Mbi789 Privacy Policy – Personal Data Protection for Malaysian Members

This Privacy Policy is published by mbi789, an online sports betting and casino platform operating at mbi789.site and the mbi789 mobile app. This document describes the privacy practices that apply to all users and registered members of the mbi789 platform in Malaysia.

This policy covers all your interactions with mbi789, including website visits, mobile app usage, account registration, deposits and withdrawals, betting and gaming activity, and communications with our customer support team. We operate in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and all applicable related legislation.

Mbi789 is the data controller for all personal information collected through our platform. This means we are responsible for ensuring your data is collected, used, and protected in accordance with the law and the commitments set out in this policy. If you have any questions, concerns, or complaints regarding privacy, contact us at support@mbi789.site.

Mbi789 collects various categories of personal data for different purposes. Below is a full explanation of what we collect and how it is obtained:

Data you provide directly:

• Registration information: Full name, Malaysian phone number, email address, date of birth and password. These are required to create your mbi789 account.
• Identity verification (KYC) information: A copy of your Malaysian identity card (MyKad) or passport may be requested before your first withdrawal or when verification is required. This is a standard industry legal compliance requirement.
• Payment information: E-wallet account details (Touch 'n Go, GrabPay, Boost, ShopeePay), DuitNow account numbers, or bank information (Maybank, CIMB, and others) for deposit and withdrawal purposes. Card numbers and banking passwords are not stored by mbi789 — these are processed directly by the relevant payment processors.
• Communications: Messages you send to the mbi789 customer support team via Live Chat, email, or any other communication channel.

Data collected automatically when you use the platform:

• Technical data: IP address, browser type and version, device type, operating system, screen resolution, and unique device identifiers.
• Usage data: Pages visited, time spent on the platform, games played, buttons clicked and general navigation patterns.
• Transaction data: Deposit, withdrawal, betting, winnings, and loss history, including dates, times, amounts, and transaction methods.
• Cookie data: Session information and preferences stored via browser cookies and similar tracking technologies.

Mbi789 uses the personal data collected solely for the following purposes:

• Service provision: Creating and managing your mbi789 account, processing deposits and withdrawals, verifying identity and age, and enabling you to play all games available on the platform.
• Security and fraud prevention: Detecting and investigating suspicious activity, preventing unauthorised account access, ensuring compliance with terms of use and safeguarding the interests of all mbi789 members.
• Legal compliance: Fulfilling KYC (Know Your Customer) and AML (Anti-Money Laundering) compliance obligations required under Malaysian law, including reporting suspicious transactions to the relevant authorities.
• Customer support: Responding to your enquiries and complaints effectively, resolving technical issues, and providing personalised support based on your account history.
• Platform improvements: Analysing usage data in aggregate (not individually) to understand how members use the platform, identify technical issues, and make better product development decisions.
• Service communications: Sending you important notifications about your account, security updates, policy changes, and relevant transaction information. These are essential service communications and cannot be unsubscribed from.
• Marketing communications: With your consent, sending you information about mbi789 promotions, bonuses, and offers. You may opt out of marketing communications at any time via your account settings or the unsubscribe link in any email.
• Responsible gaming: Monitoring gameplay patterns to identify signs of problem gambling and providing appropriate assistance or intervention to protect member wellbeing.

Mbi789 does not use your personal data for any purpose other than those stated above. Should we need to use your data for a new purpose not covered in this policy, we will obtain your consent beforehand or notify you via an update to this policy.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), mbi789 processes your personal data on lawful legal bases. The applicable basis for each category of processing is as follows:

• Contract performance: Processing required to provide mbi789 services to you — including account setup, transaction processing, and game delivery. Without this processing, we are unable to provide our services.
• Legal obligation: Processing required to comply with Malaysian law, including KYC, AML, and reporting obligations to regulatory authorities.
• Legitimate interests: Processing for the purposes of fraud prevention, platform security, service improvement and business risk management — where these interests do not override your privacy rights.
• Consent: For optional marketing communications and any additional processing not covered by another legal basis. You may withdraw this consent at any time.

The security of your personal data is a responsibility we take very seriously. mbi789 implements multiple layers of technical and organisational security measures to protect your data from unauthorised access, disclosure, alteration or destruction:

• Data encryption in transit: All data transmitted between your device and mbi789's servers is protected by TLS 1.3 encryption with a 256-bit SSL certificate, ensuring data cannot be intercepted by third parties during transmission.
• Data encryption at rest: Sensitive data stored in mbi789's databases is encrypted using AES-256, including all personal information, payment details, and transaction history.
• Access controls: Only mbi789 staff who require access to specific data to perform their duties are permitted to access that data. Our role-based access control (RBAC) system ensures no staff member has access beyond what their role requires.
• Threat monitoring and detection: mbi789's cybersecurity system monitors all platform activity in real time to detect suspicious access patterns, intrusion attempts, or other abnormal activity.
• Regular audits: mbi789 undergoes regular independent security audits conducted by qualified third-party cybersecurity firms to ensure our protective measures consistently meet the highest industry standards.
• Data backup: Critical data is backed up regularly and stored at a separate location with the same level of security protection, ensuring recovery in the event of an unforeseen incident.

Mbi789 maintains a strict policy on sharing members' personal data. We do not sell, rent, or disclose your data to third parties for their own commercial purposes. However, there are limited circumstances where data must be shared with specific parties for legitimate operational purposes:

• Payment processors: When you make a deposit via Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, or FPX, the required transaction information is shared with the relevant payment processor to complete the transaction. These processors are bound by strict data protection agreements and may only use the information to process that specific transaction.
• Game providers: For games provided by third-party providers such as Pragmatic Play or PG Soft, the minimum session information required to run the game is shared. These providers do not receive your personally identifiable information.
• Legal authority: mbi789 will disclose information to Malaysian authorities, law enforcement agencies or regulatory bodies when required by law or a valid court order. In such situations, we will only disclose the minimum information necessary.
• Technical service providers: Companies that assist in operating mbi789's technical infrastructure (such as cloud computing services) may have access to data in a technical capacity. All such providers are bound by strict confidentiality and data protection agreements and are not permitted to use the data for their own purposes.

Every third party that receives data from mbi789 is required to protect that data to a standard at least equivalent to mbi789's own data protection standards. We periodically review agreements with all third parties to ensure ongoing compliance.

Mbi789 uses cookies and similar tracking technologies to enhance the user experience and gather analytical information about platform usage. Below are the types of cookies we use:

• Essential cookies: Required for core platform functions — login session management, security, and verification. This cannot be disabled as the platform will not function properly without it.
• Optional cookies: Saving your preferences such as interface language and display settings to deliver a more personalised experience each time you use mbi789.
• Analytics cookies: Collecting information on how you use the platform – pages visited, time spent, and navigation patterns. This data is used in aggregate form to improve the mbi789 platform. mbi789 only uses analytics tools that we operate ourselves.
• Security cookies: Used to detect unusual login attempts, device fingerprinting for fraud detection, and to keep your session secure at all times.

You can manage cookies through your browser settings. However, disabling essential cookies will affect the functionality of the mbi789 platform. Analytics and preference cookies can be disabled without impacting the platform's core functionality.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and mbi789's commitment to privacy protection, you have the following rights regarding your personal data:

• Right of access: You have the right to request a copy of all personal data we hold about you. We will provide this information within 14 business days of receiving your request.
• Right to rectification: If any personal information held about you in mbi789's systems is inaccurate or outdated, you have the right to request a correction. You may also update most of this information yourself via your account settings.
• Right to deletion: You have the right to request deletion of your personal data, subject to our legal obligations to retain certain records for periods prescribed by law. Where full deletion cannot be carried out due to legal obligations, we will clearly explain what can and cannot be deleted, and why.
• Right to restrict processing: In certain circumstances, you have the right to request that we restrict how we process your data while a matter is being resolved.
• Right to object: You have the right to object to the processing of your data for direct marketing purposes at any time, without having to provide a reason.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of any processing carried out prior to the withdrawal.

To submit any request relating to the rights above, contact us at support@mbi789.site with "Privacy Rights Request" in the subject line. We may need to verify your identity before processing your request to protect the security of your account.

