Privacy Policy mbi play – Malaysia Personal Data Protection

Mbi play ("we", "platform" or "the Company") deeply respects the privacy of every user who registers and uses our services at mbiplay.biz. This Privacy Policy ("Policy") has been drafted to clearly and transparently explain how we handle your personal information, in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable data protection regulations.

We understand that you are entrusting mbi play with your personal information when you register and use our platform. We take that trust very seriously. This Policy explains in detail what data we collect, why we need it, how we use it, and what your rights are as a data subject.

By registering a mbi play account, continuing to use our platform, or clicking "Agree" on any consent form on our website, you acknowledge that you have read, understood and agreed to the terms of this Privacy Policy. If you do not agree, please discontinue use of the mbi play platform and contact us to close your account.

Mbi play only collects data that is genuinely necessary to deliver our services safely and efficiently. We never collect excessive or irrelevant data beyond the scope of the services we offer to Malaysian players.

Mbi play collects your personal data through several different channels. It is important that you understand these channels so you know when and how your information is collected.

• During Registration: When you first open an mbi play account, we collect basic information such as your name, email address, Malaysian phone number, and date of birth as provided in the registration form.
• KYC (Know Your Customer) Process: To comply with anti-money laundering regulations and verify your identity, we may request supporting documents such as a copy of your MyKad or passport, and bank statements.
• During Financial Transactions: Payment method details — whether Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, FPX Maybank2u, or CIMB Clicks — are collected when you make a deposit or withdrawal.
• Platform Usage: Technical data such as IP address, device information, web browser type, general geographic location, and usage patterns are collected automatically when you use mbiplay.biz.
• Support Interactions: When you contact mbi play customer support, the content of that interaction — whether via live chat or email — is retained for quality control and dispute resolution purposes.
• Cookies & Tracking Technologies: mbi play uses cookies and similar tracking technologies to collect data on how you interact with our platform. Further details are explained in the Cookies section.

Every piece of data we collect has a clear and legitimate purpose. mbi play will not use your data for purposes unrelated to the provision of our services without first obtaining your separate consent.

• Service Provision: Processing account registration, verifying identity, handling deposits and withdrawals in MYR, and enabling access to all games on mbi play.
• Security & Fraud Prevention: Detecting and preventing fraudulent activity, money laundering, account abuse, multi-account usage, and any other security threats against the mbi play platform.
• Legal Compliance: Fulfilling legal obligations under PDPA 2010, anti-money laundering laws, gaming regulations, and any directives issued by the relevant authorities.
• Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling and to enforce the self-imposed limits you have set.
• Communication: Sending account information, transaction notifications, terms & conditions updates, and (with your consent) promotional offers and mbi play bonus information.
• Platform Improvement: Analysing aggregated and anonymised usage data to improve the design, performance, and user experience of the mbi play platform.
• Dispute Resolution: Maintaining records of transactions and gaming activity to enable fair, evidence-based resolution of any disputes.

Mbi play does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. Your data is only shared in the limited and legitimate circumstances described below.

• Payment Service Providers: To process your deposits and withdrawals via Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay, FPX Maybank2u and CIMB Clicks, the necessary transaction information is shared with the respective payment providers. These providers maintain their own privacy policies.
• Game Software Providers: Some games on mbi play are provided by third-party software providers. Data required to operate those games (such as player ID and betting history) may be shared in this context.
• Relevant Authorities: Where required by law, court order, or directive from a Malaysian regulatory body or law enforcement agency, mbi play will disclose the necessary data.
• Audit Partners: Independent auditors who verify the fairness of our games and RNG systems may need to access certain game data as part of the audit process.

All third parties with whom we share data are contractually obligated to protect your data and use it solely for the specified purposes. mbi play remains responsible for ensuring these third parties uphold data protection standards equivalent to those set out in this Policy.

The security of your personal data is a technical and organisational commitment that mbi play takes extremely seriously. We invest in best-in-class security infrastructure to ensure your information remains protected at all times.

