Privacy Policy

1. Introduction

mpi555 is committed to safeguarding the privacy and personal data of every individual who interacts with our platform. As an internationally operated online betting platform serving players primarily based in Indonesia, we handle significant volumes of personal, financial, and behavioral data every day. We take this responsibility seriously.

This Privacy Policy is designed to be transparent, comprehensive, and written in clear language. We want you to understand — without ambiguity — what happens to your data from the moment you visit our website through to the closure of your account. If you have any questions about any aspect of this policy, our support team is available around the clock at [email protected].

This policy applies to all data processing activities conducted by mpi555 in connection with the mpi555 website, any associated mobile-optimized interface, customer support interactions, and marketing communications. It does not apply to third-party websites or services that may be linked from our platform.

2. Definitions

The following definitions apply throughout this Privacy Policy:

• "Personal Data" means any information relating to an identified or identifiable natural person, including name, email address, device identifier, IP address, financial account details, and behavioral data.
• "Processing" means any operation performed on personal data, including collection, storage, use, disclosure, erasure, or destruction.
• "Data Controller" means mpi555, the entity that determines the purposes and means of processing your personal data.
• "Data Processor" means any third-party entity that processes personal data on behalf of mpi555 under a binding data processing agreement.
• "User" / "You" means any individual who accesses, registers on, or interacts with the mpi555 platform.
• "KYC" means Know Your Customer — the identity verification process required for account approval and withdrawal processing.
• "Cookies" means small data files placed on your device by the mpi555 website to enable functionality, analytics, and personalization.
• "Third Party" means any entity other than you and mpi555, including payment processors, game studios, analytics providers, and regulatory authorities.

3. Data We Collect

mpi555 collects personal data in the following categories:

3.1 Identity Data

• Full legal name as stated on your national identity document
• Date of birth
• Nationality and country of residence
• Indonesian National Identity Card (KTP) number or passport number
• Photographs and selfie verification images submitted during KYC

3.2 Contact Data

• Email address (primary account contact channel)
• Mobile phone number (used for two-factor authentication and account alerts)
• Residential address (required for KYC address verification)

3.3 Financial Data

• Bank account details for deposit and withdrawal purposes (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata)
• E-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja)
• Transaction history: deposit amounts, withdrawal amounts, dates, and payment method references
• Source-of-funds declarations where required by enhanced due diligence procedures

3.4 Technical and Usage Data

• IP address and approximate geographic location
• Device type, operating system, and browser version
• Session timestamps, login history, and session duration
• Pages visited, game titles accessed, bet history, and platform navigation patterns
• Referring URLs and traffic source identifiers

3.5 Communications Data

• Records of customer support interactions, including live chat transcripts and email correspondence
• Survey responses and feedback submissions
• Marketing preference records (opt-in and opt-out status for promotional communications)

4. How We Collect Data

mpi555 collects personal data through the following channels:

4.1 Directly From You

The majority of the personal data we hold is provided directly by you during account registration, KYC verification, deposit and withdrawal requests, and customer support interactions. You choose what to share; however, failure to provide mandatory information (such as KYC documents) may result in restrictions on your account functionality.

4.2 Automatically Through Platform Use

When you visit and interact with the mpi555 website, our servers and analytics tools automatically collect technical data including your IP address, device information, session behavior, and browsing patterns within the platform. This data collection is facilitated in part by cookies and similar tracking technologies, as described in Section 8.

4.3 From Third Parties

We may receive limited data from trusted third parties, including:

• Identity verification and fraud screening services that augment our KYC process
• Payment processors confirming transaction status and flagging potential fraud indicators
• Marketing attribution partners that identify how you arrived at the mpi555 platform
• Regulatory and law enforcement authorities where legally required to receive or share information

5. Purpose of Processing

We process your personal data for the following specific purposes:

6. Legal Basis for Processing

mpi555 processes personal data on the following legal bases:

• Contractual Necessity: Processing required to fulfill our obligations under the Terms & Conditions you have accepted, including account management, payment processing, and customer support.
• Legal Obligation: Processing required to comply with applicable anti-money laundering (AML) regulations, KYC obligations, responsible gaming mandates, and lawful orders from regulatory or law enforcement authorities.
• Legitimate Interests: Processing conducted in pursuit of our legitimate business interests — including fraud prevention, platform security, product improvement, and responsible gaming monitoring — where those interests do not override your fundamental rights and freedoms.
• Consent: Processing for marketing communications and optional personalization features, conducted solely on the basis of your explicit opt-in consent, which you may withdraw at any time by contacting [email protected] or updating your acco unt preferences.

