Privacy Policy MBI99 —
Your Data Protected Fully

1 Information We Collect

Mbi99 collects various categories of personal information in order to provide safe, fair, and compliant services. This data collection is necessary to verify your identity, process financial transactions, and ensure a responsible gaming experience.

1.1 Registration Information

When you register an mbi99 account, we collect the following information:

• Full name as stated in your official identity document.
• Identity card number (MyKad) or passport number.
• Date of birth for age verification purposes.
• Active mobile phone number registered in Malaysia.
• A valid and active email address.
• Username chosen by you.

1.2 Financial Information

To process deposits and withdrawals securely, we collect:

• Bank account holder name.
• Bank account number and bank name.
• Records of all deposit and withdrawal transactions.
• Digital wallet information (Touch 'n Go, Boost, GrabPay) where applicable.

1.3 Technical & Usage Information

Our system automatically records technical information when you use the platform:

• IP address and geographic location (city/state level).
• Device type, operating system, and browser version.
• Login and logout timestamps.
• Records of gaming activity, betting, and bonus transactions.
• Session data including play duration.

2 How We Use Your Data

Every piece of information we collect has a clear and legitimate purpose. mbi99 does not use your data for purposes beyond the scope stated below without obtaining your additional consent.

Mbi99 also uses aggregated data that cannot identify individuals for internal analytics purposes, such as understanding platform usage trends and improving the overall user experience. This aggregated data contains no information that can be personally linked to you.

3 Data Sharing

Mbi99 does not sell, rent, or disclose members' personal data to third parties for marketing purposes. However, there are limited situations where data sharing is necessary and legally permitted.

3.1 Approved Service Providers

We share only the necessary information with service providers who have signed strict confidentiality agreements, including:

• Payment gateway providers — to process deposits and withdrawals securely.
• KYC service providers — to verify member identity in accordance with legal requirements.
• Gaming platform providers — to transmit required gaming session information.
• Hosting and security services — for the technical infrastructure operations of the platform.

3.2 Legally Required Disclosures

Mbi99 may disclose your personal information to relevant authorities when required by Malaysian law, including requests from law enforcement agencies, courts, or legitimate regulatory bodies. In such situations, we will notify you where legally permitted to do so.

4 Cookies & Tracking Technologies

Mbi99 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device that help us recognise you on subsequent visits and personalise your experience.

4.1 Types of Cookies Used

• Essential Cookies — Required for core platform functions such as login verification and session security. These cookies cannot be disabled.
• Performance Cookies — Collects information on how you use the platform to help us improve performance and usability.
• Functional Cookies — Stores your preferences such as language, currency, and display settings for a consistent experience across visits.
• Analytics Cookies — Helps us understand aggregate platform usage patterns for continuous improvement purposes.

5 Data Security

Mbi99 implements robust technical and organisational security measures to protect your personal data from unauthorised access, alteration, disclosure, or destruction. Data security is not merely an add-on feature — it is central to the trust you place in us.

5.1 Technical Security Measures

• 256-bit SSL/TLS encryption for all data communications.
• Passwords are stored in hashed format using the bcrypt algorithm — we cannot view your password.
• Two-factor authentication (2FA) is available for all member accounts.
• Real-time suspicious activity monitoring using an intrusion detection system (IDS).
• Security testing and penetration audits are conducted regularly by independent experts.
• Automatic daily data backup to geographically separate server locations.

5.2 Internal Access Controls

Access to member data among mbi99 staff is restricted to individuals who require it to perform their duties only, based on a need-to-know basis. All internal access is logged and audited regularly. Staff handling sensitive data are required to undergo background checks and annual privacy training.

6 Your Rights as a Member

As a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by mbi99:

• Right of Access — You have the right to obtain a copy of the personal data we currently hold about you.
• Right to Rectification — You have the right to request that we correct any inaccurate or incomplete information.
• Right to Erasure — You may request the deletion of your personal data, subject to legal record-retention obligations.
• Right to Object — You may object to the processing of your data for direct marketing purposes at any time.
• Right to Restriction — You may request that we restrict the processing of your data under certain circumstances.
• Right to Data Portability — You have the right to receive your data in a structured, machine-readable format.

To exercise any of the above rights, please contact our privacy team via live chat or support email. Requests will be processed within 14 business days. In complex cases, this period may be extended up to 30 days with notice to you.

7 Data Retention & Deletion

Mbi99 retains your personal data for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable Malaysian law. Our retention policy takes into account legal requirements, legitimate business interests, and member expectations.

7.1 Standard Retention Period

• Active account data — Retained for the duration of the active account period plus 5 years after account closure.
• Financial transaction records — Retained for a minimum of 7 years in accordance with Malaysia's financial regulatory requirements.
• Security logs — Retained for 12 months for security investigation purposes if required.
• Customer support correspondence — Retained for 3 years from the date of last interaction.
• KYC Data — Retained for 5 years after the termination of the business relationship.

Once the retention period expires, data will be securely deleted using industry-standard deletion methods, ensuring it cannot be recovered by any party. If you have requested account deletion but we still have a legal obligation to retain certain data, we will inform you of what data must be kept and for how long.

8 Children's Privacy

Mbi99 is an online gaming platform that strictly prohibits use by individuals under the age of 18. We do not knowingly collect or process personal data of children under 18 years of age.

Mbi99 employs a strict age verification process during registration and throughout the KYC process. These measures include date of birth checks, identity document verification, and where necessary, further checks via approved third-party verification databases.

9 Third-Party Links

The mbi99 platform may contain links to third-party websites or services, particularly game providers and payment gateways. This Privacy Policy applies solely to the mbi99 platform and does not cover the privacy practices of those third-party websites or services.

We encourage you to read the privacy policy of every third-party website you visit. mbi99 is not responsible for the content, privacy policies, or security practices of any third-party website. Use of third-party services is at your own risk.

10 Privacy Policy Amendments

Mbi99 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements. The "Updated" date at the top of this page always shows the date of the most recent revision.

For material amendments — particularly those involving how we use or share your personal data — we will provide clear notice via:

• In-platform notice upon next login.
• Email to your registered address (for material changes).
• Pop-up notice on the home page for at least 7 days.

Continued use of the mbi99 platform after the effective date of any amendment constitutes your acceptance of the updated Privacy Policy. If you do not agree with the changes made, you have the right to close your account before the amendment takes effect by contacting our support team.

For any questions, concerns, or requests related to your data privacy, mbi99's Data Protection Officer (DPO) team is available to assist you via our platform's live chat, operating 24 hours a day, 7 days a week.