Mbi33 Privacy Policy – Personal Data Protection for Malaysian Members

This Privacy Policy ("Policy") is published by mbi33 ("We", "Platform") and applies to all users who register, browse, or use any services provided through the mbi33 platform, including the mbi33.click website and any related applications.

Mbi33 is an online casino and Sports Betting platform operating exclusively for users in Malaysia. Throughout your use of our platform — from registering an account and depositing funds via Touch 'n Go or DuitNow, to playing live baccarat, placing bets on the Malaysia Super League, or contacting customer support — we collect various types of personal data. This Policy clearly explains every aspect of how that data is handled.

We respect your privacy and are committed to protecting your personal data in accordance with the highest security standards and applicable data protection legislation. By using the mbi33 platform, you agree to the collection and processing of data as described in this Policy.

Mbi33 only collects data that is strictly necessary to deliver our services effectively and securely. The following are the categories of data we collect from you:

Registration & Identity Data:

• Full name as it appears on your MyKad or other valid identification document.
• An active mobile phone number registered in Malaysia.
• A valid and active email address.
• The username and password you choose during registration (passwords are stored in encrypted form and cannot be read by anyone).
• Date of birth, for age verification purposes (21 years and above).
• A copy of your MyKad or other identity document when requested for full identity verification purposes.

Financial & Transaction Data:

• Payment method details used — including Touch 'n Go eWallet account numbers, GrabPay, Boost, ShopeePay, DuitNow, FPX bank account numbers (Maybank2u, CIMB Clicks), and other supported payment methods.
• A record of every deposit and withdrawal transaction, including the date, time, amount in Malaysian Ringgit (RM), and transaction status.
• Records of bonuses and promotions claimed and used.

Platform Activity Data:

• A record of each gaming session — games played, bets placed, outcomes, and session duration.
• Game preferences and playing habits (for game recommendation and platform improvement purposes).
• Interactions with the customer support team, including live chat transcripts and emails.

Technical Data:

• The IP address of the device used to access the mbi33 platform.
• Device type, operating system, and web browser version.
• Approximate location data based on IP address (state or city level only, not precise GPS location).
• Cookie data and similar tracking technologies (see Section 7 for more details).

Every piece of data we collect has a clear and legitimate purpose. Below is a summary of mbi33's data processing purposes:

Specifically, mbi33 processes your data for the following purposes:

• Service Provision: To create and manage your account, process deposits and withdrawals, and enable you to access all games and services on the mbi33 platform.
• Security & Fraud Prevention: To detect and prevent unauthorised access, fraudulent activity, money laundering, and misuse of the platform.
• Legal Compliance: To meet applicable legal compliance requirements, including mandatory financial reporting and identity verification obligations.
• Service Improvement: To analyse platform usage patterns (in anonymised form) for the purposes of product improvement and enhancing the user experience.
• Communications: To send important transaction notifications, platform update information, and (with your consent) relevant promotional offers.
• Responsible Gaming: To monitor gameplay patterns and identify players who may need assistance or support related to responsible gaming.

Mbi33 does not sell, rent, or transfer your personal data to any third party for marketing or commercial purposes. Your privacy is not our business commodity.

However, in certain limited situations, mbi33 needs to share your data with the following parties to enable the platform to operate securely and effectively:

• Payment Processing Providers: When you make a deposit via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX Maybank2u, or CIMB Clicks, the required transaction details will be shared with the respective payment provider solely for the purpose of processing that transaction.
• Game Providers: International game providers such as Evolution Gaming, Pragmatic Play, and Playtech may receive your gaming session data (without full identifying information) for the purposes of game service delivery and fairness auditing.
• Technology Service Providers: Companies providing mbi33 with technical infrastructure, hosting, and cybersecurity services, subject to strict confidentiality agreements.
• Legal Authorities: When required by law, court order, or a valid request from the relevant Malaysian authorities.
• Independent Audit Body: Independent audit bodies that verify the fairness of games and mbi33's platform compliance, subject to strict confidentiality agreements.

