Privacy Policy mbi918 — Your Personal Data Protection

Mbi918 is committed to protecting the privacy and personal data security of every user on our platform. This Privacy Policy explains in detail how we collect, process, store, and protect your personal information in the context of your use of our website, mobile app, and all services offered by mbi918.

By registering and using the mbi918 platform, you consent to the practices described in this Privacy Policy. If you disagree with any part of this policy, please discontinue use of our platform and contact our support team for further assistance.

This Privacy Policy applies to all users of the mbi918 platform, including unregistered visitors, registered members, and anyone who interacts with our platform through any official communication channel.

Mbi918 collects various categories of personal information depending on how you interact with our platform. Below is a summary of the data collected along with the purpose of collection:

Mbi918 only collects data that is strictly necessary for the purposes stated. We do not collect sensitive information such as biometric data unless required by law or with your explicit consent.

Personal data collected by mbi918 is used for legitimate and transparent purposes. We ensure every use of data has a solid legal basis, whether grounded in your consent, contract fulfilment, legal obligations, or the legitimate interests of mbi918.

• Account management: Creating and maintaining your account, processing registration, verifying identity through KYC, and enabling secure login to the mbi918 platform.
• Transaction processing: Processing deposits, withdrawals, and all financial transactions accurately, promptly, and securely via your chosen payment methods including DuitNow, FPX, and eWallet.
• Platform security: Detecting and preventing fraud, money laundering, and other illegal activities. This includes automated monitoring of unusual usage patterns.
• Service communications: Sending important notifications related to your account such as transaction confirmations, security alerts, and service terms updates.
• Marketing (with consent): If you have given your consent, we will send you information about mbi918 promotions, exclusive offers, and the latest news that may interest you.
• Continuous improvement: Analysing platform usage patterns in aggregate and anonymised form to improve user experience, system performance, and the range of games offered.
• Legal compliance: Fulfilling reporting obligations required by relevant authorities and complying with all applicable laws in Malaysia.

Mbi918 does not sell your personal data to any third party. However, in the course of operating the platform, we may share certain information with the following parties for legitimate reasons:

• Payment service providers: Financial institutions, payment processors, and eWallet providers required to securely process your deposit and withdrawal transactions.
• Game software providers: Licensed gaming software companies supply game content to the mbi918 platform. Data disclosure is limited to what is strictly necessary for game operations only.
• Cloud service providers: Technical infrastructure providers such as cloud computing services that store and process data on behalf of mbi918 are subject to strict confidentiality agreements.
• Competent authorities: When required by law, court order, or a legitimate regulatory authority, mbi918 will disclose the necessary data. We will notify you of such requests where permitted by law.
• Fraud prevention partners: Third-party identity verification and fraud prevention services that help mbi918 maintain platform security for all users.

All third parties involved in processing your personal data are required to comply with the same security standards practised by mbi918. They are not permitted to use your data for any purpose other than what is specified in their agreement with us.

The mbi918 platform uses cookies and similar tracking technologies to enhance user experience, maintain session security, and understand how the platform is used. The types of cookies used are as follows:

• Essential cookies: Required for core platform operations such as maintaining your login session, saving language preferences, and ensuring security functions run properly. These cookies cannot be disabled without affecting platform functionality.
• Performance cookies: Collecting anonymous information about how visitors use our platform — which pages are visited most frequently, page response times, and error messages. This data helps us improve the performance of the mbi918 platform.
• Functional cookies: Saving your preferences such as username, game preferences, and display settings to provide a more personalised experience on future visits.
• Analytics cookies: Used to understand overall platform usage patterns in aggregate. This data cannot be traced back to individual users.

You can manage and delete cookies through your web browser settings. However, disabling certain cookies may affect the functionality of the mbi918 platform and your gaming experience.

Mbi918 continuously invests in data security infrastructure to ensure your personal information remains protected at all times. The security measures we practise cover technical, physical, and organisational aspects.

