Data Protection & Privacy
Your personal data belongs to you. This Privacy Policy explains exactly what information mpofun collects, how we use it, who we share it with, how long we keep it, and what rights you have as a member of our platform.
Clause 1
Throughout this Privacy Policy, the following terms carry the meanings defined below:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information that identifies or can reasonably identify a living individual, either directly (e.g., full name, national identity card number) or indirectly (e.g., device identifier, account username combined with usage data). |
| "Processing" | Any operation performed on Personal Data, including collection, storage, organisation, use, disclosure, transfer, erasure, or destruction. |
| "Platform" | The mpofun website at https://mpofun.cam, including all associated pages, mobile-optimised interfaces, and related digital services. |
| "We", "Us", "Our" | mpofun — the internationally registered operating entity that owns and operates the Platform. |
| "You", "Member", "User" | Any individual who visits, registers on, or uses the Platform in any capacity. |
| "Third Party" | Any natural or legal person other than you, mpofun, or mpofun's data processors acting under direct instruction. |
| "Data Processor" | A service provider engaged by mpofun to process Personal Data on our behalf and under our documented instructions (e.g., payment gateways, KYC verification providers, cloud hosting partners). |
| "KYC" | Know Your Customer — the identity verification process required to confirm member age, identity, and payment method ownership. |
Clause 2
This Privacy Policy applies to all Personal Data collected by mpofun in connection with your use of the Platform — whether you are a registered member, a visitor browsing without an account, or a prospective member who has commenced but not completed the registration process.
This Policy applies regardless of the device or browser you use to access the Platform. It covers data collected directly via the Platform, through automated tracking technologies (such as cookies and server logs), and through third-party data processors engaged by mpofun to facilitate Platform operations.
This Policy should be read alongside our Terms & Conditions, which govern the overall legal relationship between you and mpofun. In the event of any conflict between this Privacy Policy and the Terms & Conditions on a data-protection matter, this Privacy Policy shall prevail.
Clause 3
The categories of Personal Data that mpofun may collect about you are set out in the table below, along with the context in which each category is collected:
| Category | Specific Data Points | When Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, gender, KTP (Indonesian national ID) number, passport number (if provided) | Account registration and KYC verification |
| Contact Data | Email address, Indonesian mobile phone number, city of residence (e.g., Jakarta, Surabaya, Bandung, Bali) | Account registration and profile updates |
| Financial Data | Bank account name and number (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata, BSI), e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja) — not full card numbers | Deposit and withdrawal requests |
| Transaction Data | Deposit amounts, withdrawal amounts, bet history, game session records, bonus redemptions, win/loss summaries — all in IDR | Ongoing platform use |
| Technical Data | IP address, browser type and version, operating system, device model, screen resolution, session timestamps, referring URL | Automatically on each Platform visit |
| Usage Data | Pages visited, features used, game titles accessed, session duration, click-path data | Automatically via analytics tools |
| Communications Data | Content and metadata of support chat transcripts, email correspondence, and any complaint or dispute submissions | When you contact our support team |
| Responsible Gaming Data | Self-imposed limit settings (deposit limits, loss limits, session timers), cooling-off requests, self-exclusion records | When responsible gaming tools are activated |
We do not collect sensitive categories of Personal Data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data, except where a member voluntarily discloses such information in the course of a support interaction — in which case it is handled with heightened confidentiality.
Clause 4
The majority of Personal Data we hold about you is provided by you directly in the course of creating and managing your mpofun Account — including registration forms, KYC document uploads, deposit/withdrawal requests, and communications with our support team.
When you visit the Platform, certain Technical Data and Usage Data are collected automatically by our servers and analytics systems. This includes your IP address, device identifiers, and browsing behaviour on our pages. This data is used for security monitoring, performance optimisation, fraud detection, and aggregate analytics.
In operating the Platform, mpofun engages Data Processors who may collect data on our behalf or share data with us. These include:
Clause 5
mpofun processes your Personal Data only for the specific, legitimate purposes described below. We do not process Personal Data in a manner that is incompatible with these stated purposes.
| Purpose | Data Categories Used |
|---|---|
| Account creation and management | Identity Data, Contact Data |
| Identity and age verification (KYC) | Identity Data, Financial Data |
| Processing deposits and withdrawals | Financial Data, Transaction Data, Identity Data |
| Delivering betting, gaming, and lottery services | Transaction Data, Usage Data, Technical Data |
| Fraud prevention and security monitoring | Technical Data, Transaction Data, Identity Data |
| Regulatory compliance and anti-money-laundering checks | Identity Data, Financial Data, Transaction Data |
| Customer support and dispute resolution | Communications Data, Transaction Data, Identity Data |
| Responsible gaming programme delivery | Responsible Gaming Data, Transaction Data |
| Platform analytics and performance improvement | Usage Data, Technical Data (aggregated and anonymised where possible) |
| Sending service-essential communications (e.g., transaction confirmations, security alerts) | Contact Data, Transaction Data |
| Sending optional promotional communications (with your consent) | Contact Data, Usage Data |
If you have opted in to receive promotional communications from mpofun, you may withdraw that consent at any time by contacting our support team. Withdrawal of consent does not affect the lawfulness of processing conducted prior to withdrawal.
Clause 6
mpofun processes Personal Data on one or more of the following legal bases, as applicable to each processing activity:
Clause 7
mpofun shares Personal Data with Data Processors who provide services essential to Platform operations. All Data Processors are engaged under written data processing agreements that restrict them from using your data for any purpose other than the specific services they provide to mpofun. Current categories of Data Processors include:
mpofun may disclose Personal Data to governmental authorities, law enforcement agencies, or regulatory bodies where we are legally required to do so, or where disclosure is necessary to protect the rights, property, or safety of mpofun, our members, or the public.
In the event of a merger, acquisition, restructuring, or sale of all or part of mpofun's business, Personal Data held at the time of such transaction may be transferred to the acquiring entity. Members will be notified of any such transfer and of any material changes to how their data is processed as a result, with reasonable advance notice via the email address registered on their Account.
mpofun does not sell, rent, lease, or otherwise commercially exploit your Personal Data to unaffiliated third parties for their own marketing or commercial purposes. This commitment is absolute and not subject to any exception.
Clause 8
As an internationally operated platform, some of your Personal Data may be transferred to, stored on, or processed by servers located outside Indonesia. Where such transfers occur, mpofun takes appropriate steps to ensure that your data receives a level of protection consistent with the principles of this Privacy Policy, including:
By registering an Account on the Platform, you acknowledge that your Personal Data may be transferred to and processed in jurisdictions outside Indonesia as described in this clause.
Clause 9
mpofun retains Personal Data for no longer than is necessary for the purposes for which it was collected, subject to any overriding legal obligations that require retention for a specified minimum period. The general retention periods applicable to each data category are as follows:
| Data Category | Retention Period | Basis |
|---|---|---|
| Identity & Contact Data | Duration of active Account + 5 years post-closure | Legal and regulatory obligations |
| Financial & Transaction Data | Duration of active Account + 7 years post-closure | Anti-money-laundering compliance |
| KYC Documents | Duration of active Account + 5 years post-closure | Legal and regulatory obligations |
| Technical & Usage Data | Up to 24 months from collection | Legitimate interests (fraud prevention, analytics) |
| Communications Data | 3 years from last interaction | Legitimate interests (dispute resolution) |
| Responsible Gaming Data | Duration of Account + 5 years post-closure | Player protection obligations |
| Marketing Consent Records | Until consent is withdrawn + 2 years thereafter | Legal basis documentation |
Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised so that it can no longer be attributed to an identifiable individual. Anonymised or aggregated data may be retained indefinitely for statistical and analytical purposes.
Clause 10
mpofun implements a comprehensive set of technical and organisational security measures designed to protect your Personal Data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include, but are not limited to:
Clause 11
Cookies are small text files placed on your device by a website when you visit it. They allow the website to recognise your device on subsequent visits and to remember certain preferences or session states. mpofun uses cookies and similar tracking technologies (including local storage and session tokens) to operate the Platform effectively.
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Session management, login authentication, security tokens — essential to Platform functionality | Session / up to 24 hours |
| Performance & Analytics | Aggregated usage statistics, page-load performance monitoring, error tracking | Up to 12 months |
| Functional | Remembering your preferred language, game lobby layout, and responsible gaming settings | Up to 12 months |
| Fraud Prevention | Device fingerprinting tokens used to detect multi-accounting and bot activity | Up to 6 months |
You may control cookie placement through your browser settings. Most browsers allow you to refuse non-essential cookies, delete existing cookies, or receive a notification before a cookie is set. Please note that disabling strictly necessary cookies will prevent you from logging in to your Account and will severely limit Platform functionality. Disabling other cookies will not prevent you from using the Platform but may affect the quality of your experience.
Clause 12
As a member of mpofun, you have the following rights in relation to your Personal Data. To exercise any of these rights, contact our support team at [email protected]. We will respond to verified requests within a reasonable period — in most cases within 30 days.
Request a copy of the Personal Data we hold about you, including the purposes for which it is processed and any third parties with whom it has been shared.
Request correction of any inaccurate or incomplete Personal Data we hold about you. For Account details, some corrections can be made directly within your Account dashboard.
Request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, subject to overriding legal retention obligations.
Request that we suspend active processing of your Personal Data in certain circumstances — for example, while a dispute about its accuracy is being resolved.
Request a structured, machine-readable export of Personal Data you have provided to us, where processing is based on consent or contractual necessity.
Object to processing of your Personal Data where we rely on legitimate interests as the legal basis — including objecting to receipt of optional marketing communications at any time.
mpofun will not discriminate against any member for exercising their data protection rights. However, exercising certain rights — such as requesting deletion of all data — may make it impossible for us to continue operating your Account, as some data is essential to fulfil our legal and contractual obligations.
Clause 13
The mpofun Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect Personal Data from individuals under the age of 21. Age verification is a mandatory component of our KYC process for all members.
If we become aware that we have inadvertently collected Personal Data from a person under the age of 21, we will take immediate steps to delete that data and close the associated Account. If you believe that a minor has registered on the Platform, please notify us immediately at [email protected] so that we can investigate and act promptly.
Clause 14
The Platform may, from time to time, reference or link to third-party services, game studio environments, or informational resources that are operated independently of mpofun. This Privacy Policy applies solely to data processed by mpofun in connection with the Platform. It does not extend to any third-party website, application, or service — even where a link to that resource is accessible from within the Platform.
mpofun is not responsible for the privacy practices, data collection activities, or security standards of any third-party operator. We encourage you to review the privacy policy of any third-party service before submitting Personal Data to it.
Clause 15
mpofun reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform functionality. When we make a material change — one that substantively affects how we process your Personal Data or your rights in respect of it — we will:
Your continued use of the Platform following the effective date of any revision constitutes your acceptance of the updated Privacy Policy. If you do not agree with the revised Policy, you should stop using the Platform and contact us to close your Account.
Clause 16
If you have any questions, concerns, or complaints about this Privacy Policy, the way in which mpofun handles your Personal Data, or if you wish to exercise any of your data subject rights, please contact us through the following channels:
Where you submit a data subject rights request, we may need to verify your identity before processing the request. This is a standard security measure to ensure that Personal Data is not disclosed to an unauthorised person. You will not be charged a fee for exercising your rights unless a request is manifestly unfounded or excessive, in which case we reserve the right to charge a reasonable administrative fee or decline the request, with written explanation.
Our Privacy Commitments
Six core principles that govern how we handle every piece of personal information you entrust to us.
Every connection between your device and the mpofun Platform is secured with TLS 1.2+ (256-bit SSL). Your financial data and KYC documents are also encrypted at rest using AES-256 standards — the same level used by international financial institutions.
mpofun has a zero-tolerance policy against selling, renting, or commercially exploiting your personal data. Your information is used exclusively to deliver the Platform services you have signed up for — nothing else, to no one else outside our operational processors.
We collect only the data that is strictly necessary for each specific purpose. If we do not need a piece of information to operate your account, process your transactions, or comply with the law, we simply do not collect it.
Access, correct, export, or delete your data at any time. Our support team processes verified data rights requests within 30 days. We do not penalise members for exercising their data protection rights and will always provide a clear written response.
We do not store your data indefinitely. Each data category has a defined maximum retention period aligned with legal requirements and operational necessity. Once the period expires, data is securely deleted or anonymised — automatically and without you needing to request it.
Every third-party processor that handles your data — from payment partners like BCA and OVO to KYC providers — operates under a binding data processing agreement. They may only use your data for the specific purpose we have engaged them for and must meet our security standards.
Our support team is available around the clock to help with any questions about how your data is handled, to process data rights requests, or to assist with account security concerns.
For privacy-related enquiries, email us at [email protected] or use live chat on the homepage. We respond to all written requests within 30 days. • 21+ Only • Play Responsibly