Privacy Policy

1. Introduction and Scope

This Privacy Policy applies to all personal information collected by mop500 through our website, mobile platform, customer support channels, and related services (collectively, "Services"). By creating an account, depositing funds, placing bets, or otherwise using mop500, you acknowledge that you have read, understood, and consent to the data practices described in this Privacy Policy.

mop500 operates as an online gaming platform serving Indonesian residents aged 21 and older. We are committed to complying with applicable data protection laws and regulations governing the collection, processing, and storage of personal information in Indonesia. This Privacy Policy should be read in conjunction with our Terms & Conditions and Responsible Gaming Policy.

2. Information We Collect

mop500 collects several categories of personal information to provide Services, verify your identity, process transactions, prevent fraud, and comply with legal obligations. The types of information we collect include:

2.1 Account Registration Information

When you create a mop500 account, we collect:

• Personal Identification: Full legal name as it appears on your Indonesian National Identity Card (KTP), date of birth, gender, and nationality.
• Contact Information: Residential address (street, city, province, postal code), email address, and mobile phone number.
• Account Credentials: Username and encrypted password for login authentication.

2.2 Identity Verification (KYC) Information

To comply with Know Your Customer regulations and prevent fraud, underage gambling, and money laundering, we collect:

• Government-Issued ID: Copy of your Indonesian National Identity Card (KTP) showing photograph, full name, date of birth, ID number, and expiration date.
• Proof of Address: Recent utility bill, bank statement, or government correspondence (dated within 3 months) confirming your residential address.
• Selfie Verification: Photograph of you holding your KTP next to your face to confirm document ownership.

All identity documents are stored in encrypted format on secure servers and accessed only by authorized personnel for verification purposes.

2.3 Payment and Financial Information

When you deposit funds or withdraw winnings, we collect:

• Bank Account Details: Bank name (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, etc.), account holder name, and account number for processing withdrawals.
• E-Wallet Information: Registered phone number or account ID for OVO, DANA, GoPay, ShopeePay, or LinkAja transactions.
• Transaction History: Records of all deposits, withdrawals, bet placements, winnings, losses, and bonus activity on your account.

Payment card information (if applicable) is tokenized and stored by our PCI-DSS compliant payment processors. mop500 does not directly store full credit or debit card numbers, CVV codes, or card PINs on our servers.

2.4 Gaming and Behavioral Information

To provide personalized services, prevent fraud, and fulfill responsible gaming obligations, we collect:

• Gameplay Data: Bets placed, games played (sports betting, live casino, slots, togel lottery, sabung ayam cockfighting, bandar bola football betting), wager amounts, outcomes, session duration, and playing patterns.
• Device and Technical Information: IP address, device type (mobile/desktop), operating system, browser type and version, screen resolution, language settings, and time zone.
• Cookies and Tracking Technologies: Session cookies, persistent cookies, web beacons, and similar technologies that track your interactions with our platform (see Section 8 for detailed cookie policy).

2.5 Communications and Support Interactions

When you contact mop500 customer support via live chat, WhatsApp, email, or in-app messaging, we collect and retain:

• Content of your messages and inquiries;
• Support ticket records, resolution notes, and timestamps;
• Feedback, reviews, and survey responses you voluntarily provide.

3. How We Use Your Information

mop500 uses collected personal information for the following legitimate business purposes:

3.1 Account Management and Service Delivery

• Creating, maintaining, and authenticating your account;
• Processing deposits, withdrawals, and refunds;
• Providing access to sports betting, casino games, slots, togel, and other gaming products;
• Calculating and crediting winnings, bonuses, and loyalty rewards;
• Communicating account updates, transaction confirmations, and service notifications.

3.2 Identity Verification and Fraud Prevention

• Verifying your age, identity, and residency to comply with legal requirements;
• Preventing underage gambling, duplicate accounts, and fraudulent registrations;
• Detecting and preventing money laundering, bonus abuse, collusion, and other prohibited activities;
• Monitoring gameplay patterns for signs of problem gambling or self-exclusion breaches.

3.3 Legal Compliance and Regulatory Obligations

• Complying with Know Your Customer (KYC) and Anti-Money Laundering (AML) regulations;
• Responding to lawful requests from Indonesian government authorities, law enforcement, or courts;
• Maintaining transaction records as required by financial regulations;
• Enforcing our Terms & Conditions and resolving disputes.

