MBI 88 Privacy Policy – Personal Data Protection for Malaysian Members

Welcome to the mbi 88 Privacy Policy. This document sets out our data protection practices and forms part of the binding agreement between you (the user) and mbi 88 (the platform operator). This Privacy Policy applies to all users of the mbi 88 platform in Malaysia, including website visitors, registered members and former members.

Mbi 88 is the responsible data controller for all personal data collected through our platform. We operate in accordance with Malaysia's Personal Data Protection Act (PDPA) 2010 and leading international data protection standards. We take this responsibility seriously and continually strive to go beyond the minimum requirements set by law.

By using the mbi 88 platform — whether for Malaysia Super League football betting, playing slots, live casino, poker, or any other services we offer — you agree to the collection and use of your information as described in this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of the mbi 88 platform.

Mbi 88 collects various types of personal data depending on how you interact with our platform. The following are the categories of data we may collect:

Mbi 88 collects personal data through several different channels:

• Account Registration: When you complete the registration form on mbi 88, we collect the information you provide directly, such as your name, phone number and email address.
• Platform Usage: When you log in and use mbi 88 services — betting on football, playing slots, Live Casino, or table games — our system automatically records those activities.
• Financial Transactions: Each time you make a deposit via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, or FPX through Maybank2u and CIMB Clicks, the transaction record is retained for security and compliance purposes.
• Identity Verification (KYC): When you submit identity verification documents to enable withdrawals, or when required by the relevant authorities.
• Cookies & Tracking Technologies: Through the use of cookies, web beacons and similar technologies when you browse the mbi 88 platform.
• Third Parties: In certain cases, we may receive information from trusted service partners — such as payment verification providers — to verify transactions you have made.

Mbi 88 uses your personal data responsibly and solely for the following legitimate purposes:

• Account Management: Creating, verifying and maintaining your mbi 88 account, including the login process, two-factor authentication and password recovery.
• Transaction Processing: Processes your deposits and withdrawals seamlessly via supported Malaysian local payment methods.
• Legal Compliance (KYC/AML): Meeting legal requirements related to identity verification and anti-money laundering as mandated by the relevant authorities.
• Platform Security: Detecting and preventing fraud, unauthorized access, duplicate account abuse and other activities that violate mbi 88's terms of use.
• Service Improvement: Analysing usage patterns to improve the user experience, introduce new features, and optimise platform performance.
• Service Communications: Sending important notifications regarding your account, changes to our terms, security issues and relevant platform updates.
• Marketing (with consent): Sending promotional information, special bonuses and mbi 88 offers — only where you have given consent to receive marketing communications.
• Responsible Gaming: Monitoring activity patterns to identify signs of problem gambling and provide appropriate support.

Mbi 88 does not sell, rent, or trade your personal data to any third party for their own commercial purposes. However, we may share your data in the following limited circumstances:

• Service Providers: Technical partners who assist us in operating the platform — such as cloud infrastructure providers, payment processors, and security system providers — are bound by strict confidentiality agreements and may only use your data for specified purposes.
• Regulatory Authority: When required by Malaysian law, court order, or a valid request from an authorised government agency.
• Fraud Prevention: With fraud prevention agencies or industry information-sharing platforms to detect and prevent illicit activity involving the mbi 88 platform.
• Business Transfer: In the event of a merger, acquisition, or sale of company assets, your data may be transferred to the new entity with prior notice to you and the same data protection guarantees in place.

Mbi 88 continuously invests in the latest security technologies and procedures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security approach is multi-layered:

While we take all reasonable steps to protect your data, no security system can guarantee absolute 100% protection. You also play an important role in keeping your data safe — ensure your password is strong, unique and never shared with anyone.

Mbi 88 uses cookies and similar tracking technologies to enhance your experience, analyze platform usage, and support our marketing efforts. Below are the types of cookies we use:

You can manage your cookie preferences through your web browser settings. Please note that disabling certain cookies may affect the functionality and user experience of the mbi 88 platform.

As an mbi 88 member and data subject under Malaysia's PDPA, you have the following rights regarding your personal data:

Mbi 88 retains your personal data only for as long as necessary to fulfil the purposes outlined in this policy, or as required by law. Our general retention guidelines are as follows:

• Active Account Data: Retained for the duration your account is active, plus 7 years after account closure for legal compliance purposes.
• Financial Transaction Records: Retained for a minimum of 7 years as required by Malaysian financial regulations and audit requirements.
• KYC & Identity Verification Records: Retained for a minimum of 5 years after the business relationship is terminated.
• Technical & Security Logs: Retained for 90 days to 1 year depending on the log type and security requirements.
• Marketing Communication Records: Retained for as long as you have consented to receive communications, plus 12 months after consent is withdrawn.

Once the retention period expires, your data will be securely deleted or anonymised using industry-standard methods.

Mbi 88 Platform does not direct its services to individuals under 18 years of age and we do not knowingly collect personal data from individuals under the age of 18. If we discover that we have collected data from a minor without appropriate age verification, we will promptly take steps to delete that data and close the relevant account.

If you have reason to believe that a minor has registered an account on mbi 88, please contact us immediately at support@mbi88.click so we can take appropriate action without delay.

Mbi 88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or updates to the services we offer. When material changes are made, we will:

• Updating the "Last Updated" date at the top of this page.
• Notifying members via their registered email or an in-platform notice at least 14 days before the changes take effect for material amendments.
• In some cases, seeking fresh consent from you if the amendments involve using your personal data in a new way that requires consent.

Your continued use of the mbi 88 platform after the effective date of any such amendments constitutes your acceptance of the updated Privacy Policy. We encourage you to review this page periodically.

If you have any questions, concerns or requests regarding this Privacy Policy or the processing of your personal data by mbi 88, please contact our Data Privacy Officer via:

• Live Chat: Available 24/7 directly from the mbi 88 platform — the fastest way to get a response.
• Email: support@mbi88.click — for written enquiries that require an official record.
• Response Time: We are committed to responding to all privacy-related enquiries within 14 working days.

We take every privacy-related inquiry seriously and always strive to provide a thorough and satisfactory response. If you are not satisfied with our response, you have the right to refer your complaint to the Personal Data Protection Commissioner of Malaysia.