mbi88 Privacy Policy

1 Introduction

1.1 This Privacy Policy ("Policy") is issued by mbi88 ("mbi88", "we", "us", "our") and applies to all users ("Player", "you") of the mbi88 website located at mbi88.win, including all sub-pages, game lobbies, account portals, and any associated services (collectively, the "Platform").

1.2 mbi88 is committed to protecting the privacy and security of your personal data. This Policy describes in plain terms how mbi88 collects, processes, stores, shares, and protects personal information in connection with your use of the Platform, in accordance with applicable data protection laws and the requirements of mbi88's international gaming authority licence.

1.3 By registering an account, depositing funds, or otherwise using the mbi88 Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this Policy, you must discontinue use of the Platform immediately.

1.4 This Policy should be read alongside the mbi88 Terms & Conditions, which together form the complete agreement governing your relationship with the Platform.

2 Personal Data We Collect

2.1 Registration Data. When you create an mbi88 account, we collect your full legal name, date of birth, email address, mobile phone number, and, where required for identity verification, a copy of a government-issued identity document.

2.2 Financial Data. To process deposits and withdrawals in Malaysian Ringgit (MYR), mbi88 collects payment method details, transaction identifiers, and bank or eWallet account references. Full financial account credentials are never stored directly by mbi88 — they are processed by our licensed payment partners.

2.3 Technical Data. When you visit the mbi88 Platform, we automatically collect device identifiers, IP address, browser type and version, operating system, session duration, pages visited, and referring URLs. This data is collected through server logs and analytics tools.

2.4 Gaming Activity Data. mbi88 records all wagering activity on the Platform, including bets placed, games played, win and loss history, bonus claims, and session times. This data is retained for compliance, dispute resolution, and responsible gaming monitoring purposes.

2.5 Communications Data. If you contact mbi88 support via live chat or email, we retain records of that correspondence, including your name, contact details, and the content of the exchange.

2.6 Responsible Gaming Data. Where you activate responsible gaming tools — such as deposit limits, self-exclusion, or cooling-off periods — mbi88 records those elections to enforce them consistently across sessions and devices.

3 How We Use Your Data

3.1 mbi88 uses your personal data for the following purposes:

• To register and maintain your mbi88 account and verify your identity;
• To process deposits and withdrawals in MYR through our authorised payment partners;
• To provide and personalise the gaming experience on the Platform;
• To administer bonuses, promotions, and loyalty programmes;
• To comply with anti-money laundering (AML), counter-terrorism financing (CTF), and Know Your Customer (KYC) obligations under the mbi88 licence;
• To detect, investigate, and prevent fraud, cheating, collusion, and prohibited activities;
• To enforce responsible gaming restrictions including self-exclusion;
• To respond to customer support queries and resolve disputes;
• To send transactional communications, including account activity notifications and withdrawal confirmations;
• To improve the Platform through analysis of aggregated, anonymised usage data.

3.2 mbi88 does not use your personal data for automated profiling that produces legal or similarly significant effects without your explicit consent.

4 Legal Basis for Processing

4.1 mbi88 processes your personal data under the following legal bases:

• Contractual Necessity: Processing required to perform the contract between you and mbi88, including account management and payment processing;
• Legal Obligation: Processing required to comply with AML, KYC, and responsible gaming obligations imposed by mbi88's gaming licence;
• Legitimate Interests: Processing for fraud prevention, platform security, and service improvement, balanced against your data protection rights;
• Consent: Where mbi88 sends marketing communications, such processing is based on your opt-in consent, which may be withdrawn at any time.

5 Data Sharing & Disclosure

5.1 mbi88 does not sell, rent, or trade your personal data to third-party advertisers or data brokers under any circumstances.

5.2 mbi88 may share your personal data with the following categories of third parties, strictly on a need-to-know basis:

• Payment processors: Maybank2u, CIMB Clicks, Public Bank, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, and FPX service providers, solely for transaction processing;
• Identity verification providers: KYC and AML screening services engaged to meet licensing requirements;
• Gaming software providers: Game studios and platform operators whose software is integrated into the mbi88 lobby, on a data-minimised basis;
• Regulatory authorities: The mbi88 licensing authority and relevant government bodies where disclosure is required by law;
• Fraud prevention services: Third-party databases used to screen against known fraud and AML watchlists.

