mpu138 Platform Privacy Notice

This page describes what we collect when you use mpu138 and how we keep that data protected. Every account holder provides personal information during registration and identity verification—your email, phone number, name, date of birth, and government ID. We also collect information about your account activity: which games you play, how often you visit, and the payment methods you use. This data is encrypted and stored on secure servers.

We at mpu138 use your data for four core purposes: verifying your identity to comply with applicable law, processing your deposits and withdrawals, detecting fraud and suspicious account activity, and improving our platform services. We do not sell or share your personal data with marketing companies or data brokers. We may share limited data with our payment partners (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking) only to the extent necessary to complete your transactions.

Our data practices comply with industry-standard encryption and access controls. We retain personal data for as long as your account is active and for a period after closure to comply with regulatory record-keeping requirements. You have the right to request access to, correction of, or deletion of your personal data, subject to legal obligations. This privacy notice applies to all users of mpu138 in jurisdictions where our services are available; our services are offered only where local law permits.

What Data We Collect and Why

We at mpu138 collect data in two phases: account setup and ongoing activity. During account setup, we ask for your email address, phone number, full name, date of birth, and a government-issued ID (KTP, passport, or driver's license). This data is mandatory for account verification. We use this information to confirm your identity and ensure you meet eligibility criteria under applicable law in your jurisdiction. Our KYC (Know-Your-Customer) process is required by our payment partners and regulatory frameworks to prevent fraud and money laundering.

Once your account is active, we collect data about your platform activity: your login history, games you play (sportsbook wagers, live-dealer sessions, slot spins), deposit and withdrawal amounts, and payment methods used. We also collect technical data: your IP address, device type, browser version, and session duration. This activity data helps us detect suspicious patterns—for example, multiple rapid withdrawals from different locations might indicate account compromise. We use this information to protect your account and comply with anti-fraud protocols.

How We Use Your Data on mpu138

We use collected data for these purposes: Identity verificationWe verify your name, date of birth, and ID document to confirm you are who you claim to be and that you meet age and eligibility requirements. Transaction processingWe share limited data (name, account number, transaction amount) with DANA, e-wallet, mobile banking, and bank partners to process your deposits and withdrawals. Fraud preventionWe analyse activity patterns to detect unusual behaviour, such as unusually large wagers, rapid-fire transactions, or logins from multiple locations, and flag these for manual review.

We also use data for regulatory complianceWe maintain records of all transactions and account activities to comply with financial-crime laws and gaming regulations. Platform improvementWe analyse aggregate, anonymised data to understand which games are popular, which payment methods are preferred (local payment vs. online payment virtual account, for example), and how users interact with our interface, allowing us to improve service quality. We do not use your data for marketing to third parties, and we do not build marketing profiles to sell to other companies.

Data Storage, Encryption, and Server Location

We store all personal data on encrypted servers using industry-standard encryption protocols (TLS 1.2 or higher for data in transit, AES-256 for data at rest). Your account password is hashed using modern algorithms; we do not store passwords in plain text. Access to your data is restricted to authorised personnel within our compliance and customer support teams, and all access is logged for audit purposes. Our servers may be located outside your jurisdiction; by using mpu138, you consent to your data being stored and processed in locations that may differ from where you reside.

We retain your personal data for as long as your account is active. After you close your account, we retain data for five to seven years to comply with financial crime reporting requirements and tax law, then delete it from our active systems. We may retain anonymised, aggregated data (such as "number of slots players in Jakarta region") indefinitely for statistical purposes, but this data cannot identify you personally. If you request deletion of your data before the retention period expires, we delete it to the extent legally permitted, but we may retain core transaction records if required by law.

Cookies and Tracking on mpu138

We use cookies and similar tracking technologies on mpu138 to maintain your login session, remember your language preference, and analyse how you navigate our platform. Session cookies are deleted when you close your browser; persistent cookies remain for up to 12 months. Cookies store no sensitive data—only your account ID, session token, and preferences. We do not use cookies to track you across other websites.

Our web server also logs technical information: your IP address, browser type, pages visited, and timestamp. This data helps us troubleshoot technical issues and detect potential security threats. We do not combine this technical data with your personal data (name, ID, phone) unless necessary to investigate fraud or account abuse. You can disable cookies in your browser settings, but this may limit functionality on mpu138.

Payment Partner Data Sharing

When you deposit via e-wallet, mobile banking, local payment, online payment, or bank transfer (e-wallet, mobile banking, local payment, online payment virtual account), we share specific data with those payment providers: your name, transaction amount, and account reference. This data is necessary for them to process your deposit. Each payment partner maintains their own privacy practices; we recommend reviewing their policies. We do not share any data beyond what is necessary to complete the transaction.

Similarly, when you withdraw, we share your destination account details (account name and number) with your bank or e-wallet provider to verify the withdrawal and complete the transfer. We do not share gaming history, bet details, or other account activity with payment partners unless required by law.

Your Rights and Data Requests on mpu138

You have the right to request access to the personal data we hold about you. To exercise this right, contact our support team and request a data-subject access request (DSAR). We will provide you with a copy of all your personal data we have collected, in a commonly used format, within 30 days of your request. You also have the right to correct inaccurate data—if your name, phone number, or address is incorrect in our system, contact us and we will update it.

You may request deletion of your personal data, subject to legal and regulatory exceptions. If you have an active account with remaining balance, we cannot delete your account data until the balance is withdrawn or forfeited. If your account is closed and complies with all regulatory retention requirements, we will delete your data upon request. Deletion may take up to 30 days to process across all our systems. Some data, such as transaction records for financial crime reporting, may be retained longer if required by law.

• 1
  Contact our support teamStep 1

  Email or chat with us to submit a data request. Clearly state whether you want access, correction, or deletion.

• 2
  Verify your identityStep 2

  We confirm your identity by verifying your registered email or phone number before processing your request.

• 3
  Receive response within 30 daysStep 3

  We respond with your data, correction, or deletion confirmation. Complex requests may require additional time.

Data Breach Notification and Security Incidents

If we discover that your personal data has been compromised in a security breach, we will notify you by email or phone as soon as reasonably possible. Our notification will describe the nature of the breach, what data may have been affected, and what steps we have taken to secure your account. We will not delay notification in order to investigate the breach; initial notification will be followed by a detailed report as investigation concludes.

We strongly encourage you to change your mpu138 password immediately if you suspect your account has been compromised. If you notice unauthorised transactions or unusual activity on your account, contact us at once. We will freeze your account pending investigation and will work with you to recover any losses if fraud is confirmed. We also recommend enabling two-factor authentication (2FA) to add an extra security layer—even if your password is compromised, 2FA prevents unauthorised access.

Our data security practices include regular security audits, penetration testing, and access-control reviews. However, no online system is completely immune to attack. By using mpu138, you acknowledge the inherent risks of transmitting data online and accept that we are not liable for security breaches caused by factors beyond our reasonable control (e.g., zero-day exploits, nation-state attacks). We commit to responding to breaches responsibly and notifying you promptly.

Changes to This Privacy Policy

We may update this privacy policy from time to time to reflect changes in our data practices or applicable law. When we make material changes, we will notify you by email or by posting a notice on mpu138. Your continued use of mpu138 after such notice constitutes acceptance of the updated policy. We encourage you to review this page regularly to stay informed of how we handle your data.

If you have questions about this privacy policy or our data practices, contact our support team via live chat or email. We respond to privacy enquiries within 48 business hours. For formal complaints about our data handling, you may escalate to our compliance team, or you may file a complaint with your local data-protection authority if your jurisdiction has one.