Mbi23 Privacy Policy — How We Protect Your Personal Information

Mbi23 is fully committed to protecting the privacy and security of every user's personal data on our platform. This Privacy Policy is designed to give you a clear and transparent understanding of how we handle your personal information throughout your membership with mbi23.

This policy applies to all users who access the mbi23 website, our mobile app, and any related services we provide. By registering an account or using our services, you agree to the data collection and usage practices described in this document.

We comply with Malaysia's Personal Data Protection Act 2010 (PDPA) and the best international standards in personal data management. If you have any questions about how we handle your data, our privacy team is ready to assist via live chat within the platform.

We only collect data that is genuinely necessary to provide a safe, seamless, and responsible service. The following are the categories of data we collect from you:

We do not collect sensitive data such as health information, religious beliefs, or political views unless you voluntarily provide it in the context of responsible gaming.

Your personal data is collected through several different channels depending on how you interact with the mbi23 platform. Each data collection channel is designed to ensure transparency and the security of your information.

• Account Registration — When you complete the registration form, basic information such as your name, email, and phone number is collected directly from you.
• KYC Verification Process — Identity documents are collected during the identity verification process to ensure account security and legal compliance.
• Financial Transactions — Bank and e-wallet information is securely collected when you make a deposit or request a withdrawal.
• Platform Usage — Our system automatically records gaming activity, preferences, and usage patterns for service improvement purposes.
• Cookies & Tracking Technology — Cookies and similar technologies are used to remember your preferences and improve the user experience.
• Customer Support — When you contact us via live chat or email, the conversation is recorded for quality control purposes.

Every piece of data we collect is used for a clear and legitimate purpose. mbi23 does not use your data for any purpose outside the scope stated below without obtaining your consent first.

• Account Management — Creates, verifies, and securely manages your member account.
• Payment Processing — Processes deposits, withdrawals, and all financial transactions accurately and securely.
• Identity Verification (KYC) — Meets legal requirements and prevents money laundering and fraud.
• Service Provision — Allows you to access all games, promotions, and platform features in full.
• Customer Support — Resolves any issues, enquiries, or complaints you raise with our team.
• Platform Security — Detects and prevents fraudulent activity, unauthorised access, and other security threats.
• Legal Compliance — Fulfils obligations under Malaysia law and directions from relevant authorities.
• Marketing Communications — Sends promotional information, exclusive offers, and platform updates (subject to your preferences).
• Platform Improvements — Analyses usage patterns to improve the overall user experience.

Mbi23 does not sell, rent, or disclose your personal data to any third party for marketing purposes without your explicit consent. However, there are specific situations where we may need to share your information with trusted parties:

• Payment Service Providers — Transaction information is shared with trusted payment processors such as FPX, Touch 'n Go eWallet, GrabPay, and Boost to facilitate deposit and withdrawal processing.
• Game Providers — Basic game data is shared with licensed and registered third-party game software providers that supply game content within our platform.
• Legal Authorities — We may be required to disclose your information to law enforcement agencies, courts, or regulatory bodies when mandated by applicable law.
• Identity Verification Services — KYC documents may be processed through third-party identity verification platforms with internationally recognised security certifications.
• Cloud Services & Infrastructure — Data is stored on secure cloud servers with ISO 27001 security certification.

All third parties we work with are bound by strict data confidentiality agreements and are required to uphold data protection standards equivalent to our own policy. mbi23 takes responsibility for ensuring all our partners handle your data with the utmost integrity.

We invest seriously in security infrastructure to ensure your personal data is always protected. The mbi23 security system is designed in multiple layers to provide comprehensive protection at every level.

• 256-bit SSL Encryption — All data transmitted between your device and our servers is protected with industry-standard 256-bit SSL encryption, the same standard used by leading financial institutions.
• Data Encryption at Rest — Sensitive information such as passwords and financial data is encrypted at rest in the database using AES-256 algorithms.
• Two-Factor Authentication (2FA) — An additional security layer via two-factor authentication is available to protect your account from unauthorised access.
• 24/7 Monitoring — Our automated monitoring system operates around the clock to detect and respond to any suspicious activity.
• Internal Access Controls — Access to users' personal data among our staff is strictly limited on a need-to-know basis only.
• Regular Security Audits — We conduct regular security audits and penetration tests by independent third parties to identify any vulnerabilities.

Mbi23 uses cookies and similar tracking technologies to enhance user experience, analyse platform performance, and ensure certain functions run smoothly. The following are the types of cookies we use:

• Essential Cookies — Required for core platform functions such as login session verification and security. These cookies cannot be disabled as the platform will not function without them.
• Functional Cookies — Remembers your preferences such as language, display settings, and game choices to deliver a more personalised experience.
• Analytics Cookies — Helps us understand how users interact with the platform through usage data that cannot personally identify individuals.
• Performance Cookies — Collects information on page load times and technical performance to help us improve platform speed.

You can manage your cookie settings through your web browser at any time. However, disabling certain cookies may affect the functionality and user experience of the mbi23 platform. For more information on managing cookies, refer to your web browser's help guide.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have certain rights regarding the personal data we hold. mbi23 fully respects these rights and provides easy channels for you to exercise them.

Mbi23 only retains your personal data for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following are our general data retention guidelines:

• Active Account Data — Retained for the duration your account is active and for an additional period after account closure to meet legal requirements.
• Financial Transaction Records — Retained for a minimum of 7 years as required by Malaysia's financial and tax laws.
• KYC Documents — Retained for the period specified by applicable anti-money laundering (AML) requirements.
• Game Activity Log — Retained for 2 years for dispute resolution and legal compliance purposes.
• Support Communication Records — Retained for 12 months for quality control and training purposes.
• Cookie Data — Depends on the type of cookie; session cookies are deleted when the browser is closed, while persistent cookies are stored until their set expiry date.

Once the retention period has expired, your data will be securely deleted or anonymised in accordance with established procedures. Data deletion is carried out using methods that ensure the data cannot be recovered.

Mbi23 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, legal requirements, or service improvements. We are committed to notifying you of any significant changes in a clear and timely manner.

When significant changes are made to this Privacy Policy, we will:

• Updating the "Last Updated" date at the top of this page.
• Sending a notification via email to the address registered to your account.
• A notice will be displayed on the platform the first time you log in after any changes have been made.

Your continued use of the mbi23 platform after any changes to this Privacy Policy are published will be considered your acceptance of the latest version of that Privacy Policy. We encourage you to review this page periodically.

If you have any questions, concerns, or wish to exercise your rights regarding your personal data, do not hesitate to contact us. The mbi23 privacy team is committed to providing prompt and helpful responses.