Your privacy matters to us. This Privacy Policy explains what personal data mpowin collects from users of our online betting and gaming platform, why we collect it, how it is stored and protected, who it is shared with, and what rights you hold over your information. Please read this document carefully before using our services. Last updated: January 2026.
All data transmitted between your device and the mpowin platform is encrypted with industry-standard 256-bit SSL technology, preventing interception or tampering in transit.
mpowin does not sell, rent, or trade your personal data to third parties for marketing purposes. Your information is used solely to operate and improve our platform services.
You have the right to access, correct, and request deletion of your personal data at any time. mpowin maintains clear processes for exercising each of these rights via customer support.
Personal data is stored on hardened, access-controlled servers with physical and logical security controls. Staff access to user data is role-based and subject to strict internal audit policies.
Identity documents collected during KYC verification are stored securely in accordance with international anti-money laundering standards and retained only for the minimum period required by applicable regulations.
Promotional communications are optional. You may withdraw consent for marketing emails or messages at any time through your account settings or by contacting the mpowin support team directly.
The following definitions apply throughout this Privacy Policy and are intended to give precise meaning to key terms used herein:
This Privacy Policy applies to all personal data collected from users who access or register for the mpowin platform, regardless of the device or internet connection used. It applies to users located in Indonesia and to any other jurisdiction from which mpowin's services are accessed. mpowin primarily serves users in Indonesia, including those residing in Jakarta, Surabaya, Medan, Bandung, Semarang, Makassar, Bali, Yogyakarta, and other regions across the archipelago.
This Privacy Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, both of which form part of the complete legal framework governing your relationship with mpowin. In the event of any conflict between this Privacy Policy and the Terms & Conditions with respect to data handling, this Privacy Policy shall prevail.
By using the mpowin platform, creating an account, or providing personal information in any context on the platform, you acknowledge that you have read, understood, and agree to the collection and processing of your personal data as described in this Privacy Policy.
mpowin collects several categories of personal data in the course of operating our platform and delivering services to Indonesian users. The categories of data collected are as follows:
When you create an mpowin account, we collect:
To comply with anti-money laundering (AML) obligations and our platform's KYC requirements, we collect:
In connection with deposits and withdrawals, we collect:
Automatically collected during platform use:
When you contact mpowin customer support or respond to surveys:
mpowin collects personal data through the following channels:
mpowin processes your personal data only where a valid legal basis exists. The table below sets out the primary purposes for which we process personal data and the corresponding legal basis in each case:
| Processing Purpose | Categories of Data Used | Legal Basis |
|---|---|---|
| Creating and managing your account | Registration data, contact details | Performance of contract |
| Identity verification (KYC) | KYC documents, identity data | Legal obligation (AML compliance) |
| Processing deposits and withdrawals | Financial data, payment method details | Performance of contract |
| Fraud prevention and security monitoring | Technical data, transaction history | Legitimate interests |
| Responsible gaming monitoring | Behavioural data, session data, wagering history | Legal obligation / Legitimate interests |
| Customer support | Communications data, account data | Performance of contract |
| Platform analytics and improvement | Technical data, navigation data | Legitimate interests |
| Marketing communications (where opted in) | Contact details, preferences | Consent |
| Compliance with regulatory obligations | Identity data, transaction records | Legal obligation |
Note on Legitimate Interests: Where mpowin relies on legitimate interests as a legal basis for processing, we have assessed that those interests are not overridden by your privacy rights. You may object to processing based on legitimate interests by contacting us at the email address provided in Section 15.
mpowin retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following retention periods apply as a general guide:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account registration data | Duration of account + 5 years after closure | AML regulatory obligation |
| KYC identity documents | Duration of account + 5 years after closure | AML / legal compliance |
| Financial transaction records | Duration of account + 7 years after closure | Financial record-keeping obligations |
| Customer support communications | 3 years from last interaction | Dispute resolution and quality assurance |
| Technical / device / session logs | 12 months from collection | Security monitoring and fraud prevention |
| Marketing consent records | Until consent is withdrawn + 1 year | Demonstrating lawful basis for marketing |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual. Where data is anonymised rather than deleted, the resulting anonymised dataset may be retained indefinitely for analytical or statistical purposes without restriction.
If you request deletion of your personal data before the end of the applicable retention period (see Section 12), mpowin will assess your request and delete or anonymise all data that is not subject to a mandatory retention obligation. Data that must be retained by law will be isolated from active processing and held solely for the purpose of satisfying that legal obligation.
mpowin does not sell, rent, or trade your personal data to any third party for their own commercial or marketing purposes under any circumstances. We may, however, share your personal data with carefully selected third parties in the following limited circumstances:
To process deposits and withdrawals, mpowin shares relevant transaction data with the payment processors and financial institutions involved in the transfer. This includes the banks and e-wallet providers you designate for your transactions — BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, and LinkAja. The data shared is limited strictly to what is necessary to complete the financial transaction.
During the KYC process, mpowin may share identity document data with certified third-party identity verification services to authenticate the documents you submit. These providers are bound by strict data processing agreements and are prohibited from using your information for any purpose other than verification.
Game studios whose titles are accessible on the mpowin platform — including Pragmatic Play, Evolution Gaming, Pocket Games Soft, Microgaming, NetEnt, and Spribe — may receive limited session and gameplay data necessary to deliver their games and record outcomes. These providers operate under their own privacy policies and data processing agreements with mpowin.
mpowin uses third-party cloud hosting, content delivery, and cybersecurity services to operate the platform. These technical service providers may have access to personal data stored on the infrastructure they manage, solely in their capacity as data processors acting under mpowin's instructions and under binding contractual obligations.
mpowin may be required to disclose personal data to government bodies, regulatory authorities, financial intelligence units, or law enforcement agencies where required or permitted by applicable law — for example, in response to a court order, regulatory investigation, or AML reporting obligation. mpowin will only disclose the minimum data necessary to satisfy the legal requirement and will notify affected users where permitted to do so.
In the event of a merger, acquisition, restructuring, or sale of all or part of mpowin's business, personal data held by mpowin may be transferred to the acquiring entity as part of that transaction. Users will be notified of any such transfer and any material change to data processing arrangements resulting from it.
mpowin operates as an internationally licensed platform and as a result, your personal data may be transferred to, stored in, or processed in countries outside of Indonesia. These countries may have data protection laws that differ from those applicable in Indonesia. Where such transfers occur, mpowin implements appropriate safeguards to protect your data, including:
If you wish to obtain information about the specific safeguards applied to any particular international transfer of your personal data, please contact us using the details provided in Section 15.
The mpowin platform uses cookies and similar tracking technologies to deliver and improve our services, maintain session state, prevent fraud, and analyse platform usage patterns.
Cookies are small text files placed on your device by a website when you visit it. They allow the website to recognise your device on subsequent visits, remember your preferences, and collect information about how you interact with the site. Cookies may be session-based (deleted when you close your browser) or persistent (retained on your device for a defined period after your browser session ends).
You may control or disable non-essential cookies through your browser settings. Instructions for managing cookies are available in your browser's help documentation. Please note that disabling essential cookies will prevent you from logging into your mpowin account and using the platform's core features. mpowin does not currently support a cookie preference management panel within the platform interface; cookie management must be handled at the browser level.
mpowin takes the security of your personal data seriously and applies a range of technical and organisational measures to protect it against unauthorised access, disclosure, alteration, or destruction. Our security framework includes, but is not limited to:
Your Role in Security: While mpowin implements robust security measures on the platform side, you also play an important role in protecting your account. Use a strong, unique password for your mpowin account, enable two-factor authentication where available, and never share your login credentials with any third party. Contact support immediately if you suspect unauthorised access to your account.
Despite our best efforts, no online system can guarantee absolute security. In the event of a data breach that poses a material risk to affected users, mpowin will notify the impacted users and, where required, the relevant regulatory authority, within the timeframe stipulated by applicable data protection law.
The mpowin platform is strictly intended for adults aged 21 years and over. mpowin does not knowingly collect personal data from individuals under the age of 21, and it is a condition of account registration that you confirm you meet the minimum age requirement at the point of sign-up.
