mbi8win Privacy Policy

1. Introduction

Welcome to mbi8win. This Privacy Policy ("Policy") describes how mbi8win ("we", "us", or "our") collects, processes, stores, and protects the personal data of users ("you" or "your") who access or use the mbi8win online gaming platform located at mbi8win.lat.

By registering for an account, visiting our website, or using any of our services — including slots, live casino, sportsbook, and fishing games — you acknowledge that you have read and understood this Policy. If you do not agree with any part of this Policy, please discontinue use of our services.

mbi8win is committed to handling your personal data responsibly and in a manner consistent with applicable data protection laws relevant to our operations. This Policy is subject to periodic review and may be updated to reflect changes in our practices, technology, or legal obligations.

2. Who We Are

mbi8win operates as an online gaming and sports betting platform primarily serving the Malaysian market. Our platform offers a range of gaming categories, including but not limited to live casino games, video slots, sportsbook wagering, and fishing arcade titles. Our registered office and principal place of operations handles all data processing activities described in this Policy.

For the purposes of this Policy, mbi8win acts as the data controller in respect of personal data collected from our registered players, visitors, and any individuals who contact us directly.

3. Personal Data We Collect

mbi8win collects personal data through multiple channels, including account registration, platform usage, customer support interactions, and technical logging. The categories of personal data we may collect include:

• Identity Data: Full legal name, date of birth, gender, and government-issued identification details where required for verification purposes.
• Contact Data: Email address, Malaysian mobile phone number, and residential address.
• Financial Data: Bank account details, e-wallet identifiers (such as Touch n Go eWallet or Boost), transaction history, deposit and withdrawal records.
• Account Data: Username, password (stored in hashed form), account preferences, gaming history, bonus and promotion activity, and responsible gaming settings.
• Technical Data: IP address, browser type and version, device type, operating system, session logs, pages visited, and time spent on site.
• Usage Data: Information about how you interact with our platform, including which games you play, bet sizes, frequency of play, and in-session behaviour.
• Communications Data: Records of correspondence between you and our customer support team, including live chat transcripts, email exchanges, and feedback submitted.
• Verification Documents: Copies of official identification (e.g. MyKad, passport) and proof of payment method, collected only as required for Know Your Customer (KYC) compliance.

We do not intentionally collect sensitive personal data such as racial or ethnic origin, religious beliefs, health information, or biometric data, unless specifically required by applicable regulations and with your explicit consent.

4. How We Use Your Personal Data

mbi8win processes personal data for the following purposes:

1. Account Registration and Management: To create, verify, and maintain your player account on the mbi8win platform.
2. Service Delivery: To provide you with access to our gaming products, process your bets, and credit winnings to your account.
3. Payment Processing: To facilitate deposits and withdrawals via Malaysian payment methods such as Maybank, CIMB Bank, Public Bank, Hong Leong Bank, RHB Bank, Touch n Go eWallet, and Boost.
4. Identity Verification (KYC/AML): To verify your identity and age (21+ requirement), and to comply with anti-money laundering obligations applicable to our operations.
5. Customer Support: To respond to your enquiries, resolve complaints, and improve the quality of our support services.
6. Platform Security: To detect, investigate, and prevent fraudulent activity, unauthorised access, and other abuse of our systems.
7. Responsible Gaming: To monitor gameplay patterns and enforce responsible gaming tools such as deposit limits, cooling-off periods, and self-exclusion measures.
8. Platform Improvement: To analyse usage data in aggregate form in order to improve our website, products, promotions, and overall user experience.
9. Marketing Communications: To send you relevant promotional offers, bonus notifications, and platform updates — but only where you have provided your consent or where we have a legitimate interest to do so. You may opt out at any time.
10. Legal Compliance: To meet our obligations under applicable laws and regulations, respond to lawful requests from authorities, and enforce our Terms & Conditions.

We will not use your personal data for any purpose that is incompatible with the purposes listed above without first notifying you and, where required, obtaining your consent.

5. Legal Basis for Processing

mbi8win processes your personal data on one or more of the following legal bases:

• Contractual Necessity: Processing is necessary to perform our contract with you — for example, to operate your account and deliver our services.
• Legal Obligation: Processing is required to comply with applicable laws, including KYC, AML, and responsible gaming requirements.
• Legitimate Interests: Processing is necessary for our legitimate business interests, such as fraud prevention, platform security, and service improvement, where those interests are not overridden by your rights.
• Consent: Where we rely on your consent — for example, for direct marketing communications — you have the right to withdraw that consent at any time by contacting our support team or updating your account preferences.

