mbi999 Privacy Policy

This Privacy Policy ("Policy") is issued by mbi999 ("mbi999", "we", "us", "our"), the operator of the mbi999 online gaming platform accessible at mbi999.asia. This Policy explains how we collect, use, store, and disclose personal data relating to members, prospective members, and visitors ("you", "your") in connection with your use of the mbi999 Platform and its associated services.

1. About This Policy

1.1 This Policy applies to all personal data processed by mbi999 in connection with the operation of mbi999.asia, including data collected through account registration, gaming activity, payment processing, customer support interactions, and Platform browsing.

1.2 mbi999 is committed to protecting your privacy and handling your personal data in a manner consistent with applicable data protection legislation, including Malaysia's Personal Data Protection Act 2010 (PDPA) and the data protection requirements of our international gaming authority licensing jurisdiction.

1.3 By registering an mbi999 account or using the Platform, you acknowledge that you have read and understood this Policy. If you do not agree with any part of this Policy, you should not use the Platform.

2. Personal Data We Collect

2.1 Identity Data: full legal name, date of birth, nationality, and government-issued identification document details (MyKad number, passport number, or driving licence number) collected as part of KYC verification.

2.2 Contact Data: email address, Malaysian mobile phone number, and residential address.

2.3 Financial Data: payment method details (e-wallet account identifiers, bank account details for FPX transactions), transaction history, deposit and withdrawal records, and account balance information. Full card numbers and banking passwords are never stored by mbi999 — payment processing is handled by PCI-DSS compliant third-party payment service providers.

2.4 Technical Data: IP address, device type and identifier, browser type and version, operating system, referring URLs, and session duration and activity data collected automatically when you access the Platform.

2.5 Gaming Data: game session records, bet history, wagering patterns, bonus redemption history, and responsible gaming preference settings.

2.6 Communications Data: the content of support conversations, live chat transcripts, email correspondence with mbi999, and feedback submissions.

2.7 KYC Documentation: copies of identity documents and proof of address submitted during account verification, retained in encrypted storage for the duration of our regulatory retention obligations.

3. How We Collect Your Data

3.1 Directly from you: during account registration, the KYC verification process, deposits and withdrawals, customer support interactions, completion of surveys or promotions, and any other form of direct communication with mbi999.

3.2 Automatically: through cookies, web beacons, and server log files when you browse or interact with the mbi999 Platform, as further described in Section 9 (Cookies & Tracking).

3.3 From third parties: from KYC verification service providers who validate identity documents on our behalf; from payment processors who confirm transaction status; and from fraud prevention services that flag known risk indicators.

4. Legal Basis for Processing

4.1 mbi999 processes your personal data on the following legal bases:

• Performance of contract: processing necessary to operate your mbi999 account, execute deposits and withdrawals, and deliver gaming services;
• Legal obligation: processing required to comply with KYC, anti-money laundering (AML), and responsible gaming obligations under our international gaming authority licence;
• Legitimate interests: processing for fraud prevention, Platform security, customer support quality assurance, and internal analytics — where such interests are not overridden by your fundamental rights;
• Consent: processing for optional marketing communications, where you have provided explicit opt-in consent that you may withdraw at any time.

5. How We Use Your Personal Data

5.1 mbi999 uses your personal data for the following purposes:

• To create, verify, maintain, and close your mbi999 account;
• To process deposits and withdrawals via your selected payment method;
• To conduct mandatory KYC age and identity verification;
• To detect and prevent fraud, money laundering, and prohibited conduct as defined in the mbi999 Terms & Conditions;
• To provide personalised gaming recommendations and applicable promotions, where you have consented to receive them;
• To respond to support enquiries and resolve disputes;
• To enforce our Terms & Conditions and Responsible Gaming Policy;
• To maintain and improve Platform security, stability, and user experience;
• To comply with our regulatory reporting obligations to licensing authorities.

6. Disclosure to Third Parties

6.1 mbi999 does not sell, rent, or trade your personal data to third parties for their own marketing purposes.

6.2 mbi999 may share your personal data with the following categories of third parties, strictly for the purposes described in this Policy:

• Payment service providers (e.g., DuitNow processors, FPX operators, e-wallet service operators) to facilitate deposits and withdrawals;
• KYC and AML verification partners who perform identity document validation and sanction screening on our behalf;
• Game software providers who may receive pseudonymised session data to support game delivery and technical support;
• Cloud infrastructure and hosting providers who process data on our behalf under data processing agreements with appropriate security guarantees;
• Regulatory authorities and law enforcement agencies where disclosure is required by law, regulation, court order, or our licensing obligations;
• Professional advisers including lawyers, auditors, and accountants under binding confidentiality obligations where required for legitimate business purposes.

