Mpoyes Privacy Policy – Our Members' Personal Data Protection

1 Introduction

Mpoyes operates an online gaming platform accessible via mpoyes.pro and our mobile app. As the platform operator, we bear full responsibility for the collection, processing, and protection of personal data belonging to all our members.

This Privacy Policy ("Policy") explains in detail the types of data we collect, why we need it, how we use it, who it may be shared with, and what rights you have over that data. We have written this document in clear, plain language because we believe transparency is the foundation of trust.

Mpoyes complies with the Malaysian Personal Data Protection Act 2010 (PDPA) and all applicable related regulations. We update this Policy from time to time to reflect changes in our data practices or new legal requirements.

2 Personal Data We Collect

Mpoyes only collects data required to operate our services safely and effectively. The data we collect falls into several key categories:

Registration and Identity Data:

• Full name as it appears on a valid identification document.
• Date of birth for age verification purposes.
• Active email address and mobile phone number.
• Copy of identification document (national ID or passport) for the KYC process.
• Proof of current residential address for certain compliance requirements.

Financial and Transaction Data:

• Registered bank account details for processing deposits and withdrawals.
• Transaction history records of deposits, withdrawals, and wagering activity.
• Payment method information used (e-wallet numbers, etc.).

Usage and Technical Data:

• IP address, device type, operating system, and web browser type.
• Session log data including login time, logout time, and session duration.
• Gaming history and activity on the platform.
• Cookie data and device identifiers for security and user experience purposes.

3 How We Use Your Data

Every piece of data we collect is used for a specific and legitimate purpose. mpoyes does not process your personal data for any purpose other than those stated below:

• Account management: Creating, verifying, and maintaining your member account, including the KYC process.
• Transaction processing: Processing deposits, withdrawals, and all financial transactions accurately and securely.
• Platform security: Detecting and preventing fraud, money laundering, and unauthorized access.
• Customer support: Providing effective assistance when you contact our support team.
• Legal compliance: Meeting compliance and reporting obligations required by applicable laws.
• Platform enhancements: Analyzing usage patterns to improve overall platform performance and user experience.
• Service communications: Sending important notifications related to your account, transactions, and policy changes.
• Responsible gaming: Monitoring gaming patterns to identify members who may need responsible gaming support.

If you have given your consent, we may also use your data to send promotional information and relevant offers. You may withdraw this consent at any time through your account settings or by contacting our support team.

4 Data Sharing with Third Parties

Mpoyes does not sell, rent, or disclose your personal data to third parties for their own marketing purposes. However, in the normal course of operating our services, data may be shared with the following parties in certain situations:

• Payment service providers: To securely process deposit and withdrawal transactions. They receive only the minimum data required to complete the transaction.
• Gaming providers: Limited game session data shared with licensed game providers for technical and wagering verification purposes.
• Government authorities: mpoyes will disclose data when required by a court order, warrant, or lawful directive from a competent authority.
• Identity verification service providers: To carry out KYC checks and anti-money laundering (AML) compliance.

5 Data Security and Protection Measures

Protecting your personal data is a core operational priority for mpoyes. We continuously invest in security infrastructure to ensure your data is always protected from unauthorized access, disclosure, or modification.

Security measures we have implemented include:

• Data encryption in transit using TLS 1.3 and 256-bit SSL protocols.
• Data encryption at rest on servers using AES-256 standards.
• Two-factor authentication (2FA) is available for all member accounts.
• Continuous 24/7 security monitoring to detect suspicious activity.
• Regular security audits conducted by independent, certified third parties.
• Strict internal access controls — only authorized staff can access sensitive member data.
• A comprehensive incident response plan to address any data breaches promptly.

While we take all reasonable steps to protect your data, no security system can be guaranteed 100% secure. You also play an important role by keeping your password and account login details confidential.

6 Cookies and Tracking Technologies

Mpoyes uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

You can manage and delete cookies through your web browser settings. Please note that disabling essential cookies may affect the functionality of the mpoyes platform.

7 Data Retention Period

Mpoyes retains your personal data only for as long as necessary to fulfil the original purpose of collection or to comply with relevant legal obligations. The following are general guidelines for our data retention periods:

• Active account data: Retained for the duration your account is active and for a set period following account closure.
• Financial transaction records: Retained for a minimum of 7 years in line with Malaysia's financial legal requirements.
• KYC Documents: Retained for 5 years after the business relationship ends or as required by AML legislation.
• Customer support communication logs: Retained for 2 years for reference and service improvement purposes.
• Analytics cookie data: Deleted or anonymised after 2 years.

Once the retention period ends, your data is securely deleted or anonymized so it can no longer be personally linked to you.

8 Children's Data Protection

The mpoyes platform is strictly for individuals aged 18 and above. We do not knowingly collect or process personal data from minors. Should we find that a child's data has been collected inadvertently, we will take immediate action to delete that data and close the associated account.

If you believe a child under the age of 18 has registered an account on mpoyes, please contact our support team immediately so that appropriate action can be taken.

9 Cross-Border Data Transfers

In the course of operating the mpoyes platform, your personal data may be processed or stored on servers located outside Malaysia. Any such data transfer is carried out with adequate safeguards to ensure your data receives a level of protection equivalent to that required under Malaysia's PDPA.

Protection measures we implement for cross-border data transfers include the use of approved standard contractual clauses and data processing agreements with all parties involved.

10 How to Exercise Your Rights

To exercise any of your privacy rights outlined in this Policy, you may contact the mpoyes customer support team via Live Chat on the platform or by email at the address provided on the About Us.

When submitting a privacy rights request, please include:

• Your full name and mpoyes account username.
• The type of right you wish to exercise.
• Specific details related to your request.

Mpoyes will endeavor to process your request within 30 business days. For complex requests, we may require additional time and will notify you accordingly.

11 Contact Us About Privacy

If you have any questions, concerns, or complaints about how mpoyes handles your personal data, we encourage you to reach out to us directly. Our data protection team is ready to assist you.

You can reach us via:

• Live Chat is available 24/7 on the mpoyes platform.
• Support email: [email protected] (please type as plain text, do not click).

If you are not satisfied with our response, you have the right to file a complaint with the Department of Personal Data Protection Malaysia or the relevant regulatory authority.

12 Amendments to This Privacy Policy

Mpoyes reserves the right to update or amend this Privacy Policy at any time. Any significant changes will be communicated to members via their registered email or in-account notification at least 14 days before the changes take effect.

The latest version of this Privacy Policy is always available at mpoyes.pro/privacy-policy. The "Updated" date at the top of this page indicates when the last changes were made. Your continued use of the mpoyes platform after any amendments take effect constitutes your acceptance of the revised Policy.