Privacy Policy mbiwin – Personal Data Protection for Malaysian Players

Mbiwin ("we", "the mbiwin platform", "mbiwin.bet") is committed to protecting the privacy and security of every player's personal data. This Privacy Policy explains our practices around data collection, use, storage, and disclosure, as well as your rights as a user of the mbiwin platform.

This Privacy Policy applies to all personal data collected through the mbiwin.bet website and all related services provided by mbiwin, including account registration, deposits, sports betting and casino activity, customer communications, and promotional programmes.

Mbiwin operates in compliance with the requirements of Personal Data Protection Act 2010 (PDPA) Malaysia. We regard your privacy as a fundamental right that deserves respect — not merely a legal obligation to be met at a minimum.

Mbiwin collects various types of personal data depending on how you interact with our platform. The following is a detailed breakdown of the data that may be collected:

Mbiwin not collect sensitive information such as biometric data, health information, or religious beliefs unless specifically required by applicable law.

Mbiwin collects personal data through several key channels:

• Account Registration: When you register as a new mbiwin member, you provide basic information such as your name, email, and phone number directly.
• KYC Verification: To meet legal requirements and prevent fraud, mbiwin requires identity verification documents such as a copy of your MyKad or Malaysian passport.
• Financial Transactions: Every time you make a deposit via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX (Maybank2u / CIMB Clicks), your transaction details are automatically recorded for security and compliance purposes.
• Platform Activity: Data on the games you play — whether slots, live baccarat, blackjack, poker, or sports betting such as the Malaysia Super League and BWF badminton — is automatically recorded by the mbiwin system.
• Support Communications: When you contact the mbiwin support team via live chat, email, or WhatsApp, the content of those communications may be retained for quality control purposes.
• Tracking Technologies: Cookies, web beacons, and similar technologies are used to automatically collect technical data while you use the mbiwin platform.

Mbiwin uses the personal data collected solely for the following purposes:

• Account Management: Creates, verifies, and maintains player accounts, including KYC and age verification processes.
• Transaction Processing: Securely processes deposits and withdrawals via approved Malaysian payment methods.
• Service Provision: Providing access to casino games, Sports Betting, promotions, and all mbiwin platform features.
• Security & Fraud Prevention: Detecting and preventing fraudulent activity, money laundering, multiple account usage, and platform abuse.
• Legal Compliance: Fulfils applicable legal and regulatory obligations, including financial reporting and anti-money laundering (AML) requirements.
• Service Improvement: Analysing platform usage patterns to improve user experience, technical performance, and gaming offerings.
• Marketing Communications: Sending promotional information, bonuses, and exclusive offers to players who have given consent to receive such communications.
• Responsible Gaming: Monitoring gameplay patterns to identify and assist players who may be experiencing gambling-related issues.

Mbiwin does not sell your personal data to any third party. However, in certain circumstances, mbiwin may share your data with the following parties, strictly for operational and compliance purposes:

• Payment Service Providers: Transaction information required for processing is shared with payment providers such as Touch 'n Go, GrabPay, DuitNow, and banks participating in FPX to handle your deposits and withdrawals.
• Game Providers: Required technical data is shared with game software providers such as Pragmatic Play, Evolution Gaming, and PG Soft to ensure games function correctly.
• KYC Service Provider: Identity information may be shared with authorised third-party identity verification service providers for account verification purposes.
• Legal Authorities: mbiwin is required to disclose information to the relevant Malaysian authorities when mandated by law, court order, or a lawful legal investigation.
• Cloud Services & Infrastructure: Data may be stored on servers managed by authorised cloud infrastructure providers that are subject to strict data protection agreements with mbiwin.

All third parties with whom your data is shared are required to uphold security and privacy standards equivalent to, or stricter than, mbiwin's Privacy Policy. mbiwin is responsible for ensuring these third parties handle your data responsibly.

Mbiwin implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction:

• 256-bit SSL Encryption: All data transmitted between your browser and mbiwin's servers is protected with 256-bit SSL encryption — the same standard used by leading Malaysian banking institutions.
• Encrypted Data Storage: Sensitive data such as passwords is stored in encrypted form using a one-way hashing algorithm that cannot be decrypted.
• Layered Access Controls: Access to players' personal data is restricted to mbiwin staff with a legitimate business need. A role-based access control (RBAC) system is in place.
• Regular Security Audits: mbiwin conducts regular penetration testing and security audits by independent third parties to identify and address vulnerabilities.
• 24/7 Monitoring: Our continuous security monitoring system watches for suspicious or unusual activity and responds promptly.

Regarding retention periods, mbiwin stores personal data only for as long as necessary for the stated purpose, or as long as required under Malaysian law. Generally, financial transaction records are retained for 7 years as required under Malaysia's financial laws. Active account data is retained for the duration the account remains active. Voluntarily closed account data is retained for 5 years after closure before being anonymised or deleted.

Mbiwin uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit the mbiwin website. The following are the types of cookies we use:

• Essential Session Cookies: Required to enable you to log in, navigate the platform, and use mbiwin's core features. Without these cookies, the platform cannot function properly. These cookies do not require your consent.
• Preference Cookies: Saves your preferences such as language, display settings, and game preferences so you do not need to reconfigure them on each visit.
• Analytics Cookies: Helps us understand how players interact with the mbiwin platform — which pages are visited most, average session duration, and where users encounter difficulties. This data is used for platform improvement.
• Security Cookies: Helps detect suspicious login attempts and protects your account from unauthorised access.

You can manage cookies through your browser settings. However, disabling essential cookies may affect the functionality of the mbiwin platform. For more information on managing cookies on your device, please refer to your browser's help documentation.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and mbiwin's policies, you have the following rights regarding your personal data:

• Right of Access: You may request a copy of the personal data mbiwin holds about you at any time.
• Right to Rectification: If your data is inaccurate or outdated, you have the right to request an immediate correction.
• Right to Erasure ("Right to be Forgotten"): Under certain circumstances, you may request that mbiwin delete your personal data. Such requests are subject to mbiwin's legal obligations to retain specific records.
• Right to Object: You may object to the processing of your data for specific purposes, such as direct marketing.
• Right to Data Portability: You may request your data in a machine-readable format for transfer to another platform.
• Right to Restrict Processing: In certain circumstances, you may request that mbiwin restrict how your data is processed while an issue is under investigation.

To exercise any of the above rights, please contact the mbiwin support team by email at support@mbiwin.bet. We will process your request within 21 working days. For complex requests, this period may be extended by up to 60 days, with prior notice to you.

In the course of its operations, mbiwin may transfer your personal data to servers or service providers operating outside Malaysia. This may occur in the context of cloud data storage, technical processing, or the provision of gaming services by international providers.

When such transfers occur, mbiwin ensures that:

• The receiving country or region provides an adequate level of data protection, or
• Appropriate data transfer agreements (such as standard contractual clauses) have been put in place to protect your data, or
• The transfer is necessary for the performance of a contract between you and mbiwin.

Mbiwin does not transfer your personal data to jurisdictions that lack adequate privacy protections without appropriate additional safeguards in place.

Mbiwin reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, latest legal requirements, or platform service developments. We will notify you of any material changes through:

• A prominent notice on the mbiwin.bet homepage.
• Email to the address registered to your account (for significant changes).
• An in-platform notification will appear when you log in after changes have been published.

The "Updated" date at the top of this document will always reflect the date of the most recent revision. Your continued use of the mbiwin platform after the effective date of any changes constitutes your acceptance of the revised Privacy Policy.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how mbiwin handles your personal data, please reach us through the following channels:

If you are dissatisfied with how mbiwin has handled your privacy complaint, you have the right to lodge a complaint with Malaysia's Department of Personal Data Protection or the relevant regulatory body under PDPA 2010.

The official version of this Privacy Policy is in Bahasa Melayu for Malaysian players. In the event of any conflict between language versions, the Bahasa Melayu version shall take precedence.