3.4 Customer Support and Communication

• Responding to your inquiries, complaints, and support requests via live chat, WhatsApp, or email;
• Sending important service announcements, security alerts, and policy updates;
• Notifying you of account activity, deposit confirmations, withdrawal processing, and bonus eligibility.

3.5 Marketing and Promotional Communications (With Consent)

• Sending promotional offers, bonus announcements, and special event invitations (only if you opt in during registration or account settings);
• Personalizing promotions based on your gaming preferences and VIP tier status;
• Conducting surveys and requesting feedback to improve services.

You may opt out of marketing communications at any time through your account settings or by contacting support. Opting out does not affect essential service communications (transaction confirmations, security alerts, policy updates).

3.6 Platform Improvement and Analytics

• Analyzing gameplay trends, popular games, and user preferences to optimize our game portfolio;
• Improving website performance, mobile responsiveness, and user interface design;
• Testing new features and conducting A/B experiments to enhance user experience;
• Generating aggregated, anonymized statistics for business intelligence (individual users are not identifiable in these reports).

4. Legal Basis for Processing Personal Data

mop500 processes your personal information based on the following legal grounds:

• Contractual Necessity: Processing is necessary to fulfill our contract with you (providing gaming services, processing transactions, managing your account) as outlined in our Terms & Conditions.
• Legal Obligation: Processing is required to comply with Indonesian laws, including KYC/AML regulations, age verification requirements, and financial record-keeping mandates.
• Legitimate Interest: Processing is necessary for our legitimate business interests, including fraud prevention, platform security, service improvement, and internal analytics, provided these interests do not override your fundamental rights.
• Consent: For marketing communications and non-essential data processing, we rely on your explicit, freely given consent, which you may withdraw at any time.

5. How We Share Your Information

mop500 does not sell, rent, or trade your personal information to third parties for their marketing purposes. We share your information only in the following limited circumstances:

5.1 Service Providers and Business Partners

We engage trusted third-party service providers to perform functions on our behalf, including:

• Payment Processors: To facilitate deposits and withdrawals through Indonesian banks (BCA, BRI, BNI, Mandiri) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja).
• Game Providers: To deliver casino games, live dealer tables, and slots. These providers may collect limited technical data (device type, IP address) to ensure game integrity.
• Identity Verification Services: To authenticate government-issued IDs and verify user identities during KYC processing.
• Cloud Hosting Providers: To store data on secure servers with encryption and access controls.
• Customer Support Platforms: To manage live chat, email ticketing, and WhatsApp communications.

All service providers are contractually obligated to protect your information, use it only for specified purposes, and comply with applicable data protection standards.

5.2 Legal and Regulatory Authorities

We may disclose your information to Indonesian government agencies, law enforcement, or courts when:

• Required by law, regulation, or legal process (subpoena, court order);
• Necessary to investigate suspected fraud, money laundering, or criminal activity;
• Requested by regulatory bodies overseeing gaming and financial services in Indonesia;
• Needed to protect mop500's legal rights, property, or safety, or that of our users.

5.3 Business Transfers

If mop500 undergoes a merger, acquisition, sale of assets, or bankruptcy, your personal information may be transferred to the successor entity as part of the transaction. You will be notified via email and/or prominent notice on our website before your information becomes subject to a different privacy policy.

5.4 Aggregated and Anonymized Data

We may share aggregated, anonymized statistics about our user base, gameplay trends, and platform performance with business partners, investors, or the public. This data does not identify individual users and cannot be reverse-engineered to reveal personal information.

6. Data Security Measures

mop500 employs industry-standard security technologies and organizational procedures to protect your personal information against unauthorized access, disclosure, alteration, or destruction:

• Encryption: All data transmitted between your device and mop500 servers is protected by 256-bit SSL/TLS encryption, the same standard used by major banks.
• Secure Storage: Personal and financial data is stored on PCI-DSS compliant servers with restricted physical and logical access controls.
• Access Controls: Only authorized mop500 personnel with legitimate business need can access your personal information. Access is logged and audited regularly.
• Tokenization: Payment card information is tokenized (replaced with non-sensitive equivalents) and never stored in full by mop500.
• Regular Security Audits: We conduct periodic penetration testing, vulnerability assessments, and third-party security audits to identify and remediate risks.
• Employee Training: All mop500 staff receive data protection training and are bound by confidentiality agreements.

7. Data Retention

mop500 retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods include:

Data Category	Retention Period	Reason
Account Registration Data	Duration of account + 5 years after closure	Legal compliance, fraud prevention
KYC Documents	5 years after account closure	Regulatory requirements (AML/KYC)
Transaction History	7 years after transaction date	Financial record-keeping regulations
Gameplay Records	3 years after session	Dispute resolution, responsible gaming monitoring
Support Communications	2 years after resolution	Service quality improvement
Marketing Consent	Until consent is withdrawn	Compliance with opt-out requests

After retention periods expire, personal information is securely deleted or anonymized. Anonymized data (stripped of identifiers) may be retained indefinitely for analytics purposes.

8. Cookies and Tracking Technologies

mop500 uses cookies, web beacons, and similar tracking technologies to enhance user experience, analyze site traffic, and deliver personalized content. Cookies are small text files stored on your device by your web browser.

8.1 Types of Cookies We Use

• Essential Cookies: Required for core platform functionality, including login authentication, session management, and security features. These cannot be disabled without impairing site usability.
• Performance Cookies: Collect anonymous usage statistics (pages visited, session duration, error messages) to help us optimize platform performance.
• Functional Cookies: Remember your preferences (language, currency display, game favorites) to personalize your experience.
• Advertising Cookies: Track your interaction with promotional content to measure campaign effectiveness and deliver relevant bonus offers (only if you consent to marketing).

8.2 Managing Cookie Preferences

You can control cookie settings through your browser preferences. Most browsers allow you to:

• View and delete existing cookies;
• Block all cookies or only third-party cookies;
• Receive notifications before cookies are set.

Note that disabling essential cookies may prevent you from logging in or using certain mop500 features. Disabling performance or functional cookies may reduce personalization and require repeated login.

9. Your Privacy Rights

As a mop500 user and Indonesian resident, you have the following rights regarding your personal information:

• Right of Access: Request a copy of the personal information we hold about you, including account details, transaction history, and gameplay records.
• Right to Rectification: Update or correct inaccurate or incomplete personal information through your account settings or by contacting support.
• Right to Erasure (Right to be Forgotten): Request deletion of your personal information, subject to legal retention requirements (e.g., we must retain financial records for 7 years per Indonesian regulations).
• Right to Restrict Processing: Request temporary suspension of data processing in certain circumstances (e.g., while we verify accuracy of disputed information).
• Right to Data Portability: Receive your personal information in a structured, machine-readable format and request transfer to another service provider where technically feasible.
• Right to Object: Opt out of marketing communications and certain data processing activities based on legitimate interests.
• Right to Withdraw Consent: Revoke previously given consent for marketing or optional data processing at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of these rights, contact mop500 support via email at [email protected], live chat, or WhatsApp. We will respond to your request within fourteen (14) business days. You may also be required to verify your identity before we process your request to protect against fraudulent access.

10. Third-Party Links and Services

mop500 may contain links to third-party websites, payment processors, or social media platforms. This Privacy Policy applies only to mop500's collection and use of your information. Third-party sites have their own privacy policies governing their data practices. We are not responsible for the privacy practices or content of external sites. Review their privacy policies before providing any personal information.

11. Children's Privacy

mop500 Services are intended exclusively for individuals aged 21 years and older. We do not knowingly collect personal information from anyone under 21. If we discover that a user is under 21, we will immediately terminate their account, void all transactions and winnings, and delete their personal information from our systems. Parents or guardians who believe their child has provided information to mop500 should contact us immediately at [email protected].

12. International Data Transfers

Your personal information is primarily stored on servers located within Indonesia. However, certain service providers (cloud hosting, game studios, payment processors) may operate internationally, resulting in data transfers outside Indonesia. When such transfers occur, mop500 ensures adequate protection through:

• Contractual clauses requiring service providers to implement equivalent data protection standards;
• Verification that receiving countries have adequate data protection laws;
• Use of secure, encrypted transmission channels for all cross-border data flows.

13. Changes to This Privacy Policy

mop500 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. Material changes will be communicated via email to registered users and prominent notice on the mop500 website at least thirty (30) days before taking effect. The "Last Updated" date at the top of this page indicates when the policy was most recently revised. Continued use of mop500 Services after changes take effect constitutes acceptance of the updated Privacy Policy.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or mop500's data practices, please contact us through any of the following channels:

• Email: [email protected] (responses within 6 hours)
• Live Chat: Available 24/7 on the mop500 platform
• WhatsApp: +62 812 3456 7890 (24/7 Indonesian-speaking support)

For privacy-specific inquiries, please include "Privacy Policy" in your message subject line to ensure prompt routing to our data protection team.