Privacy Policy

1. Introduction

This Privacy Policy governs the collection, use, disclosure, and protection of personal information by mp500 ("we," "us," "our") in connection with the operation of our online betting platform at https://mp500.cam (the "Website"). This policy applies to all users ("you," "your") who access or use our services, including sports betting, live casino, slot games, and related features.

mp500 respects your privacy and is committed to protecting your personal data in accordance with international best practices and Indonesian data protection regulations. We understand that trust is essential in the online gaming industry, and we take our responsibility to protect your information seriously.

By registering an account with mp500, accessing the Website, or using our services, you acknowledge that you have read, understood, and agreed to this Privacy Policy. If you do not agree with any part of this policy, you must immediately cease using our services.

2. Information We Collect

mp500 collects various types of information to provide, maintain, and improve our services, ensure platform security, comply with legal obligations, and deliver a personalized gaming experience. The categories of information we collect include:

2.1 Personal Identification Information

When you register an account with mp500, we collect the following personal information:

• Full Name: Your legal name as it appears on your government-issued identification
• Date of Birth: To verify you are at least 21 years of age
• Email Address: For account communication and verification
• Mobile Phone Number: For two-factor authentication and account security
• Residential Address: To confirm Indonesian residency and comply with KYC requirements
• Government-Issued ID: KTP (Kartu Tanda Penduduk), passport, or driver's license for identity verification
• Selfie Photograph: To confirm the ID belongs to you
• Proof of Address: Utility bills or bank statements dated within the last 3 months

2.2 Financial Information

To process deposits and withdrawals, we collect:

• Bank account details (bank name, account number, account holder name) for Indonesian banks including BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, OCBC NISP, BSI
• E-wallet information (OVO, DANA, GoPay, ShopeePay, LinkAja account details)
• Transaction history (deposits, withdrawals, bet history)
• Payment method preferences

Note: mp500 does not store full credit card numbers or CVV codes. Payment processing is handled by PCI-DSS compliant third-party providers.

2.3 Gaming Activity Data

To operate our services and maintain game integrity, we collect:

• Betting history (sports bets, casino wagers, game sessions)
• Game preferences and play patterns
• Bonus claims and wagering progress
• Account balance and transaction logs
• Communication with customer support

2.4 Technical and Usage Information

When you access mp500, we automatically collect:

• Device Information: Device type, operating system, browser type and version
• IP Address: To verify your location and detect fraudulent activity
• Cookies and Tracking Data: Session cookies, preference cookies, analytics cookies (see Section 8 for details)
• Log Data: Access times, pages viewed, clicks, navigation paths
• Geolocation Data: Approximate location based on IP address (not precise GPS coordinates)

2.5 Communication Data

We retain records of:

• Live chat conversations with customer support
• Email correspondence
• Support tickets and resolutions
• Feedback and survey responses

3. How We Use Your Information

mp500 uses your personal information for the following purposes:

3.1 Account Management and Service Delivery

• Creating and maintaining your player account
• Processing deposits, withdrawals, and bet settlements
• Verifying your identity and age (KYC compliance)
• Managing bonuses, promotions, and loyalty rewards
• Providing customer support and resolving disputes
• Communicating important account updates and service changes

3.2 Legal and Regulatory Compliance

• Complying with Know Your Customer (KYC) and Anti-Money Laundering (AML) regulations
• Preventing underage gambling (21+ age verification)
• Detecting and preventing fraud, collusion, and bonus abuse
• Cooperating with law enforcement investigations when legally required
• Maintaining records for audit and regulatory purposes

3.3 Platform Security and Integrity

• Monitoring for suspicious activity and unauthorized access
• Detecting and blocking fraudulent transactions
• Preventing multiple account creation by the same individual
• Identifying bots, automated scripts, or exploit attempts
• Enforcing our Terms & Conditions

3.4 Service Improvement and Personalization

• Analyzing user behavior to improve website functionality
• Personalizing game recommendations based on your preferences
• Conducting market research and customer satisfaction surveys
• Testing new features and optimizing user experience
• Tailoring promotional offers relevant to your interests

3.5 Marketing Communications (with Consent)

• Sending promotional emails about bonuses, tournaments, and new games
• SMS notifications about exclusive offers (opt-in only)
• Push notifications via mobile app (if installed, with your permission)

You can opt out of marketing communications at any time via your account settings or by clicking "unsubscribe" in any promotional email.

4. Data Sharing and Disclosure

mp500 does not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we may share your data in the following limited circumstances:

4.1 Service Providers and Business Partners

We share data with trusted third-party service providers who assist us in operating the platform:

• Payment Processors: Banks and e-wallet providers to process deposits and withdrawals
• Game Providers: Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, and other studios that power our games
• Identity Verification Services: KYC/AML compliance providers that verify your identity documents
• Cloud Hosting Services: Secure data centers that store our servers and databases
• Analytics Providers: Tools like Google Analytics to understand website usage (anonymized data only)
• Customer Support Tools: Live chat and ticketing systems used by our support team

All third-party providers are contractually obligated to protect your data and use it only for the specific services they provide to mp500. They are prohibited from using your information for their own purposes.

4.2 Legal Obligations

We may disclose your information if required by law or in response to:

• Valid legal processes (subpoenas, court orders, search warrants)
• Requests from law enforcement or regulatory authorities
• Protection of mp500's legal rights, property, or safety
• Prevention of fraud, illegal activity, or violations of our Terms & Conditions

4.3 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your personal information may be transferred to the acquiring entity. We will notify you via email and/or a prominent notice on our website of any change in ownership or use of your personal data.

4.4 With Your Consent

We may share your information with other third parties when you have given explicit consent, such as participating in a joint promotion with a partner brand.

5. Data Security

mp500 employs industry-leading security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction:

5.1 Encryption

• SSL/TLS Encryption: All data transmitted between your device and our servers is encrypted using 256-bit SSL/TLS protocols
• Database Encryption: Personal data stored in our databases is encrypted at rest
• Password Hashing: Your account password is hashed using bcrypt with salt, making it unreadable even to mp500 employees

5.2 Access Controls

• Role-based access: Only authorized personnel with legitimate business need can access personal data
• Two-factor authentication (2FA) required for administrative access
• Regular access audits and employee background checks
• Strict confidentiality agreements for all staff handling personal data

5.3 Infrastructure Security

• Secure cloud hosting with enterprise-grade firewalls
• DDoS protection and intrusion detection systems
• Regular security audits and penetration testing by independent firms
• Automated backup systems with encrypted offsite storage
• 24/7 security monitoring and incident response team

5.4 Player Account Security

You can enhance your account security by:

• Choosing a strong, unique password (minimum 8 characters, mix of letters, numbers, symbols)
• Enabling two-factor authentication (SMS or authenticator app)
• Never sharing your login credentials with anyone
• Logging out after each session, especially on shared devices
• Reporting suspicious account activity to support immediately

6. Data Retention

mp500 retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

6.1 Active Accounts

For active player accounts, we retain:

• Account Data: Maintained indefinitely while your account is active
• Transaction History: Kept for the lifetime of the account plus 7 years after closure (for audit and dispute resolution)
• Communication Logs: Retained for 3 years from the date of the last interaction
• Gaming Activity: Betting history retained for 7 years (regulatory requirement)

6.2 Closed Accounts

When you close your account:

• Personal identification data is retained for 7 years to comply with AML/KYC regulations
• Financial transaction records are retained for 7 years for audit purposes
• Marketing preference data is deleted immediately, and you are removed from all promotional lists
• Gaming activity logs are anonymized after 7 years (identifying information removed, statistical data retained)

6.3 Inactive Accounts

If you do not log in to your mp500 account for 24 consecutive months, your account is considered dormant. After 36 months of inactivity, we may close your account and archive your data according to the closed account retention schedule.

7. Your Data Rights

Under international data protection principles, you have the following rights regarding your personal information:

7.1 Right to Access

You have the right to request a copy of the personal data we hold about you. To exercise this right, contact [email protected] with your account details. We will provide a comprehensive data export within 30 days.