6. Sharing Your Personal Data

mbi8win does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may, however, share your data with the following categories of recipients where necessary:

• Payment Service Providers: Banks and e-wallet operators (such as Maybank, CIMB, Touch n Go eWallet, and Boost) to process your financial transactions.
• Identity Verification Partners: Third-party KYC and AML compliance providers engaged to verify your identity and detect fraud.
• Technology Providers: Cloud hosting, platform infrastructure, and analytics vendors who process data on our behalf under strict data processing agreements.
• Game Content Providers: Software developers and game studios whose titles appear on the mbi8win platform, to the extent necessary to deliver their games to you.
• Regulatory and Law Enforcement Authorities: Where we are legally required to disclose personal data in response to a court order, regulatory inquiry, or other lawful demand.
• Professional Advisors: Legal counsel, auditors, and compliance advisors bound by professional confidentiality obligations.

7. Data Retention

mbi8win retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements.

In general, we apply the following retention periods:

• Active Account Data: Retained for the duration of your registered account with mbi8win, plus a period thereafter as required by applicable law.
• Transaction Records: Financial transaction records are retained for a minimum of seven (7) years to meet anti-money laundering and tax compliance obligations.
• KYC and Identity Documents: Retained for a minimum of five (5) years following the closure or termination of your account.
• Support Communications: Customer support records are retained for up to three (3) years from the date of the last interaction.
• Technical and Log Data: Server and access logs are retained for up to twelve (12) months for security monitoring purposes.

Where personal data is no longer required, mbi8win will securely delete or anonymise it in accordance with our internal data lifecycle procedures.

8. Security of Your Personal Data

mbi8win implements a range of technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and our servers.
• Hashing and salting of account passwords — we never store your password in plain text.
• Access controls limiting internal access to personal data to authorised personnel only, on a need-to-know basis.
• Regular security assessments, penetration testing, and vulnerability scanning of our platform infrastructure.
• Secure data centres with physical access controls, redundant systems, and continuous monitoring.
• Staff training on data protection and security best practices.

While we take every reasonable precaution to protect your data, no method of transmission over the internet or method of electronic storage is completely secure. In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and the relevant authorities in accordance with applicable legal requirements.

9. Cookies and Tracking Technologies

mbi8win uses cookies and similar tracking technologies to enhance your experience on our platform, analyse site performance, and support our marketing activities. The types of cookies we use include:

• Strictly Necessary Cookies: Essential for the platform to function. These include session management cookies that keep you logged in and remember your game state.
• Performance & Analytics Cookies: Used to collect aggregated, anonymised data about how users interact with our website, helping us identify areas for improvement.
• Functionality Cookies: Remember your preferences such as language settings, preferred payment method, and display options.
• Targeting & Marketing Cookies: Used to deliver relevant promotional content and to measure the effectiveness of our campaigns. These are only placed with your consent.

You may control or disable non-essential cookies through your browser settings or via our cookie preference centre. Please note that disabling certain cookies may affect the functionality of the mbi8win platform.

10. Your Data Subject Rights

Depending on applicable law, you may have the following rights in relation to your personal data held by mbi8win:

• Right of Access: You may request a copy of the personal data we hold about you.
• Right to Rectification: You may request that we correct inaccurate or incomplete personal data.
• Right to Erasure: You may request that we delete your personal data, subject to our legal retention obligations.
• Right to Restriction: You may request that we restrict the processing of your personal data in certain circumstances.
• Right to Object: You may object to our processing of your personal data where we rely on legitimate interests as our legal basis.
• Right to Data Portability: You may request a copy of the personal data you provided to us in a structured, machine-readable format.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, please contact our support team via live chat on the platform or by emailing us at the address provided in the Contact section below. We will respond to your request within a reasonable timeframe and in accordance with applicable legal requirements.

11. Minors and Age Restriction

mbi8win strictly prohibits the use of our platform by individuals under the age of 21. Our services are intended solely for adults who meet the minimum age requirement applicable to online gaming in Malaysia.

Parents and guardians who believe their child may have registered on the mbi8win platform are encouraged to contact our customer support team immediately. We take such matters extremely seriously and will act promptly upon receiving any credible report.

We use age verification procedures as part of our KYC process to ensure compliance with this requirement. By registering on mbi8win, you confirm that you are 21 years of age or older.

12. Changes to This Privacy Policy

mbi8win reserves the right to amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform functionality. When we make material changes to this Policy, we will:

• Update the "Effective Date" at the top of this page.
• Display a prominent notice on the mbi8win platform informing registered players of the update.
• Where required, send a notification to your registered email address.

Your continued use of the mbi8win platform following the publication of any updated Privacy Policy constitutes your acceptance of the revised terms. We encourage you to review this Policy periodically to stay informed about how we protect your data.

13. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way mbi8win handles your personal data, please reach out to our team. We are committed to addressing all data-related enquiries promptly and transparently.

You may contact our Data Protection team via:

• Live Chat: Available 24/7 directly on the mbi8win platform — the fastest way to reach us.
• Email: [email protected] (plain text — not a clickable link)

We will acknowledge your enquiry within two (2) business days and aim to resolve all data subject requests within thirty (30) days of receipt, or such shorter period as required by applicable law.