Privacy Policy

Section 01

Introduction

This Privacy Policy ("Policy") is published by MPL777 ("MPL777", "we", "us", "our") and applies to all users ("Player", "User", "you") who access or use the MPL777 platform located at https://mpl777.click, including all associated subdomains and mobile-optimised versions of the Platform.

MPL777 takes the privacy of its users seriously. This Policy sets out in clear, plain language how we collect, receive, store, process, transfer, and protect personal data in connection with the operation of our online casino and sports betting services. It also explains the rights available to you regarding the personal information we hold about you.

By registering an account on the MPL777 Platform, depositing funds, or otherwise using our services, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein. If you do not agree with this Policy, you should cease using the Platform and may contact us to request account closure.

Policy Scope: This Policy applies to all personal data processed by MPL777 in connection with the Platform, regardless of the device or channel through which you access our services. It covers Malaysian players as well as users accessing the Platform from other jurisdictions.

Section 02

Definitions

The following terms carry the meanings defined below throughout this Privacy Policy:

Personal Data: Any information that relates to an identified or identifiable natural person, including but not limited to names, email addresses, identification numbers, financial details, and IP addresses.
Data Subject: The individual to whom personal data relates — in the context of MPL777, this is typically the registered Player.
Data Controller: The entity that determines the purposes and means of processing personal data. MPL777 acts as the Data Controller for all personal data processed through the Platform.
Data Processor: A third party that processes personal data on behalf of MPL777 under a data processing agreement.
Processing: Any operation performed on personal data — including collection, storage, use, disclosure, alteration, or deletion.
Consent: A freely given, specific, informed, and unambiguous indication of agreement to the processing of personal data.
KYC: Know Your Customer — the identity verification process required by MPL777 in accordance with its international licensing obligations.
Cookie: A small text file stored on your device by the Platform for the purpose of session management, analytics, or personalisation.

Section 03

Data We Collect

MPL777 collects the minimum personal data necessary to operate our services, comply with our licensing obligations, prevent fraud, and provide you with a high-quality gaming experience. The categories of personal data we collect are detailed below:

Category	Examples of Data Collected	Purpose
Registration Data	Full name, username, email address, date of birth, country of residence, mobile number	Account creation, identity verification, communication
Identity Documents	Malaysian MyKad, driver's licence, passport, selfie with ID, proof of address	KYC verification, regulatory compliance, fraud prevention
Financial Data	Payment method details (e-wallet IDs, bank account numbers), transaction history, deposit and withdrawal records	Payment processing, anti-money laundering compliance, withdrawal verification
Technical Data	IP address, device type, browser type and version, operating system, session duration, login timestamps	Security monitoring, fraud detection, platform analytics
Usage Data	Games played, wager amounts, win/loss records, bonus usage, session times, feature interactions	Platform improvement, responsible gambling monitoring, personalisation
Communication Data	Live chat transcripts, email correspondence, support ticket content	Customer support, complaint resolution, quality assurance
Preference Data	Language settings, notification preferences, responsible gambling tool settings (e.g., deposit limits)	Platform personalisation, player welfare management

MPL777 does not intentionally collect sensitive personal data beyond what is required for KYC and regulatory compliance purposes. We do not collect racial or ethnic origin, political opinions, religious beliefs, or health data unless specifically required by a regulatory obligation.

Section 04

How We Collect Data

MPL777 collects personal data through the following channels and mechanisms:

Direct Collection: Data you provide voluntarily when registering an account, completing KYC, contacting support, or updating your account settings.
Automated Collection: Technical and usage data collected automatically via server logs, cookies, and similar tracking technologies when you access the Platform.
Payment Providers: Financial transaction data shared with MPL777 by payment processors when you initiate a deposit or withdrawal — including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, and Hong Leong Bank.
Third-Party Verification Services: Identity verification data obtained through authorised KYC service providers during the document review process.
Referral Programme: If you join MPL777 through a referral link, the referring Player's unique code and your registration activity may be recorded for referral reward processing.

