SuperMPO Privacy Policy – Personal Data Protection Commitment for Malaysian Members

1Introduction & Scope of the Privacy Policy

This Privacy Policy is published by the management and operations team SuperMPO (supermpo.best) and applies to all individuals who use our platform in any capacity – including website visitors, registered members, and former members whose data is still retained within the permitted period.

SuperMPO is committed to ensuring your privacy is respected and protected at all times. This policy is designed to give you a clear understanding of our data processing practices so you can make informed decisions about your use of the SuperMPO platform. We believe that transparency in data handling is not only a legal responsibility, but also the foundation of trust between us and our Malaysian player community.

This Privacy Policy covers all products and services offered under the SuperMPO brand, including the online casino platform, Live Casino, table games, lottery, cricket betting and e-sports betting, as well as all related interactions including customer support, marketing communications, and the VIP Rewards programme.

2Types of Personal Data We Collect

SuperMPO collects your personal data through three main channels: information you provide directly during registration and platform use, data generated automatically as you use our services, and in limited circumstances, information from legitimate third-party sources.

Data you provide directly:

• Full name and an active Malaysian phone number (required during registration)
• Email address (for account communications and authorised promotions)
• Date of birth (for age verification – you must be 18 years of age or older)
• Payment information – including e-wallet account numbers (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow) or FPX details used for deposits and withdrawals
• Identity verification documents such as a copy of your MyKad (when required for the KYC/AML process)
• Information you submit when contacting the SuperMPO customer support team

Automatically generated data:

• IP address and general geolocation information
• Device type, operating system, and web browser version used
• Platform activity logs – including login records, bets placed, games played, and financial transactions
• Cookie data and related tracking technologies (explained further in Section 6)
• Records of gaming session duration and platform usage patterns

3How SuperMPO Uses Your Personal Data

SuperMPO uses collected personal data solely for legitimate purposes necessary for platform operations, quality service delivery, and compliance with applicable legal requirements. The following outlines the specific uses of your data:

• Account management: Creating, verifying, and managing your SuperMPO account – including the registration process, identity verification, password recovery, and account limit management
• Financial transaction processing: Processing deposits via Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and FPX, and handling withdrawals to your account securely and accurately
• Gaming service delivery: Enabling you to play slots, Live Casino, table games, lottery, cricket betting, and e-sports, as well as accurately maintaining your gameplay records and account balance
• Fraud prevention and security: Detecting and preventing money laundering, identity fraud, account misuse, and activities that violate SuperMPO's Terms & Conditions
• Customer support: Handling your enquiries, complaints, and support requests through available support channels
• VIP Rewards Programme: Calculating and updating your VIP points, managing VIP tier benefits, and sending notifications related to the loyalty programme
• Service communications: Sending important account notifications, terms updates, security advisories, and transaction information
• Platform improvements: Analysing usage patterns in aggregated and anonymised form to improve user experience, platform performance, and the scope of our services
• Legal compliance: To fulfil legal obligations related to anti-money laundering (AML), reporting requirements and requests from competent regulatory authorities

4Legal Basis for Data Processing

SuperMPO processes your personal data on valid legal bases. Understanding these bases helps you know your rights in each data processing context.

• Contract: Processing necessary to fulfil the service contract between you and SuperMPO – including account management and financial transactions. Without this processing, we are unable to deliver the services you have requested
• Legitimate interests: Processing for fraud prevention, platform security, usage pattern analysis for service improvement, and business risk management that does not affect your fundamental rights
• Legal compliance: Processing required to comply with legal obligations imposed on SuperMPO, including KYC (Know Your Customer) and AML (Anti-Money Laundering) requirements
• Consent: For marketing communications and non-essential cookies, SuperMPO relies on your consent, which may be withdrawn at any time

5Data Sharing with Third Parties

SuperMPO does not sell, lease or disclose your personal data to third parties for their own marketing purposes. However, in the course of platform operations, there are limited situations where data may need to be shared with other parties:

• Payment processors: Data required to process deposits and withdrawals is shared with the payment service providers you use (such as Touch 'n Go, GrabPay, Boost, ShopeePay, or your FPX bank). Only the minimum necessary data is shared, and these providers are bound by strict confidentiality obligations
• Game providers: To enable access to third-party games available on SuperMPO, the necessary session and balance information is shared with the relevant game providers (such as Evolution Gaming, Pragmatic Play, and PG Soft) within a secure environment
• Relevant authorities: SuperMPO may be required to disclose certain data to the relevant authorities when lawfully compelled to do so by applicable law, court order, or an official investigation into criminal activity such as money laundering
• Technical service providers: Cloud infrastructure providers, cybersecurity services, and analytics tools used by SuperMPO may have limited access to certain data in the course of providing their services to us. All such providers are bound by strict data processing agreements

6Cookies & Tracking Technologies

SuperMPO uses cookies and similar tracking technologies to enhance your platform experience, maintain account security, and understand how our platform is used. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

• Essential cookies (required): Required for core SuperMPO platform functions such as login session authentication, account security and language preference memory. These cookies cannot be disabled without affecting platform functionality
• Performance cookies: Collects information on how visitors use the platform – including the most frequently visited pages, errors encountered, and page load times. This data is used in aggregated form to improve platform performance
• Functional cookies: Allows the platform to remember your preferences such as selected language and account settings, providing a more personalised experience
• Analytics cookies: Used to understand general platform usage patterns for product improvement purposes. This data is collected anonymously

You can manage cookie usage through your web browser settings. However, disabling essential cookies may affect certain functions of the SuperMPO platform. For more information on how to manage cookies in your browser, please refer to the relevant browser help documentation.

7Data Security & Protection Infrastructure

SuperMPO invests seriously in both technical and organisational security infrastructure to protect your personal data from unauthorised access, accidental disclosure, alteration, or destruction. Key security measures we have implemented include:

• Encryption in transit: All data transmitted between your device and SuperMPO's servers is encrypted using TLS (Transport Layer Security) with 256-bit SSL encryption – the same standard used by leading Malaysian banking institutions such as Maybank and CIMB
• Encryption at rest: Sensitive data, including financial information and identity verification documents, is stored in encrypted form on secure servers
• Secure password management: Account passwords are stored in hashed form using a strong cryptographic algorithm — no one, including SuperMPO staff, can view your original password
• Internal access controls: Access to members' personal data among SuperMPO staff is restricted to individuals who require it to carry out their responsibilities, and all access is logged for audit purposes
• Continuous security monitoring: An automated monitoring system operates 24 hours a day to detect suspicious activity, intrusion attempts and anomalies that could potentially compromise data security
• Regular security audits: SuperMPO conducts regular security assessments and penetration testing to identify and address vulnerabilities before they can be exploited

8Data Retention Period

SuperMPO retains your personal data only for as long as necessary for the purposes outlined in this Privacy Policy, or as required to comply with applicable legal obligations. Our data retention policy is as follows:

• Active account data: For as long as your account remains active on SuperMPO, your account data and gameplay records will be retained to ensure continued and uninterrupted service delivery
• Data after account closure: Upon account closure, SuperMPO will retain basic account data and financial transaction records for the minimum period required by anti-money laundering laws and applicable financial regulations – typically between five and seven years
• Support communication logs: Records of interactions with the customer support team are retained for the period necessary for complaint resolution and service quality improvement purposes
• Analytics data: Usage data collected for analytics and platform improvement purposes is stored in anonymised form once it is no longer needed for active analysis

When your data is no longer needed and there is no legal obligation to retain it, SuperMPO will delete or anonymise it in a secure and irreversible manner.

9Your Privacy Rights as a SuperMPO Member

As a SuperMPO member, you hold important privacy rights that we are committed to respecting and facilitating. These rights are:

To exercise any of the above rights, please contact the SuperMPO privacy team by email at support@supermpo.best with "Privacy Rights Request" in the subject line, along with a specific description of your request. We will respond within 30 days and may require identity verification before processing your request.

10Children's Privacy & Protection of Minors

SuperMPO strictly prohibits use of the platform by anyone under the age of 18. This platform is for adult entertainment only. We do not knowingly collect personal data from minors.

SuperMPO's registration process requires verification of an active Malaysian phone number and an age confirmation declaration. Where necessary, SuperMPO also conducts additional age verification through identity documents. Should SuperMPO discover that personal data has been collected from anyone under the age of 18, we will delete that data and close the account in question immediately.

11Privacy Policy Amendments

SuperMPO reserves the right to amend, update or replace this Privacy Policy from time to time to reflect changes in our data processing practices, new legal requirements or improvements to how we protect member privacy. When material changes are made, SuperMPO will notify you through one or more of the following methods:

• In-platform notifications on SuperMPO displayed when you log in
• Email sent to the address registered to your account
• Prominent notices displayed on the supermpo.best homepage

The "Last Updated" date at the top of this document will always reflect the date of the most recent amendment. It is your responsibility to review this Privacy Policy page periodically. Your continued use of the SuperMPO platform after any amendment takes effect constitutes your acceptance of the revised policy.

12How to Contact Us Regarding Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or how SuperMPO handles your personal data, we encourage you to reach out to us directly. The SuperMPO privacy and support team is ready to assist you.

Please contact us by email at support@supermpo.best by stating "Privacy Enquiry" or "Privacy Rights Request" in your email subject line to ensure your enquiry is handled by the right team promptly. For data access or deletion requests, please include sufficient identity verification information so we can confirm your identity before processing the request.

Alternatively, you may use the Live Chat function within the SuperMPO platform for general privacy enquiries. Our Live Chat team operates 24 hours a day, 7 days a week, and can assist you in both Bahasa Malaysia and English. For more formal or complex privacy complaints, communication via email is recommended.

SuperMPO is committed to addressing all privacy-related enquiries and complaints seriously and within a reasonable timeframe. We aim to respond to all privacy-related emails within 5 business days, and to complete privacy rights requests within 30 days of receiving a complete request.