Privacy Policy – How mbiwin Collects, Uses & Protects Your Data

1. Who We Are

mbiwin ("the Company", "We", "Us", "Our") operates the online gaming and sports betting platform accessible at https://mbiwin.net ("the Platform"). mbiwin is the data controller responsible for the personal information collected through the Platform. For the purposes of this Privacy Policy, "you", "your", or "Member" refers to any individual who accesses, registers on, or uses the mbiwin Platform in any capacity.

This Privacy Policy applies to all personal data processed by mbiwin in connection with your use of the Platform, including data collected during registration, identity verification, deposits, gameplay, customer support interactions, and any promotional activity you participate in.

2. Personal Data We Collect

mbiwin collects the following categories of personal data in the course of providing its services:

• Identity Data: Full legal name, date of birth, gender, nationality, government-issued identification number (MyKad, passport number), and copies of identification documents submitted for KYC verification.
• Contact Data: Email address, Malaysian mobile phone number, and residential address including postcode and state.
• Financial Data: Bank account details, e-wallet account identifiers (Touch n Go eWallet, Boost), cryptocurrency wallet addresses, transaction history, deposit and withdrawal records.
• Gaming Data: Bet history, game session logs, game preferences, win/loss records, bonus usage, wagering activity, and responsible gaming tool settings including deposit limits and self-exclusion status.
• Technical Data: IP address, device identifiers, browser type and version, operating system, screen resolution, time zone, session duration, and referring URL.
• Communications Data: Records of live chat conversations, support tickets, email correspondence, and any other communications you send to mbiwin.
• Marketing Preferences: Your opt-in or opt-out status for promotional communications, preferred communication channels, and responses to marketing campaigns.

3. How We Collect Your Data

mbiwin collects personal data through the following means:

• Direct provision: Information you submit during account registration, KYC verification, deposit or withdrawal requests, support interactions, and form submissions on the Platform.
• Automated collection: Technical data collected automatically when you access the Platform, including via cookies, web beacons, pixel tags, and server logs.
• Third-party sources: Identity verification and fraud screening data received from licensed KYC service providers; payment transaction data received from payment processors; and device reputation data from fraud detection services.
• Publicly available sources: In limited circumstances, publicly available information used to verify identity or assess account risk in accordance with our anti-money laundering obligations.

4. Purposes and Legal Basis for Processing

mbiwin processes your personal data for the following purposes, each supported by the corresponding legal basis:

• Account administration and service delivery: Processing is necessary for the performance of the contract between you and mbiwin, including creating your account, enabling login, processing bets, and managing your wallet.
• Identity verification and KYC compliance: Processing is necessary to comply with mbiwin's legal obligations under applicable anti-money laundering and know-your-customer regulations mandated by our gaming licence.
• Payment processing and fraud prevention: Processing is necessary for the performance of the contract and to protect the legitimate interests of mbiwin and its members against fraudulent transactions.
• Responsible gaming monitoring: Processing is based on our legal obligations and legitimate interests in preventing gambling-related harm, monitoring for problem gambling indicators, and enforcing self-exclusion requests.
• Customer support: Processing is necessary for the performance of the contract and our legitimate interest in providing timely, accurate assistance to members.
• Marketing and promotions: Processing is based on your explicit consent where required. You may withdraw consent at any time by updating your marketing preferences or contacting our support team.
• Platform security and analytics: Processing is based on our legitimate interests in maintaining the security, performance, and integrity of the Platform.

5. Sharing Your Personal Data

mbiwin does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your data with the following categories of recipients, strictly for the purposes described in Section 4:

• Payment service providers: Banks, e-wallet operators (Touch n Go, Boost), FPX network, and cryptocurrency processors necessary to facilitate deposits and withdrawals.
• Identity verification providers: Licensed KYC and AML screening services used to verify member identity and screen against sanctions lists.
• Game software providers: Third-party game studios whose games are integrated into the mbiwin Platform receive limited session data necessary to deliver their games.
• IT and infrastructure providers: Cloud hosting, data storage, and cybersecurity service providers operating under contractual data protection obligations.
• Regulatory and law enforcement authorities: Where required by law, court order, or our licensing obligations, mbiwin may disclose personal data to competent authorities without prior notice to the member.
• Professional advisers: Legal, audit, and compliance consultants bound by confidentiality obligations, in connection with mbiwin's legal and regulatory responsibilities.