6.3 All third parties with whom mbi999 shares personal data are required to process it only for the specified purpose, maintain appropriate security standards, and comply with applicable data protection law.

7. International Data Transfers

7.1 The mbi999 Platform and its supporting infrastructure may involve the transfer of personal data to servers or service providers located outside Malaysia. Where such transfers occur, mbi999 ensures that appropriate safeguards are in place, including contractual data transfer agreements that meet the standard requirements of our licensing jurisdiction.

8. Data Retention

8.1 mbi999 retains personal data for as long as your account is active and for a minimum of five (5) years following account closure, in compliance with our anti-money laundering and gaming licence record-keeping obligations.

8.2 KYC documentation is retained for a minimum of five (5) years from the date of the Member's last transaction, as required by applicable AML regulations.

8.3 Marketing consent records are retained for the duration of your account plus three (3) years to demonstrate consent compliance.

8.4 Where you request deletion of your personal data, mbi999 will securely delete or anonymise all data not subject to legal retention obligations within thirty (30) days of verifying your identity and the validity of the request.

9. Cookies & Tracking Technologies

9.1 The mbi999 Platform uses the following categories of cookies:

• Strictly Necessary Cookies: session management cookies required to maintain your logged-in state and remember your account preferences. These cannot be disabled without impairing Platform functionality.
• Analytics Cookies: used to collect aggregated, anonymised data about how visitors interact with the Platform to help us improve user experience. These are only set with your consent.
• Functional Cookies: used to remember your language preference, game lobby display settings, and responsible gaming reminder configurations.

9.2 You can manage or withdraw consent for optional cookies through your browser's cookie settings. Withdrawing consent for analytics cookies will not affect Platform functionality but will prevent mbi999 from collecting aggregated usage data from your sessions.

10. Your Data Rights

10.1 Subject to applicable law and our legal retention obligations, you have the following rights with respect to your personal data held by mbi999:

• Right of access: to request a copy of the personal data mbi999 holds about you;
• Right to rectification: to request correction of inaccurate or incomplete personal data;
• Right to erasure: to request deletion of your personal data where there is no legal basis for continued retention;
• Right to restriction: to request that mbi999 restrict processing of your data in certain circumstances;
• Right to data portability: to receive your personal data in a structured, commonly used, machine-readable format;
• Right to withdraw consent: to withdraw marketing consent at any time without affecting the lawfulness of processing prior to withdrawal.

10.2 To exercise any of the above rights, submit a written request to [email protected] with the subject line "Data Subject Request". mbi999 will respond within thirty (30) days of receiving a verified request. Identity verification may be required before a request is processed.

11. Security Measures

11.1 mbi999 implements the following technical and organisational security measures to protect your personal data:

• 256-bit SSL/TLS encryption for all data in transit;
• AES-256 encryption for sensitive personal data and KYC documents at rest;
• Role-based access controls limiting staff access to personal data to those with a legitimate operational need;
• Multi-factor authentication required for all staff accessing systems containing personal data;
• Regular third-party penetration testing and security audits;
• Automated intrusion detection and anomaly monitoring systems.

11.2 In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, mbi999 will notify affected Members without undue delay and in accordance with applicable breach notification obligations.

12. Children's Privacy

12.1 The mbi999 Platform is strictly for adults aged 21 and above. mbi999 does not knowingly collect personal data from individuals under the age of 21. If mbi999 discovers that personal data has been collected from a minor, the relevant account will be immediately suspended and the data deleted. If you believe a minor has registered an mbi999 account, please contact us immediately at [email protected].

13. Changes to This Privacy Policy

13.1 mbi999 may update this Policy from time to time to reflect changes in our data practices, regulatory requirements, or Platform functionality. The revised Policy will be published on the Platform with an updated effective date. Where changes are material, mbi999 will endeavour to notify registered Members by email. Continued use of the Platform after publication of the revised Policy constitutes acceptance of the updated terms.

14. Contact Us

14.1 For any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact the mbi999 data team:

• Email: [email protected] (subject: "Privacy Query" or "Data Subject Request")
• Live Chat: Available 24/7 via the mbi999 Platform

mbi999 aims to respond to all privacy-related enquiries within five business days.