At mpo18, protecting the personal data of our Members is a fundamental responsibility. This Privacy Policy explains what information we collect, why we collect it, how we use and safeguard it, and what rights you have over your data as an Indonesian player on our platform.
The following definitions apply throughout this Privacy Policy:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information that directly or indirectly identifies a living natural person, including names, identification numbers, location data, online identifiers, and factors specific to the physical, economic, or social identity of that person. |
| "Processing" | Any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, transmission, erasure, or destruction — whether carried out by automated means or otherwise. |
| "Data Controller" | The entity that determines the purposes and means of Processing Personal Data. For the purposes of this Policy, the Data Controller is mpo18, operating through the domain mpo18.lat. |
| "Data Processor" | A third-party entity that Processes Personal Data on behalf of mpo18, including payment processors, KYC verification providers, game studios, and cloud infrastructure providers. |
| "Member" | A registered individual user of the mpo18 platform whose account has been activated and verified, as defined in the mpo18 Terms & Conditions. |
| "KYC" | Know Your Customer — the identity verification process through which mpo18 confirms a Member's name, date of birth, residential address, and payment method ownership. |
| "Cookies" | Small text files placed on a user's device by the mpo18 platform to store session state, preferences, and analytics data. |
mpo18, operating through the domain mpo18.lat, is the Data Controller responsible for the Personal Data collected and Processed through the mpo18 platform. mpo18 operates under an international gaming license and applies data protection standards consistent with internationally recognized best practices for online gaming operators serving Indonesian players.
Where mpo18 engages third-party Data Processors to assist in delivering the platform's services — such as payment gateway providers, identity verification vendors, and game content studios — mpo18 requires those processors to handle Personal Data in a manner consistent with this Policy and under binding data processing agreements that prohibit unauthorized use of Member data.
mpo18 collects Personal Data from Members and platform visitors through several channels. The categories of data collected, and the context in which they are collected, are set out in the table below:
| Data Category | Specific Data Points | Collection Context |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, government-issued ID number | Account registration and KYC verification |
| Contact Data | Email address, residential address in Indonesia, city (e.g., Jakarta, Surabaya, Bandung, Bali) | Account registration and profile updates |
| Financial Data | Bank account details (BCA, BRI, BNI, Mandiri, CIMB Niaga), e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja), transaction history, deposit and withdrawal amounts in IDR | Deposit, withdrawal, and KYC processes |
| Gaming Activity Data | Game sessions played, bet amounts and outcomes, bonus usage, wagering history, responsible gaming tool settings | Automatically generated during platform use |
| Technical Data | IP address, device type and model, browser type and version, operating system, session timestamps, referral URL | Automatically collected via cookies and server logs |
| Communications Data | Live chat transcripts, support email correspondence, survey responses | Customer support interactions |
| Marketing Preferences | Promotional opt-in or opt-out status, preferred communication channel, bonus claim history | Account settings and marketing consent forms |
mpo18 does not knowingly collect Personal Data from individuals under the age of 21. If mpo18 discovers that Personal Data has been submitted by a person under 21, that data will be deleted promptly and the associated account closed.
mpo18 Processes Personal Data only for specified, explicit, and legitimate purposes. The primary purposes for which mpo18 uses Member data are:
mpo18 Processes Personal Data on one or more of the following legal bases, depending on the specific purpose of Processing:
mpo18 does not sell, rent, or trade Member Personal Data to unaffiliated third parties for their own marketing or commercial purposes. mpo18 may share Personal Data with the following categories of recipients, strictly on a need-to-know basis and under binding contractual data protection obligations:
mpo18 retains Personal Data only for as long as is necessary to fulfill the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:
| Data Category | Retention Period |
|---|---|
| Identity & KYC Data | Retained for a minimum of 5 years from the date of account closure, in compliance with international AML and gaming licensing requirements. |
| Financial & Transaction Data | Retained for a minimum of 5 years from the date of each transaction, or longer if required by a specific regulatory investigation or legal hold. |
| Gaming Activity Data | Retained for the duration of the Member's active account plus 2 years following account closure, for dispute resolution and responsible gaming audit purposes. |
| Technical & Log Data | Retained for up to 13 months from the date of collection for security monitoring, fraud detection, and platform analytics purposes. |
| Customer Support Communications | Retained for 3 years from the date of the support interaction, to support dispute resolution and service quality review. |
| Marketing Preferences | Retained until consent is withdrawn by the Member. Records of consent and withdrawal are retained for 3 years after withdrawal for compliance audit purposes. |
Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymized so that it can no longer be associated with an identifiable individual. Anonymized or aggregated data that cannot identify any individual may be retained indefinitely for statistical analysis and platform improvement purposes.
