Mbi gaming Privacy Policy

Mbi gaming collects various categories of personal information when you register and use our platform. This collection is carried out directly from you or automatically through your use of the platform.

Information you provide directly:

• Identity Information: Full name, date of birth, identity card number (MyKad) or passport, and images of identity verification documents.
• Contact Information: Email address, mobile number, and residential address.
• Account Information: Username, password (stored in encrypted form), security questions, and any account preferences you have set.
• Financial Information: Bank account number, bank name, and e-wallet details (Touch 'n Go, Boost, etc.) used for depositing and withdrawing funds.
• KYC Documents: Copies of identity verification documents and proof of address required for the account verification process.

Information collected automatically:

• Usage Data: Game records, betting history, account activity, deposit and withdrawal transaction history.
• Technical Data: IP address, device type, operating system, browser type, screen resolution, and language settings.
• Location Data: General location information based on IP address for eligibility verification and legal compliance purposes.
• Cookie Data: Session cookies, preference cookies, and analytics cookies that help us understand platform usage patterns.

The personal data we collect is used for lawful and clearly defined purposes. mbi gaming does not use your data for any purpose beyond those stated below without first obtaining your consent.

For marketing and promotional purposes, we will only send you communications if you have given explicit consent during registration or through your account preference settings. You may withdraw this consent at any time via your account settings.

Mbi gaming processes your personal data on the basis of one or more lawful grounds under Malaysia's Personal Data Protection Act 2010 (PDPA):

• Contract Performance: Processing necessary to fulfil the service agreement between you and mbi gaming, such as processing financial transactions and providing access to games.
• Legal Obligation: Processing necessary to comply with applicable laws and regulations, including anti-money laundering (AML) requirements and identity verification (KYC).
• Legitimate Interests: Processing for fraud prevention, platform security, service improvement, and internal analytics that does not affect your fundamental rights.
• Consent: For direct marketing activities and any optional processing that requires your prior consent.

MBI Gaming does not sell your personal data to any party. However, in certain limited situations, we may share your information with the following parties:

• Payment Service Providers: Financial institutions, banks, and e-wallet providers required to securely process your deposit and withdrawal transactions.
• Game Software Providers: Gaming companies that provide the gaming platform to mbi gaming may receive limited usage data necessary for game operations.
• KYC Service Providers: Registered and trusted third-party identity verification platforms to assist with new member account verification.
• Legal Authorities: Government agencies, law enforcement bodies, or courts when we are legally required to do so.
• Auditors and Professional Advisors: Audit firms, legal counsel, and consultants that support mbi gaming's business operations, subject to strict confidentiality agreements.

All third parties that receive your personal data are required to protect it to the same or higher security standards that we apply, and to use it only for permitted purposes.

Mbi gaming uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions properly. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login, session management, and security. These cookies cannot be disabled as they are critical to platform operations.
• Functional Cookies: Stores your preferences such as language, display settings, and login information for a more convenient experience next time.
• Performance Cookies: Collects information on how you use the platform (pages visited, time spent) to help us improve the user experience.
• Analytics Cookies: Used to understand traffic patterns, page performance, and overall user behaviour for platform improvement purposes.

You can manage cookie settings through your browser preferences. Please note that disabling certain cookies may affect specific features on the mbi gaming platform. For optional cookies (analytics and performance), you may grant or withdraw consent at any time via our cookie settings panel.

The security of your personal data is mbi gaming's highest priority. We have implemented multiple layers of technical and organisational safeguards to keep your data secure at all times:

• End-to-End Encryption: All data communications between the platform and servers use TLS 1.3 protocol with 256-bit encryption.
• Two-Factor Authentication (2FA): An additional security feature available to all member accounts to prevent unauthorised access.
• 24/7 Security Monitoring: An automated monitoring system operating around the clock to detect and respond to any security threats.
• Periodic Penetration Testing: Independent security audits are conducted regularly to identify and address any system vulnerabilities.
• Tiered Access Control: Only authorized personnel with a legitimate business need may access members' personal data.
• Physical Protection: Our servers are hosted in premium-tier data centres with strict physical access controls and continuous monitoring systems.

Mbi gaming retains your personal data only for as long as necessary to fulfil the original purpose of collection or as required by applicable law. The following are our data retention guidelines:

• Active Account Data: Retained for the duration your account remains active and for a reasonable period after the account becomes inactive.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysia's accounting and anti-money laundering legal requirements.
• KYC Documents: Retained for 5 years after account closure, or longer if required by the relevant authorities.
• Security Logs: Retained for 2 years for the purpose of security incident investigation and fraud prevention.
• Support Communication Data: Retained for 3 years after the last interaction for reference and quality control purposes.
• Marketing Data: Retained until you withdraw consent or request deletion.

Once the applicable retention period has expired, your personal data will be securely deleted or anonymised so that it can no longer be personally associated with you.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have certain rights regarding the personal data mbi gaming holds about you. We are committed to respecting and facilitating the exercise of these rights:

To exercise any of the above rights, please contact our Data Protection Officer via email at [email protected]. We will process your request within 30 days from the date of receipt of the complete request.

In the course of platform operations, some of your personal data may be transferred to or processed in countries outside Malaysia, primarily in connection with our game software providers and IT infrastructure suppliers.

Mbi gaming ensures that any international data transfers are carried out with adequate safeguards in place, including:

• Transfers are made only to countries recognised as having adequate data protection standards.
• Binding data processing agreements with overseas service providers.
• Use of approved standard contractual clauses to safeguard data during transfers.
• Thorough data transfer impact assessments conducted before any new transfer is implemented.

Mbi gaming is a gaming platform designed exclusively for individuals aged 18 years and above. We take our responsibility seriously to ensure that children and underage minors do not access our platform.

• We do not knowingly collect or process personal data of individuals under the age of 18.
• The account registration process requires age verification through strict KYC procedures.
• If we discover that personal data of a child has been collected unintentionally, we will take immediate action to delete that data and close the associated account.
• Parents or guardians who discover that their child has registered an account on our platform are encouraged to contact us immediately via our support email.

Mbi gaming reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. We are committed to notifying you of any significant changes in the following ways:

• In-App Notifications: A clear notice will be displayed on the platform when you first log in after any important updates.
• Email Notifications: For significant changes that affect your rights, we will send a notification email to your registered email address.
• Last Updated: The "Last Updated" date shown at the top of this document will always reflect the current version of the Privacy Policy.

Continued use of the mbi gaming platform after any amendments to the Privacy Policy take effect will be considered your acceptance of the revised terms. If you disagree with the changes made, you have the right to close your account and stop using the platform.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how mbi gaming handles your personal data, please contact our Data Protection Officer (DPO):

We will acknowledge receipt of your request within 3 working days and aim to resolve any issues within 30 working days. For complex complaints, we will keep you regularly updated on the resolution progress.