Official mpoid Documents

Privacy Policy mpoid – Data Protection & Privacy for Malaysian Players

Mpoid takes your privacy seriously. Every piece of information you share with us is fully protected — we explain exactly what we collect, why we need it, and how we keep it safe.

Last Updated: 1 January 2026 Bahasa Melayu (ms-MY) Malaysia PDPA Compliance

Six Ways mpoid Protects the Privacy of Malaysian Players

At mpoid, privacy is more than a word — it is a daily practice embedded in our technology, processes and workplace culture, with player data protection prioritised at every level.

256-bit SSL Encryption

All data transmitted between your device and mpoid's servers is protected by 256-bit SSL encryption — the same security standard used by Malaysia's leading banks. No third party can intercept or read your data in transit.

Secure Data Storage

Your personal information is stored in databases protected by multiple layers of security — including role-based access controls, at-rest encryption, and continuous threat monitoring. Only authorised personnel may access player data, and only for specified purposes.

Malaysia PDPA Compliance

Mpoid is fully compliant with Malaysia's Personal Data Protection Act 2010 (PDPA). We collect data only for legitimate purposes, retain it only for as long as necessary and give you full control over your data in accordance with the law.

No Data Sales

Mpoid has never sold, rented, or traded players' personal data to any third party for marketing or commercial purposes, and never will. Your data is not our product — our players are people, not commodities.

Full Control of Your Data, In Your Hands

Mpoid players have the right to access, correct, delete or restrict the processing of their personal data at any time. These requests can be made through your account settings or by contacting our support team directly.

Immediate Breach Notification

In the event of a data breach that may affect your personal information, mpoid is committed to notifying you within the timeframe required by law and taking immediate, comprehensive remedial action.

Malaysian Player Privacy Rights Under the mpoid Policy

As an mpoid player, you have the following rights regarding your personal data — and we make it straightforward for you to exercise these rights whenever needed.

Right of Access

You have the right to request a copy of all personal data we hold about you. mpoid will provide a full report within 14 business days from the date the request is received.

Right to Rectification

If any personal data held on your mpoid account is inaccurate or out of date, you have the right to request an immediate correction. This can be done directly through your account profile settings.

Right to Erasure

You may request the deletion of your personal data when it is no longer needed for the original purpose for which it was collected, subject to certain statutory retention obligations.

Right to Restrict Processing

Under certain circumstances, you can request that mpoid restrict how we process your data — for example, while a dispute regarding the accuracy of your data is being reviewed.

Right to Object

You have the right to object to the processing of your personal data for direct marketing purposes at any time. This objection will be actioned immediately, with no questions asked and no conditions attached.

Right to Data Portability

You have the right to receive your personal data in a machine-readable format for transfer to another platform, in situations where processing is based on consent or a contract.

1

Information We Collect

Mpoid only collects personal data that is strictly necessary to deliver a safe, high-quality service. We do not collect data that is excessive or irrelevant to the platform's operational purposes.

The data collected by mpoid falls into three main categories:

Data Category Examples of Information Primary Purpose
Identity Data Full name, MyKad/passport number, date of birth, gender Identity verification (KYC), fraud prevention
Contact Data Malaysian phone number, email address, residential address Account communications, OTP verification, notifications
Financial Data Preferred payment methods (DuitNow, TNG, GrabPay, FPX), transaction history Deposit & withdrawal processing, AML compliance
Technical Data IP address, device type, web browser, session duration Account security, fraud detection, platform optimisation
Activity Data Betting history, games played, transaction logs Bet processing, dispute resolution, compliance
Communication Data Customer support conversation records, emails Service improvement, complaint resolution

Data is collected through several channels: the account registration form, direct use of the platform, interactions with mpoid's customer support team, the identity verification process, and the cookies and web tracking technologies described in section 5.

2

How We Use Your Data

Every use of personal data by mpoid has a clear legal basis under Malaysia's PDPA and a specific purpose. The following is a complete list of how we use your data:

  • Account Management: Creating and managing your mpoid account, processing registration, verifying your identity, and keeping your account secure at all times.
  • Transaction Processing: Processing all deposits via DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, and FPX, as well as handling all withdrawals to your Malaysian bank account or eWallet accurately and securely.
  • Platform Services: Enables you to access all mpoid features, including Sports Betting on the Malaysia Super League, EPL, BWF badminton, MPL Malaysia esports, Live Casino, slots, and all other games.
  • Security & Fraud Prevention: Detecting and preventing fraudulent activity, money laundering, multi-account usage, and any conduct that violates mpoid's Terms & Conditions.
  • Legal Compliance: Fulfilling legal obligations related to anti-money laundering (AML), counter-terrorism financing, and reporting requirements from relevant authorities.
  • Service Communications: Sending important account notifications, security updates, transaction confirmations, and information relating to changes in mpoid's terms or policies.
  • Responsible Gaming: Monitoring gaming patterns to identify signs of at-risk behaviour and reaching out to players who may need support related to responsible gambling.
  • Platform Enhancement: Analysing aggregated and anonymised usage data to better understand the needs of Malaysian players and continuously improve the mpoid platform experience.
  • Marketing (with Consent): Sends information about mpoid promotions, bonuses, and exclusive offers only to players who have given explicit consent to receive marketing communications. This consent may be withdrawn at any time.

For marketing communications, mpoid will always include a "Unsubscribe" conveniently placed in every promotional email. You can also manage your communication preferences directly from your mpoid account settings.

3

Data Sharing with Third Parties

Mpoid does not sell or rent players' personal data to any party. However, in the course of delivering our services, there are limited situations where data must be shared with specific parties:

  • Payment Processing Providers: Data required to process DuitNow, TNG eWallet, GrabPay, Boost, ShopeePay and FPX transactions is shared with the respective providers solely for payment processing purposes. All such providers are bound by strict data protection agreements.
  • Game Software Providers: Game studios such as Evolution Gaming, Pragmatic Play Live, and SA Gaming may receive the minimum session data required to operate live casino games. This data is limited strictly to game session information only.
  • KYC Service Providers: For identity verification, mpoid works with licensed and independently audited KYC service providers. Data is shared solely for verification purposes and is not retained by the provider beyond what is necessary.
  • Legal Authority: mpoid will disclose data when required by Malaysian law, court order or a valid request from a relevant law enforcement agency. We do not disclose data beyond what is legally required.
  • Business Transfer: In the event of a merger, acquisition or asset transfer involving mpoid, player data may form part of the transferred assets. Players will be notified in advance and their rights under the PDPA will be fully preserved.

Mpoid never shares player data with advertising companies, data brokers or any third party for third-party marketing purposes. If you receive communications claiming to be from mpoid through unusual channels, please contact us for verification.

4

Data Security

Mpoid continuously invests in the latest security infrastructure to ensure Malaysian players' data is always protected. The technical and organisational security measures we have in place include:

  • End-to-End Encryption: 256-bit SSL/TLS encryption for all data in transit. AES-256 encryption for data stored in mpoid's databases and storage systems.
  • Strict Access Controls: A least-privilege principle is applied — mpoid staff can only access the data required for their specific role. All access to player data is logged and audited on a regular basis.
  • Two-Factor Authentication: All mpoid internal systems containing player data are protected by two-factor authentication. Players are also encouraged to enable 2FA on their accounts for an additional layer of security.
  • Continuous Monitoring: A SIEM (Security Information and Event Management) system monitors all network and account activity 24/7 to detect any anomalies or unauthorised access attempts.
  • Regular Security Testing: Penetration testing and independent security audits are conducted regularly by qualified third parties to identify and address vulnerabilities before they can be exploited.
  • Staff Training: All mpoid staff who handle player data undergo regular security awareness and data protection training as part of the company's security culture.
  • Incident Response Plan: mpoid has a documented and tested security incident response procedure to ensure any data breach is handled swiftly, effectively, and transparently.

While mpoid takes all reasonable steps to protect your data, no security system can guarantee 100% protection under every circumstance. We encourage players to take their own precautions, such as using a strong password, not sharing login credentials, and keeping their devices updated with the latest security patches.

5

Cookies & Tracking Technologies

Mpoid uses cookies and similar tracking technologies to enhance the user experience and platform security. Below is an explanation of the types of cookies we use:

Cookie Type Purpose Retention Period
Essential Cookies Enabling core platform functions such as secure login, session management and account security. Cannot be disabled. Session / 30 days
Functional Cookies Saving your preferences such as language, display theme and notification settings for a more personalised experience. 1 year
Analytics Cookies Collecting anonymised usage data to help mpoid understand how players use the platform and identify areas for improvement. 2 years
Security Cookies Detecting suspicious login attempts and fraudulent activity, and helping us securely verify player identities. Session

You can manage cookie settings through your web browser. However, disabling essential cookies may affect core mpoid platform functionality, such as the ability to log in securely or maintain an active session. mpoid does not use third-party advertising cookies to track your activity outside our platform.

6

How to Exercise Your Privacy Rights

Mpoid makes it straightforward for you to exercise the privacy rights outlined in Section 1 of the player rights page above. Here is how to action each right in practice:

  • Requesting Data Access: Log in to your mpoid account and go to Account Settings > Privacy > Request Data Report. A full report will be sent to your registered email address within 14 working days.
  • Correcting Your Data: Basic information such as your email address and phone number can be updated directly in your account profile. For corrections to identity data such as your name or date of birth, please contact customer support with the appropriate supporting documents.
  • Requesting Deletion: Submit a data deletion request by email to support@mpoid.win or via live chat. Include your account number and the details of your request. Please note that some data may need to be retained to comply with legal obligations.
  • Withdrawing Marketing Consent: Click the "Unsubscribe" link in any marketing email, or go to Account Settings > Communication Preferences to manage all your marketing notification preferences.
  • Submitting a Complaint: If you believe mpoid has violated your privacy rights, you may file a complaint with us at support@mpoid.win or directly with the Department of Personal Data Protection Malaysia under the Ministry of Communications and Digital.