Mbi789 sets a minimum age of 21 for all members with no exceptions. The mbi789 platform is not designed for use by individuals under the age of 21, and we do not knowingly collect personal data from underage children or minors.

If we determine that personal data belonging to an individual under the age of 21 has been collected — whether through false registration or any other means — we will take immediate action to delete that data and close the account in question. Any winnings obtained by underage users will be voided, and the original deposit (excluding winnings) will be refunded.

Parents or guardians who discover that a minor under their care has registered an mbi789 account are urged to contact us immediately at support@mbi789.site so we can take prompt action.

As an online platform, your personal data may be stored or processed on servers located outside Malaysia in certain situations — for example, when using cloud computing services or working with international service providers.

When data is transferred outside Malaysia, mbi789 ensures that adequate protections are in place through the following measures:

• Data transfers are only carried out to countries with data protection laws equivalent to those of Malaysia, or
• A legally binding data protection contract is signed with the data recipient to ensure appropriate protection standards are upheld, or
• Data recipients comply with internationally recognised security standards such as ISO 27001.

In all cases, your information is protected to a standard at least equivalent to the protection afforded in Malaysia.

Mbi789 retains your personal data only for as long as necessary for the purposes for which it was collected, subject to legal requirements for record retention. General data retention periods are as follows:

• Active account data: For as long as your account remains active and you continue using mbi789 services.
• Financial transaction data: Minimum 7 years from the date of transaction, in accordance with Malaysian legal requirements for financial records and AML compliance.
• KYC Data (identity verification): A minimum of 7 years after the business relationship ends, in accordance with the requirements of the AMLA 2001.
• Customer support communication logs: 3 years from the date of last interaction.
• Technical log data: 12 months from the date the log was generated.
• Closed account data (no outstanding legal issues): Personal information is anonymised within 90 days of account closure, except for data that must be retained to meet legal requirements.

Once the relevant retention period has expired, your personal data will be securely deleted or anonymised so that it can no longer be associated with you as an individual.

While mbi789 takes all reasonable steps to protect your data, no security system can be guaranteed 100% foolproof. In the event of a data breach affecting your personal information, mbi789 is committed to acting swiftly and transparently:

• Notification to affected members: If a data breach is likely to pose a risk to your rights and freedoms, mbi789 will notify you via email and in-platform notification within 72 hours of becoming aware of the breach, or as soon as reasonably practicable.
• Information to be provided: The notice will describe the nature of the breach, the data involved, the expected impact, and the steps mbi789 is taking or has taken to address the breach and protect affected members.
• Immediate action steps: mbi789 will implement a comprehensive incident response procedure, including isolation of affected systems, forensic investigation, notification to relevant authorities, and remediation measures to prevent further breaches.

If you suspect any unauthorised activity on your mbi789 account or believe your data may have been compromised, please contact our customer support team immediately via Live Chat or email at support@mbi789.site.

Mbi789 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, the services we offer, legal requirements or other legitimate operational reasons.

When we make material changes to this policy, we will:

• Updating the "Last Updated" date at the top of this policy.
• Sending email notifications to all active members at least 14 days before changes take effect.
• Displaying a clear notice within the mbi789 platform about upcoming changes.
• For highly significant changes, we may request renewed consent from members.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data. Continued use of the mbi789 platform after any updates take effect will be considered acceptance of those changes.

If you have any questions, concerns, or complaints regarding how mbi789 handles your personal data, or if you wish to submit a privacy rights request, please reach out to us through the following channels:

• Email (preferred method): support@mbi789.site – Use the subject line "Privacy Inquiry" or "Data Rights Request". We are committed to responding within 3 business days.
• Live Chat: Available 24 hours a day within the mbi789 platform. For urgent privacy concerns such as suspected account misuse, Live Chat is the fastest channel to reach us.

Our team handling privacy enquiries consists of Malaysian staff trained in data protection and privacy. All enquiries are handled with complete confidentiality.

If you are not satisfied with our response to your privacy complaint, you have the right to lodge a complaint with Malaysia's Department of Personal Data Protection or the relevant regulatory body under the PDPA 2010.

This Privacy Policy takes effect from 1 January 2026. Previous versions are available upon request by email if needed for reference.