mbi88 Privacy Policy

1. Introduction

This Privacy Policy ("Policy") is published by mbi88 ("mbi88", "we", "us", or "our"), the operator of the online gaming platform accessible at mbi88.asia and all associated subdomains and mobile interfaces (collectively, the "Platform").

This Policy describes the types of personal data we collect from users of the Platform ("you", "User", "Player"), the purposes for which we process that data, the parties with whom we may share it, how long we retain it, the security measures we apply to protect it, and the rights available to you in relation to your personal data.

By registering an mbi88 account, making a deposit, or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should not use the mbi88 Platform.

This Policy is to be read in conjunction with the mbi88 Terms & Conditions, which are incorporated herein by reference.

2. Personal Data We Collect

mbi88 collects the following categories of personal data in connection with your use of the Platform:

Registration & Identity Data:

• Full legal name
• Date of birth (for age verification — mbi88 is strictly for users aged 21 and above)
• Email address
• Malaysian mobile phone number
• Username and encrypted password
• Residential address

Identity Verification (KYC) Data:

• Government-issued identification documents (e.g., Malaysian MyKad, passport)
• Proof of address documentation
• Source-of-funds documentation where required by anti-money laundering procedures
• Selfie or liveness verification images where required

Financial & Transaction Data:

• Deposit and withdrawal records, including amounts, timestamps, and payment methods used (Touch 'n Go eWallet, Boost, Maybank, CIMB, Public Bank, and others)
• Account balance and transaction history
• Bonus and promotion activity records

Gaming Activity Data:

• Bets placed, games played, game session durations, and wagering history
• Sportsbook selections including sports markets, odds accepted, and bet outcomes
• Casino game play records including live casino, slots, virtual games, and Sic Bo

Technical & Usage Data:

• IP address and approximate geographic location at time of mbi88 login and during sessions
• Device type, operating system, and browser version
• Session timestamps, page views, and navigation patterns on the Platform
• Cookie identifiers and similar tracking data (see Section 6)

Communications Data:

• Records of live chat conversations with mbi88 customer support
• Email correspondence with mbi88
• Feedback, complaint, and dispute records

3. How mbi88 Uses Your Personal Data

mbi88 processes your personal data for the following purposes:

• Account administration: Creating, maintaining, and administering your mbi88 player account, including processing deposits and withdrawals in MYR, updating account details, and providing access to all Platform services.
• Identity and age verification: Verifying that you are aged 21 or above and confirming your identity in compliance with anti-money laundering (AML) and know-your-customer (KYC) obligations applicable to online gaming platforms.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, money laundering, multi-accounting, bonus abuse, cheating, and any other form of prohibited conduct on the mbi88 Platform.
• Responsible gaming compliance: Monitoring gaming behaviour to identify signs of problem gambling, enforcing self-exclusion requests, and complying with responsible gaming obligations under applicable international gaming authority standards.
• Customer support: Responding to your enquiries, complaints, and disputes, and providing technical assistance via mbi88's 24/7 support channels.
• Legal and regulatory compliance: Complying with applicable laws, regulations, licensing conditions, and requests from competent authorities, including the retention of transaction and identity records for legally prescribed periods.
• Service improvement: Analysing aggregated, anonymised usage data to improve the functionality, performance, and content of the mbi88 Platform.
• Marketing communications: Sending you information about mbi88 promotions, bonuses, and new features where you have provided consent for such communications. You may withdraw consent at any time.

4. Legal Basis for Processing Personal Data

mbi88 processes your personal data on the following legal bases, which may apply individually or in combination depending on the processing activity:

• Contractual necessity: Processing required to perform our obligations under the mbi88 Terms & Conditions, including account management, transaction processing, and game delivery.
• Legal obligation: Processing required to comply with AML legislation, KYC requirements, responsible gaming obligations, and other applicable legal and regulatory requirements.
• Legitimate interests: Processing necessary for the legitimate interests of mbi88, including fraud detection, platform security, responsible gaming monitoring, and service improvement, where those interests are not overridden by your rights and interests.
• Consent: Processing based on your freely given, informed, and specific consent — in particular, the sending of marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of processing carried out prior to withdrawal.

5. Data Sharing & Disclosure

mbi88 does not sell your personal data to any third party. We may share your personal data with the following categories of recipients in the circumstances described:

• Payment processors and financial institutions: To process deposits and withdrawals via Touch 'n Go eWallet, Boost, Maybank, CIMB, Public Bank, and other payment service providers. These parties process data only as necessary to complete financial transactions.
• Identity verification service providers: Third-party KYC and AML verification platforms engaged to assist with identity checks and document verification in accordance with regulatory obligations.
• Game software providers: Certified game studios and platform providers whose software powers games on the mbi88 Platform may process limited technical and session data necessary for game operation.
• Regulatory and law enforcement authorities: Where required by applicable law, court order, or request from a competent regulatory or law enforcement authority, mbi88 will disclose data as legally required.
• Fraud prevention and security services: Third-party providers engaged to assist with fraud detection, IP analysis, device fingerprinting, and related security functions.
• Professional advisers: Legal, accounting, auditing, and compliance advisers engaged by mbi88 where access to personal data is necessary for the provision of professional services, subject to applicable professional confidentiality obligations.

