Privacy Policy mbiwin — Personal Data Protection for Malaysian Members

1 Introduction

Mbiwin ("we", "Platform") values the privacy of every individual who uses our services. This Privacy Policy describes our practices regarding the collection, use, disclosure, and protection of your personal information when you register or use the mbiwin platform.

This document applies to all registered members, website visitors, and mbiwin mobile app users in Malaysia. It should be read together with Terms and Conditions and Responsible Gaming Policy us. If you do not agree with any part of this policy, please discontinue use of our platform.

This policy is prepared in accordance with the Malaysian Personal Data Protection Act 2010 (PDPA), and we are committed to complying with all applicable provisions.

---

2 Data Collected

Mbiwin collects several categories of personal data depending on how you interact with our platform:

a) Data you provide directly:

• Full name, date of birth, and identity card number (MyKad) during account registration.
• Email address and mobile number for communication and verification purposes.
• Bank account details or digital wallet information for deposit and withdrawal processing.
• Identity verification documents (KYC) such as a copy of your MyKad or passport and proof of address.
• Any information you provide when contacting our customer support team.

b) Data collected automatically:

• Your IP address, device type, operating system, and web browser information.
• Login session data including date, time, and access location.
• Records of gaming activity, betting history, and financial transactions on the platform.
• Cookie and tracking technology data that helps us improve your user experience.

---

3 How We Use Your Data

The personal data we collect is used solely for the following legitimate purposes:

• Account management: Creating, verifying, and maintaining your member account.
• Transaction processing: Processing deposits, withdrawals, and all financial transactions on the platform.
• Identity verification (KYC): Meeting legal compliance requirements and preventing fraud and money laundering.
• Service communications: Sending important notifications related to your account, transactions, and policy updates.
• Platform enhancement: Analyzing usage patterns to improve games, the interface, and overall performance.
• Security: Detecting and preventing fraudulent activity, unauthorized access, and cybersecurity threats.
• Responsible gaming: Monitoring gaming patterns to identify signs of problem gambling and provide appropriate assistance.
• Marketing (with your consent): Sending promotional offers and relevant bonus information — only if you have given your consent.

---

4 Data Sharing

Mbiwin does not sell, rent, or trade your personal data. However, in certain limited situations, we may share data with the following parties:

All third parties that receive your data are required to sign a data confidentiality agreement and comply with the security standards set by mbiwin.

---

5 Data Storage & Security

Your data is stored on servers protected by layered security controls, including encryption at rest, role-based access control, 24/7 monitoring, and periodic independent security audits.

• Passwords are stored in hashed form using the bcrypt algorithm — we cannot view your original password.
• Login sessions are protected with secure tokens that expire automatically.
• Financial transaction data is retained for a minimum of 7 years in accordance with Malaysian legal requirements.
• Closed account data is retained for 5 years for audit purposes before being permanently deleted.
• All communications between your mobile app and mbiwin's servers use HTTPS with TLS 1.3.

---

6 Cookies & Tracking Technologies

Mbiwin uses cookies and similar technologies to enhance your experience on the platform. There are several types of cookies we use:

• Essential Cookies: Required for core platform functions such as login sessions and security. Cannot be disabled.
• Preference Cookies: Saving your preferences such as language and display settings for your convenience.
• Analytics Cookies: Helping us understand how members use the platform so we can make improvements.
• Performance Cookies: Ensuring the platform runs smoothly and quickly on your device.

You can manage cookie settings through your web browser. However, disabling essential cookies may affect platform functionality.

---

7 Your Rights

As a mbiwin member and data subject under Malaysia's PDPA, you have the following rights regarding your personal data:

To exercise any of the above rights, contact the mbiwin customer support team via in-app live chat. We will process your request within 14 working days.

---

8 Children's Privacy

The mbiwin platform is strictly for users aged 18 and above. We do not knowingly collect personal data from individuals under 18. If we discover that a child's data has been collected without proper age verification, the account will be immediately closed and the data deleted.

If you believe your child or any minor has registered on our platform, please contact us immediately so that appropriate action can be taken without delay.

---

9 Third-Party Links

The mbiwin platform may contain links to third-party websites or services, such as licensed game providers. mbiwin is not responsible for the privacy practices of those third-party websites. We encourage you to read the privacy policy of any third-party website you visit.

---

10 Policy Changes

Mbiwin reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or new platform features. Any material changes will be communicated to members via email or in-app notification at least 14 days before the changes take effect.

The "Updated" date at the top of this page indicates when this policy was last reviewed. Continued use of the platform after the effective date of any changes constitutes acceptance of the updated policy.

---

11 Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact our team:

You may also refer data protection complaints to the Department of Personal Data Protection Malaysia (JPDP) if you believe your privacy rights have been violated.