mpl77 Privacy Policy

mpl77 ("we", "us", "our", "the Platform") is an internationally licensed online casino and sportsbook serving English-preference players across Indonesia. We are committed to protecting and respecting your privacy. This Privacy Policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us.

This Privacy Policy applies to all personal data processed in connection with your use of the mpl77 website at https://mpl77.bio, our mobile-optimised platform, and all associated services including live casino, slots, sportsbook, togel (Indonesia's traditional numbers lottery) products, virtual sports, and customer support channels.

Please read this Privacy Policy carefully before registering an mpl77 account or submitting any personal information to us. By creating an account or using the Platform, you acknowledge that you have read and understood this policy and that you consent to the processing of your personal data as described herein. If you do not agree with this policy, you must not use the Platform.

Throughout this Privacy Policy, the following terms carry the meanings assigned below:

• "Personal Data" — any information that directly or indirectly identifies a living natural person, including but not limited to name, email address, date of birth, national identity number, device identifiers, and payment account details.
• "Processing" — any operation performed on Personal Data, including collection, storage, retrieval, use, disclosure, erasure, or destruction, whether automated or manual.
• "Member" / "You" — any individual who has registered a verified account on mpl77 and whose Personal Data is processed by us.
• "Data Controller" — the entity that determines the purposes and means of processing Personal Data. For the purposes of this policy, mpl77 acts as the Data Controller.
• "Data Processor" — a third party that processes Personal Data on behalf of mpl77 under a contractual arrangement, such as a payment gateway or identity verification provider.
• "KYC" — Know Your Customer; the identity verification process applied by mpl77 to confirm a Member's identity, age, and eligibility to use the Platform.
• "Cookie" — a small text file placed on your device by a website server to store session information, preferences, or analytics data.

mpl77 collects and processes the following categories of Personal Data:

mpl77 collects Personal Data through the following channels:

• Direct submission: Information you provide when you complete the registration form, submit a KYC document, initiate a deposit or withdrawal, contact customer support via live chat or email, or respond to a promotional survey.
• Automated technical collection: Data collected automatically by our servers and analytics infrastructure each time you access the Platform, including IP address, browser fingerprint, device identifiers, and session activity logs. This data is collected using server logs, cookies, and similar tracking technologies (see Section 10).
• Payment processors: When you initiate a financial transaction, our payment gateway partners may pass us confirmation data including your bank account holder name and partial account reference to allow us to match the transaction to your mpl77 account.
• Identity verification providers: Where we use a third-party KYC provider to verify your identity documents, that provider may return a structured verification result to us including your verified name, date of birth, and document validity status.
• Fraud prevention and risk monitoring services: We may receive supplementary risk signals from third-party fraud detection partners to assist in identifying suspicious account activity, multiple account registrations, or payment anomalies.

mpl77 processes your Personal Data only where we have a lawful basis for doing so. The table below summarises our key processing purposes and the corresponding legal basis for each:

Where we rely on your consent as the legal basis for processing (for example, to send you promotional emails about new bonuses, seasonal offers tied to events like Idul Fitri or Ramadhan, or new game launches), you have the right to withdraw that consent at any time by updating your marketing preferences within your Account Settings or by contacting [email protected]. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.

mpl77 does not sell, rent, or trade your Personal Data to any third party for their own marketing purposes. We share Personal Data only in the circumstances described below, and only to the minimum extent necessary:

• Payment processors and banking partners: We share transaction-relevant data (your name, account reference, and transaction amount in IDR) with the payment gateway and banking infrastructure required to process your deposit or withdrawal via BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, OVO, DANA, GoPay, ShopeePay, or LinkAja. These processors are contractually bound to handle your data in accordance with applicable data protection standards.
• Identity verification providers: Where a third-party KYC provider is used to verify identity documents, your submitted documents and extracted data are shared with that provider solely for the purpose of verification.
• Game software providers: Game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft may receive a pseudonymised player session token to facilitate gameplay and maintain game-round records. These providers do not receive your name, email, or financial details.
• Fraud prevention and AML service providers: Aggregated risk signals and pseudonymised transaction patterns may be shared with specialist fraud detection or anti-money-laundering analytics providers operating under strict data processing agreements.
• Regulatory and law enforcement authorities: mpl77 will disclose Personal Data to competent authorities where required to do so by law, court order, or a regulatory direction issued by the licensing authority. We will notify you of any such disclosure where legally permitted to do so.
• Group entities and successors: In the event of a merger, acquisition, or restructuring, your Personal Data may be transferred to a successor entity subject to equivalent privacy protections. You will be notified of any material change in the data controller's identity.

mpl77 operates server infrastructure across multiple jurisdictions to ensure platform availability and redundancy for Indonesian Members. As a result, your Personal Data may be transferred to, stored in, or processed in countries outside of Indonesia, including countries where data protection legislation may differ from Indonesian standards.

Where such international transfers occur, mpl77 ensures that appropriate safeguards are in place, which may include:

• Standard contractual clauses approved by the applicable licensing authority and consistent with recognised international data protection standards;
• Data processing agreements with receiving entities that impose data protection obligations equivalent to those set out in this policy;
• Transfer only to jurisdictions that the applicable licensing authority has assessed as providing an adequate level of data protection.

By using the mpl77 Platform, you acknowledge and consent to the transfer of your Personal Data outside Indonesia on the basis described above.

mpl77 retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required to satisfy legal, regulatory, and operational obligations. The following general retention principles apply:

• Active account records (Identity, Contact, Financial Data): Retained for the duration of your mpl77 account's active status, plus a minimum of five (5) years following account closure. This retention period is required to satisfy anti-money-laundering record-keeping obligations.
• KYC documents: Retained for a minimum of five (5) years from the date of submission, or from the date of account closure, whichever is later.
• Transaction records: Retained for a minimum of five (5) years in accordance with financial crime compliance obligations.
• Customer support communications: Retained for three (3) years from the date of each communication to enable dispute resolution and quality assurance review.
• Technical and usage logs: Retained for thirteen (13) months in rolling format to support platform security, fraud detection, and performance analysis.
• Marketing consent records: Retained for the duration of your consent and for three (3) years thereafter as evidence of your consent decision.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised so that it can no longer be linked to you as an individual. Anonymised or aggregated data derived from your account activity may be retained indefinitely for statistical and product improvement purposes.

mpl77 takes the security of your Personal Data seriously and has implemented a layered set of technical and organisational controls to protect it against unauthorised access, loss, destruction, or disclosure. Our current security posture includes:

• 256-bit SSL/TLS encryption applied to all data transmissions between your browser or device and our servers, ensuring that data in transit cannot be intercepted in readable form.
• Data encryption at rest for all sensitive fields including identity document references, financial account identifiers, and KYC verification outcomes, stored using AES-256 encryption.
• PCI-DSS compliant payment infrastructure: All payment card and banking transactions are processed through certified payment gateway partners. mpl77 does not store raw card numbers or bank login credentials on its own servers.
• Role-based access controls (RBAC): Access to Personal Data within mpl77's internal systems is strictly limited to staff members who require it to perform their job function. All access is logged and subject to periodic review.
• Multi-factor authentication (MFA): Administrative access to back-end systems containing Personal Data requires MFA. We also offer MFA to Members for their account login.
• Penetration testing and vulnerability assessments: Our platform undergoes regular third-party security audits and penetration tests. Critical vulnerabilities are remediated under a defined SLA.
• Incident response protocol: In the event of a data breach that poses a risk to Members' rights, mpl77 will notify affected Members and, where required, the relevant authority within the timeframe prescribed by applicable law.

mpl77 uses cookies and similar tracking technologies (such as web beacons and local storage objects) to operate core platform functionality, maintain your session, analyse usage patterns, and improve your overall experience. The following categories of cookies are in use:

• Strictly Necessary Cookies: These cookies are essential to the operation of the mpl77 Platform. They enable core functions such as account login session management, security token validation, and the game lobby display. The Platform cannot function properly without these cookies, and they cannot be disabled.
• Functional Cookies: These cookies remember your in-platform preferences such as your preferred language display, game lobby filter settings, and currency display (IDR). Disabling them may affect the quality of your experience.
• Analytics Cookies: We use aggregated analytics cookies to understand how Members navigate the Platform — which pages are visited most, where sessions drop off, and how features are used. This information is used to improve the Platform and does not identify you personally.
• Security and Fraud Prevention Cookies: These cookies assist in detecting and preventing fraudulent behaviour, including unauthorised account access, automated bot activity, and multiple account creation. They are classified as necessary for platform integrity.

Most browsers allow you to control cookies through their settings. Blocking strictly necessary cookies will prevent you from using the mpl77 Platform effectively. Blocking functional or analytics cookies will not prevent access but may reduce functionality.

As an mpl77 Member, you have the following rights in respect of the Personal Data we hold about you. To exercise any of these rights, please contact us at [email protected] with the subject line "Privacy Rights Request" and your registered email address for identity verification purposes. We will respond within 30 calendar days of receiving a valid request.

• Right of Access: You have the right to request a copy of the Personal Data mpl77 holds about you, together with information about how it is processed. We will provide this in a structured, readable format.
• Right to Rectification: If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. You may also update certain account details directly through your Account Settings.
• Right to Erasure: You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where you believe the processing has no other valid legal basis. Note that this right is subject to our legal obligations to retain data for AML and regulatory compliance purposes as described in Section 8.
• Right to Restriction of Processing: You may request that we restrict the active processing of your Personal Data in certain circumstances, for example while a rectification request is being reviewed.
• Right to Data Portability: Where processing is based on your consent or on contract performance and is carried out by automated means, you may request that we provide your Personal Data in a commonly used, machine-readable format for transfer to another data controller.
• Right to Object: You have the right to object to processing based on our legitimate interests, including processing for direct marketing purposes. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

The mpl77 Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect Personal Data from individuals under the age of 21. Age verification is conducted as part of the KYC process at the point of registration and again prior to a Member's first withdrawal. Providing false information about your age to circumvent this requirement constitutes a material breach of our Terms & Conditions.

If mpl77 discovers or is notified that a Member is under the age of 21, we will immediately suspend the account, void any outstanding wagers, return deposited funds to the originating payment source where technically possible, and delete or anonymise all Personal Data associated with the minor's account. If you believe that a person under 21 has registered on mpl77, please notify us immediately at [email protected].

The mpl77 Platform may contain references to the services of third-party payment providers, game studios, and other partners. These third parties operate their own websites and privacy policies, which are entirely independent of mpl77. We have no responsibility or liability for the content or data practices of any third-party service.

We encourage you to review the privacy policy of any third-party service before providing your Personal Data to them. The fact that mpl77 integrates with or references a third-party service does not constitute an endorsement of that service's privacy practices.

mpl77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or our Platform's functionality. When we make material changes, we will update the "Last Updated" date at the top of this page and, where practicable, provide you with at least 7 days' advance notice via email or an in-Platform notification.

Your continued use of the mpl77 Platform following the effective date of any update constitutes your acceptance of the revised Privacy Policy. We recommend that you review this page periodically to stay informed about how we protect your data.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way mpl77 handles your Personal Data, please contact our Data Privacy team using the details below:

• Email: [email protected] (plain text — not a clickable link)
• Subject Line: "Privacy Rights Request" or "Privacy Policy Inquiry"
• Live Chat: Available 24/7 via the chat widget on the Platform; average response time under 2 minutes during peak WIB (Western Indonesia Time, UTC+7) hours
• Response Time: We aim to respond to all privacy-related inquiries within 30 calendar days of receipt