1Introduction
mpoyes ("we", "us", "our") operates the online betting platform accessible at https://mpoyes.cam, offering sports wagering, live casino games, togel (Indonesia's traditional numbers lottery) markets, and related entertainment services to registered players. In providing these services, we necessarily collect and process certain personal data about you.
This Privacy Policy describes our practices with respect to personal data collected through the mpoyes platform, including our website, mobile interface, customer support channels, and any associated services. It applies to all registered players and visitors to the Platform, with a primary focus on players based in Indonesia.
By registering an account or continuing to use the mpoyes platform, you confirm that you have read, understood, and agree to the data practices described in this Privacy Policy. This document should be read alongside our Terms & Conditions, which govern your overall use of the platform.
We reserve the right to update this Privacy Policy periodically. Material changes will be communicated to you via your registered email address or via a prominent notice on the Platform at least seven (7) days before the changes take effect.
2Definitions
For the purposes of this Privacy Policy, the following definitions apply:
| Term | Definition |
|---|---|
| "Personal Data" | Any information that relates to an identified or identifiable natural person, including name, email address, phone number, financial account details, IP address, and device identifiers. |
| "Processing" | Any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, transfer, and deletion. |
| "Data Controller" | mpoyes, the entity that determines the purposes and means of processing your Personal Data. |
| "Data Processor" | A third party that processes Personal Data on behalf of mpoyes, such as payment processors, KYC verification providers, and hosting infrastructure partners. |
| "KYC" | Know Your Customer — the identity and age verification process mandated for all players prior to withdrawal, involving submission of a National ID (KTP), proof of address, and photographic verification. |
| "Platform" | The mpoyes website, mobile interface, and any associated applications through which services are delivered. |
| "Consent" | A freely given, specific, informed, and unambiguous indication of agreement to the processing of Personal Data for a defined purpose. |
3Data We Collect
mpoyes collects Personal Data in the following categories, depending on how you interact with the Platform:
3.1 Registration and Identity Data
- Full legal name as it appears on your Indonesian National ID (KTP);
- Date of birth (used to verify you are at least 21 years of age);
- Gender;
- Residential address within Indonesia (city, province, postal code);
- Valid email address;
- Mobile phone number (Indonesian format, starting with +62);
- Username and hashed password.
3.2 Identity Verification (KYC) Data
- Scanned or photographed copy of your Indonesian National ID Card (KTP — Kartu Tanda Penduduk);
- Proof of residential address (utility bill, bank statement, or equivalent document issued within 90 days);
- Selfie photograph, which may include a handwritten verification note per our KYC process;
- Additional documentation if required during enhanced due diligence reviews.
3.3 Financial Data
- Bank account details for local Indonesian bank transfers (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, Bank Permata, BSI);
- E-wallet account identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja) used for deposits and withdrawals;
- Transaction history, including deposit amounts, withdrawal requests, and wager records, all denominated in Indonesian Rupiah (IDR/Rp);
- Bonus and promotional credit records.
3.4 Technical and Device Data
- IP address and approximate geolocation derived from IP;
- Browser type and version;
- Operating system and device type (desktop, mobile, tablet);
- Referring URL and navigation path within the Platform;
- Session timestamps and session duration;
- Cookie identifiers and similar tracking technologies (see Section 11).
3.5 Communication Data
- Records of correspondence between you and mpoyes customer support, including live chat transcripts and email threads;
- Feedback, complaints, and responsible gaming self-assessment responses;
- Marketing communication preferences (opt-in or opt-out status for promotional emails).
3.6 Behavioral and Usage Data
- Betting patterns, including sports selections (BRI Liga 1, English Premier League, La Liga, Timnas Indonesia fixtures), voor bola (Asian handicap) preferences, and mix parlay (accumulator) activity;
- Slot game preferences and slot gacor (high-payout slot) engagement metrics;
- Togel market participation (Singapore, Hong Kong, Sydney draws);
- Live casino session data (game titles from Evolution Gaming, Pragmatic Play, and other providers);
- Frequency and duration of gaming sessions;
- Responsible gaming tool usage (deposit limits set, self-exclusion requests).
4How Data Is Collected
mpoyes collects Personal Data through the following methods:
- Direct Provision by You: When you register an account, complete the KYC verification process, make a deposit or withdrawal, contact customer support, or update your profile settings.