All third parties with whom mbiwin shares personal data are required to process that data only for the specified purpose and in accordance with applicable data protection standards.

6. International Data Transfers

As an internationally licensed online gaming platform, mbiwin may transfer your personal data to, or process it in, countries outside Malaysia, including jurisdictions where the mbiwin licensing authority is located or where our technology infrastructure is hosted. Where such transfers occur, mbiwin ensures that appropriate safeguards are in place, such as contractual clauses that impose equivalent data protection obligations on the receiving party, or that the transfer is to a jurisdiction recognised as providing an adequate level of data protection.

By using the mbiwin Platform, you acknowledge and consent to your data being processed in this manner as necessary for the delivery of the service.

7. Data Retention

mbiwin retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention period required by applicable law or regulatory obligation. As a general guide:

• Account and identity data is retained for a minimum of five (5) years from the date of account closure, in compliance with anti-money laundering record-keeping requirements.
• Financial transaction records are retained for a minimum of five (5) years from the date of the transaction.
• Gaming and betting records are retained for a minimum of three (3) years from the date of the session or bet.
• Communications records are retained for a minimum of two (2) years from the date of the last interaction.
• Technical and log data may be retained for up to twelve (12) months unless required for an ongoing investigation or legal proceeding.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our data disposal procedures.

8. Cookies & Tracking Technologies

mbiwin uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device when you visit the site. The Platform uses the following categories of cookies:

• Strictly necessary cookies: Required for core Platform functionality including login sessions, security tokens, and shopping cart equivalents for bet placement. These cannot be disabled.
• Performance cookies: Collect anonymised data about how members use the Platform, such as pages visited and error messages, to help us improve site performance.
• Functional cookies: Remember your preferences such as language settings and remembered login details to provide a more personalised experience.
• Analytics cookies: Used by internal analytics tools to understand aggregate user behaviour and inform product decisions. Data collected is not linked to identifiable individuals.

You may control non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of parts of the Platform.

9. Your Rights as a Data Subject

Subject to applicable law and certain limitations, you have the following rights in relation to your personal data held by mbiwin:

• Right of access: You may request a copy of the personal data mbiwin holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to legal retention obligations.
• Right to restrict processing: You may request that mbiwin restrict its processing of your data in certain circumstances.
• Right to data portability: You may request a machine-readable copy of your personal data in certain circumstances.
• Right to object: You may object to processing based on legitimate interests or for direct marketing purposes at any time.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of these rights, please contact our support team via live chat or at [email protected]. We will respond to verified requests within 30 days. mbiwin reserves the right to verify your identity before processing a data subject rights request.

10. Security Measures

mbiwin implements a range of technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These include 256-bit SSL/TLS encryption for all data in transit, encrypted storage for sensitive data at rest, strict access controls limiting data access to authorised personnel on a need-to-know basis, regular penetration testing and vulnerability assessments, and a dedicated security operations function monitoring the Platform around the clock.

While mbiwin takes commercially reasonable steps to protect your data, no method of electronic transmission or storage is completely secure. In the event of a data breach that poses a risk to your rights and freedoms, mbiwin will notify affected members in accordance with applicable notification requirements.

11. Children and Minors

The mbiwin Platform is strictly intended for adults aged 21 years and above. mbiwin does not knowingly collect personal data from individuals under 21. If we become aware that a member is under the minimum age, the account will be immediately closed, all data will be deleted (subject to any legal retention obligations), and any deposited funds will be returned to their source.

Parents and guardians are encouraged to use appropriate parental control tools to prevent minors from accessing online gaming platforms. If you believe a minor has registered on mbiwin, please contact our support team immediately at [email protected].

12. Updates to This Privacy Policy

mbiwin may update this Privacy Policy from time to time to reflect changes in our data practices, regulatory requirements, or Platform features. The "Last Updated" date at the top of this page indicates when the current version was published. Material changes will be communicated to registered members via email or an in-platform notification prior to taking effect.

Your continued use of the Platform following publication of an updated Privacy Policy constitutes your acceptance of the revised terms. We encourage you to review this page periodically to stay informed about how mbiwin protects your data.

13. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or mbiwin's handling of your personal data, please contact our Data Protection team through any of the following channels:

• Live Chat: Available 24/7 via the mbiwin Platform. This is the fastest way to reach us.
• Email: [email protected] (plain text — not a clickable link)

When contacting us regarding a data subject rights request, please include your registered email address and a clear description of your request so we can handle it efficiently and within the required response timeframe.