Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how HappyMPO ("the Platform", "We", "Us", "Our") collects, uses, discloses, stores, and protects the personal data of individuals ("User", "You", "Your") who access or use the website located at https://happympo.cam and all associated services, features, and applications (collectively, the "Services").

HappyMPO is committed to handling personal data responsibly, in a manner consistent with applicable data protection principles and in compliance with the laws of the jurisdiction under which we operate. This Policy has been drafted to be transparent, specific, and easy to understand, so that you can make informed decisions about your privacy when using our platform.

By registering an account with HappyMPO and using our Services, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not accept this Policy, you must not use the Services.

2 Definitions

For the purposes of this Policy, the following terms carry the meanings assigned below:

• "Personal Data" — any information relating to an identified or identifiable natural person, including name, date of birth, contact details, financial information, and online identifiers.
• "Processing" — any operation performed on personal data, including collection, storage, use, disclosure, erasure, or combination thereof.
• "Data Controller" — HappyMPO, being the entity that determines the purposes and means of processing personal data under this Policy.
• "Data Processor" — a third party that processes personal data on HappyMPO's behalf under a binding data processing agreement.
• "KYC Data" — identity and address verification documents submitted by Users in connection with HappyMPO's Know Your Customer obligations.
• "Consent" — a freely given, specific, informed, and unambiguous indication of agreement to the processing of personal data for a stated purpose.
• "Sensitive Data" — a subcategory of personal data warranting heightened protection, including financial account details, government-issued identity numbers, and biometric identifiers.

3 Data We Collect

HappyMPO collects personal data through several channels in the ordinary course of providing our Services. The categories of data we collect, together with their source, are set out in the table below:

We do not knowingly collect any special category personal data (such as racial or ethnic origin, political opinions, or health data) and we do not require such information to provide our Services. If such data is inadvertently provided, we will delete it promptly.

4 How We Use Your Data

HappyMPO processes personal data only for specified, explicit, and legitimate purposes. The primary purposes for which we use your data are as follows:

• Account Registration and Management: To create, verify, and maintain your HappyMPO account, including enforcing our one-account-per-player policy and age verification (minimum 21 years).
• Payment Processing: To facilitate deposits and withdrawals in Malaysian Ringgit (MYR) through your chosen payment method — including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, and USDT TRC20.
• KYC and Identity Verification: To verify your identity, confirm your eligibility to use the Services, and comply with our anti-money-laundering (AML) and counter-terrorism-financing (CTF) obligations.
• Service Delivery: To provide access to casino games, live dealer tables, and sports betting markets, and to personalise your gaming experience.
• Customer Support: To respond to your enquiries, resolve disputes, and communicate important account information.
• Responsible Gambling: To monitor gaming patterns, identify signs of problem gambling behaviour, and enforce responsible gambling tools including deposit limits, loss limits, and self-exclusion.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent transactions, bonus abuse, multi-accounting, money laundering, and other prohibited activities.
• Legal Compliance: To comply with applicable laws, respond to regulatory enquiries, and enforce our Terms and Conditions.
• Platform Improvement: To analyse aggregated usage data for the purposes of improving platform features, user experience, and game offerings.
• Promotional Communications: To send you information about bonuses, promotions, and platform updates, where you have given consent or where a legitimate interest applies.

5 Legal Bases for Processing

HappyMPO relies on the following legal bases when processing your personal data:

• Performance of a Contract: Processing necessary to fulfil our contractual obligations to you under the Terms and Conditions — including account management, payment processing, and service delivery.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including KYC, AML, and data retention requirements imposed by our licensing authority.
• Legitimate Interests: Processing for the purposes of fraud prevention, platform security, responsible gambling monitoring, and aggregated analytics — where our legitimate interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for direct marketing communications and the use of non-essential cookies, where you have given express consent. You may withdraw consent at any time without affecting the lawfulness of processing based on consent prior to withdrawal.

6 Data Sharing & Disclosure

HappyMPO does not sell, rent, or otherwise transfer your personal data to third parties for commercial profiling or advertising purposes. We disclose personal data only in the following circumstances:

• Payment Service Providers: We share relevant transaction data with our payment partners (including operators of Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and participating Malaysian banks) solely to process your deposits and withdrawals.
• KYC and Compliance Providers: We engage third-party identity verification services to assist with KYC processing. These providers operate under binding data processing agreements and are prohibited from using your data for any purpose beyond verification.
• Game Providers: To enable access to third-party game titles, limited technical data (such as account token identifiers) may be shared with licensed game providers. These providers do not receive your full identity or financial data.
• Regulatory and Law Enforcement Authorities: We may disclose personal data to regulators, law enforcement agencies, or courts where required to do so by applicable law, valid legal process, or in connection with the investigation of suspected criminal activity.
• Corporate Transactions: In the event of a merger, acquisition, or sale of assets involving HappyMPO, your personal data may be transferred to the acquiring entity, subject to equivalent data protection obligations.
• With Your Consent: In any other circumstances, we will only share your personal data with third parties where you have given explicit prior consent.

All third-party Data Processors engaged by HappyMPO are required to enter into written data processing agreements that impose data protection obligations no less stringent than those applicable to HappyMPO itself.

7 Data Storage & Security

HappyMPO takes data security seriously and implements a comprehensive set of technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• Encryption at Rest: All personal data stored on our servers is encrypted using AES-256, an industry-standard symmetric encryption algorithm.
• Encryption in Transit: Data transmitted between your device and our servers is secured using TLS 1.3 protocols. All platform pages are served over HTTPS.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. Staff who access personal data are subject to confidentiality obligations and role-based access controls.
• Two-Factor Authentication: All administrative accounts with access to personal data systems are required to use two-factor authentication.
• Regular Security Audits: Our infrastructure undergoes regular penetration testing and vulnerability assessments conducted by independent security specialists.
• Incident Response Plan: We maintain a documented data breach response procedure, including defined escalation paths and regulatory notification obligations.