- Automated Collection via Technology: When you access the Platform, technical data (IP address, browser type, session timestamps) is collected automatically through cookies, server logs, and similar technologies.
- Third-Party Sources: Payment processors (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay) may share transaction confirmation data with us. KYC verification partners may provide identity validation results. Game providers (Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe) may share in-game activity logs.
- Public Sources: In rare cases where fraud or regulatory compliance investigations are necessary, mpoyes may consult publicly available databases or regulatory watchlists to verify identity or detect prohibited activity.
5Purposes of Processing
mpoyes processes your Personal Data for the following specific, legitimate, and lawful purposes:
5.1 Account Management and Service Delivery
- Creating and maintaining your mpoyes account;
- Processing deposits and withdrawals via Indonesian bank transfers and e-wallets;
- Settling wagers and crediting winnings to your balance;
- Managing bonus offers and promotional incentives;
- Providing customer support via live chat and email.
5.2 Identity Verification and Compliance (KYC/AML)
- Verifying that you are at least 21 years of age and eligible to use mpoyes services;
- Confirming your identity to prevent fraud, money laundering, and account takeover;
- Complying with Anti-Money Laundering (AML) and Counter-Terrorism Financing (CTF) regulations;
- Fulfilling regulatory reporting obligations where applicable;
- Detecting and preventing duplicate accounts and bonus abuse.
5.3 Platform Security and Fraud Prevention
- Monitoring for suspicious betting patterns, collusion, and automated bot activity;
- Investigating chargebacks, payment disputes, and account compromise incidents;
- Blocking access from restricted territories or users on self-exclusion lists;
- Protecting the integrity of the platform and safeguarding other players.
5.4 Responsible Gaming and Player Protection
- Administering deposit limits, loss limits, and session time restrictions you have set;
- Processing self-exclusion requests and enforcing cooling-off periods;
- Identifying at-risk gambling behavior and offering support resources;
- Maintaining records required for responsible gaming compliance audits.
5.5 Marketing and Communication (with Your Consent)
- Sending promotional offers, bonus announcements, and product updates to players who have opted in;
- Personalizing marketing content based on your gaming preferences (e.g., targeting football betting promotions to users who frequently wager on BRI Liga 1 or EPL matches);
- Conducting player satisfaction surveys and gathering feedback.
Note: Marketing communications are always opt-in. You may withdraw consent at any time via the unsubscribe link in any email or by adjusting your account preferences.
5.6 Platform Improvement and Analytics
- Analyzing aggregated usage data to improve website performance, game selection, and user experience;
- A/B testing new features, layouts, and promotional strategies;
- Generating anonymized statistical reports for internal business intelligence.
5.7 Legal Compliance and Dispute Resolution
- Responding to lawful requests from Indonesian authorities or international regulatory bodies;
- Defending mpoyes' legal rights in disputes, arbitration, or litigation;
- Enforcing our Terms & Conditions and investigating breaches.
6Legal Basis for Processing
mpoyes processes your Personal Data on one or more of the following lawful bases:
| Legal Basis | Application |
|---|---|
| Contractual Necessity | Processing is necessary to fulfill our contractual obligations to you under the Terms & Conditions, including account management, payment processing, and service delivery. |
| Legal Obligation | Processing is required to comply with applicable laws and regulations, such as KYC/AML requirements, age verification mandates, and responsible gaming obligations. |
| Legitimate Interests | Processing is necessary for our legitimate business interests, including fraud prevention, platform security, dispute resolution, and performance analytics, provided these interests do not override your fundamental rights. |
| Consent | Where required by law (e.g., for marketing communications and non-essential cookies), we rely on your freely given, specific consent, which you may withdraw at any time. |
7Data Sharing and Disclosure
mpoyes does not sell, rent, or trade your Personal Data to unaffiliated third parties for their own marketing purposes. However, we do share your data with carefully selected Data Processors and partners under strict confidentiality and data protection obligations in the following circumstances:
7.1 Payment Processors
To facilitate deposits and withdrawals, we share necessary financial data with Indonesian bank partners (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, Bank Permata) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja). These processors handle transaction data solely for the purpose of completing payment instructions and are bound by their own privacy policies and Indonesian banking regulations.
