Privacy Policy mbi133 — Personal Data Protection for Malaysian Members

Welcome to the mbi133 Privacy Policy. This document is designed to clearly and transparently explain how the mbi133 platform collects, uses, stores, and protects your personal data as a registered member or visitor using our services at mbi133.app.

Mbi133 is an online gaming platform operating exclusively for the Malaysian market, offering a wide range of game categories including slot games, live casino, sports betting, fish shooting games, and bingo. In operating this platform, we necessarily need to process certain user personal data to ensure that our services are safe, fair, and compliant with applicable legal requirements.

This Privacy Policy applies to all mbi133 users — whether you are visiting our website for the first time, in the process of registering, or an active member using the platform daily. It also covers all channels of interaction with mbi133, including the website, mobile app, and customer support communications.

Mbi133 only collects data that is strictly necessary to provide safe and efficient services. The following are the categories of data we collect:

2.1 Data You Provide Directly

• Identity Information: Full name, date of birth, gender, and IC number for age verification and KYC purposes.
• Contact Information: A valid Malaysian phone number and an active email address.
• Financial Information: Bank account number, bank name, and digital wallet details (TnG, Boost, GrabPay) used for deposits and withdrawals.
• KYC Documents: Copies of your IC, bank statements, or other verification documents requested during the identity verification process.

2.2 Data Collected Automatically

• Technical Data: IP address, device type, operating system, browser type and version.
• Activity Data: Login and logout records, game history, betting records, deposits and withdrawals.
• Geolocation Data: Approximate location based on IP address for jurisdiction verification purposes.
• Cookie Data: User preferences, active sessions, and analytics data collected via cookies and similar technologies.

Every piece of data collected has a clear and specific purpose. mbi133 does not use your data for any purpose not stated in this policy.

3.1 Platform Operations Purpose

• Creating and managing your member account and ensuring login security.
• Processing deposits, withdrawals, and other financial transactions accurately and securely.
• Verifying your identity (KYC) in accordance with anti-money laundering (AML) compliance requirements.
• Providing effective customer support when you reach out to our team.

3.2 Security and Compliance Purpose

• Detecting and preventing fraud, money laundering, and other unlawful activities.
• Fulfilling legal and regulatory obligations applicable in Malaysia.
• Verifying that you meet the minimum age requirement (18 years old) and are in an authorised jurisdiction.
• Maintaining transaction records for audit purposes and legal requirements.

3.3 Service Improvement Purpose

• Analysing usage patterns to improve the platform's interface and user experience.
• Personalising game recommendations and promotions based on your preferences.
• Sending important notifications related to your account, transactions, and relevant promotions.

Mbi133 processes your personal data on a solid legal basis in accordance with the Malaysian Personal Data Protection Act 2010 (PDPA). The processing of your data is lawful under one or more of the following grounds:

• Contract Fulfillment: Processing is necessary to fulfill the contract between you and mbi133, including the provision of gaming services, transaction processing, and account management.
• Legal Obligation: mbi133 is required to process certain data to comply with applicable Malaysian laws, including KYC and AML requirements.
• Legitimate Interest: Processing to detect fraud, maintain platform security, and improve services based on user behavior analysis.
• Consent: For data processing not covered by the above bases — such as marketing communications — we will obtain your explicit consent beforehand.

Mbi133 does not sell, rent, or disclose your personal data to third parties for commercial purposes. However, there are limited situations where data sharing is necessary and lawful:

5.1 Trusted Service Providers

Mbi133 works with selected and trusted third-party service providers to support our platform operations. These include:

• Payment Providers: DuitNow, FPX, Touch 'n Go eWallet, Boost, and GrabPay to process your financial transactions securely.
• Game Providers: Gaming software companies that provide slot games, live casino, and other products on the mbi133 platform.
• Identity Verification Services: Third-party KYC providers that assist us in verifying the identity of new members.
• Cloud Infrastructure: Cloud service providers that store and process data in a secure, certified environment.

All third-party service providers are bound by strict data protection agreements and are only permitted to process your data for purposes specified by mbi133.