8 Data Retention Periods

HappyMPO retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The indicative retention periods for key data categories are as follows:

• Account and Identity Data: Retained for the duration of your account relationship with HappyMPO, and for a minimum of five (5) years following account closure, in accordance with our AML compliance obligations.
• Financial and Transaction Data: Retained for a minimum of seven (7) years from the date of each transaction, in accordance with applicable financial record-keeping requirements.
• KYC Documents: Retained for a minimum of five (5) years following account closure or the completion of the relevant due diligence process.
• Gaming Activity Data: Retained for a minimum of three (3) years following account closure, for the purposes of dispute resolution and responsible gambling monitoring.
• Customer Support Communications: Retained for up to three (3) years from the date of the relevant interaction.
• Marketing Preferences: Retained until you withdraw consent or unsubscribe, whichever is earlier, plus a suppression record for a further two (2) years.
• Technical and Log Data: Retained for up to twelve (12) months for security and analytical purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our data destruction procedures.

9 Cookies & Tracking Technologies

HappyMPO uses cookies and similar tracking technologies on its platform. Cookies are small text files placed on your device by your browser when you visit our site. We use the following categories of cookies:

• Strictly Necessary Cookies: Essential for the operation of the platform — including session management, authentication, and security. These cookies cannot be disabled without impairing platform functionality.
• Performance and Analytics Cookies: Used to collect anonymised data about how visitors interact with the Platform (e.g., pages visited, time on site). This data is used in aggregate form to improve platform performance and user experience.
• Functional Cookies: Used to remember your preferences (such as language settings and responsible gambling limit configurations) to enhance your experience across sessions.

HappyMPO does not deploy third-party advertising cookies, cross-site tracking pixels, or social media tracking technologies on its platform. You may manage or disable non-essential cookies through your browser settings at any time. Disabling cookies may affect certain platform features.

10 Third-Party Services & Links

The HappyMPO Platform may contain links to or integrations with third-party services — including game providers, payment processors, and identity verification services. This Privacy Policy applies solely to data processed by HappyMPO and does not govern the privacy practices of any third party.

When you interact with a third-party service provider through the Platform (for example, when completing a payment via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, or FPX), that provider's own privacy policy and terms will apply to data processed directly by them. We encourage you to review the privacy policies of any third-party services you use in connection with HappyMPO.

HappyMPO is not responsible for the content, privacy practices, or data security of any third-party websites, platforms, or services, including those accessible via links on our Platform.

11 Children & Minors

HappyMPO's Services are strictly restricted to individuals aged 21 years and above. We do not knowingly collect personal data from persons under the age of 21. Our registration process includes mandatory age declaration and is backed by KYC identity verification for all accounts.

If HappyMPO becomes aware that personal data has been collected from an individual under the age of 21, we will promptly delete that data and close the associated account. If you have reason to believe that a minor has registered an account on HappyMPO using false information, please notify our support team immediately.

12 User Rights

Subject to applicable law, you have the following rights with respect to your personal data held by HappyMPO:

• Right of Access: You may request a copy of all personal data HappyMPO holds about you, free of charge.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to Restriction of Processing: You may request that we restrict processing of your data in circumstances where accuracy is contested, processing is unlawful, or you have objected to processing.
• Right to Data Portability: You may request that your personal data be provided to you in a structured, commonly used, machine-readable format, for transfer to another service provider.
• Right to Object: You may object to processing of your personal data for direct marketing at any time. You may also object to processing based on legitimate interests, subject to HappyMPO demonstrating compelling legitimate grounds.
• Rights Related to Automated Decision-Making: Where a significant decision affecting you is made solely on the basis of automated processing, you have the right to request human review of that decision.
• Right to Withdraw Consent: Where processing is based solely on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

To exercise any of the above rights, please contact our Data Protection team at [email protected] with your full name, registered email address, and a description of the right you wish to exercise. We will respond within thirty (30) calendar days of receiving your request.

13 International Data Transfers

HappyMPO's primary data storage infrastructure is located on servers in secure data centres. In the course of providing our Services, certain data may be transferred to, or accessed by, personnel or service providers located in jurisdictions outside Malaysia.

Where personal data is transferred internationally, HappyMPO ensures that appropriate safeguards are in place, which may include contractual clauses, data processing agreements with binding data protection obligations, or reliance on adequacy determinations where applicable.

We do not transfer KYC documents or financial data to countries that do not provide an adequate level of data protection without implementing additional contractual safeguards.

14 Amendments to This Policy

HappyMPO reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. The "Last Updated" date at the top of this page will reflect the date of the most recent revision.

Where amendments are material — meaning they significantly change how we collect, use, or share your personal data — we will provide advance notice through a platform notification or via email to your registered address. Your continued use of the Services following the effective date of any revision constitutes acceptance of the updated Policy.

If you do not agree with any changes to this Policy, you must cease using the Services and may close your account by contacting our support team.

15 Contact Us

If you have any questions, concerns, or complaints about this Privacy Policy, or about how HappyMPO processes your personal data, please contact our Data Protection team through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, accessible directly from the HappyMPO Platform.
• Email (plain text — not a clickable link): [email protected]

Please include your full name, registered email address, and a clear description of your query or concern. We aim to acknowledge all written data protection enquiries within two (2) business hours and to provide a substantive response within thirty (30) calendar days.

Support is available in both English and Bahasa Malaysia. For urgent account security or data breach concerns, we recommend contacting us via live chat for the fastest possible response.