Mbi33 implements multiple layers of technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. The safeguards we apply include:

• 256-bit SSL Encryption: All communications between your device and mbi33's servers are encrypted using 256-bit TLS/SSL protocol — the same standard used by Malaysia's major banks. This means that even if your data were intercepted by a third party during transmission, it cannot be read without the correct encryption key.
• Data Encryption at Rest: Sensitive data such as passwords is stored as an irreversible hash — meaning no one, including mbi33's own technical team, is able to read your original password.
• Two-Factor Authentication (2FA): You can enable two-factor authentication on your mbi33 account as an additional layer of security, requiring verification via SMS or an authenticator app.
• 24/7 Security Monitoring: mbi33's cybersecurity team continuously monitors the platform to detect and respond promptly to any threats or suspicious activity.
• Internal Access Controls: Access to members' personal data within mbi33's internal systems is restricted to staff who genuinely require it to carry out their duties, with audit logs recording every instance of access.
• Regular Security Testing: The mbi33 platform undergoes regular penetration testing and independent security audits to identify and address vulnerabilities before they can be exploited.

While we take all reasonable steps to protect your data, no digital security system can guarantee 100% protection against every possible threat. You also play an important role in keeping your data safe by using a strong password and never sharing your login credentials with anyone.

Mbi33 does not retain your data indefinitely. We keep your personal data only for as long as necessary for the purposes stated in this Policy, or as required by applicable law. The following is a general guide to our data retention periods:

• Active Account Data: For the duration of your active membership with mbi33, plus the period required after account closure for audit and legal compliance purposes.
• Financial Transaction Records: At least 7 years from the date of the transaction, in line with standard financial record-keeping requirements in Malaysia.
• Security & Access Logs: Between 12 and 24 months, for the purposes of security incident investigation where required.
• Customer Support Records: Up to 3 years from the date of your last interaction, for reference and service improvement purposes.
• Marketing Data: Until you withdraw your consent to receive marketing communications, or until your account is closed.

Once the relevant retention period expires, your data will be securely deleted or converted into an anonymised format that can no longer be linked back to you personally.

Like most online platforms, mbi33 uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions correctly. Cookies are small text files stored on your device by your web browser when you browse the mbi33 platform.

Types of cookies we use:

• Essential Cookies: Required for the platform to function properly — including maintaining your login session, remembering language preferences, and ensuring basic security. These cookies cannot be disabled without affecting core platform functionality.
• Functional Cookies: Allows the platform to remember your preferences such as favourite games, display settings, and frequently auto-filled information for your convenience.
• Analytics Cookies: Collects information about how you use the mbi33 platform in anonymised form, helping us understand which areas are popular and where improvements are needed.
• Security Cookies: Used to detect and prevent fraudulent activity, such as suspicious login attempts from multiple locations within a short period of time.

You can manage cookies through your web browser settings. Disabling certain cookies may affect some functionality of the mbi33 platform. For more details on how to manage cookies in your browser, please refer to your browser's help documentation.

As the owner of your personal data, mbi33 recognises and respects the following rights you hold:

To exercise any of the rights above, please contact the mbi33 privacy team by email at support@mbi33.click with the subject line "Privacy Rights Request". We will verify your identity before processing any request, and will respond within 30 days from the date of receipt of the completed request.

The mbi33 platform is strictly for individuals aged 21 years of age or older only. We do not knowingly collect or process personal data from individuals under the age of 21.

During the registration process, we verify the date of birth provided and carry out age checks to ensure compliance with this requirement. If we find that personal data has been collected from a user under the age of 21, we will delete that data immediately and close the relevant account without notice.

Mbi33 reserves the right to modify, amend, or update this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or improvements to the way we handle data. When significant changes are made, we will:

• Updating the "Last Updated" date at the top of this page.
• Sending notifications to all active members via their registered email or in-platform notifications, particularly for changes that materially affect how we collect or use your data.
• In the case of highly significant changes, may seek your consent again before those changes take effect in relation to the processing of your data.

Continued use of the mbi33 platform after any amendment takes effect will be considered acceptance of the revised privacy terms. If you do not agree with the changes made, you may close your account and request deletion of your data in accordance with the procedure set out in Section 8.

If you have any questions, concerns, or requests regarding this Privacy Policy or how mbi33 handles your personal data, we encourage you to contact us directly. Our team is ready to assist in Bahasa Melayu.

You can reach the mbi33 privacy team through:

• Email: support@mbi33.click – please use the subject line "Privacy Enquiry" or "Data Rights Request" to help us process your query faster.
• Live Chat: Available directly on the mbi33 platform, operating 24 hours a day, 7 days a week in Bahasa Melayu.

We are committed to responding to all privacy-related enquiries within 3 working days, and to resolve data rights requests within 30 days from the date of receipt of the completed request.