Mbi888 Privacy Policy – User Data Protection

1Introduction and Scope of This Policy

This Privacy Policy is issued by mbi888 and applies to all collection, processing, and use of personal data carried out through our platform. The term "personal data" refers to any information that can be used to identify you as an individual, whether directly or indirectly.

By using the mbi888 platform, you give your consent to the collection and use of your personal data as described in this policy. This consent is voluntary, but it is required for us to provide the services you request.

This policy explains:

• The types of personal data we collect from you;
• The purpose and legal basis for processing that data;
• Parties who may receive your data and under what circumstances;
• The security measures we take to protect your data;
• Your rights regarding your personal data and how to exercise them.

2Personal Data We Collect

Mbi888 collects various types of personal data depending on how you interact with our platform. Below is a detailed breakdown of the data we collect:

Data You Provide Directly

When you register an mbi888 account, you are required to provide your full name, email address, phone number, and date of birth. This information is needed to verify your identity and confirm that you meet the minimum age requirement of 18 years. During the KYC verification process, we may request copies of valid identification documents such as a national ID card or passport.

Automatically Collected Data

When you use the mbi888 platform — whether via the website or mobile app — our systems automatically record technical information such as your IP address, device type, operating system version, and web browser. This data helps us detect suspicious activity and improve platform performance.

3How We Use Your Personal Data

Mbi888 uses collected personal data for legitimate and transparent purposes. We will not use your data for any purpose other than those stated below without first obtaining your additional consent.

• Account Management: Creating, verifying, and managing your user account so you can log in and play safely at any time;
• Transaction processing: Processing deposits and withdrawals accurately and securely using your chosen payment methods such as FPX, DuitNow, Touch 'n Go eWallet, and GrabPay;
• Identity Verification (KYC): Ensuring all users meet the age and identity requirements set by the relevant authorities;
• Customer support: Enabling our support team to assist you in resolving any issues or inquiries related to your account or gameplay;
• Fraud prevention: Detecting and investigating suspicious activity, including attempts at money laundering or the use of multiple accounts;
• Platform improvement: Analyzing usage patterns to improve the gaming experience, platform performance, and relevant new features;
• Marketing communications: Sending notices about promotions, bonuses, and special offers — only to users who have consented to receive such communications;
• Legal compliance: Fulfilling the legal and regulatory obligations applicable to the operation of the mbi888 platform.

4Data Sharing with Third Parties

Mbi888 does not sell, rent, or disclose your personal data to third parties for their own commercial purposes. However, we may share your data in the following limited situations:

• Payment service providers: Payment gateways and financial transaction processors that help us process your deposits and withdrawals. All such providers are bound by strict confidentiality agreements;
• Game software providers: Game developers providing slots, bingo, live casino, and fish shooting games on our platform may receive game session data required for game functionality;
• Authorities and law enforcement: Where required by law, court order, or official investigation, we may need to disclose certain information to the relevant authorities;
• Analytics providers: Third-party analytics tools that help us understand how the platform is used. This data is shared in anonymised or aggregated form wherever possible;
• Business transfers: If mbi888 is involved in any merger, acquisition, or sale of assets, user data may be transferred as part of that process with appropriate notice given to users.

5Data Security and Protective Measures

Mbi888 continually invests in cybersecurity infrastructure to ensure your personal data is always protected. The technical and organisational measures we implement include:

• 256-bit SSL Encryption: All communications between your device and mbi888 servers are encrypted using 256-bit SSL/TLS protocols, making it impossible for unauthorised parties to intercept your data in transit;
• Layered access control: Only authorized personnel may access user data, and every access is logged for audit purposes;
• Periodic security audits: The mbi888 platform undergoes regular penetration testing and security audits by independent security experts;
• Intrusion Detection: 24/7 active monitoring systems detect any unusual activity or unauthorised access attempts;
• Password protection: User passwords are stored in hashed form using a secure algorithm. mbi888 does not store passwords in plain text.

While we take all reasonable steps to protect your data, it is equally important that you play your part in keeping your account secure — including using a strong password and not sharing your login credentials with anyone.

6Cookies and Similar Tracking Technologies

Mbi888 uses cookies and similar tracking technologies to enhance the user experience, analyse usage patterns, and ensure platform security. Cookies are small text files stored in your web browser when you visit our platform.

You can control and manage cookies through your web browser settings. Please note, however, that disabling certain cookies may affect the functionality and user experience of the mbi888 platform.

7Your Rights Regarding Personal Data

As an mbi888 user, you have certain rights regarding your personal data. mbi888 fully respects these rights and provides straightforward mechanisms for you to exercise them:

8Data Retention Period

Mbi888 retains your personal data for as long as necessary to fulfil the purposes outlined in this Privacy Policy, or for as long as required by applicable law.

• Active account data: Retained for the duration your account is active and for a reasonable period after account closure for auditing purposes;
• Financial transaction data: Retained for a minimum of seven (7) years from the transaction date in accordance with Malaysia's financial legal requirements;
• Log and security data: Retained for 12 months for fraud detection and investigation purposes;
• Support communication data: Retained for three (3) years for reference and service improvement purposes;
• Cookie data: Stored for the duration specified in the cookie schedule in Section 6.

When data is no longer required, mbi888 will delete or anonymise it using secure methods to ensure it cannot be recovered.

9International Data Transfers

As a globally operating digital platform, mbi888 may need to transfer your personal data to servers or third parties located outside Malaysia. Any such transfer is carried out with adequate safeguards, including:

• Legally binding data transfer agreements with all data recipients outside the country;
• Use of standard contractual clauses recognised by data protection authorities;
• Thorough data protection assessments before any international transfer is approved;
• Compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) across all our data processing operations.

10Underage Users

The mbi888 platform is strictly for individuals aged 18 and above. We do not knowingly collect or process personal data from anyone under the age of 18.

All users are required to verify their age upon registration. Should we discover that personal data has been collected from anyone under the age of 18, we will promptly delete that data and close the account in question.

11Amendments to the Privacy Policy

Mbi888 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our privacy practices, legal requirements, or new platform features.

• Users will be notified of any significant amendments via in-platform notices or email;
• The date of the latest update is always displayed at the top of this page;
• Continued use of the mbi888 platform after any amendments take effect will be considered acceptance of the updated Privacy Policy;
• You are encouraged to review this page from time to time to stay informed about how we manage your personal data.

If you disagree with any amendments, you have the right to close your account and stop using the mbi888 platform.

12Contact Us – Privacy-Related Inquiries

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact us through the following channels: