Yes, with a lawful transfer mechanism in place and the transfer recorded.
Yes. The Act does not prohibit sending personal data abroad, it requires that the data stays protected when it gets there.
A transfer outside Mauritius needs one of a defined set of mechanisms: the destination country having adequate protection, appropriate safeguards such as standard contractual clauses, binding corporate rules, the individual's explicit consent, or one of the narrow statutory derogations.
In practice, most small businesses rely on contractual clauses with their cloud providers. The major providers publish these and you accept them as part of signing up, but you are expected to know which ones apply to you and to record them.
Keep a list of every transfer: the destination, the recipient, the mechanism and the safeguards. Priva keeps this alongside your RoPA and prints it in the report you give the Commissioner.