Mpoid will respond to all privacy rights requests within 30 calendar days from the date the request is received. For complex requests, this period may be extended by up to 60 days with prior notice to the player. All requests will be handled confidentially and professionally by our Data Protection Officer.

7

Data Retention & Deletion

Mpoid retains players' personal data only for as long as necessary to fulfil the original purpose of collection or to comply with legal obligations. Our retention policy is as follows:

  • Active Account Data: Retained for the duration of active membership plus 2 years after account closure, for the purpose of resolving any disputes that may arise.
  • Financial Transaction Records: Retained for 7 years from the date of transaction in compliance with Malaysian legal requirements relating to anti-money laundering and tax reporting.
  • Identity Verification (KYC) Data: Retained for 5 years from the date of verification or account closure, whichever is later, in accordance with regulatory requirements.
  • Support Communication Logs: Customer support conversation records are retained for 2 years for quality control, training, and dispute resolution purposes.
  • Technical Log Data: Technical logs such as IP addresses and activity logs are retained for a maximum of 12 months for security and fraud detection purposes.
  • Marketing Data: Data used for marketing communications is retained for as long as you remain an active member and have consented to receive such communications, or until you withdraw your consent.

Once a retention period has expired, mpoid will securely delete or anonymise your personal data using industry-standard methods. Anonymised data can no longer be linked back to you as an individual and may be retained for analytical purposes without a time limit.

8

Contact Our Data Protection Officer

Mpoid appoints a Data Protection Officer who is responsible for ensuring compliance with this Privacy Policy and handling all privacy-related requests and enquiries from Malaysian players.

  • Privacy Email: support@mpoid.win (please include "Privacy Inquiry" in the email subject line)
  • Live Chat: Available 24/7 within the mpoid platform — select the "Privacy & Data" topic from the support menu
  • Response Time: Privacy requests are handled within 30 working days of receipt
  • Service Language: Bahasa Malaysia and English

This Privacy Policy will be updated from time to time to reflect changes in our operations, legal requirements or feedback from players. Any material changes will be communicated to your registered email address at least 14 days before taking effect. We encourage you to revisit this page periodically. The date of the most recent update is always displayed at the top of this page.

By continuing to use the mpoid platform after any changes to this Privacy Policy take effect, you are deemed to have reviewed and accepted those changes. This Privacy Policy should be read together with Terms & Conditions and Responsible Gaming Policy mpoid which together form the complete agreement between you and mpoid.

Mpoid Privacy Policy – What You Need to Know as a Malaysian Player

When it comes to data privacy in the context of online betting platforms, many Malaysian players are unaware of their rights or what actually happens to the information they provide when signing up. This is something mpoid wants to change. We believe players who understand their privacy are better protected — and a platform that explains its privacy policy openly and honestly is a platform worth trusting.

When you register an mpoid account, you provide basic information such as your name, Malaysian phone number and email address. This is required to create a secure account and to send important notifications such as login verification, transaction confirmations and security updates. Your phone number is used to send OTPs (One-Time Passwords), which serve as the first layer of account security — something you will want in place to protect your funds and data. mpoid does not use your phone number for marketing purposes without your prior consent.

For financial matters, mpoid retains records of the payment methods you use — whether DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay or FPX via Maybank2u and CIMB Clicks. This is necessary for several important reasons: first, to correctly process your deposits and withdrawals; second, to comply with anti-money laundering (AML) regulations, which require that withdrawal methods match deposit methods; and third, to protect you from fraudulent activity by ensuring funds are only transferred to an account verified as yours. mpoid does not store your full bank account number or eWallet password — this sensitive information is handled directly by the respective payment providers.

One thing many Malaysian players want to know about is their gaming activity data. Yes, mpoid does retain your betting history — the Malaysia Super League football matches you wagered on, the BWF badminton matches you followed, the Live Casino sessions you enjoyed, and the slots games you played. This data serves several legitimate purposes: it is required to accurately process your winnings, to resolve any disputes over bet outcomes, to provide you with a full account statement upon request, and to meet reporting obligations to the relevant authorities. This data is also used by mpoid's responsible gaming team to monitor playing patterns that may show signs of at-risk behaviour.

