mbi8win Privacy Policy

1. Introduction and Scope

1.1 This Policy applies to all personal data collected by mbi8win in connection with the operation of the online gaming platform at mbi8win.win, including any associated mobile-optimised web interfaces, customer support channels, and marketing communications.

1.2 mbi8win operates as a data controller in respect of personal data it collects directly from members and visitors. Where mbi8win engages third-party service providers to process data on its behalf, those providers act as data processors under contractual obligations consistent with this Policy.

1.3 This Policy is incorporated by reference into the mbi8win Terms and Conditions. Capitalised terms not defined herein carry the meanings given to them in the Terms and Conditions.

1.4 mbi8win is committed to handling personal data responsibly, securely, and in compliance with applicable data protection legislation in the jurisdictions in which it operates, including but not limited to the Personal Data Protection Act 2010 (Malaysia) ("PDPA") where applicable.

2. Personal Data We Collect

2.1 Registration Data

When you create an mbi8win account, we collect: full legal name, date of birth, email address, mobile phone number, residential address, and preferred currency. This information is required to establish and maintain your account.

2.2 Identity Verification Data (KYC)

To comply with anti-money laundering ("AML") obligations and verify the 21+ age requirement, mbi8win requires members to submit government-issued identity documents, which may include a copy of your MyKad, passport, or other valid identity document. We may also request proof of address (e.g., a utility bill or bank statement issued within the last three months) and, for withdrawal verification, proof of ownership of the payment method used.

2.3 Financial Transaction Data

mbi8win records all deposit and withdrawal transactions, including amounts, timestamps, payment method identifiers (e.g., masked card numbers, eWallet account references), and transaction status. This data is retained for regulatory compliance and dispute resolution purposes.

2.4 Usage and Gameplay Data

We collect data relating to your activity on the mbi8win platform, including games played, wagers placed, session duration, login timestamps, device identifiers, IP addresses, and browser or operating system information. This data is used to deliver and improve the mbi8win experience and to meet responsible gaming obligations.

2.5 Communications Data

Records of communications between you and the mbi8win support team — including live chat transcripts, email correspondence, and support ticket logs — are retained for quality assurance, dispute resolution, and regulatory purposes.

3. How We Use Your Personal Data

mbi8win uses personal data for the following purposes:

• Account Management: To create, maintain, and administer your mbi8win member account, including processing login requests and managing account settings.
• Transaction Processing: To process deposits, verify withdrawal requests, and maintain accurate financial records in accordance with regulatory requirements.
• Regulatory Compliance: To meet our obligations under applicable AML, counter-terrorism financing ("CTF"), and KYC regulations, including reporting obligations to relevant authorities where required by law.
• Responsible Gaming: To monitor gambling behaviour patterns, identify members who may be exhibiting signs of problem gambling, and administer self-exclusion and deposit limit tools.
• Security and Fraud Prevention: To detect and prevent fraudulent activity, unauthorised access, collusion, and abuse of the mbi8win platform.
• Platform Improvement: To analyse usage patterns, conduct platform testing, and improve the functionality and content of mbi8win services.
• Marketing Communications: To send promotional offers, bonus notifications, and platform updates to members who have opted in to receive such communications. Members may opt out at any time.
• Customer Support: To respond to member enquiries, resolve disputes, and maintain support interaction records.

4. Legal Basis for Processing

4.1 mbi8win processes personal data on the following legal bases:

• Contractual Necessity: Processing required to perform the contract between mbi8win and the member, including account management and transaction processing.
• Legal Obligation: Processing necessary to comply with applicable laws, including AML/CTF regulations, KYC requirements, and gaming authority reporting obligations.
• Legitimate Interests: Processing necessary for fraud prevention, platform security, and responsible gaming monitoring, where such interests are not overridden by members' fundamental rights.
• Consent: Processing for direct marketing and optional cookie usage, where mbi8win has obtained the member's explicit consent. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

5. Data Sharing and Disclosure

5.1 mbi8win does not sell, rent, or trade personal data to third parties for their own commercial purposes. Personal data may be shared with the following categories of recipients:

• Payment Processors: Financial institutions and payment service providers (including Touch n Go eWallet, Boost, DuitNow, FPX-connected banks such as Maybank, CIMB, and Public Bank) for the purposes of processing deposits and withdrawals.
• KYC and AML Service Providers: Third-party identity verification and screening service providers engaged to assist with regulatory compliance obligations.
• Game and Technology Providers: Licensed game developers and platform infrastructure providers who access limited data necessary to deliver their contracted services under data processing agreements.
• Regulatory and Law Enforcement Authorities: Government agencies, gaming regulators, and law enforcement bodies where disclosure is required by law or a valid legal order.
• Professional Advisors: Legal, accounting, and auditing professionals engaged by mbi8win, subject to professional confidentiality obligations.

5.2 All third-party data processors engaged by mbi8win are bound by contractual data processing agreements that require them to process personal data only for the specified purpose and in accordance with applicable data protection standards.

6. Cookies and Tracking Technologies

6.1 The mbi8win platform uses cookies and similar tracking technologies to deliver, personalise, and improve the member experience. Cookies are small text files placed on your device by your browser when you visit the mbi8win platform.

6.2 mbi8win uses the following categories of cookies:

• Strictly Necessary Cookies: Required for the platform to function, including session management and security cookies. These cannot be disabled.
• Performance and Analytics Cookies: Used to collect anonymised data about how members interact with the platform, helping mbi8win identify areas for improvement.
• Functional Cookies: Enable enhanced platform features, including remembering your language preferences and game history.
• Marketing Cookies: Used to deliver relevant promotional content based on your browsing behaviour, where you have consented.

6.3 You may manage your cookie preferences through your browser settings. Disabling non-essential cookies may affect certain platform features. Strictly necessary cookies cannot be disabled without impacting platform functionality.

7. Data Retention

7.1 mbi8win retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying legal, regulatory, accounting, or reporting requirements.

7.2 Financial transaction records and KYC documentation are retained for a minimum of five (5) years following the closure of an account, in accordance with applicable AML regulations.

7.3 Gameplay records and account usage logs are retained for a minimum of three (3) years for responsible gaming monitoring and dispute resolution purposes.

7.4 Marketing communication records are retained for the duration of the member relationship and for up to two (2) years following the withdrawal of marketing consent or account closure, whichever occurs later.

7.5 Upon the expiry of applicable retention periods, personal data is securely deleted or anonymised in accordance with mbi8win's internal data destruction procedures.

8. Data Security

8.1 mbi8win implements technical and organisational security measures designed to protect personal data from unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmissions between your browser and the mbi8win platform;
• Encrypted storage of sensitive personal data, including KYC documents and financial records;
• Access controls limiting internal system access to authorised personnel on a need-to-know basis;
• Regular third-party security assessments and penetration testing;
• Incident response procedures for detecting, reporting, and managing personal data breaches.

8.2 Notwithstanding the above measures, no method of electronic transmission or storage is completely secure. mbi8win cannot guarantee absolute security of data transmitted to or from the platform. Members are encouraged to use strong passwords, enable two-factor authentication, and report any suspected unauthorised account activity to the mbi8win support team immediately.

9. Your Data Rights

9.1 Subject to applicable law and regulatory limitations, mbi8win members have the following rights in relation to their personal data:

• Right of Access: You may request a copy of the personal data mbi8win holds about you.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data. Members may update basic account details directly via account settings.
• Right to Erasure: You may request deletion of your personal data, subject to mbi8win's legal obligation to retain certain data for regulatory compliance purposes.
• Right to Restriction: You may request that mbi8win restricts the processing of your personal data in certain circumstances.
• Right to Data Portability: You may request that mbi8win provides your personal data in a structured, commonly used, machine-readable format where technically feasible.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Right to Object: You may object to processing of your personal data for direct marketing purposes at any time.

9.2 To exercise any of the above rights, please contact the mbi8win data protection team via the support channel. mbi8win will respond to verified requests within thirty (30) calendar days, subject to extensions permitted by applicable law.

10. Children and Age Restrictions

10.1 The mbi8win platform is strictly prohibited for use by any person under the age of twenty-one (21) years. mbi8win does not knowingly collect personal data from individuals under this age.

10.2 mbi8win enforces the 21+ age restriction through mandatory KYC identity verification during the registration process. Any account found to belong to a person under 21 years of age will be immediately suspended, all balances will be withheld pending investigation, and relevant regulatory authorities may be notified in accordance with applicable legal obligations.

10.3 If you believe that a person under 21 years of age has registered an mbi8win account, please contact the mbi8win support team immediately so that appropriate action can be taken.

11. Changes to This Privacy Policy

11.1 mbi8win reserves the right to update or amend this Privacy Policy at any time. Material changes to this Policy will be communicated to members by email notification or a prominent in-platform notice prior to the changes taking effect.

11.2 The date of the most recent revision to this Policy is displayed at the top of the page. Continued use of the mbi8win platform following notification of a Policy update constitutes acceptance of the revised Policy. If you do not agree with any changes, you should discontinue use of the platform and may request account closure by contacting the support team.

12. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or mbi8win's handling of your personal data, please contact us via the 24/7 live support chat on the platform, or in writing to the data protection team.

Email: [email protected]

Email contact details are provided for reference only. mbi8win aims to acknowledge all privacy-related correspondence within five (5) working days.