Section 05

Data Processing & Legal Basis

MPL777 processes personal data only where a valid legal basis exists for doing so. The legal bases on which we rely are as follows:

Contractual Necessity: Processing necessary for the performance of the contract between you and MPL777 — including account management, payment processing, game access, and customer support.
Compliance with Legal Obligations: Processing required to comply with our international licensing obligations, anti-money laundering (AML) requirements, and counter-terrorist financing (CTF) regulations — including the collection and verification of identity documents under our KYC programme.
Legitimate Interests: Processing carried out for purposes that MPL777 considers to be in its legitimate interests, provided those interests are not overridden by your data protection rights — including fraud prevention, platform security monitoring, and responsible gambling analysis.
Consent: Where you have provided explicit consent to a specific processing activity — such as receiving marketing communications or opting into personalised game recommendations. You may withdraw consent at any time by updating your account preferences or contacting support.

Note on Malaysian Law: MPL777 acknowledges Malaysia's Personal Data Protection Act 2010 (PDPA) as a relevant reference framework for Malaysian users, although MPL777's data processing is governed primarily by the laws of its operating jurisdiction. MPL777 applies data protection standards consistent with internationally recognised best practices.

Section 06

How We Use Your Data

MPL777 uses the personal data we collect for the following specific purposes. We do not use your data for any purpose that is incompatible with what is described below:

Account Management: Creating, maintaining, and administering your MPL777 Player account, including login authentication and profile updates.
Payment Processing: Facilitating deposits and withdrawals via your chosen payment method, and maintaining accurate financial records of your transactions in MYR.
Identity Verification: Conducting KYC checks to verify your identity and age (21+), as required by our international licensing obligations.
Fraud and Security: Detecting, investigating, and preventing fraudulent activity, money laundering, multiple account creation, and other prohibited conduct on the Platform.
Responsible Gambling: Monitoring gameplay patterns to identify potential problem gambling behaviour and to administer deposit limits, session reminders, and self-exclusion tools at your request.
Customer Support: Responding to your enquiries, resolving account or payment disputes, and maintaining records of your support interactions for quality assurance purposes.
Platform Analytics: Analysing aggregated usage data to improve the Platform's performance, game library, and user experience.
Regulatory Compliance: Fulfilling our reporting and record-keeping obligations under applicable international gaming licensing requirements.
Marketing Communications: Sending promotional communications about MPL777 bonuses, new game releases, and special offers — only where you have opted in to receive such communications. You may opt out at any time.

Section 07

Data Sharing & Disclosure

MPL777 does not sell your personal data to third parties. We share personal data only in the following limited and defined circumstances:

Payment Service Providers: Financial data is shared with our payment processing partners (including e-wallet operators and banks operating in Malaysia) solely for the purpose of completing your deposit or withdrawal transaction.
KYC and Verification Services: Identity document data is shared with authorised third-party identity verification providers for the purpose of conducting regulatory-compliant KYC checks.
Game Providers: Limited technical data (such as player session IDs and wager amounts) may be shared with our game studio partners for the purpose of game delivery and dispute resolution.
Legal and Regulatory Authorities: MPL777 may disclose personal data to competent regulatory authorities, law enforcement agencies, or courts where required to do so by applicable law, a valid court order, or our licensing authority's requirements.
Business Transfers: In the event of a corporate restructuring, merger, or acquisition, your personal data may be transferred to the successor entity. You will be notified of any such transfer and given the opportunity to close your account before it takes effect.
Professional Advisors: MPL777 may share limited data with its legal counsel, auditors, or compliance consultants where strictly necessary for the provision of professional advice.

All third parties with whom MPL777 shares personal data are required to handle that data in a manner consistent with this Privacy Policy and applicable data protection standards. MPL777 enters into data processing agreements with all relevant third-party processors.

Section 08

Data Retention

MPL777 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, and for such additional periods as may be required by our international licensing obligations or applicable law. Our general data retention approach is as follows:

Active Accounts: Personal data associated with active Player accounts is retained for the duration of the account's active status, plus a minimum period of five (5) years following account closure to satisfy anti-money laundering record-keeping obligations.
KYC Documents: Identity verification documents are retained for a minimum of five (5) years following the date of verification or account closure, whichever is later.
Financial Transaction Records: Deposit and withdrawal transaction records are retained for a minimum of five (5) years, consistent with standard financial compliance requirements.
Support Communications: Customer support correspondence is retained for a period of three (3) years following the resolution of the relevant interaction.
Technical Logs: Server access logs and security monitoring data are typically retained for a period of twelve (12) months, unless required to be preserved for the purposes of a security investigation.
Marketing Consent Records: Records of your marketing consent preferences are retained for the duration of your account and for two (2) years after account closure.

Upon the expiry of applicable retention periods, MPL777 will securely delete or anonymise your personal data in accordance with our internal data destruction procedures.

Section 09

Data Security

MPL777 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our security framework includes:

256-bit SSL/TLS Encryption: All data transmitted between your device and the MPL777 Platform is encrypted using industry-standard Transport Layer Security protocols.
Encrypted Data Storage: Personal data and financial records stored in our systems are encrypted at rest using AES-256 encryption.
Access Controls: Access to personal data within MPL777's systems is restricted to authorised personnel on a strict need-to-know basis, enforced through role-based access controls and multi-factor authentication.
Regular Security Audits: Our infrastructure undergoes regular penetration testing and independent security audits to identify and remediate vulnerabilities.
Intrusion Detection Systems: Automated monitoring systems are in place to detect and respond to suspicious access patterns or potential data breaches in real time.
Two-Factor Authentication: Players are strongly encouraged to enable 2FA on their accounts for an additional layer of login security.

While MPL777 takes all reasonable precautions to protect your data, no method of electronic transmission or storage is completely secure. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, MPL777 will notify affected users without undue delay.

Your Role in Data Security: You are responsible for maintaining the confidentiality of your MPL777 account credentials. Use a strong, unique password. Do not share your login details with any third party. If you suspect unauthorised access to your account, contact MPL777 support immediately via live chat.

Section 10

Cookies & Tracking Technologies

MPL777 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device that help the Platform remember your preferences, maintain your session, and analyse usage patterns.

The types of cookies we use are as follows:

Essential Cookies: Required for the Platform to function correctly — including session management, login authentication, and security features. These cookies cannot be disabled without impairing Platform functionality.
Analytics Cookies: Used to collect aggregated information about how users interact with the Platform — including pages visited, session duration, and navigation paths. This data is used to improve Platform design and performance.
Preference Cookies: Used to remember your settings and preferences — such as language selection, responsible gambling tool configurations, and display preferences.
Security Cookies: Used to support our fraud detection and account security systems, including recognition of trusted devices and detection of unusual login activity.

You may manage or disable non-essential cookies through your browser settings. However, disabling essential cookies may prevent certain Platform features from functioning correctly. By continuing to use the MPL777 Platform, you consent to the use of cookies as described in this Policy.

Section 11

International Data Transfers

MPL777 operates under international gaming licensing and may process or store personal data on servers located outside of Malaysia. By using the Platform, you acknowledge that your personal data may be transferred to, stored, and processed in jurisdictions other than Malaysia.

Where personal data is transferred internationally, MPL777 ensures that appropriate safeguards are in place to protect the data in transit and at its destination. These safeguards include contractual clauses with receiving parties that require data to be treated with a standard of protection equivalent to that applied in the originating jurisdiction.

MPL777 does not transfer personal data to jurisdictions that do not provide an adequate level of data protection without implementing additional protective measures, in accordance with internationally recognised data protection standards.

Section 12

Your Data Rights

Subject to applicable law and certain exceptions, you have the following rights in relation to your personal data held by MPL777. To exercise any of these rights, please contact our support team as described in Section 16.

Right of Access: You have the right to request confirmation of whether MPL777 holds personal data about you, and to receive a copy of that data in a structured format.
Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data held by MPL777.
Right to Erasure: You have the right to request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purposes for which it was collected. This right is subject to MPL777's legal retention obligations, which may override your erasure request.
Right to Restrict Processing: You have the right to request that MPL777 restricts its processing of your personal data in certain defined circumstances, such as where you contest the accuracy of the data.
Right to Data Portability: Where processing is based on your consent or on contractual necessity, you have the right to receive your personal data in a machine-readable format and to have it transmitted directly to another data controller where technically feasible.
Right to Object: You have the right to object to the processing of your personal data where that processing is based on MPL777's legitimate interests. MPL777 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

MPL777 will respond to all valid data rights requests within 30 calendar days of receipt. Where a request is complex or numerous, we may extend this period by a further 60 days, in which case we will notify you accordingly.

Identity Verification for Rights Requests: For your security, MPL777 may require you to verify your identity before processing a data rights request. This is to ensure that your personal data is not disclosed to or modified by an unauthorised party.

Section 13

Minors & Age Verification

MPL777 is strictly an adult platform. The minimum age for registration and use of any MPL777 service is 21 years of age. We do not knowingly collect or process personal data from individuals under the age of 21.

As part of our KYC process, all registered players are required to submit proof of identity that confirms they are aged 21 or above before withdrawal functions are unlocked. MPL777 reserves the right to request age verification documentation at any time during a player's account lifecycle.

If MPL777 becomes aware that personal data has been collected from a person under the age of 21 — whether through a reporting mechanism, internal audit, or otherwise — that account will be immediately suspended, all data will be reviewed, and the account and associated balance will be handled in accordance with our Terms and Conditions and applicable regulatory guidance.

If you are a parent or guardian and believe your child may have registered on the MPL777 Platform without consent, please contact our support team immediately so we can investigate and take appropriate action.

Section 14

Third-Party Links & Services

The MPL777 Platform is operated as a closed, internally managed environment. We do not include outbound links to third-party websites within our gaming interface. However, where third-party services are integrated for the purpose of payment processing, game delivery, or identity verification, those services operate under their own privacy policies.

MPL777's Privacy Policy applies only to data processed by MPL777 directly and by its authorised data processors operating under data processing agreements. MPL777 is not responsible for the privacy practices of any third-party service provider beyond the scope of the contractual obligations we have established with them.

We encourage you to review the privacy policies of any payment provider you use to interact with MPL777 — including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, Maybank, CIMB, Public Bank, and Hong Leong Bank — as their data practices are independent of and separate from those of MPL777.

Section 15

Amendments to This Policy

MPL777 reserves the right to amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, licensing requirements, or operational procedures. Where amendments are material, we will notify registered Players via a Platform notification, email to their registered address, or a prominent notice on this page prior to the amended Policy taking effect.

The "Last Updated" date displayed at the top of this page will be revised each time this Policy is amended. We recommend that you review this Policy periodically, particularly following any notification of changes, to remain informed of how MPL777 handles your personal data.

Your continued use of the MPL777 Platform after any amendment to this Privacy Policy constitutes your acceptance of the revised Policy. If you do not agree with an amendment, you should cease use of the Platform and may request account closure by contacting our support team.

Section 16

Contact & Data Enquiries

If you wish to exercise any of your data rights, raise a concern about MPL777's data practices, request a copy of your personal data, or submit a data erasure request, please contact our Data Support team through the following channels:

Live Chat (Fastest): Available 24 hours a day, 7 days a week, via the in-platform live chat widget. For urgent data security concerns — such as suspected unauthorised account access — live chat is the recommended channel.
Email: [email protected] — For formal data rights requests, please use the subject line "Data Rights Request — [Your Username]" and clearly describe the nature of your request. Responses to formal data rights requests are provided within 30 calendar days. Email addresses are displayed as plain text and are not clickable links.

MPL777 treats all data rights requests with strict confidentiality. Your request will be handled solely by authorised personnel and will not affect your account standing, the quality of support you receive, or your access to any Platform feature.

Responsible Gambling Data Requests: If your data enquiry relates specifically to your responsible gambling settings — including deposit limits, self-exclusion status, or session history — please identify this clearly in your communication. Our player welfare team handles such requests as a priority. You may also visit our dedicated Responsible Gambling page for more information.