• End-to-end encryption: All data transmitted between your device and mbi918 servers is protected by 256-bit SSL/TLS encryption — the same security standard used by leading banking institutions.
• Two-factor authentication (2FA): mbi918 offers two-factor authentication for all user accounts to add an extra layer of protection to your login.
• Continuous monitoring: Our systems are monitored around the clock by mbi918's experienced cybersecurity team to detect and respond to any threats swiftly.
• Internal access controls: Access to users' personal data within mbi918 is restricted on a need-to-know basis. All access is logged and audited regularly.
• Periodic penetration testing: mbi918 conducts regular security testing and independent audits to identify and close any vulnerabilities before they can be exploited.
• Incident response plan: In the event of a data breach, mbi918 has a clear incident response protocol to notify affected users and the relevant authorities within the timeframe required by law.

As a user of the mbi918 platform, you have the following rights regarding your personal data under Malaysia's Personal Data Protection Act (PDPA) and applicable laws:

• Right to access: You have the right to obtain a copy of the personal data we hold about you. Access requests will be processed within 21 business days.
• Right to rectification: If any of your personal data is inaccurate or outdated, you have the right to request prompt correction. You may also update certain information directly through your account settings.
• Right to withdraw consent: You may withdraw your consent to certain data processing at any time. Withdrawal will not affect the validity of any processing carried out prior to the withdrawal.
• Right to object to marketing: You may object to the use of your data for direct marketing purposes at any time without providing a reason. Such requests will be fulfilled within five business days.
• Right to data portability: You have the right to receive your personal data in a structured, machine-readable format for transfer to another data controller if required.

To exercise any of the rights above, please contact the mbi918 Data Protection Officer via email at [email protected]. Your request will be verified for security purposes before being processed.

Mbi918 retains your personal data only for as long as it is needed for the purposes stated in this policy, or as required by applicable law. Specific retention periods are as follows:

• Active account data: Retained for as long as your account is active and for a reasonable period after account closure to allow resolution of any outstanding claims.
• Financial transaction records: Retained for at least seven (7) years from the transaction date in accordance with Malaysian tax and financial legal requirements.
• KYC documents: Retained for at least five (5) years after account closure in accordance with anti-money laundering (AML) legal requirements.
• Support communication logs: Retained for three (3) years for reference purposes and service quality improvement.
• Technical log data: Retained for one (1) year for security purposes and technical issue diagnostics.

Once the retention period expires and there is no valid legal or business reason to continue storing your data, it will be securely deleted or anonymised using industry-standard methods.

The mbi918 platform is intended for individuals aged 18 and above. We do not knowingly collect personal data from children or individuals under the age of 18. All registrants are required to confirm that they meet the minimum age requirement during the registration process.

If we discover that a child's personal data has been collected unintentionally, we will take immediate steps to delete that data and close the relevant account. Parents or guardians who become aware that their child has registered on our platform should contact the mbi918 support team immediately.

The mbi918 platform may contain links to third-party websites or services for your convenience. These links are provided solely as references and do not constitute an endorsement or validation by mbi918 of the content or privacy practices of those websites.

The mbi918 Privacy Policy does not apply to those third-party websites or services. We have no control over how they collect, use, or protect your personal data. We encourage you to read the privacy policy of each website you visit separately before providing any personal information.

Mbi918 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, new legal requirements, or service improvements. Any significant changes will be communicated to you via an in-platform notice or the email registered to your account.

The "Last Updated" date at the top of this page will always reflect the latest version of the Privacy Policy in effect. We encourage you to review this page periodically. Continued use of the mbi918 platform after any amendments constitutes your acceptance of the updated terms.

If you have any questions, concerns, or complaints regarding how mbi918 handles your personal data, we are always ready to listen and assist you.

• Data Protection Officer Email: [email protected] — we are committed to responding within two business days.
• Live Chat: Available 24 hours a day, 7 days a week through the mbi918 platform for immediate enquiries.
• FAQ Page: Visit mbi918 FAQ page for answers to the most frequently asked privacy questions.