• 256-bit SSL Encryption: All data transmitted between your device and mbi play's servers is encrypted using the latest TLS protocol with 256-bit encryption. This ensures that no third party can intercept or read your data in transit.
• Encryption of Data at Rest: Sensitive data stored in mbi play's databases — including identity information and financial details — is encrypted using the latest industry standards.
• Internal Access Controls: Only mbi play staff who require access to specific data in order to perform their duties are permitted to do so. Access is governed by a strict role-based permission system.
• 24/7 Security Monitoring: An automated monitoring system operates around the clock to detect any unauthorised access attempts, data anomalies, or security threats.
• Regular Security Testing: mbi play conducts regular penetration testing and vulnerability assessments carried out by independent cybersecurity experts.
• Two-Factor Authentication: We provide and encourage the use of 2FA for all member accounts as an additional layer of protection.

Mbi play does not retain your personal data longer than necessary to fulfil the purpose for which it was collected, or to meet our legal obligations. Our data retention periods are as follows:

• Active Account Data: For the duration of your active account with mbi play, plus any additional period required after account closure to fulfil legal obligations (typically 7 years for financial records).
• Financial Transaction Records: Minimum 7 years from the date of transaction, in accordance with Malaysian legal requirements on financial record retention and anti-money laundering.
• Security Logs: 12 months from the date of creation, except for logs related to active investigations, which will be retained until the investigation is concluded.
• Customer Support Data: 3 years from the date of your last interaction with the mbi play support team.
• Cookie Data: Varies by cookie type – from the current session only (session cookies) to a maximum of 24 months (persistent cookies).

When data is no longer needed and there is no legal requirement to retain it, mbi play will securely delete or anonymize it using industry-recognised methods.

Under Malaysia's Personal Data Protection Act 2010 and the mbi play Privacy Policy, you hold important rights regarding your personal data. mbi play is committed to respecting and facilitating the exercise of these rights.

To exercise any of the rights above, please contact us at support@mbiplay.biz with the subject line "Data Privacy Request". mbi play will respond to your request within 30 business days. We may require identity verification before processing any request to ensure the security of your data.

Mbi play uses cookies and similar tracking technologies to enhance user experience, ensure security, and understand how our platform is used. Cookies are small text files stored on your device when you visit our website.

From time to time, the mbi play platform may contain links to third-party websites or services. These include gaming software providers, payment partners, and other related websites. Please note that the mbi play Privacy Policy applies solely to our own platform.

Mbi play is not responsible for the privacy practices of any third-party websites accessed via links from our platform. We strongly encourage you to read the privacy policy of every website you visit. The presence of a third-party link on the mbi play platform does not constitute an endorsement of or support for that website's content or privacy practices.

In the course of our operations, your personal data may be transferred to or processed outside Malaysia — for example, when we use international cloud service providers or gaming software vendors. Any such data transfers will be carried out with appropriate safeguards to ensure your data remains protected to a standard equivalent to or higher than that required by Malaysia's PDPA 2010.

Mbi play ensures that all data recipients outside Malaysia are bound by data processing agreements that require them to protect your data, restrict its use to agreed purposes only, and comply with any data rights requests you submit through mbi play.

The mbi play platform is exclusively for individuals aged 18 and above. mbi play does not knowingly collect or store personal data from individuals under the age of 18. If you are a parent or guardian and believe that your minor child has registered an account on mbi play, please contact us immediately at support@mbiplay.biz.

Upon confirming that data was collected from a minor, mbi play will take immediate steps to delete that data and close the account in question. Parents and guardians are encouraged to use parental control software and monitor their children's online activity.

Mbi play reserves the right to update or amend this Privacy Policy at any time to reflect changes in data processing practices, new legal requirements, or improvements to how we protect your privacy.

When material changes are made to this Policy, mbi play will provide you with appropriate notice through one or more of the following channels: an email to the address registered to your mbi play account, a prominent notice on our website's homepage, or an in-platform notice when you log in. Changes will take effect no earlier than 14 days after notice is issued, unless an immediate change is required to comply with applicable law.

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way mbi play handles your personal data, you may reach us through the following channels:

Mbi play will respond to all privacy enquiries within 30 business days. For more urgent requests, please include "URGENT" in your email subject line. We also encourage you to visit the FAQ which may already have the answer to your question.