7.2 KYC and Verification Services
Your KYC documents (National ID, proof of address, selfie verification) are shared with third-party identity verification providers to confirm your age, identity, and residential status. These providers operate under data protection agreements and delete or return documents after verification is complete unless retention is required by law.
7.3 Game Providers and Platform Partners
When you play games from third-party studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft, and others), limited data (player ID, bet amounts, session timestamps) is shared with these providers to deliver the gaming experience. Game providers process data according to their own privacy policies and industry standards.
7.4 Technology and Infrastructure Providers
We use cloud hosting services, content delivery networks (CDNs), and cybersecurity partners to maintain platform uptime, performance, and security. These providers have access to technical data (IP addresses, session logs) but are prohibited from using it for any purpose other than supporting mpoyes infrastructure.
7.5 Legal and Regulatory Authorities
mpoyes may disclose Personal Data to law enforcement, regulatory bodies, or courts when required by applicable law, court order, or government regulation, or where disclosure is necessary to protect our legal rights, prevent fraud, or safeguard the safety and security of our players and staff.
7.6 Business Transfers
In the event of a merger, acquisition, sale of assets, or other corporate restructuring, your Personal Data may be transferred to the successor entity as part of the transaction, subject to this Privacy Policy or a successor policy with equivalent protections.
8International Data Transfers
As an internationally licensed online betting platform serving the Indonesian market, mpoyes may transfer your Personal Data outside of Indonesia to countries where our servers, Data Processors, or corporate entities are located. These countries may not provide the same level of data protection as Indonesian law.
Where international transfers occur, mpoyes ensures appropriate safeguards are in place, including:
- Use of Data Processors certified under recognized international data protection frameworks;
- Execution of Standard Contractual Clauses or equivalent data transfer agreements;
- Technical and organizational measures to maintain data security during and after transfer;
- Compliance with applicable data protection laws in both the origin and destination jurisdictions.
By using mpoyes services, you acknowledge and consent to the international transfer of your Personal Data under these safeguards.
9Data Retention
mpoyes retains your Personal Data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, or as required by law. Specific retention periods vary by data category:
| Data Category | Retention Period |
|---|---|
| Registration & Account Data | Duration of account active status, plus 5 years after account closure (for regulatory and dispute resolution purposes). |
| KYC Documents | 5 years after account closure or last transaction, whichever is later (AML compliance requirement). |
| Financial Transaction Records | 7 years after transaction date (Indonesian tax and financial record-keeping standards). |
| Betting & Gaming History | 5 years for audit, dispute resolution, and responsible gaming analysis. |
| Customer Support Logs | 3 years after last correspondence. |
| Technical Logs (IP, Session Data) | 12 months unless required for ongoing security investigation. |
| Marketing Consent Records | Until consent is withdrawn, plus 1 year for proof-of-consent audit purposes. |
After the applicable retention period expires, Personal Data is securely deleted or anonymized such that it can no longer identify you.
10Security Measures
mpoyes implements industry-standard technical and organizational security measures to protect your Personal Data against unauthorized access, disclosure, alteration, and destruction. These measures include, but are not limited to:
- 256-bit SSL/TLS Encryption: All data transmitted between your device and mpoyes servers is encrypted using SSL (Secure Sockets Layer) technology, ensuring that sensitive information such as login credentials and payment details cannot be intercepted.
- Secure Data Centers: Personal Data is stored in geographically redundant, access-controlled data centers with 24/7 physical and network security monitoring.
- Password Hashing: User passwords are hashed using strong one-way cryptographic algorithms and are never stored in plaintext.
- Access Controls: Internal access to Personal Data is restricted to authorized personnel on a need-to-know basis, with role-based permissions and regular access audits.
- Intrusion Detection Systems: Automated systems monitor for suspicious activity, unauthorized login attempts, and potential security breaches.
- Regular Security Audits: Third-party penetration testing and vulnerability assessments are conducted periodically to identify and remediate weaknesses.
- Incident Response Plan: mpoyes maintains a documented incident response protocol to address data breaches promptly, including mandatory notification to affected players and relevant authorities where required by law.
While we take every reasonable precaution to protect your data, no method of electronic storage or internet transmission is 100% secure. You also have a responsibility to safeguard your account credentials and notify us immediately at [email protected] if you suspect unauthorized access.
11Cookies and Tracking Technologies
mpoyes uses cookies, web beacons, and similar tracking technologies to enhance your browsing experience, analyze platform performance, and deliver personalized content. A cookie is a small text file placed on your device by a web server.
11.1 Types of Cookies We Use
- Essential Cookies: Necessary for the platform to function, including session authentication, shopping cart functionality (bonus selection), and security features. These cookies cannot be disabled without breaking core functionality.
- Performance Cookies: Collect anonymized data on page load times, error rates, and user navigation patterns to help us optimize the platform. These cookies do not identify you personally.
- Functional Cookies: Remember your preferences (language, timezone, display settings) to provide a customized experience on return visits.
- Marketing Cookies: Track your activity across sessions to deliver targeted promotions and measure the effectiveness of advertising campaigns. These cookies require your consent and may be disabled via your browser or account settings.
11.2 Managing Cookies
You can control cookie settings through your web browser preferences. Most browsers allow you to block or delete cookies, though doing so may impact platform functionality (e.g., you may need to log in repeatedly if session cookies are blocked). For more information on managing cookies, consult your browser's help documentation.
Disabling marketing cookies will not prevent you from using mpoyes services, but you may continue to see generic promotional content rather than offers tailored to your gaming preferences.
12Your Data Protection Rights
Under applicable data protection laws, including Indonesian consumer protection regulations and international privacy standards, you hold the following rights over your Personal Data:
Right of Access
Request a copy of all Personal Data mpoyes holds about you, delivered in a structured, machine-readable format.
Right to Rectification
Correct inaccurate or incomplete Personal Data. You can update most account information directly via your profile settings.
Right to Erasure
Request deletion of your Personal Data where no legal or regulatory retention obligation applies (e.g., after the required 5-7 year retention period for financial records expires).
Right to Restriction
Request that we limit processing of your data while a dispute over accuracy or lawfulness is resolved.
Right to Portability
Receive your Personal Data in a portable format and, where technically feasible, have it transmitted directly to another service provider.
Right to Object
Object to processing based on legitimate interests or for direct marketing purposes. Marketing objections are honored immediately.
How to Exercise Your Rights
To exercise any of these rights, please contact our Data Protection Officer at [email protected] with the subject line "Data Protection Request". Include your full name, registered email address, and a description of the specific right you wish to exercise. We will respond within thirty (30) days of receipt.
To protect your privacy, we may ask you to verify your identity before processing your request. There is no fee for exercising these rights unless your request is manifestly unfounded or excessive, in which case we may charge a reasonable administrative fee.
13Protection of Minors
mpoyes services are strictly limited to individuals who are at least 21 years of age. We do not knowingly collect Personal Data from minors, and any individual under the age of 21 is prohibited from registering an account or using the platform.
If we discover that an account has been created by a person under 21 years of age, we will immediately close the account, void all associated wagers and winnings, and delete the minor's Personal Data in accordance with applicable law. Deposits made from accounts verified to belong to minors may be refunded to the source account at mpoyes' sole discretion following investigation.
Parents and guardians are encouraged to monitor their children's internet usage. If you become aware that a minor has provided Personal Data to mpoyes, please contact us immediately at [email protected] so we can take appropriate action.
14Amendments to This Policy
mpoyes reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or business operations. When material changes are made, we will provide at least seven (7) days' notice via email to your registered address or via a prominent banner on the Platform before the revised policy takes effect.
The "Last Updated" date at the top of this document indicates when the most recent revision was published. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your Personal Data.
Your continued use of the mpoyes platform after the effective date of a revised Privacy Policy constitutes your acceptance of the changes. If you do not agree to the revised terms, you may close your account by contacting customer support.
15Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or how mpoyes handles your Personal Data, please contact us using the details below:
[email protected]
Our Data Protection Officer and Indonesian-speaking support team are available 24 hours a day, 7 days a week (WIB). For data protection inquiries, please use the subject line "Privacy Inquiry" or "Data Protection Request" to ensure your message is routed to the appropriate team.
We are committed to addressing all privacy concerns promptly and transparently. You can expect an initial response within 48 hours and a full resolution within 30 days of your inquiry.