Privacy Policy

mposurga ("the Platform", "we", "us", "our") is an English-language online casino and sports betting platform accessible at https://mposurga.cam, serving registered players primarily in Malaysia. We are committed to maintaining the privacy, confidentiality, and security of the personal data you provide to us when using the Platform.

This Privacy Policy ("Policy") sets out how mposurga collects, processes, stores, shares, and protects your personal data in connection with your use of the Platform and all associated services. It also explains the rights you hold over your personal data and how you may exercise those rights.

This Policy should be read alongside our Terms & Conditions, which govern the overall contractual relationship between you and mposurga. By creating an account or otherwise using the Platform, you confirm that you have read this Policy and consent to the processing of your personal data as described herein.

For the purposes of this Policy, the following definitions apply:

mposurga collects personal data in two broad categories: information you provide directly, and information generated automatically through your use of the Platform.

Data you provide directly:

• Full legal name, date of birth, and gender as provided during registration.
• Residential address, including city and postcode (e.g., Kuala Lumpur, Petaling Jaya, Penang, Johor Bahru, Shah Alam).
• Email address and mobile phone number.
• Government-issued identification documents submitted for KYC verification, including Malaysian IC, passport, or driving licence.
• Payment information, including bank account numbers, eWallet identifiers (Touch 'n Go eWallet, Boost, GrabPay), and card details used to process deposits and withdrawals.
• Communications you initiate with mposurga support, including live chat transcripts, email correspondence, and any feedback or complaints submitted.
• Self-exclusion preferences, deposit limits, and responsible gambling settings you configure within your Account.

Data collected automatically:

• IP address, device type, operating system, and browser version at the time of access.
• Geolocation data at the session level (country and approximate region only — not precise GPS coordinates).
• Betting and gaming activity, including wagers placed, games accessed, session duration, and deposit/withdrawal history.
• Navigation data, including pages visited, click paths, and features used within the Platform.
• Cookie identifiers and similar tracking technologies as described in Section 10.

mposurga collects your personal data through the following primary channels:

• Registration forms: When you create your mposurga Account, you provide core identity and contact information directly.
• KYC submission: Documents and selfies submitted through our secure verification interface during the identity verification process.
• Payment processing: Financial data is captured when you initiate deposits or withdrawals via DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, Touch 'n Go eWallet, Boost, GrabPay, Visa, Mastercard, BTC, or USDT.
• Customer support interactions: When you contact us via live chat, WhatsApp, or email, the content of those communications is recorded and stored.
• Automated systems: Session logs, cookies, and analytics tools capture behavioural and technical data automatically during your use of the Platform.
• Third-party KYC providers: Where permitted, we may receive identity verification results from trusted third-party KYC service providers who process your submitted documents on our behalf.

mposurga processes your personal data for the following specific purposes. We do not process data for any purpose incompatible with those listed below:

mposurga does not use your personal data for automated decision-making that produces significant legal or similarly significant effects on you, except where required for fraud prevention and AML compliance, in which case you retain the right to request human review of any automated decision.

mposurga relies on the following legal bases when processing your personal data:

• Contract performance: Processing necessary to fulfil our contractual obligations to you, including account management, payment processing, and customer support.
• Legal obligation: Processing required by applicable law, including KYC identity verification, anti-money laundering (AML) monitoring, and age verification.
• Legitimate interests: Processing undertaken for our legitimate business interests — including fraud prevention, platform security, and service analytics — where such interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for optional purposes such as marketing communications, where you have provided clear, affirmative consent. You may withdraw consent at any time by contacting [email protected] or updating your communication preferences in your Account settings.

mposurga does not sell, rent, or trade your personal data. We may share your data with the following categories of recipient, strictly for the purposes set out in this Policy:

• KYC and identity verification providers: Third-party services engaged to verify your identity documents and confirm your eligibility. These providers act as Data Processors under written agreements.
• Payment processors and financial institutions: Including Malaysian banks (Maybank, CIMB, Public Bank, Hong Leong), eWallet operators (Touch 'n Go eWallet, Boost, GrabPay), card networks (Visa, Mastercard), and cryptocurrency processors. Data shared is limited to what is necessary to complete your financial transaction.
• Fraud prevention and AML compliance services: Specialist providers engaged to screen transactions and identify suspicious activity patterns, subject to confidentiality obligations.
• IT infrastructure and cloud service providers: Technical service providers who host, maintain, or support the Platform's infrastructure. All providers are bound by data processing agreements.
• Regulatory and law enforcement authorities: Where mposurga is legally compelled to disclose data by court order, regulatory directive, or lawful authority request. We will notify you of such disclosure where legally permitted to do so.

