal obligations (see Section 9) and cannot be erased on request.

11.4 Right to Restriction of Processing

You may request that we restrict the processing of your Personal Data in certain circumstances — for example, where you contest the accuracy of the data or object to processing based on legitimate interests, pending verification of our grounds.

11.5 Right to Data Portability

Where processing is based on consent or contractual necessity and carried out by automated means, you may request that we provide your Personal Data in a structured, commonly used, machine-readable format for transfer to another controller.

11.6 Right to Object

You have the right to object to the processing of your Personal Data for direct marketing purposes at any time, and to processing based on legitimate interests where you believe your rights and freedoms override those interests. To unsubscribe from marketing emails, use the unsubscribe link in any marketing communication or contact [email protected].

12. Protection of Minors

mpi500 services are strictly for individuals aged 21 years or older. We do not knowingly collect Personal Data from anyone under the age of 21. If we become aware that Personal Data belonging to a minor has been submitted to the Platform, we will immediately suspend the associated Account, delete the data, and take steps to prevent recurrence.

Parents or guardians who believe that a minor has created an Account on mpi500 should contact us immediately at [email protected]. We take such reports seriously and will investigate and act upon them promptly. For detailed information on our age verification procedures and responsible gaming safeguards, please visit our Responsible Gaming page.

13. Changes to This Privacy Policy

We review and update this Privacy Policy periodically to reflect changes in our data practices, applicable laws, or Platform functionality. When we make material changes, we will:

• Update the "Effective Date" and "Last Reviewed" date at the top of this document.
• Display a prominent notice on the Platform homepage for a minimum of 14 days following the update.
• Send a notification email to all registered Players where the change materially affects their rights or our use of their data.

Your continued use of the Platform after the effective date of any update constitutes your acceptance of the revised Privacy Policy. If you do not agree with the updated terms, you should cease using the Platform and may request Account closure in accordance with Section 10 of our Terms & Conditions.

14. Contact and Data Privacy Inquiries

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data by mpi500, please contact our Data Privacy team:

• Email: [email protected] (Subject: "Privacy Policy Inquiry" or "Data Rights Request")
• Live Chat: Available 24/7 through your Account dashboard — select "Privacy & Data" as the inquiry category
• Response Time: We aim to acknowledge all privacy-related inquiries within 48 hours and provide a substantive response within 30 days

By continuing to use mpi500 services, you confirm that you have read, understood, and agree to this Privacy Policy. We thank you for trusting mpi500 with your personal information and remain committed to handling it with the highest standards of care and transparency.