Mbi365 Privacy Policy – Protection of Your Personal Data

1Introduction

Welcome to the mbi365 Privacy Policy. This document is published by mbi365 ("we", "mbi365" or "Platform") and describes our privacy practices regarding personal information we collect from members of our platform in Malaysia.

Mbi365 is an online sports betting and casino platform serving users in Malaysia, covering Malaysia Super League and EPL football betting, badminton, slots, live dealer blackjack, poker and a wide range of other casino games.

By registering an account or continuing to use the mbi365 platform, you agree that we may collect and process your personal information as described in this Privacy Policy. If you do not agree, please stop using the platform and contact us to close your account.

2How We Collect Your Personal Information

Mbi365 collects your personal information through the following methods:

• Account registration: When you register a new account with mbi365, you are required to provide information such as your full name, phone number, email address, and date of birth.
• Identity verification (KYC): To meet compliance requirements and prevent fraud, we may request a copy of your identity card or other identity verification documents at certain stages.
• Financial transactions: Information related to deposits and withdrawals is collected when you conduct transactions using Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, or FPX (Maybank2u, CIMB Clicks).
• Platform usage: Technical data such as IP address, device type, web browser, and login activity is collected automatically when you use the mbi365 platform.
• Communications with us: When you contact mbi365 customer support via live chat, email, or WhatsApp, the content of those communications may be retained for service quality purposes.
• Cookies and tracking technologies: Our platform uses cookies and similar technologies to enhance the user experience and analyse usage patterns. See Section 9 for more information.

3How We Use Your Personal Information

Mbi365 uses your personal information for the following legitimate and specific purposes:

1. Account management: To create and manage your mbi365 account, including identity verification, betting limit configuration and balance management.
2. Transaction processing: To process your deposits and withdrawals securely and accurately through your chosen payment method.
3. Fraud prevention: To identify, investigate and prevent fraudulent activity, money laundering and platform abuse.
4. Customer support: To respond to enquiries, resolve issues and provide you with technical assistance more effectively.
5. Legal compliance: To fulfil legal obligations including Malaysia's PDPA requirements and directives from relevant authorities.
6. Platform improvement: To analyse usage patterns and improve the functionality, security, and user experience of the mbi365 platform.
7. Promotional communications: To send you information about mbi365 bonuses, promotions, and service updates, subject to the communication preferences you have set.
8. Responsible gaming: To monitor betting patterns and identify players who may need responsible gaming support.

4Legal Basis for Data Processing

Mbi365 processes your personal information on valid legal bases under Malaysia's Personal Data Protection Act 2010 (PDPA), namely:

• Consent: You provided explicit consent to the processing of your data when registering your mbi365 account. You may withdraw this consent at any time; however, doing so may affect our ability to provide services to you.
• Contract: Processing is necessary to fulfil the contract between you and mbi365 — including providing betting services, processing transactions and managing your account.
• Legal obligations: Certain data processing is mandatory in order for mbi365 to comply with applicable laws and regulations as a platform operator.
• Legitimate interest: mbi365 has a legitimate interest in processing certain data for platform security, fraud prevention and service improvement, provided that such interests do not override your fundamental rights.

5Sharing of Personal Information

Mbi365 does not sell or rent your personal data to any third party. However, we may share your information in the following limited circumstances:

• Payment service providers: Transaction information that must be shared with payment service providers such as Touch 'n Go, DuitNow and banks offering FPX to process your deposits and withdrawals.
• Technology service providers: Companies that provide the technical infrastructure, cloud computing services, and cybersecurity tools we use to operate the mbi365 platform.
• Game providers: Third-party gaming companies that provide slots, Live Casino and poker games to the mbi365 platform, strictly to the extent necessary to deliver those gaming services.
• Authorities: When required by law or court order, or when we believe disclosure is necessary to protect the rights, property, or safety of mbi365, our members, or the public.
• Merger or acquisition: If mbi365 undergoes a merger, acquisition, or asset sale, your personal information may be transferred to the succeeding party, subject to equivalent privacy protections.

6Data Security Measures

Mbi365 implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration or destruction:

• 256-bit SSL encryption: All communications between your device and mbi365 servers are encrypted using the latest SSL/TLS protocols.
• Secure password storage: Your account password is stored as an irreversible cryptographic hash — our staff cannot view your actual password.
• Internal access controls: Access to member personal data within mbi365's internal systems is restricted solely to staff who require it to perform their duties.
• Continuous security monitoring: The mbi365 system is continuously monitored to detect any suspicious activity or intrusion attempts.
• Regular security audits: mbi365 conducts regular security audits and penetration testing by independent security experts to identify and address any vulnerabilities.
• Incident response plan: mbi365 has formal procedures in place to handle any data breaches or security incidents, including notifying affected members where required.

7Data Retention Period

Mbi365 retains your personal information for as long as necessary to fulfil the original purpose of collection and our legal obligations. The following are general data retention guidelines:

• Active account data: For as long as your account remains active with mbi365, your personal information will be retained to enable us to provide our services properly.
• Following account closure: Personal data will be retained for a minimum of 7 years following account closure to meet Malaysian legal and tax requirements, as well as to address any claims or disputes that may arise.
• Financial transaction records: Deposit, withdrawal and betting records are retained for 7 years in accordance with Malaysian financial regulatory requirements.
• Support communication logs: Customer support conversation records are retained for 2 years for service quality and dispute resolution purposes.
• Technical and log data: Access logs and technical activity records are retained for 12 months for security and incident investigation purposes.

Once the retention period expires and there is no legal requirement to retain it further, your data will be securely deleted or anonymised.

8Your Rights Regarding Personal Data

Under Malaysia's PDPA and the mbi365 Privacy Policy, you have the following rights regarding your personal information:

• Right to access: You have the right to obtain a copy of the personal information we hold about you.
• Right to rectification: You have the right to request that we correct any personal information that is inaccurate or incomplete.
• Right to erasure: In certain circumstances, you have the right to request that we delete your personal information. Please note that this request may not be fully fulfilled where a legal obligation to retain the data exists.
• Right to restriction of processing: You have the right to request that we temporarily suspend the processing of your data under certain circumstances while an investigation is ongoing.
• Right to data portability: You have the right to receive a copy of your data in a machine-readable format for transfer to another platform.
• Right to object: You have the right to object to the processing of your data for direct marketing purposes at any time.
• Right to withdraw consent: Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the validity of any processing carried out prior to withdrawal.

9Cookie Policy

Mbi365 uses cookies and similar tracking technologies to enhance the functionality and user experience of our platform. Cookies are small text files stored on your device when you visit our website.

The following are the types of cookies we use: