mbi123 Privacy Policy

1. About This Privacy Policy

This Privacy Policy ("Policy") is issued by mbi123 ("we", "us", "our", "the Platform") and applies to all personal data collected through the mbi123 website at mbi123.one and through any related services, communications, and interactions you have with us, including account registration, gameplay, deposits and withdrawals, customer support, and promotional participation.

mbi123 is committed to handling your personal data responsibly and in accordance with applicable data protection principles. This Policy is intended to give you a clear and complete picture of our data practices so that you can make informed decisions about how you engage with the mbi123 platform. We encourage you to read it carefully.

This Policy should be read alongside our Terms & Conditions, which govern the overall relationship between you and mbi123. By creating an mbi123 account or using our services, you acknowledge that you have read and understood this Policy.

2. Personal Data We Collect

Depending on how you interact with mbi123, we may collect the following categories of personal data:

Category	Examples	When Collected
Identity Data	Full legal name, date of birth, nationality, gender, government-issued ID number (e.g. MyKad / NRIC)	Account registration and KYC verification
Contact Data	Email address, phone number, residential address	Account registration and updates
Financial Data	Payment method details (e.g. e-wallet account reference, bank account number suffix), transaction history, deposit and withdrawal records	Deposit, withdrawal, and KYC processes
Technical Data	IP address, device type, browser type and version, operating system, session identifiers, login timestamps	Automatically on platform access
Usage Data	Games played, bets placed, win/loss history, pages visited, session duration, bonus participation	Automatically during platform use
Communications Data	Content of support chat conversations, emails, and complaints submitted to mbi123	When you contact us
KYC Documents	Copies of government-issued photo ID, proof of address documents, selfie photographs for identity verification	KYC verification process

We do not knowingly collect sensitive personal data such as biometric data, health information, or political opinions beyond what is strictly required for age and identity verification purposes.

3. How We Collect Your Personal Data

mbi123 collects personal data through the following channels:

• Direct interactions: Information you provide when you register an mbi123 account, complete identity verification, make deposits or withdrawals, participate in promotions, or contact our support team.
• Automated technologies: Technical and usage data collected automatically when you access the mbi123 platform, including through cookies, server logs, and similar tracking technologies.
• Third-party sources: Information received from identity verification and KYC service providers, payment processors (such as FPX, Touch 'n Go eWallet, DuitNow, and Boost), fraud detection services, and marketing analytics partners, where lawfully permitted.

4. How mbi123 Uses Your Personal Data

mbi123 uses the personal data we collect for the following purposes:

• To create, administer, and manage your mbi123 account and provide you with access to our services;
• To process deposits, withdrawals, and other financial transactions on your behalf;
• To verify your identity and age as required for KYC compliance and responsible gaming obligations;
• To detect, investigate, and prevent fraud, money laundering, bonus abuse, and other prohibited activity;
• To comply with our legal and regulatory obligations, including anti-money laundering (AML) and counter-terrorism financing (CTF) requirements;
• To provide customer support and respond to your queries, complaints, and feedback;
• To communicate with you about your account, transactions, security alerts, and changes to our services or policies;
• To send you promotional communications about mbi123 offers and events where you have opted in, or where we have a legitimate interest in doing so;
• To personalise your experience on the mbi123 platform based on your gameplay preferences and history;
• To analyse platform usage and improve our services, security, and responsible gaming tools;
• To enforce our Terms & Conditions and protect the rights of mbi123 and our players.

5. Legal Basis for Processing

mbi123 processes your personal data on the following legal bases:

• Contract performance: Processing necessary to perform the mbi123 Terms & Conditions agreement with you — including account management, game provision, payment processing, and support services.
• Legal obligation: Processing required to comply with applicable laws and regulations, including AML/CTF obligations, KYC requirements, and instructions from competent authorities.
• Legitimate interests: Processing where mbi123 has a legitimate business interest, such as fraud prevention, platform security, improving our services, and direct marketing — provided this interest is not overridden by your privacy rights.
• Consent: Where we ask for your consent to use your data for a specific purpose (such as certain marketing communications), we will only process your data for that purpose where you have freely given clear consent. You may withdraw your consent at any time by contacting mbi123 support.

6. Sharing Your Personal Data

mbi123 does not sell your personal data. We may share your personal data with the following categories of recipients only where necessary and lawful:

• Payment service providers: Financial institutions, e-wallet operators (Touch 'n Go, Boost, DuitNow), and banking partners (Maybank, CIMB, Public Bank) to process your transactions;
• Identity verification providers: Third-party KYC and AML screening services engaged to verify your identity and comply with regulatory requirements;
• Game providers: Licensed game studios and software providers whose games are integrated into the mbi123 platform — these providers receive limited technical data necessary to deliver gameplay;
• IT and security service providers: Cloud hosting, data storage, cybersecurity, and fraud detection service providers engaged to maintain the security and performance of the mbi123 platform;
• Legal and regulatory authorities: Competent courts, government bodies, law enforcement agencies, and regulatory authorities where mbi123 is required by law to disclose information;
• Professional advisers: Lawyers, auditors, and compliance consultants acting under appropriate confidentiality obligations;
• Business successors: In the event of a merger, acquisition, or sale of all or substantially all of mbi123's assets, your data may be transferred to the relevant successor entity.