5.2 Disclosure to Authorities

Mbi133 may be required to disclose your personal data to the relevant authorities when:

• Required by court order, legal notice, or valid legal process.
• Required to comply with AML/CFT reporting obligations to Bank Negara Malaysia or relevant agencies.
• There is reasonable suspicion that criminal activity is occurring or has occurred through the platform.

Mbi133 continuously invests in the latest security infrastructure to ensure your personal data is always protected against unauthorised access, loss, alteration, or unintended disclosure.

6.1 Technical Measures

• 256-bit SSL/TLS Encryption: All data transmitted between your device and mbi133 servers is fully encrypted using the latest industry security protocols.
• Stored Data Encryption: Sensitive data such as passwords and financial information is encrypted at rest using robust hashing algorithms.
• Multi-Layered Firewall: mbi133 servers are protected by an advanced firewall system that monitors and filters suspicious traffic in real time.
• Two-Factor Authentication (2FA): You are encouraged to enable 2FA for an added layer of protection on your account.

6.2 Organisational Measures

• Role-based access control (RBAC) — only staff who genuinely require access to your data are permitted to do so.
• Ongoing security training and privacy awareness programmes for all mbi133 staff.
• Regular security audits by independent third parties to identify and address system vulnerabilities.
• A clear, tested incident response procedure to address any data breach swiftly and effectively.

Mbi133 only retains your personal data for as long as necessary to fulfil the purposes stated in this Privacy Policy, or as required by applicable law.

Once the retention period ends, your personal data will be securely deleted or anonymized so that it can no longer be personally linked to you. Anonymized data may be retained for statistical and internal research purposes without a time limit.

Under the Personal Data Protection Act 2010 (PDPA) of Malaysia, you have the following rights regarding your personal data held by mbi133:

Mbi133 uses cookies and similar tracking technologies to enhance your user experience, analyse platform usage, and deliver more relevant content. The following are the types of cookies we use:

9.1 Types of Cookies

• Strictly Necessary Cookies: These cookies are required for core platform functions such as login session management and security. They cannot be disabled without affecting platform functionality.
• Preference Cookies: Storing your preferences such as language, display settings, and game configurations to deliver a more personalised experience.
• Analytics Cookies: Helping us understand how users interact with the platform so we can improve its design and content. We use self-operated analytics tools and do not share this data with advertising platforms.
• Security Cookies: Helping identify suspicious activity and protecting your account from unauthorised access.

9.2 Managing Cookie Preferences

You can manage or disable non-essential cookies through your browser settings or via the cookie preferences panel available when you first visit the mbi133 website. Please note that disabling certain cookies may affect the functionality and user experience of the platform.

In the course of its operations, mbi133 may need to transfer your personal data to servers or service providers operating outside Malaysia. Such transfers will only take place where an equivalent or higher level of data protection than that required under Malaysian law can be assured.

The safeguards we apply for cross-border data transfers include:

• Ensuring that data recipients outside Malaysia are subject to equivalent or stricter data protection laws.
• Signing standard data processing agreements that incorporate recognised standard contractual clauses.
• Assessing data protection impact before any data transfer to a new jurisdiction is carried out.
• Ensuring data encryption is maintained both in transit and during storage at overseas locations.

Mbi133 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or services offered. When we make material changes, we will:

• Updating the "Last Updated" date at the top of this document.
• Displaying a clear notice on the mbi133 platform's home page or login page.
• Sending notifications via email or in-platform messages to all registered members.
• Providing a notice period of at least 14 days before significant changes take effect.

We encourage you to review this Privacy Policy periodically to stay informed about how mbi133 protects your personal data. Your continued use of the mbi133 platform after any changes to the Privacy Policy take effect will be deemed as your acceptance of the updated terms.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how mbi133 handles your personal data, please contact our Data Protection Officer (DPO):

We will make every effort to resolve your concerns within the stipulated timeframe. If you are not satisfied with our response, you have the right to lodge a complaint with the Personal Data Protection Department of Malaysia (PDPD) or the relevant regulatory authority.