mpo18 applies a layered set of technical and organizational security measures to protect Member Personal Data against unauthorized access, disclosure, alteration, or destruction. These measures include, but are not limited to:
In the event of a Personal Data breach that poses a risk to Member rights or interests, mpo18 will notify affected Members and relevant authorities promptly and in accordance with applicable data breach notification obligations. Notifications will be sent to Members' registered email addresses.
The mpo18 platform uses cookies and similar tracking technologies to deliver a functional, personalized, and secure user experience. The categories of cookies used by mpo18 are described below:
You may manage your cookie preferences through the cookie settings panel accessible from the mpo18 platform footer, or through your browser's built-in cookie management tools. Note that disabling strictly necessary cookies will prevent you from logging in to your mpo18 account.
As a Member of the mpo18 platform, you have the following rights with respect to your Personal Data. To exercise any of these rights, please contact mpo18 using the details in Section 14. mpo18 will acknowledge your request within 5 business days and provide a substantive response within 30 days of receipt.
The mpo18 platform is strictly for adults aged 21 and over. mpo18 does not knowingly collect, process, or retain Personal Data from individuals under the age of 21. All registration attempts are subject to age verification checks, and KYC documentation is requested from all Members prior to their first withdrawal to confirm compliance with this requirement.
If a parent or guardian believes that a person under 21 has submitted Personal Data to mpo18 without authorization, they should contact mpo18 immediately at the email address in Section 14. mpo18 will investigate promptly, close the account if confirmed, and securely delete all associated Personal Data.
mpo18 operates as an internationally licensed gaming platform, and some of the third-party Data Processors engaged by mpo18 — including cloud infrastructure providers, game studios, and KYC verification vendors — may process Member Personal Data in jurisdictions outside Indonesia. Where such international transfers occur, mpo18 ensures that appropriate safeguards are in place to protect the transferred data to a standard at least equivalent to that described in this Policy.
Safeguards applied to international transfers include binding contractual clauses incorporating internationally recognized data protection standards, data processing agreements that impose equivalent security and confidentiality obligations on the recipient, and transfer only to processors that operate in jurisdictions with recognized data protection frameworks.
mpo18 reserves the right to update or amend this Privacy Policy at any time to reflect changes in data processing practices, legal obligations, or platform features. The date of the most recent update is displayed at the top of this page. Material changes to this Policy will be communicated to existing Members via their registered email address at least seven days before the amended Policy takes effect.
Your continued use of the mpo18 platform after the effective date of any amendment to this Privacy Policy constitutes your acknowledgment of, and agreement to, the updated Policy. If you do not accept the changes, you should stop using the platform and request account closure before the effective date of the amendment.
If you have any questions, concerns, or requests relating to this Privacy Policy or the way mpo18 handles your Personal Data, please contact the mpo18 Data Protection team through the following channels:
When submitting a data rights request, please include your registered email address and a clear description of the right you wish to exercise. mpo18 may require identity verification before processing certain requests to ensure that Personal Data is not disclosed to unauthorized parties.
Six core commitments that underpin how mpo18 handles your personal data — every day, on every transaction.
Your privacy is protected at every step on mpo18. Log in to your account, explore our casino and sportsbook, or review our FAQ to learn more about how we keep your data safe.