All third parties with whom mbi123 shares personal data are contractually required to maintain appropriate security standards and to use the data only for the specified purpose.

7. Cookies and Tracking Technologies

mbi123 uses cookies and similar tracking technologies (including web beacons and session tokens) to operate and improve the platform. Cookies are small text files placed on your device when you visit the mbi123 website. We use the following categories of cookies:

• Strictly necessary cookies: Required for the mbi123 platform to function correctly, including session management and login authentication. These cannot be disabled.
• Performance and analytics cookies: Used to understand how players interact with mbi123 — including which pages are most visited, session durations, and error occurrences — to help us improve the platform.
• Functionality cookies: Allow mbi123 to remember your preferences (such as language settings) to provide a more personalised experience.
• Security cookies: Used for fraud detection and to protect the integrity of player accounts and transactions on the mbi123 platform.

You can manage cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the mbi123 platform.

8. Data Retention

mbi123 retains your personal data only for as long as is necessary to fulfil the purposes described in this Policy, or as required by applicable law. The following retention periods generally apply:

• Account data and KYC records: Retained for a minimum of five (5) years from account closure, as required by AML and financial record-keeping regulations;
• Transaction records: Retained for a minimum of seven (7) years for financial compliance purposes;
• Support communications: Retained for three (3) years from the date of the communication, or longer if relevant to an ongoing dispute;
• Technical and usage logs: Typically retained for twelve (12) months, unless required for longer periods for security investigations or legal proceedings.

Where personal data is no longer required, mbi123 will securely delete or anonymise it.

9. Data Security

mbi123 implements technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the mbi123 platform;
• Encryption of sensitive data at rest on mbi123 servers;
• Access controls and role-based permissions restricting data access to authorised personnel only;
• Regular security assessments, penetration testing, and vulnerability monitoring;
• Comprehensive logging and anomaly detection systems to identify suspicious activity;
• Staff training on data protection obligations and incident response procedures.

While mbi123 takes data security seriously and employs industry-standard protections, no system is completely impenetrable. We encourage you to use a strong, unique password for your mbi123 account and to log out after each session on shared devices.

10. Your Data Subject Rights

Subject to applicable law, you have the following rights in relation to your personal data held by mbi123:

• Right of access: You may request a copy of the personal data mbi123 holds about you, along with information about how it is used.
• Right to rectification: You may request correction of inaccurate or incomplete personal data we hold about you. You can update much of your account information directly through your mbi123 account settings.
• Right to erasure: In certain circumstances you may request deletion of your personal data. Note that mbi123 may be required to retain certain data to comply with legal obligations, and erasure requests may be declined where this applies.
• Right to restriction: You may request that we restrict processing of your personal data in certain circumstances — for example, while we investigate a rectification request.
• Right to data portability: You may request a copy of certain personal data in a structured, machine-readable format.
• Right to object: You may object to processing of your personal data where we rely on legitimate interests as the legal basis, including objection to direct marketing communications.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact mbi123 support via live chat or through the email address displayed in the footer of this page. We will respond to all verified data subject requests within thirty (30) days. We may request proof of identity before processing any request.

11. International Data Transfers

The mbi123 platform and our third-party service providers may store or process your personal data in jurisdictions outside Malaysia. Where personal data is transferred internationally, mbi123 takes steps to ensure that appropriate safeguards are in place to protect your data in a manner consistent with applicable data protection standards, including through contractual data protection clauses with relevant service providers.

12. Children's Privacy and the 21+ Policy

The mbi123 platform is strictly intended for individuals aged 21 and above. mbi123 does not knowingly collect personal data from persons under the age of 21. If we become aware that personal data has been collected from a person under 21, we will immediately suspend the relevant account, delete the associated data, and return any deposited funds as appropriate. If you believe a minor has registered an mbi123 account, please notify us immediately via live chat support.

13. Changes to This Privacy Policy

mbi123 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we provide. When material changes are made, we will notify registered players via the email address on file and by posting a prominent notice on the mbi123 platform. The effective date of the most recent version is displayed at the top of this page. Your continued use of the mbi123 platform following notification of any changes constitutes your acceptance of the updated Policy. If you do not accept the updated Policy, you should cease using the platform and may close your account.

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or mbi123's data practices, please contact our support team. Our customer service agents are available 24 hours a day, 7 days a week via live chat on the mbi123 website. You may also reach us in writing — our support email address is displayed in the footer of every page on mbi123.one.

For formal data subject access requests or complaints relating to our data practices, please submit your request in writing with your full name, mbi123 account username, and a clear description of your request. mbi123 will acknowledge all such requests within 48 hours and respond substantively within 30 days.