5.3 All third parties with whom mbi88 shares personal data are contractually required to maintain appropriate data security standards and to process your data only for the stated purpose.

6 Cookies & Tracking Technologies

6.1 mbi88 uses cookies and similar tracking technologies to operate the Platform, authenticate sessions, remember user preferences, and collect analytics data. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for the Platform to function, including session management and security tokens. These cannot be disabled;
• Functional Cookies: Remember your language preferences and settings to improve your experience;
• Analytics Cookies: Collect anonymised usage statistics to help mbi88 understand how the Platform is used and where improvements can be made.

6.2 You may control non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the mbi88 Platform.

7 Data Retention

7.1 mbi88 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods imposed by licensing and regulatory requirements:

• Account and identity verification records: minimum 5 years from account closure;
• Financial transaction records: minimum 5 years from the date of the transaction;
• Gaming activity logs: minimum 5 years from the date of the activity;
• Customer support correspondence: 2 years from the date of resolution.

7.2 Where retention beyond these periods is required by a specific legal obligation or ongoing regulatory investigation, mbi88 will retain the relevant data until that obligation is discharged.

8 Data Security

8.1 mbi88 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption across all Platform connections;
• Encrypted storage of sensitive data fields including passwords and payment references;
• Role-based access controls limiting staff access to personal data on a need-to-know basis;
• Regular third-party security audits and penetration testing;
• Incident response procedures for data breach containment and notification.

8.2 Notwithstanding the above, no method of data transmission over the internet is entirely secure. mbi88 cannot guarantee absolute security and accepts no liability for breaches attributable to events outside its reasonable control, including cyberattacks by third parties.

9 Your Data Rights

9.1 Subject to applicable law and the requirements of mbi88's gaming licence, you hold the following rights with respect to your personal data:

• Right of Access: Request a copy of the personal data mbi88 holds about you;
• Right to Rectification: Request correction of inaccurate or incomplete personal data;
• Right to Erasure: Request deletion of your personal data, subject to retention obligations under the gaming licence;
• Right to Restriction: Request that mbi88 restrict processing of your data in certain circumstances;
• Right to Data Portability: Request your data in a structured, machine-readable format where technically feasible;
• Right to Object: Object to processing based on legitimate interests, including direct marketing.

9.2 To exercise any of the above rights, contact mbi88 at [email protected]. mbi88 will respond within 30 calendar days. Identity verification may be required before processing your request.

10 Children's Privacy

10.1 Parents and guardians who believe their child has registered an mbi88 account should contact support immediately at [email protected] to have the account reviewed and closed.

11 Cross-Border Data Transfers

11.1 As an internationally licensed online gaming platform, mbi88 may process and store personal data on servers located outside Malaysia. Where such cross-border transfers occur, mbi88 ensures that appropriate safeguards are in place, including contractual data protection clauses consistent with internationally recognised standards.

11.2 mbi88's payment processing partners serving Malaysian players — including Touch 'n Go eWallet, DuitNow, and Maybank2u — are subject to Malaysian financial regulations and maintain their own data protection obligations under applicable law.

12 Third-Party Links

12.1 The mbi88 Platform does not contain links to external third-party websites. This Privacy Policy applies exclusively to data processing carried out by mbi88 through the mbi88.win Platform. mbi88 is not responsible for the privacy practices of any third-party service providers whose interfaces you access independently of the Platform.

13 Changes to This Policy

13.1 mbi88 reserves the right to amend this Privacy Policy at any time. Material changes will be communicated to registered Players via the email address on file, or by prominent notice on the Platform, at least 14 days before the change takes effect.

13.2 Continued use of the mbi88 Platform following notification of an updated Privacy Policy constitutes acceptance of the revised terms. If you do not accept the revised Policy, you must close your account and withdraw available funds before the effective date of the change.

14 Contact & Data Queries

14.1 For any questions, requests, or concerns relating to this Privacy Policy or the personal data mbi88 holds about you, please contact the mbi88 Data Protection team. Our support email is displayed as plain text below and in the site footer:

[email protected]

14.2 mbi88 support is available 24 hours a day, 7 days a week, via live chat from the Platform lobby after login, or via the email address above for written data protection queries.