If mpowin becomes aware that personal data has been collected from a user who is under 21 years of age, that account will be immediately suspended, all associated data will be deleted or isolated pending review, and any funds deposited will be returned to the original payment source after appropriate investigation. If you are a parent or guardian and believe that your child has registered for an mpowin account, please contact us immediately at the details provided in Section 15 so that we can take prompt action.
mpowin employs age verification checks at multiple points in the registration and KYC process to minimise the risk of underage access. However, we acknowledge that no age verification system is entirely foolproof and encourage parents and guardians to use internet filtering software on shared devices to prevent minors from accessing gambling platforms.
As a user of the mpowin platform, you hold meaningful rights over your personal data. mpowin is committed to honouring these rights promptly and transparently. Your rights include:
You have the right to request a copy of all personal data that mpowin holds about you. We will provide this information in a structured, commonly used format within 30 days of receiving a valid request. A reasonable administrative fee may apply for excessive or repetitive access requests.
If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Minor corrections to account details (such as email address or phone number) can typically be made directly through your account settings. For corrections to identity data, please contact customer support with supporting documentation.
You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (and no other legal basis applies), or where the data has been unlawfully processed. Note that erasure requests cannot be fulfilled where data must be retained to comply with a legal obligation, such as AML record-keeping requirements. In those cases, the relevant data will be isolated from active processing and retained solely to satisfy the legal obligation.
You may request that mpowin restrict the processing of your data in certain circumstances — for example, while the accuracy of data is being contested, or where you have objected to processing and a determination is pending. During a restriction period, mpowin will store your data but will not actively process it.
Where processing is based on your consent or on the performance of a contract, and processing is carried out by automated means, you have the right to receive the personal data you provided to mpowin in a structured, machine-readable format, and to request that it be transmitted to another data controller where technically feasible.
You have the right to object to processing of your personal data where mpowin relies on legitimate interests as the legal basis. You also have an absolute right to object to processing of your data for direct marketing purposes at any time, without needing to provide a reason. Upon receipt of a valid marketing opt-out, we will cease all direct marketing activity to you without undue delay.
To exercise any of the rights described in this section, please contact the mpowin data team at the email address provided in Section 15. Include your account username, the specific right you wish to exercise, and any relevant supporting information. We will acknowledge your request within 5 business days and provide a substantive response within 30 days. Where a request is complex or numerous, we may extend this period by a further 30 days, of which you will be notified.
With your consent, mpowin may send you promotional communications including bonus offers, seasonal promotions tied to events such as Idul Fitri, Ramadhan, or Indonesian Independence Day (17 August), BRI Liga 1 match-day offers, and general platform updates. Marketing communications may be delivered via email or, where you have provided a phone number and consented to messaging, via WhatsApp or SMS.
You may withdraw your consent for marketing communications at any time by:
Withdrawal of marketing consent does not affect the lawfulness of processing that occurred prior to withdrawal, nor does it affect the delivery of transactional communications such as deposit confirmations, withdrawal notifications, security alerts, or account verification messages — these are necessary for the operation of your account and cannot be disabled.
mpowin reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, platform features, applicable law, or regulatory requirements. When material changes are made — that is, changes that significantly affect how we collect, use, or share your personal data — we will notify you by email to the registered address on your account and by posting a prominent notice on the mpowin platform homepage at least 14 days before the changes take effect.
Minor clarifications, corrections of typographical errors, or non-material updates may be published without prior notice. The date of the most recent revision is displayed at the top of this Privacy Policy. We encourage you to review this page periodically to stay informed of how mpowin protects your personal data.
Your continued use of the mpowin platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you must discontinue use of the platform and may request closure of your account in accordance with our Terms & Conditions.
If you have any questions, concerns, or requests relating to this Privacy Policy or to mpowin's handling of your personal data, please contact our data team using the details below. All data-related enquiries are handled separately from general customer support to ensure they receive the appropriate attention and response standard.
Effective Date: This Privacy Policy was last reviewed and updated in January 2026. It supersedes all previous versions of the mpowin Privacy Policy and applies to all users of the platform from its effective date.
Review our full Terms & Conditions for platform rules, visit the FAQ for quick answers, or read our Responsible Gaming page to learn about the tools available to keep your play safe and controlled.
21+ Adults only (21+). Gambling involves financial risk. Please play responsibly.