Mpo383 Privacy Policy — Malaysian User Data Protection

Welcome to the mpo383 Privacy Policy. This document explains in detail how MPO383 ("we", "Platform") collects, stores, processes, and protects your personal information when you use our website or mobile app in mpo383.fun.

We operate on the principle of full transparency. You have the right to know exactly what data we hold about you, what it is used for, and who can access it. This policy is written in plain language — not confusing legal jargon — so every user in Malaysia can make genuinely informed decisions about their privacy.

By registering an account or continuing to use the mpo383 platform, you agree to the terms set out in this Privacy Policy. If you do not agree with any part of this policy, you are advised to stop using the platform and contact our support team to close your account.

Mpo383 only collects information that is genuinely necessary to provide a secure, fair, and legally compliant service. We do not collect data excessively. The following are the categories of information we collect:

We may also collect information automatically through cookies and similar tracking technologies when you browse our platform. This includes pages you visit, session duration, and actions you take within the platform. More details about cookies are available in Section 6.

• Voluntary information: Any additional information you voluntarily share through support chat, email, or feedback forms.
• Third-party information: In limited cases, we may receive information from payment providers or third-party identity verification bodies we work with.

Every piece of data we collect has a clear and legitimate purpose. We do not use your data for purposes unrelated to providing mpo383 services. Here is how your data is specifically used:

• Account Management: Creating, verifying, and maintaining your user account so you can log in securely at all times.
• Transaction processing: Processing deposits and withdrawals accurately and promptly using the financial information you provide.
• Identity Verification (KYC): Verifying that you are who you claim to be, fulfilling anti-money laundering and fraud prevention legal requirements.
• Platform security: Detecting and preventing unauthorized access, fraud, duplicate accounts, and other suspicious activity.
• Service communications: Sending important notifications related to your account — such as transaction confirmations, security alerts, and policy updates.
• Platform improvements: Analyzing usage patterns in aggregate (not individually) to improve functionality, performance, and user experience.
• Legal compliance: Meeting reporting and record-keeping obligations required under Malaysian law.
• Promotional communications: Sending information about relevant mpo383 promotions and offers — only if you have given consent to receive them.

Mpo383 does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. This is a non-negotiable commitment.

However, in the course of platform operations, we may share necessary information with the following categories of parties, subject to strict confidentiality agreements:

• Payment providers: Required transaction details are shared with payment gateways (FPX, Touch 'n Go, GrabPay, Boost, etc.) solely to process your deposits and withdrawals.
• Identity verification providers: Your KYC documents may be verified through accredited third-party verification services bound by strict data protection agreements.
• Technology service providers: Companies providing the server infrastructure, cybersecurity, and analytics tools we use — all subject to PDPA-compliant data processing agreements.
• Law enforcement authorities: We are required to comply with court orders, warrants, or lawful directives from Malaysian authorities or relevant international bodies.
• Audit and compliance: Independent auditors verify our compliance with applicable security standards and regulations.

Protecting your data from unauthorized access, loss, or misuse is our top technical and operational priority. mpo383 implements the following security layers:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and our servers is encrypted using industry-standard encryption protocols.
• Data-at-rest encryption: Sensitive data stored on our servers — including KYC documents and financial information — is encrypted using AES-256.
• Two-Factor Authentication (2FA): An additional security layer available on all accounts to ensure only you can access your account.
• Continuous monitoring: An intrusion detection system operating 24/7 monitors for unusual activity and responds automatically.
• Fund segregation: User funds are held in a fully segregated trust account, separate from the company's operational accounts.
• Internal access controls: mpo383 staff only have access to the data required for their specific roles. Access to sensitive data is strictly controlled and audited.
• Periodic Security Testing: Penetration testing and security audits are conducted periodically by independent third parties.

While we take all reasonable steps to protect your data, no system can be guaranteed 100% secure. In the event of any data breach affecting your information, we are committed to notifying you within 72 hours of the breach being detected, in line with international data protection best practices.

The mpo383 platform uses cookies and similar tracking technologies to enhance the user experience, maintain session security, and understand platform usage patterns in aggregate.

You can control or delete cookies through your browser settings at any time. However, deleting essential cookies may affect platform functionality — for example, you may need to log in again on each visit.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding the personal data we hold about you. We are committed to respecting and facilitating the exercise of these rights:

• Right of access: You have the right to request a copy of the personal data we hold about you at any time.
• Right to rectification: You have the right to request that we correct any inaccurate or incomplete data.
• Right to erasure: Under certain circumstances, you have the right to request that we delete your personal data, subject to legal record-keeping obligations.
• Right to withdraw consent: You may withdraw consent for marketing communications at any time without affecting your access to core services.
• Right to object to processing: You have the right to object to the processing of your data for specific purposes, subject to operational and legal requirements.

To exercise any of the above rights, please contact our privacy team by email at [email protected] stating the type of request. We will process your request within 14 business days.

Mpo383 only retains your personal data for as long as necessary to fulfil the purpose for which it was collected or to comply with relevant legal obligations.

• Active account data: Retained for the duration your account remains active and for 7 years after account closure, in line with Malaysia's anti-money laundering legal requirements.
• Transaction records: Retained for a minimum of 7 years in accordance with the Income Tax Act and AMLA (Anti-Money Laundering Act) requirements.
• KYC documents: Retained for the period required by applicable law, typically 5 to 7 years.
• Security logs: Retained for 2 years for security incident investigation purposes if required.
• Support communication data: Retained for 3 years for historical reference and service improvement.

When data is no longer needed and there is no legal obligation to retain it, we will securely delete or anonymise it using NIST-compliant deletion procedures.

The mpo383 platform is strictly for individuals aged 18 and above. We enforce a zero-tolerance policy against registration and use of the platform by minors.

• We do not knowingly collect personal data from individuals under the age of 18.
• Our KYC process is specifically designed to verify a user's age before their first withdrawal is processed.
• Should we discover that personal data of a minor has been collected inadvertently, we will delete that data immediately and close the relevant account.

Mpo383 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or platform improvements.

• When material changes are made, we will display a clear notice on the platform at least 7 days before the changes take effect.
• The "updated" date at the top of this policy will be revised to reflect the latest version.
• For significant changes affecting your privacy rights, we will send a notification directly to your registered email address.
• Continued use of the platform after the amendment's effective date constitutes your acceptance of the updated policy.

We encourage you to review this page periodically. The version history of our privacy policy is available upon request.

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, the mpo383 privacy team is ready to assist:

• Privacy Email: [email protected] — for all privacy and data protection requests.
• Live Chat: Available 24/7 directly on the platform — typical response time under 3 minutes.
• Service language: Bahasa Melayu and English.

For general enquiries unrelated to privacy, you may also visit our FAQ us or read our Terms and Conditions for more information on your rights and responsibilities when using the platform.