mposurga retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Account registration data and KYC documents are retained for the duration of your active Account plus a minimum of five years following Account closure, in compliance with AML record-keeping obligations.
• Transaction and payment records are retained for a minimum of seven years from the date of the transaction.
• Customer support communications are retained for three years from the date of the interaction.
• Responsible gambling records, including self-exclusion history and deposit limit changes, are retained for the duration of your Account and a minimum of five years post-closure.
• Marketing consent records are retained for as long as you remain subscribed and for a reasonable period following unsubscription, to evidence your prior consent.
• Anonymised analytics data may be retained indefinitely as it cannot be used to identify any individual.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our internal data deletion procedures.

mposurga implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform.
• Encryption at rest for sensitive data fields including payment details and identity document copies.
• Role-based access controls limiting internal staff access to personal data on a strict need-to-know basis.
• Two-factor authentication (2FA) availability for all registered user Accounts.
• Regular penetration testing and vulnerability assessments conducted by independent security specialists.
• Incident response procedures with defined timelines for breach notification to affected users where required.

Notwithstanding the above, no system of data transmission over the internet is completely secure. mposurga cannot guarantee absolute security of data transmitted to or from the Platform. You are responsible for keeping your own Account credentials confidential and for notifying us immediately if you suspect any unauthorised access to your Account.

mposurga uses cookies and similar tracking technologies on the Platform for the following purposes:

• Essential cookies: Required for the Platform to function correctly, including session management, authentication, and security. These cannot be disabled without significantly impairing Platform functionality.
• Analytical cookies: Used to collect aggregated, anonymised data about how users navigate the Platform, enabling us to improve user experience and Platform performance over time.
• Preference cookies: Store your language preferences, display settings, and other personalisation choices between sessions.
• Security cookies: Used to detect and prevent fraudulent login attempts and suspicious activity patterns.

mposurga does not use third-party advertising cookies or tracking pixels that share your data with external advertising networks. You may manage cookie preferences through your browser settings; however, disabling essential cookies may impair your ability to access and use the Platform normally.

Subject to applicable data protection law, you hold the following rights in relation to your personal data held by mposurga. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request" and your registered Account email address.

mposurga will respond to all verified data rights requests within 30 days of receipt. Where a request is complex or involves a large volume of data, we may extend this period by a further 60 days, in which case we will notify you of the extension and the reason for it.

The mposurga Platform is strictly for adults aged 21 years and above. We do not knowingly collect personal data from persons under the age of 21. Age verification is conducted as part of the KYC process required of all users prior to withdrawal processing.

If mposurga discovers that personal data has been collected from an individual under the age of 21, we will take immediate steps to close the associated Account, return any real-money Balance to the source payment method, and securely delete the personal data of the minor concerned, except where retention is required by law.

Parents and guardians who believe a minor may have accessed mposurga using false age information are encouraged to contact our support team at [email protected] immediately. We treat all such reports as a priority matter.

mposurga reserves the right to update or amend this Privacy Policy at any time to reflect changes in law, regulatory guidance, our data processing practices, or Platform functionality. The effective date at the top of this page will be updated to reflect any revision.

Where amendments are material — for example, where we introduce a new category of data collection or a new purpose for processing — we will provide at least 14 days' advance notice by email to your registered address before the changes take effect. For minor clarifications or corrections, notice will be given by updating the policy on this page.

Your continued use of the Platform following the effective date of any amended Policy constitutes your acceptance of the revised terms. If you do not accept the revised Policy, you must cease using the Platform before the new effective date and may request Account closure by contacting our support team.

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please contact mposurga using the details below. Our support team operates 24 hours a day, seven days a week, including Malaysian public holidays.

For matters relating to account self-exclusion, deposit limits, or responsible gambling, please visit our Responsible Gambling page or contact our support team directly.