Privacy Policy mbi8win

1. Introduction

Mbi8win is committed to protecting the privacy of every user on our online gaming platform. As a platform operating in Malaysia, we fully comply with the Personal Data Protection Act 2010 (PDPA) and all related regulations in force in this country.

This Privacy Policy details the types of information we collect, why we need it, how we use it, who may receive it, and the security measures we take to protect your data. We encourage you to read this document carefully and contact us if you have any questions.

This policy applies to all mbi8win platform users, including website visitors, registered members, and anyone who interacts with our services through any device or communication channel we provide.

2. Information We Collect

Mbi8win collects various types of information to enable us to deliver the best, safest, and most seamless service to every user. This information is collected directly from you or automatically through our systems as you use the platform.

Information Provided Directly

• Full name, date of birth, and identification card number (MyKad) upon account registration.
• Active email address and mobile phone number.
• Current residential address for identity verification purposes.
• Bank account details, account number, and bank name for processing deposits and withdrawals.
• KYC supporting documents such as copies of your ID, bank statements, or utility bills.
• Any information you share when contacting our customer support team.

Automatically Collected Information

• IP address, device type, browser model, and operating system used.
• State-level location data derived from your IP address.
• Login session records, game activity logs, and transaction history.
• Cookie data and tracking technologies used to enhance the user experience.
• Technical information regarding app performance and system error reports.

3. How We Use Your Information

Every piece of information we collect is used for legitimate and transparent purposes. Below is a full list of how your personal data is used on the mbi8win platform:

Purpose of Use	Legal Basis
Identity verification (KYC) and fraud prevention	Legal Obligations
Transaction Processing deposits and withdrawals	Contract performance
Account management and customer support	Contract performance
Notification delivery promotions and bonuses	User consent
Behavioural analytics for platform improvement	Mbi8win's Legitimate Interests
Compliance to laws and regulatory directives	Legal Obligations
Anti-money laundering (AML)	Legal Obligations

We will not use your data for any purpose beyond those listed above without first obtaining your additional consent. If you do not wish to receive marketing communications, you may withdraw your consent at any time through your account settings.

4. Sharing Information With Third Parties

Mbi8win respects your privacy and does not share your personal information with external parties except in the following situations:

• Payment processors: Required information is shared with local payment service providers such as DuitNow, FPX, and recognised e-wallets to process your financial transactions.
• Malaysian authorities: We will disclose information when required by law, court order, or direction from a legitimate enforcement agency.
• Technical service providers: Infrastructure and cloud service vendors supporting our platform operations are bound by strict confidentiality agreements.
• Game providers: Minimum required information is shared with licensed game providers to ensure game integrity and prevent fraud.
• Auditors and legal consultants: In certain circumstances for legal compliance and internal audit purposes.

All third parties handling mbi8win user data are bound by data protection agreements that require them to manage your information to the same security standards we uphold.

5. Cookies and Tracking Technologies

The mbi8win platform uses cookies and similar technologies to enhance your experience, analyse usage patterns, and ensure account security. Cookies are small text files stored on your device when you visit our website.

We use several types of cookies:

• Essential cookies: Required for core platform functions such as login and session management. These cookies cannot be disabled.
• Performance cookies: Collects anonymised data on how users interact with the platform for improvement purposes.
• Functional cookies: Stores your preferences such as language and display settings to enhance your browsing experience.
• Analytics cookies: Helps us understand overall platform traffic and usage patterns.

You can manage your cookie settings through your browser. Please note that disabling certain cookies may affect the functionality of the mbi8win platform on your device.

6. Data Retention Period

Mbi8win retains your personal data for as long as necessary to fulfill the purposes outlined in this Privacy Policy, or as required by Malaysian law. In general, our data retention guidelines are as follows:

• Active account data is retained for the duration your account remains active and for a minimum of three years after account closure.
• Financial transaction records are retained for seven years to meet taxation and anti-money laundering legal requirements.
• KYC documents are retained for five years after the business relationship ends.
• Customer support communication logs are retained for two years.
• Anonymised analytics data may be retained for a longer period for platform research purposes.

Once the retention period expires, your personal data will be securely deleted or anonymized in accordance with industry-standard procedures.

7. Your Rights Over Personal Data

As a mbi8win user in Malaysia, you have certain rights over your personal data under the PDPA 2010. mbi8win is committed to respecting and facilitating the exercise of those rights.

8. Children's Privacy Protection

Mbi8win strictly prohibits individuals under the age of 18 from registering or using any of our services. We do not knowingly collect personal data from children. Should we identify that a child's data has been collected without our knowledge, that data will be deleted immediately and the associated account will be terminated.

Parents or guardians who suspect their child has registered on the mbi8win platform are advised to contact our support team immediately so prompt action can be taken.

9. Data Security Measures

Mbi8win invests seriously in cybersecurity infrastructure to keep your data protected at all times. The technical and organizational measures we implement include:

• Encryption of data in transit using TLS 1.3 and 256-bit SSL protocols.
• Encryption of data at rest in the database using AES-256 standards.
• Two-factor authentication (2FA) for administrative access and user accounts.
• Round-the-clock security monitoring via automated threat detection systems.
• Regular penetration testing conducted by independent security teams.
• Strict password policies and regular rotation of staff access credentials.

While we take all reasonable measures, no system can be guaranteed 100% secure against cyber threats. Should any security incident involving your data occur, we will notify you and the relevant authorities within the timeframe required by law.

10. Privacy Policy Amendments

Mbi8win reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform improvements. Any material changes will be communicated to you via in-platform notifications or your registered email.

The effective date of the latest version will always be displayed at the top of this document. Continued use of the mbi8win platform after a change notice is considered acceptance of the updated terms. We encourage you to review this page regularly.

11. Contact Us About Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact the mbi8win Data Protection Officer (DPO) through the following channels:

• Email: [email protected]
• In-platform Live Chat: Available 24 hours a day, 7 days a week.

We are committed to responding to all privacy-related inquiries within 14 business days from the date the request is received. For more complex cases, we will notify you promptly and provide a realistic estimated completion time.