7.2 Right to Rectification

If any of your personal information is inaccurate or incomplete, you can update it directly via your account settings or by contacting customer support. We will correct errors within 7 business days.

7.3 Right to Erasure (Right to be Forgotten)

You may request deletion of your personal data by closing your account and requesting erasure. However, we may be legally required to retain certain data for up to 7 years for regulatory compliance (AML, KYC, taxation). After the mandatory retention period, all personal identifiers will be permanently deleted.

7.4 Right to Data Portability

You can request a machine-readable export of your personal data (CSV or JSON format) to transfer to another service provider.

7.5 Right to Object

You can object to:

• Processing of your data for marketing purposes (opt-out via account settings)
• Automated decision-making that significantly affects you (e.g., algorithmic bonus eligibility)

7.6 Right to Restrict Processing

You can request that we limit how we use your data in certain circumstances, such as while disputing the accuracy of your information.

7.7 Right to Withdraw Consent

Where we process your data based on consent (e.g., marketing emails), you can withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, contact: [email protected] with your full name, account username, and the specific right you wish to exercise. We will respond within 30 days.

8. Cookies and Tracking Technologies

mp500 uses cookies and similar tracking technologies to enhance your browsing experience, analyze website usage, and deliver personalized content.

8.1 What Are Cookies?

Cookies are small text files stored on your device when you visit a website. They allow the website to remember your preferences and recognize you on subsequent visits.

8.2 Types of Cookies We Use

Cookie Type	Purpose	Duration
Essential Cookies	Required for login, account security, and core website functionality	Session (deleted when browser closes)
Preference Cookies	Remember your language, currency, and display settings	12 months
Analytics Cookies	Track website usage to improve performance (Google Analytics)	24 months
Marketing Cookies	Deliver personalized promotions and measure campaign effectiveness	12 months

8.3 Managing Cookies

You can control cookies through your browser settings:

• Block All Cookies: Prevents any cookies from being set (may break website functionality)
• Delete Cookies: Remove existing cookies from your device
• Third-Party Cookies Only: Block cookies from external services while allowing first-party mp500 cookies

Note: Disabling essential cookies will prevent you from logging in or using core mp500 features.

9. International Data Transfers

mp500 operates internationally and may transfer your personal data to servers located outside Indonesia. When we transfer data internationally, we ensure adequate protection through:

• Using data centers that comply with international security standards (ISO 27001, SOC 2)
• Implementing standard contractual clauses approved by data protection authorities
• Ensuring all international partners meet equivalent data protection standards

Your data may be processed in jurisdictions with different data protection laws than Indonesia, but we maintain the same high standards of protection regardless of location.

10. Children's Privacy

mp500 services are strictly intended for adults aged 21 and over. We do not knowingly collect personal information from individuals under 21 years of age. If we become aware that a minor has provided us with personal data, we will immediately:

• Terminate the account
• Delete all associated personal information
• Void any bets and winnings
• Refund the original deposit amount (if verified)

Parents or guardians who believe their child has registered an account with mp500 should contact us immediately at [email protected].

11. Changes to This Privacy Policy

mp500 reserves the right to update this Privacy Policy at any time to reflect changes in our practices, legal requirements, or business operations. When we make material changes, we will:

• Update the "Last Updated" date at the bottom of this page
• Send an email notification to your registered email address
• Display a prominent notice on the website for 30 days

Continued use of mp500 services after policy changes constitutes your acceptance of the revised Privacy Policy. We encourage you to review this page periodically to stay informed about how we protect your data.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or how mp500 handles your personal data, please contact us:

• Email: [email protected]
• Subject Line: "Privacy Inquiry - [Your Account Username]"
• Customer Support: Available 24/7 via live chat on the mp500 website
• Response Time: We aim to respond to all privacy inquiries within 30 days

For data access requests, deletion requests, or exercising any of your data rights, please provide:

• Your full name as registered on mp500
• Your account username
• The specific request or concern
• Proof of identity (to prevent unauthorized access to your data)