Mbi8win Privacy Policy – Personal Data Protection for Malaysian Players

Introduction

This Privacy Policy ("Policy") is published by mbi8win, an online Sports Betting and casino platform accessible at mbi8win.click. This policy explains how mbi8win collects, processes, uses, stores, and protects the personal data of our users ("you" or "Member") in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).

We at mbi8win understand that your trust is the foundation of our relationship. Whether you are registering an account, making a deposit via Touch 'n Go, GrabPay, DuitNow, or FPX, placing bets on Malaysia Super League or EPL matches, or simply browsing our platform – certain data may be collected to ensure a safe, seamless, and personalised experience for you.

This Privacy Policy should be read together with Terms & Conditions and Responsible Gaming Policy mbi8win.

Types of Personal Data We Collect

Mbi8win only collects personal data that is necessary and relevant to operating our services effectively and securely. The data we may collect includes:

2.1 Identity Data

• Full name as per MyKad or passport
• Date of birth
• Gender
• MyKad number or passport number (for KYC verification)
• Photo ID document (when requested for KYC)

2.2 Contact Data

• Email address
• Malaysian mobile number
• Full address (city, state, postcode)

2.3 Financial & Transaction Data

• Payment method details used (e-wallet name, masked FPX account number)
• Deposit and withdrawal history in Malaysian Ringgit (MYR)
• Betting and casino game transaction records
• Current account balance

2.4 Technical & Usage Data

• Your device's IP address
• Device type, operating system, and web browser
• Login and logout timestamps
• Pages visited within the mbi8win platform
• Gaming session and betting information

How We Collect Data

Your personal data is collected by mbi8win through the following methods:

3.1 Directly from You

This occurs when you:

• Completing the mbi8win account registration form
• Submitting KYC documents (identity card, utility bill)
• Making deposits or withdrawals via Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, or FPX
• Contacting the mbi8win customer support team via live chat, email, or WhatsApp
• Completing a feedback form or survey
• Participating in promotions or contests organised by mbi8win

3.2 Automatically

Technical and usage data is collected automatically through:

• Cookies and similar tracking technologies when you browse the platform
• Server logs recording activity on the platform
• Device fingerprinting technology for fraud detection purposes

3.3 From Third Parties

In certain circumstances, mbi8win may receive data from:

• Third-party identity verification service providers (for the KYC process)
• Payment service providers for transaction verification
• Anti-fraud agencies and gambling industry blacklist bodies

Purpose of Personal Data Use

Mbi8win uses your personal data solely for legitimate, stated purposes. We do not use your data for unrelated purposes without your prior consent.

Data Sharing with Third Parties

Mbi8win does not sell or trade your personal data to third parties for marketing purposes. However, we may share your data with certain parties in the following circumstances:

5.1 Appointed Service Providers

We engage selected third-party service providers to help us operate the platform, including:

• Payment service providers: to process deposits and withdrawals in MYR via Touch 'n Go, GrabPay, DuitNow, and FPX
• Game software providers: to operate slots, live casino, and virtual sports games
• KYC and identity verification providers licensed
• Cloud service providers: for secure data storage

All service providers are bound by strict confidentiality and data protection agreements, and may only use your data for the specific purposes we define.

5.2 Legally Required Disclosure

Mbi8win may disclose your personal data to the relevant authorities where required by valid Malaysian law, court order, or direction from an authorised enforcement body.

Data Security

Mbi8win continually invests in robust security infrastructure to protect your personal data against unauthorised access, loss, misuse, or accidental disclosure.

6.1 Technical Measures

• 256-bit SSL/TLS Encryption: All data transmitted between your device and mbi8win's servers is fully encrypted.
• Encryption of data at rest: Data stored in our databases is also encrypted.
• Firewall and intrusion detection system (IDS): Our servers are protected by multiple layers of security.
• Two-factor authentication (2FA): Available to all mbi8win member accounts and recommended for all users.
• 24/7 Monitoring: Our IT security team monitors for suspicious activity around the clock.

6.2 Organisational Measures

• Access to members' personal data is restricted to staff who require it solely for their job responsibilities (least privilege principle).
• All staff who handle personal data undergo regular data protection training.
• Internal and external audits are conducted on a regular basis to evaluate the effectiveness of our security measures.

Data Retention & Deletion

Mbi8win retains your personal data only for as long as necessary to fulfil the purposes stated in this Policy, or as required by applicable law.

7.1 Standard Retention Period

• Active account data: For the duration your account remains active with mbi8win, plus any additional period required by law.
• Financial transaction records (RM): Minimum 7 years from the transaction date, in line with Malaysian financial legal requirements.
• KYC records: Minimum 5 years after account closure or the date of last interaction.
• Customer support communication logs: 2 years from the date of interaction.
• Technical log data: Maximum 12 months, unless required for an ongoing investigation.

7.2 Data Deletion Upon Request

You have the right to request the deletion of your personal data ("right to be forgotten") by contacting us at support@mbi8win.click. Requests will be processed within 30 days, except where retention is required by law (e.g., financial and KYC records).

User Rights under Malaysia's PDPA

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by mbi8win:

Cookies & Tracking Technologies

The mbi8win platform uses cookies and similar tracking technologies to enhance the user experience, ensure proper platform functionality, and for internal analytics purposes.

9.1 Types of Cookies We Use

• Essential Cookies: Required for core platform functions such as login sessions, security, and language preferences. These cookies cannot be disabled.
• Functional Cookies: Stores your preferences such as display settings, favourite sport selections, and notification preferences.
• Analytics Cookies: Collects anonymous information on how users interact with our platform to help us improve our services.
• Security Cookies: Used to detect suspicious activity and prevent fraud on the mbi8win platform.

9.2 Managing Cookies

You can manage your cookie settings through your web browser settings. However, disabling certain cookies may affect the functionality and your experience on the mbi8win platform.

Policy Updates & Contact Us

Mbi8win reserves the right to amend this Privacy Policy from time to time in response to changes in legislation, industry practices, or our business operations. Members will be notified of any material amendments via in-platform notifications or email at least 14 days before the changes take effect.

The "Last Updated" date at the top of this document indicates when this Privacy Policy was last revised. Your continued use of the mbi8win platform after any changes take effect constitutes your acceptance of the amended Privacy Policy.

10.1 Data Protection Officer

Mbi8win has appointed a Data Protection Officer responsible for ensuring PDPA compliance and handling privacy-related enquiries. You may contact us via:

• Email: support@mbi8win.click (subject: "Privacy Enquiry")
• Live Chat: Available 24/7 on the mbi8win platform
• Frequently Asked Questions: mbi8win FAQ Page