Privacy Policy

This Privacy Policy ("Policy") is issued by MKO Asia ("mko", "mko Asia", "we", "our", "us") and governs the collection, use, storage, disclosure, and protection of personal data obtained from individuals ("you", "the User", "the Player", "Data Subject") who access or use the mko Asia website at https://mko.asia and all associated gaming and account management services.

mko Asia is committed to respecting and protecting the privacy of all persons who interact with our platform, including players registered in Kuala Lumpur, Petaling Jaya, Penang, Johor Bahru, Shah Alam, and across Malaysia and internationally. This Policy is designed to be transparent, accessible, and written in plain language — because we believe you have every right to understand how your information is used.

By registering an account, accessing the platform, or using any mko Asia service, you acknowledge that you have read and understood this Privacy Policy and that you consent to the processing of your personal data as described herein. If you do not agree with any provision of this Policy, you must discontinue your use of the platform.

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, date of birth, identification number, email address, telephone number, payment details, and IP address.
• "Processing" means any operation or set of operations performed on personal data, including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" means mko Asia as the entity that determines the purposes and means of processing personal data collected through the platform.
• "Data Processor" means any third party engaged by mko Asia to process personal data on its behalf, acting only on mko Asia's documented instructions.
• "Consent" means any freely given, specific, informed, and unambiguous indication of the Data Subject's agreement to the processing of their personal data.
• "KYC Data" means identity verification documentation collected as part of the Know Your Customer (KYC) process, including government-issued identification and proof of address.
• "Cookies" means small data files placed on a user's device by the website to support functionality, analytics, and session management.

mko Asia collects personal data across the following categories, depending on how you interact with the platform:

mko Asia collects personal data through the following channels and mechanisms:

• Direct collection: Information you provide when registering an account, completing the KYC process, making a deposit or withdrawal, contacting customer support, or setting responsible gambling preferences.
• Automated collection: Technical data gathered automatically when you access the platform, including IP addresses, browser fingerprints, device identifiers, and session activity logs collected via cookies, log files, and analytics tools.
• Payment processors: Transaction reference data provided by licensed Malaysian payment processors including DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, Touch 'n Go eWallet, Boost, and GrabPay in order to confirm the status and source of financial transactions.
• KYC and identity verification providers: Where third-party identity verification services are engaged to validate documentation, data may be cross-referenced against authorised identity databases.
• Fraud prevention systems: Automated systems may collect and analyse behavioural data to detect patterns consistent with account fraud, bonus abuse, or anti-money laundering (AML) concerns.

mko Asia processes personal data on the following legal grounds, depending on the nature and context of the processing activity:

• Contractual necessity: Processing required to fulfil our contractual obligations to you as a registered player, including account management, payment processing, game delivery, and customer support.
• Legal obligation: Processing required to comply with applicable laws and regulatory requirements, including anti-money laundering (AML) legislation, age verification requirements, and licensing conditions.
• Legitimate interests: Processing carried out in pursuit of mko Asia's legitimate business interests — including fraud prevention, platform security, system maintenance, and improvement of gaming services — provided such interests are not overridden by your rights and freedoms.
• Consent: Processing activities for which we have obtained your specific, informed, and freely given consent, such as the sending of promotional communications or marketing materials. You may withdraw consent at any time by contacting our support team, without affecting the lawfulness of processing carried out prior to withdrawal.

The personal data collected by mko Asia is used exclusively for the following purposes:

• To register, verify, and manage your player account on the mko platform.
• To process deposits and withdrawals in MYR through your chosen payment method, including Malaysian e-wallets, bank transfers, and cryptocurrency channels.
• To verify your identity and age (21+) in accordance with our responsible gambling obligations and KYC requirements.
• To administer bonus programmes, loyalty rewards, and promotional offers, including verifying eligibility and monitoring wagering requirement completion.
• To detect, investigate, and prevent fraud, account misuse, money laundering, and other prohibited activities.
• To provide customer support, respond to queries, and resolve disputes.
• To send service-related communications including account notifications, security alerts, and updates to our policies (these communications are not optional and do not require separate consent).
• To send promotional communications and personalised offers where you have provided consent to receive marketing materials (you may opt out at any time).
• To comply with our legal and regulatory obligations under applicable international licensing requirements and anti-money laundering legislation.
• To improve platform performance, conduct analytics, and optimise the user experience on mko Asia.

mko Asia does not sell, rent, or trade your personal data to any third party. We may share your data only in the following limited and controlled circumstances:

• Licensed payment processors: Financial data is shared with regulated payment service providers (including those facilitating Maybank, CIMB, Public Bank, DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, and cryptocurrency transactions) solely for the purpose of processing your transactions. These providers are contractually bound to process data only on our instructions and in accordance with applicable data protection standards.
• KYC and identity verification services: Identity documentation may be shared with licensed third-party identity verification providers solely to confirm your eligibility and age as part of our responsible gambling and compliance obligations.
• Regulatory and law enforcement authorities: Where required by law, court order, or regulatory directive, mko Asia may disclose personal data to competent authorities, including in connection with anti-money laundering investigations or licensing compliance reviews.
• Fraud prevention and security services: Aggregated or anonymised behavioural data may be shared with fraud detection system providers for the purposes of protecting our platform and players from abuse and financial crime.
• Business succession: In the event of a merger, acquisition, restructuring, or sale of all or part of mko Asia's business, personal data held by the platform may be transferred to the acquiring entity, subject to equivalent privacy protections.

mko Asia uses cookies and similar tracking technologies to operate, secure, and improve the platform. Cookies are small text files stored on your device when you visit the website. They help us remember your preferences, maintain your session, and analyse how the platform is used.

The categories of cookies used on mko Asia are as follows:

• Essential cookies: Required for the platform to function correctly. These include session cookies that maintain your logged-in state, security tokens, and load-balancing identifiers. These cookies cannot be disabled without impairing platform functionality.
• Functional cookies: Store your preferences, such as language settings and interface customisations, to improve your experience on return visits.
• Analytics cookies: Collect anonymised data about how users navigate the platform, which pages are most visited, and where users encounter difficulties. This data is used solely to improve the mko experience.
• Security cookies: Used to detect and prevent fraudulent activity, bot access, and suspicious login attempts.

You may configure your browser to reject or delete cookies; however, doing so may affect the functionality of certain platform features. By continuing to use mko Asia after being notified of our cookie usage, you consent to the placement of the cookies described in this section.

mko Asia retains personal data only for as long as necessary to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by law.

• Active account data: Retained for the duration of the account relationship and for a period of five (5) years following account closure, in order to satisfy anti-money laundering regulatory requirements and to facilitate dispute resolution.
• KYC documentation: Retained for a minimum of five (5) years from the date of account closure or last transaction, in accordance with internationally recognised AML compliance standards.
• Transaction records: Retained for five (5) years to support audit, regulatory review, and dispute resolution functions.
• Support communications: Retained for three (3) years from the date of the final communication in a given support thread.
• Technical and log data: Generally retained for twelve (12) months, unless extended retention is required for fraud investigation or legal proceedings.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be attributed to an identified individual.

mko Asia employs a multi-layered technical and organisational security framework to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security measures include, but are not limited to:

• Encryption: AES-256 encryption for data stored at rest; TLS 1.3 for all data in transit between your device and our servers.
• Access controls: Role-based access control (RBAC) ensuring that internal staff can access personal data only to the extent required by their specific function. All access is logged and audited.
• Network security: Firewalls, intrusion detection and prevention systems (IDS/IPS), and regular penetration testing conducted by qualified external security professionals.
• Payment security: Payment card data is not stored on mko Asia's servers. All payment processing is handled by compliant third-party processors. No raw payment card numbers are retained by mko Asia.
• Incident response: A documented data breach response procedure is in place. In the event of a personal data breach that poses a risk to your rights and freedoms, mko Asia will notify affected users and, where required, the relevant regulatory authority within the timeframes prescribed by applicable law.

Whilst we implement robust security measures, no internet-based system can guarantee absolute security. Players are encouraged to maintain the security of their own login credentials and to contact support immediately if they suspect unauthorised account access.

mko Asia operates under international licensing and may process or store personal data on servers located in jurisdictions outside Malaysia. Where personal data is transferred to a country that does not provide an equivalent level of data protection to that offered in the jurisdiction of the relevant licensing authority, mko Asia will implement appropriate safeguards to ensure that your data continues to be handled in a manner consistent with this Privacy Policy.

Such safeguards may include the use of standard contractual clauses, binding corporate rules, or other legally recognised transfer mechanisms applicable in the relevant jurisdiction. By using the mko Asia platform, you acknowledge and consent to the transfer of your personal data to countries outside Malaysia as described in this section.

Subject to applicable law, you hold the following rights with respect to your personal data held by mko Asia. These rights can be exercised by contacting our support team with a verified request:

mko Asia will respond to all verified data subject requests within 30 calendar days of receipt. Where a request is complex or numerous, this period may be extended by a further 30 days, of which you will be notified in writing. We may ask you to verify your identity before processing any data subject request.

mko Asia's platform is strictly intended for use by persons aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. Our registration process includes an age declaration requirement, and KYC verification is used to confirm that players meet the minimum age requirement before any withdrawal is processed.

Parents and guardians who believe their child may have registered on the mko Asia platform should contact our support team immediately so that appropriate action can be taken.

The mko Asia platform may, in certain contexts, reference third-party services, payment providers, or gaming software providers. This Privacy Policy applies exclusively to the mko Asia platform and services operated directly by mko Asia. It does not apply to the data practices of any third-party provider, game developer, or external service.

mko Asia is not responsible for the privacy practices of third-party services and encourages users to review the respective privacy policies of any third-party services they interact with.

mko Asia reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform operations. Where material changes are made, we will notify registered players by email to the address on file, or by displaying a prominent notice on the platform, no less than seven (7) days before the changes take effect.

The "Effective Date" at the top of this Policy indicates when the most recent version came into force. Your continued use of the mko Asia platform following the effective date of any revised Policy constitutes your acceptance of the revised terms.

We encourage you to review this Privacy Policy periodically to stay informed of any updates. Archived versions of previous policies are available upon request.

If you have any questions, concerns, or requests in relation to this Privacy Policy or the manner in which mko Asia processes your personal data, please contact us using the details below. We are committed to responding promptly and transparently to all privacy-related enquiries.

For responsible gambling-related concerns, please refer to our Responsible Gambling page. For all other platform queries, please visit our FAQ page or contact our support team via live chat.