Regarding cookies, mpoid uses them primarily for security and platform functionality purposes. Session cookies that keep you securely logged in, cookies that remember your language preference, and security cookies that detect suspicious login attempts — all of these work in your interest. For the analytics cookies we use to understand how players interact with the platform, the data is aggregated and anonymised — we do not know that "you personally" spent a certain amount of time on the Sports Betting page, only that a number of players did. This information helps us make decisions to improve the platform in ways that benefit all mpoid players.

A common question we receive is: does mpoid share my data with partners like Evolution Gaming or Pragmatic Play? The short answer is yes, but only to a very limited extent. When you join a live baccarat table powered by Evolution Gaming within the mpoid platform, the minimum session data required to run the game — such as your account betting limits and selected chip values — is shared with that studio. Your full name and financial details are never shared. All these providers are bound by strict data protection agreements that prohibit them from using mpoid player data for any other purpose.

Malaysia's Personal Data Protection Act 2010 (PDPA) grants users certain rights over their personal data. mpoid is fully compliant with the PDPA and, in many areas of our data protection practices, we go beyond the minimum required by law. Your rights to access your data, correct it, request its deletion, and object to its processing can all be exercised through the channels we provide, and we are committed to responding to every request within the stipulated timeframe.

Your privacy is not solely our responsibility — it is a shared one. mpoid will continue investing in the best security technologies and processes to protect your data. On your end, you can help by using a strong, unique password for your mpoid account, enabling two-factor authentication, never sharing your login details with anyone, and reporting to us immediately if you notice any suspicious activity on your account. Together, we can ensure that your Sports Betting and casino experience at mpoid remains safe, enjoyable, and protected for all Malaysian players.

Your Data Is Safe at mpoid — Register with Complete Confidence

With a transparent Privacy Policy, 256-bit SSL encryption, and full compliance with Malaysia's PDPA, you can enjoy Sports Betting and casino games on mpoid without worrying about the security of your data.

Malaysia PDPA Compliance 256-bit SSL Encryption No Data Sales Your Data, Your Control

Related mpoid Policy Links

This Privacy Policy should be read together with Terms & Conditions and Responsible Gaming Policy mpoid. For any queries or requests relating to your personal data and privacy, contact us at support@mpoid.win or via live chat within the platform. Visit the FAQs us for answers to the most frequently asked questions by Malaysian players.

FAQ – mpoid Privacy Policy

No. mpoid never sells, rents, or shares players' personal data with advertising companies, data brokers, or any third party for third-party marketing purposes. Your data is used solely for mpoid's platform operational purposes as stated in this Privacy Policy. The only time data is shared with external parties is for very specific and limited purposes, such as payment processing (with providers such as DuitNow, TNG eWallet, GrabPay, and FPX), casino game delivery (with studios such as Evolution Gaming), and legal compliance when required by the relevant authorities. In all cases, data is shared only for the stated purpose, and all providers are bound by strict data protection agreements.

To request a copy of your personal data (data access right), you may use either of the following methods: first, log in to your mpoid account and go to Account Settings > Privacy > Request Data Report. The system will send a detailed report to your registered email address within 14 business days. Second, you may submit a request by email to support@mpoid.win with the subject line "Data Access Request" and include your account number for identity verification. The report will cover your account profile information, financial transaction history, betting history and customer support communication logs associated with your account. No fee is charged for the first data access request within any 12-month period.

When you close your mpoid account, your data is not immediately deleted in full. This is because mpoid has legal obligations to retain certain records for specified periods — for example, financial transaction records must be kept for 7 years under Malaysia's anti-money laundering regulations. General account data is retained for 2 years after account closure to resolve any disputes that may arise. Once all mandatory retention periods have expired, your data will be securely deleted or anonymised so that it can no longer be linked back to you as an individual. If you would like to know exactly what data we still hold after your account is closed, you may submit a data access request as described above.

mpoid does not directly store your full bank account number, eWallet password or payment card details in our systems. When you make a deposit or withdrawal via DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay or FPX, the actual payment process is handled directly by the respective payment provider through secure, licensed channels. mpoid only receives payment status confirmations and does not receive or store your sensitive payment details. What we do retain are transaction records such as date, amount, payment method (e.g. "TNG eWallet") and status (successful/failed) for account management and compliance purposes. All financial data stored in our systems is protected by AES-256 encryption and strict access controls.

Unsubscribing from mpoid promotional emails is simple and can be done in a few ways. The quickest method is to click the "Unsubscribe" link at the bottom of any promotional email you receive from mpoid — this takes effect immediately. Alternatively, log in to your mpoid account and go to Account Settings > Communication Preferences, where you can manage all notification types and marketing communications in detail — including promotional emails, SMS, and push notifications. You can also reach mpoid customer support via live chat or email at support@mpoid.win and request to be removed from marketing communications. Please note that important service notification emails — such as transaction confirmations, account security alerts, and terms updates — fall outside the marketing category and cannot be disabled, as they are essential to your account security.
Bahasa Melayu