MPOSurga Privacy Policy

1. Introduction

Mposurga ("we", "Platform") is committed to protecting the privacy and security of every member's personal information. This Privacy Policy transparently explains how we collect, process, store, and protect your data when you use the mposurga website and app.

This policy applies to all users of the MPOSurga platform, including website visitors, registered members, and any individuals who interact with our services via web browser or mobile app. We encourage you to read this document in full so you fully understand your rights as a user.

Mposurga operates in accordance with international data protection standards and the regulatory requirements set by our licensing authority. We continuously update our privacy practices in line with the latest legal and technological developments to ensure your data is always protected to the highest standard.

2. Information We Collect

We collect various types of information to ensure a smooth, secure, and regulatory-compliant user experience. The following are the main categories of data we process:

How Data Is Collected

Your information is collected through the following methods:

• Directly from you — during registration, KYC form submission, and communication with our support team.
• Automatically — via cookies, server logs, and tracking technologies as you browse our platform.
• Authorized Third Parties — such as payment service providers and identity verification bodies for KYC purposes.

3. How We Use Your Data

Mposurga uses collected information solely for legitimate purposes necessary to operate the platform safely and efficiently. The following are the primary purposes for which your data is used:

• Account management: Creating, maintaining, and securing your member account, including a safe login process.
• Transaction processing: Processing deposits, withdrawals, and all financial transactions accurately and securely.
• Regulatory compliance: Meeting KYC requirements, anti-money laundering (AML) obligations, and other applicable legal requirements.
• Fraud prevention: Detecting and blocking suspicious activity, unauthorized access, and fraud attempts.
• Service improvement: Analyzing usage patterns to improve the interface, platform speed, and overall user experience.
• Communications: Sending important account notifications, relevant promotions (with your consent), and policy updates.
• Customer support: Resolving inquiries and complaints more efficiently using records of past interactions.

4. Information Sharing

Mposurga does not sell, rent, or trade your personal information to third parties for marketing purposes. However, in certain situations, we may share your data with the following parties:

Third-Party Service Providers

We work with trusted service providers to handle certain functions such as payment processing, identity verification, technology infrastructure, and analytics. All such providers are bound by strict data protection agreements and are only permitted to process your data in accordance with our instructions.

Regulatory Authority

We may be required to disclose certain information to regulatory bodies, law enforcement authorities, or courts when mandated by applicable law. In such cases, we only disclose the minimum data necessary.

Business Transfers

In the event of a merger, acquisition, or sale of business assets, user data may be transferred as part of that transaction. We will notify you in advance and ensure the receiving party upholds equivalent data protection standards.

5. Data Security

We implement comprehensive technical and organisational security measures to protect your personal information from unauthorised access, disclosure, alteration, or destruction. The MPOSurga security infrastructure includes:

• 256-bit SSL/TLS Encryption for all data transmissions between your browser and our servers.
• Data encryption at rest for all sensitive records including financial information and identity documents.
• Two-factor authentication (2FA) available for all member accounts as an additional layer of security.
• 24/7 Monitoring by our cybersecurity team to detect any anomalous activity.
• Internal access controls ensuring only authorized personnel can access sensitive member data.
• Regular security testing including penetration testing and security audits by independent parties.

6. Cookies & Tracking Technologies

Mposurga uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login, session management, and security. These cookies cannot be disabled.
• Preference Cookies: Saving your preferences such as language and region to provide a more personalized experience.
• Analytics Cookies: Helping us understand how users interact with the platform for improvement purposes. Data is collected in aggregate and without personal identification.
• Security Cookies: Used to detect suspicious login attempts and protect your account from unauthorised access.

You can manage or disable cookies through your browser settings. Please note that disabling certain cookies may affect the functionality and experience of our platform.

7. Your Rights

As an mposurga member, you have the following rights regarding your personal data. We are committed to respecting and facilitating the exercise of these rights:

To exercise any of the above rights, please contact our support team. We will process your request within 30 business days. Please note that certain rights may be subject to legal compliance requirements that do not permit immediate deletion or restriction.

8. Data Retention

Mposurga retains your personal data only for as long as necessary to fulfil the purposes stated in this policy or as required by law. The following are our general data retention guidelines:

• Active account data: Retained for the duration your account is active and for a defined period following account closure.
• Financial transaction records: Retained for a minimum of seven (7) years in accordance with financial and tax regulatory requirements.
• KYC records & identity verification: Retained for the period required by anti-money laundering laws.
• Communication logs: Retained for three (3) years for dispute resolution and security purposes.
• Non-identifiable analytics data: May be retained for a longer period for platform improvement purposes.

Once the retention period expires, your data will be securely deleted or anonymized in accordance with established data destruction procedures.

9. Third-Party Links

The mposurga platform may contain links or integrations with third-party services such as game providers, payment gateways, and technology partners. Please note that:

• This Privacy Policy applies solely to the MPOSurga platform.
• We are not responsible for the privacy practices of any third-party websites or services linked from our platform.
• Each game provider and payment gateway has its own privacy policy, which you should review separately.
• We only work with partners whose security and privacy standards are on par with our own.

We encourage you to read the privacy policy of each third-party service you access through our platform.

10. Changes to the Privacy Policy

Mposurga reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, regulatory requirements, or technological developments. When material changes occur, we will:

• Displaying a clear notice on the platform's home page before changes take effect.
• Sending a notification to your registered email for significant changes.
• Updating the "Last Updated" date at the top of this document.

Continued use of the mposurga platform after changes are published indicates your acceptance of the updated policy. If you do not agree with any changes, please stop using the platform and contact us to close your account.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, our team is ready to help. You can reach us via:

• Privacy Email: [email protected]
• Live Support: Via the live chat function on the mposurga platform (available 24/7).
• FAQ Section: Browse FAQ page us for answers to the most frequently asked questions.

We aim to respond to all privacy-related enquiries within 3–5 business days. For more complex data rights requests, this may take up to 30 business days.

Last Updated: July 2026  |  Version: 2.4  |  This document is the official version in Bahasa Melayu. In the event of any conflict with versions in other languages, the Bahasa Melayu version shall prevail.