7. Data Sharing

mpi555 does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We share personal data only in the following limited and controlled circumstances:

7.1 Payment Service Providers

To process deposits and withdrawals, we share the minimum necessary financial and identity data with our verified Indonesian banking and e-wallet partners, including BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, OVO, DANA, GoPay, ShopeePay, and LinkAja. These providers are bound by their own regulatory obligations and data protection standards under Indonesian financial law.

7.2 Identity Verification Services

During KYC processing, identity documents and verification images may be shared with our contracted third-party identity verification providers. These providers operate under binding data processing agreements and are prohibited from using your data for any purpose other than identity verification on behalf of mpi555.

7.3 Game Content Providers

When you access games provided by third-party studios — such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Pocket Games Soft — limited technical data (such as a pseudonymous player identifier and session token) is transmitted to those providers to facilitate gameplay. No directly identifiable personal data such as your name, bank details, or KTP number is shared with game studios.

7.4 Regulatory and Legal Authorities

We may be required to disclose personal data to competent legal authorities, regulatory bodies, or law enforcement agencies where we receive a lawful order or are under a legal obligation to do so. In such cases, we will disclose only the minimum data required and, where legally permissible, will notify you of the disclosure.

7.5 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of assets involving mpi555, personal data held by us may be transferred to the successor entity as part of the transaction. In such circumstances, we will notify affected users via email prior to the transfer and ensure that the receiving entity is bound by data protection obligations at least equivalent to those in this policy.

8. Cookies & Tracking Technologies

mpi555 uses cookies and similar client-side tracking technologies to operate the platform effectively, improve user experience, and analyze platform performance. Below is a summary of the cookie categories we use:

8.1 Managing Your Cookie Preferences

Strictly necessary cookies are required for the platform to function and cannot be disabled. All other cookie categories are optional. You may adjust your browser settings to block or delete cookies at any time; however, disabling functional cookies may impair certain platform features such as session persistence and personalized game recommendations.

8.2 Do Not Track

Some browsers transmit a "Do Not Track" (DNT) signal to websites. mpi555 currently acknowledges DNT signals by limiting analytics data collection to aggregated, anonymized statistics for users whose browsers transmit this preference. We do not cross-reference DNT-flagged sessions with individually identifiable account data.

9. Data Retention

mpi555 retains personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable law. Our standard retention periods are as follows:

• Account and identity data: Retained for the duration of the active account relationship, plus a minimum of five (5) years following account closure, in compliance with anti-money laundering record-keeping obligations.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, as required by applicable financial regulations.
• KYC documents (scanned identity documents, selfies): Retained for five (5) years following account closure or the last transaction, whichever is later.
• Customer support communications: Retained for three (3) years from the date of the final interaction in a support thread.
• Marketing preference records: Retained for three (3) years from the date of last interaction, or until withdrawal of consent, whichever comes first.
• Technical and usage logs: Retained for twelve (12) months in active storage, then archived for a further twelve (12) months before permanent deletion.

Upon expiry of the applicable retention period, personal data is securely and permanently deleted or anonymized in a manner that prevents re-identification. You may request early deletion of certain data categories by contacting us at [email protected], subject to our legal retention obligations described above.

10. Data Security

mpi555 implements a comprehensive set of technical and organizational security measures designed to protect your personal data against unauthorized access, accidental loss, disclosure, alteration, or destruction. Our security infrastructure includes:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the mpi555 servers is encrypted using industry-standard Transport Layer Security (TLS 1.3).
• Data Encryption at Rest: Sensitive personal and financial data stored in our databases is encrypted using AES-256 encryption.
• Two-Factor Authentication (2FA): Account logins can be secured with an additional one-time code sent to your registered mobile number, which we strongly recommend enabling.
• Access Controls: Internal access to personal data is restricted on a strict need-to-know basis. Customer support agents and compliance staff access only the data necessary to perform their specific function.
• Regular Security Audits: Our platform infrastructure undergoes regular independent security assessments, penetration testing, and vulnerability scanning.
• Incident Response Plan: In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected users within seventy-two (72) hours of becoming aware of the incident, in accordance with applicable data protection law.