All third parties with whom mbi88 shares personal data are required to handle that data in accordance with applicable data protection standards and are prohibited from using it for any purpose beyond the specific purpose for which it was shared.

6. Cookies & Tracking Technologies

The mbi88 Platform uses cookies and similar tracking technologies to enhance your experience, maintain session state after mbi88 login, and collect usage analytics data. The categories of cookies used include:

• Strictly necessary cookies: Required for basic Platform functionality including maintaining your logged-in session, storing your language and currency preferences, and enabling secure account access.
• Analytics cookies: Used to collect anonymised data on how users interact with the mbi88 Platform, including pages visited, session duration, and navigation paths. This data is used to improve Platform performance and content.
• Functional cookies: Used to remember your preferences and personalise your experience on the Platform, such as remembering your preferred game categories or bet types.
• Marketing cookies: Used where you have consented to receive personalised marketing communications and to measure the effectiveness of mbi88's marketing activity.

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may impair your ability to use core mbi88 Platform functions, including the mbi88 login process.

7. Data Retention

mbi88 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following retention principles:

• Account data and transaction records are retained for a minimum of five (5) years following account closure, in compliance with anti-money laundering record-keeping obligations applicable to online gaming operators.
• Identity verification documents are retained for the period required by applicable AML and KYC regulations, which may extend beyond account closure.
• Customer support communications are retained for a period of two (2) years following closure of the relevant support interaction, to enable effective dispute resolution.
• Gaming activity and betting records are retained for a minimum of five (5) years following the relevant transaction, in accordance with responsible gaming audit and compliance requirements.
• Marketing consent records are retained until consent is withdrawn, and for a reasonable period thereafter as evidence of consent history.

Where retention is no longer legally required or operationally necessary, mbi88 will securely delete or anonymise personal data in accordance with our data disposal procedures.

8. Data Security

mbi88 implements technical and organisational security measures appropriate to the nature of the personal data processed and the risks involved. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the mbi88 Platform
• One-way cryptographic hashing of account passwords — mbi88 does not store or have access to your password in readable form
• Access controls limiting internal access to personal data to authorised personnel on a need-to-know basis
• Regular security assessments and penetration testing of Platform infrastructure
• Fraud detection systems that monitor for suspicious account activity in real time

Notwithstanding these measures, no online platform can guarantee absolute security. In the event of a data security incident that poses a material risk to your rights, mbi88 will notify affected users in accordance with applicable legal notification obligations.

9. Your Data Protection Rights

Subject to applicable data protection law, you have the following rights in relation to the personal data mbi88 holds about you:

• Right of access: You may request a copy of the personal data mbi88 processes about you.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data held by mbi88.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to restriction of processing: You may request that mbi88 limit the processing of your personal data in certain circumstances.
• Right to data portability: Where processing is based on consent or contractual necessity and carried out by automated means, you may request a structured copy of your data in a machine-readable format.
• Right to object: You may object to processing based on legitimate interests at any time, and you may withdraw consent for marketing communications at any time.

To exercise any of the above rights, please contact mbi88 customer support through the live chat function accessible after mbi88 login, or via the contact email address published on the Platform. mbi88 will respond to verified requests within a reasonable timeframe and in accordance with applicable law.

10. Children's Privacy

The mbi88 Platform is strictly intended for users aged 21 years and above. mbi88 does not knowingly collect personal data from persons under the age of 21. If mbi88 becomes aware that personal data has been collected from a person under the minimum age requirement, that account will be closed, the personal data will be deleted in accordance with our data disposal procedures, and any deposits will be returned.

If you believe that a person under 21 has registered an mbi88 account, please contact our support team immediately so that the matter can be investigated and resolved.

11. International Data Transfers

The mbi88 Platform may involve the transfer of personal data to service providers or infrastructure located outside Malaysia. Where such transfers occur, mbi88 takes steps to ensure that adequate data protection safeguards are in place, including:

• Engaging only service providers who commit to data protection standards consistent with applicable requirements
• Implementing contractual data protection obligations with all international data processors
• Applying data minimisation principles to limit the scope of personal data transferred internationally

By using the mbi88 Platform, you acknowledge that your personal data may be transferred, stored, or processed outside Malaysia in accordance with this Policy.

12. Policy Amendments & How to Contact Us

mbi88 reserves the right to amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform services. Where amendments are material, mbi88 will provide notice to registered users via the Platform or by email to the address associated with your account. The date at the top of this Policy indicates when it was last updated. Continued use of the Platform after any amendment constitutes your acceptance of the updated Policy.

For any questions, concerns, or requests relating to this Privacy Policy or the personal data mbi88 processes about you, please contact our Data Protection team via the 24/7 live chat function accessible on the Platform, or by email at the address published on mbi88.asia. All privacy-related enquiries will be handled in accordance with our internal data protection procedures and applicable law.