Mbi98 Privacy Policy – Personal Data Protection for Malaysian Players

Welcome to the mbi98 Privacy Policy. The mbi98 platform, accessible through our official website, takes the privacy and personal data of every member who uses our services very seriously. This document is the official mbi98 Privacy Policy and explains in detail how we manage the information you share with us.

This mbi98 Privacy Policy applies to all users who register, access, or use any services offered by our platform, including Sports Betting, Live Casino, slots, and all related digital entertainment activities on mbi98. This Policy should be read together with Terms & Conditions and Responsible Gaming Policy us.

By registering an account or using the mbi98 platform, you acknowledge that you have read and understood this Privacy Policy and agree to the processing of your personal data as described herein.

Mbi98 collects only the minimum personal data necessary to provide our services to you. Below are the categories of data we collect:

We do not collect sensitive data such as your health information, sexual orientation, religious beliefs, or political views unless there is a legal requirement for us to do so.

Mbi98 collects your personal data through several key channels:

• Account Registration – When you register a new mbi98 account, we collect basic information such as your name, email, phone number, and login details.
• Identity Verification (KYC) – To meet compliance requirements, we request a copy of your identity card or passport along with other supporting documents during the account verification process.
• Financial Transactions – Every time you make a deposit or withdrawal via Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay or FPX, your transaction details are collected automatically.
• Platform Usage – Technical and behavioural usage data is collected automatically while you use the mbi98 platform, including the games you play and your betting activity.
• Support Communications – When you contact our customer support team via live chat or email, those conversations are recorded for quality assurance and training purposes.
• Cookies and Tracking Technologies – Our platform uses cookies and similar technologies to collect technical data related to your use of the website.

Mbi98 uses collected personal data solely for legitimate and transparent purposes. The following are the primary purposes for which your personal data is used:

• Service Provision – Allows you to access and use all features on the mbi98 platform, including Malaysia Super League and EPL Sports Betting, Live Casino, slots, and e-sports.
• Identity Verification – To verify your identity, age, and eligibility to use the mbi98 platform in accordance with legal requirements.
• Transaction Processing – Processes deposits, withdrawals and all financial transactions accurately and securely in MYR.
• Fraud Prevention – Detects and prevents suspicious activity, identity fraud and platform misuse.
• Service Communications – Sends you important notifications regarding your account, transactions, policy updates, and security information.
• Platform Improvements – Analyses usage data to improve user experience, platform performance, and our service offerings.
• Legal Compliance – Meets reporting and compliance requirements with relevant regulatory bodies and authorities in Malaysia.
• Responsible Gaming – Monitors gameplay patterns to identify members who may benefit from responsible gaming support.

Mbi98 does not sell, rent, or disclose your personal data to third parties for marketing purposes without your consent. However, there are limited situations where we may need to share your data:

• Payment Service Providers – Payment partners who process your transactions, including Touch 'n Go, GrabPay, DuitNow, and FPX providers. They are bound by strict confidentiality agreements.
• Game Software Providers – Third-party gaming platform providers that operate Live Casino and slots games on the mbi98 platform.
• Legal Authorities – When required by law, court order or a directive from a legitimate authority in Malaysia.
• Anti-Money Laundering – To the relevant regulatory authorities where there is suspicion of money laundering or terrorism financing activities.
• Business Transfer – In the event of any merger, acquisition, or asset sale, user data may be transferred as part of that process with reasonable notice given to you.

All third parties that receive your personal data are bound by strict confidentiality agreements and are only permitted to use that data for the agreed purposes.

Protecting your personal data is mbi98's highest priority. We implement multiple layers of technical and organisational safeguards to keep your data secure:

• 256-bit SSL Encryption – All data transmitted between your device and the mbi98 platform is encrypted using 256-bit SSL technology, the highest industry standard.
• Multi-Layered Firewall – Our servers are protected by a multi-layered firewall system that prevents unauthorised external access.
• Intrusion Detection System (IDS) – Continuous 24/7 monitoring to detect any intrusion attempts or suspicious activity within our systems.
• Internal Access Control – Only mbi98 staff with specific authorisation may access members' personal data, and all such access is logged and monitored.
• Two-Factor Authentication (2FA) – Available to all member accounts as an added layer of security during login.
• Regular Security Audits – mbi98 conducts regular security audits by independent experts to ensure our data protection systems remain up to date.

Mbi98 retains your personal data for as long as necessary to fulfil the original purpose of collection or to meet applicable legal requirements. In general:

• Active Account Data – Retained for the duration your account is active, plus any additional period required by law.
• Financial & Transaction Data – Financial transaction records are retained for a minimum of seven (7) years in accordance with the Companies Act and Malaysia's anti-money laundering regulations.
• KYC Data – Identity verification documents are retained for the lifetime of your account plus five (5) years after account closure.
• Communication Logs – Customer support communication records are retained for three (3) years for reference and dispute resolution purposes.
• Technical Data – Access logs and technical data are retained for twelve (12) months and then deleted or anonymised.

Once the retention period expires, your data will be securely deleted or anonymised so it can no longer be linked back to you personally.

Under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding the personal data mbi98 holds about you:

To exercise any of the above rights, please contact our data protection team by email at privacy@mbi98.net. We will process your request within 14 working days. For more complex cases, this period may be extended by up to 30 days, with notice provided to you.

The mbi98 platform uses cookies and similar tracking technologies to enhance user experience and collect analytics data. The following are the types of cookies we use:

• Essential Cookies – Required for core platform functions such as login, user sessions and security. These cookies cannot be disabled as they are critical to platform operation.
• Performance Cookies – Collects anonymised data on how you use the platform to help us improve performance and user experience.
• Functional Cookies – Saves your preferences such as language, region and display settings to deliver a more personalised experience.
• Analytics Cookies – Helps us understand overall usage patterns for the purpose of improving the mbi98 platform.

You can manage cookie settings through your web browser. Disabling certain cookies may affect the functionality of the mbi98 platform. For more information on managing cookies, please refer to your web browser's guide.

The mbi98 platform is exclusively for users aged 18 and above. We do not knowingly collect or process personal data from any individual under the age of 18.

If we find that personal data of minors has been collected without our knowledge, we will take immediate steps to delete that data and close the account in question. Parents or guardians who suspect their child has registered on our platform are encouraged to contact us immediately via support@mbi98.net.

Mbi98 reserves the right to amend or update this Privacy Policy at any time to reflect changes in our practices, legal requirements or service offerings. Whenever an amendment is made, the "Last Updated" date at the top of this document will be revised accordingly.

For material and significant amendments, we will notify you via email or in-platform notification at least 14 days before those changes take effect. Your continued use of the mbi98 platform after the effective date of any amendment will be considered your acceptance of the updated Privacy Policy.

If you have any questions, concerns, or complaints regarding mbi98's Privacy Policy or how we handle your personal data, please contact our Data Protection Officer through the following channels:

• Privacy Email: privacy@mbi98.net
• General Support Email: support@mbi98.net
• Live Chat: Available 24/7 via the mbi98 platform

We aim to respond to all privacy-related enquiries within 3 working days. For more complex issues, we will keep you informed of our investigation's progress within 14 working days.

If you are not satisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia or the relevant regulatory body.