While we employ robust security measures, no digital platform can guarantee absolute security. You also play a role in keeping your account secure by using a strong, unique password and not sharing your login credentials with anyone.

11. Your Rights

As a user of mpi555, you have the following rights with respect to your personal data. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request":

11.1 Right of Access

You have the right to request a copy of all personal data we hold about you, along with information about how it is being used. We will provide this information within thirty (30) calendar days of receiving a valid request.

11.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. For account-linked data such as your name or date of birth, corrections must be supported by updated identity documentation.

11.3 Right to Erasure

You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent (for consent-based processing). This right is subject to our legal data retention obligations — we cannot delete records that we are legally required to retain under AML or financial regulations.

11.4 Right to Restriction

You may request that we restrict the processing of your personal data in certain circumstances, such as while a data accuracy dispute is being resolved, or where you have objected to processing based on legitimate interests and we are assessing your objection.

11.5 Right to Data Portability

Where processing is based on your consent or contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format (such as CSV or JSON) for transfer to another service provider.

11.6 Right to Object

You have the right to object at any time to the processing of your personal data for direct marketing purposes. You also have the right to object to processing based on our legitimate interests, on grounds relating to your particular situation. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.

11.7 Right to Withdraw Consent

Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. To withdraw marketing consent, contact [email protected] or update your notification preferences within your account settings.

12. Minors

mpi555 is strictly an adults-only platform. Access to our services is prohibited for individuals under 21 years of age. We do not knowingly collect personal data from anyone under 21. All account registrations are subject to age verification, and we reserve the right to request proof-of-age documentation at any stage of the account lifecycle.

If you are a parent or guardian and believe that a minor has accessed the platform or provided us with personal data without your consent, please contact us immediately at [email protected]. We will promptly investigate the matter, close the account, void all associated wagers, return any deposited funds to the original payment source, and permanently delete all personal data associated with the minor's account.

13. International Data Transfers

mpi555 operates internationally and may process your personal data on servers and through service providers located outside Indonesia. Where personal data is transferred to countries that do not have data protection laws equivalent to those in your jurisdiction, we ensure appropriate safeguards are in place, including:

• Binding contractual clauses (standard contractual clauses) with recipient entities that impose data protection obligations equivalent to those in this policy
• Data processing agreements with all third-party processors that restrict their use of your data to the specific services they provide on our behalf
• Technical safeguards including encryption of data in transit and at rest, regardless of the jurisdiction in which it is processed

By using mpi555, you acknowledge that your personal data may be processed in jurisdictions outside Indonesia, subject to the safeguards described above.

14. Policy Amendments

mpi555 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform functionality. When material changes are made, we will notify registered users by email to the address associated with their account and display a prominent notice on the platform homepage for a minimum of fourteen (14) calendar days before the changes take effect.

We encourage you to review this policy periodically. The "Last Updated" date at the top of this page reflects the most recent revision. Your continued use of the mpi555 platform after the effective date of any amendment constitutes your acceptance of the updated Privacy Policy. If you do not agree with the amended policy, you must discontinue use of the platform and contact us to close your account.

Archived versions of this Privacy Policy are available upon written request to [email protected].

15. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or our data practices, please reach out to our dedicated privacy support team:

• Email: [email protected]
• Subject Line: "Privacy Policy Inquiry" or "Data Rights Request"
• Support Hours: 24 hours a day, 7 days a week (WIB, UTC+7)
• Response Time: Acknowledgment within 48 hours; full response within 30 calendar days
• Languages: English and Indonesian-speaking agents available at all times

For questions about your account's Terms & Conditions, please visit our Terms & Conditions page. For responsible gaming support and self-exclusion requests, please visit our Responsible Gaming page.