Privacy Policy mbi360 – Member Data Protection and Privacy

This Privacy Policy is published by mbi360, an online gaming platform operating in Malaysia. It covers all aspects of personal data processing that occur when you register, log in, or use any services provided by us — whether through the mbi360 main website or mobile app.

We comply with Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable international standards. By using the mbi360 platform, you agree to the data collection and processing practices described in this policy. If you do not agree, please discontinue use of our platform.

Mbi360 collects your personal information through several methods — directly when you register or interact with the platform, automatically when you use our services, and sometimes through trusted third parties. The following are the categories of information we collect:

We only collect information that is strictly necessary for the stated purposes. You are responsible for ensuring all information provided is accurate and up to date. Inaccurate information may affect the processing of your transactions and identity verification.

Every piece of information we collect is used for specific and legitimate purposes. mbi360 will not use your data for any other purpose without obtaining your consent first, except as permitted by law.

• Account Management: Register, verify, and maintain your member account on the mbi360 platform.
• Transaction Processing: Process deposits, withdrawals, and all financial transactions securely and on time.
• Identity Verification (KYC): Meet legal compliance requirements and protect the platform against fraud.
• Personalise Your Experience: Personalize content, promotions, and game recommendations based on your preferences.
• Service Communications: Send important notifications related to your account, transactions, and platform updates.
• Platform Improvement: Analyze usage data to improve platform performance, usability, and security.
• Fraud Prevention: Monitor suspicious activity and protect the integrity of the platform and member funds.
• Responsible Gaming: Detect concerning gaming patterns and offer appropriate support to members who need it.

Mbi360 invests seriously in security infrastructure to ensure your personal data is always protected from unauthorised access, data breaches, or misuse. We practise the following technical and organisational security measures:

• 256-bit SSL Encryption: All data transmitted between your device and mbi360's servers is protected with industry-grade SSL encryption.
• Static Data Encryption: Sensitive data stored in our databases is encrypted using AES-256 standards.
• Two-Factor Authentication (2FA): We encourage and support 2FA for all member accounts as an added layer of security.
• Strict Access Control: Only authorised staff with a legitimate business need may access member personal data.
• 24/7 Monitoring: Our threat detection system operates around the clock to detect and respond to any suspicious activity.
• Regular Security Audits: Independent security assessments are conducted regularly to identify and address any vulnerabilities.

Mbi360 does not sell, rent, or disclose your personal information to third parties for their own commercial purposes. However, there are certain situations where we need to share your data with trusted parties for legitimate reasons:

• Payment Service Provider: Information required to process your financial transactions is shared with approved payment providers such as FPX, Touch 'n Go, GrabPay, and Boost.
• Identity Verification Provider: Data required for the KYC process is shared with accredited identity verification providers to meet compliance requirements.
• Statutory Authority: We fully comply with lawful requests from law enforcement agencies, courts, or regulatory bodies in Malaysia.
• Technical Service Provider: Selected technical partners who assist us in operating the platform infrastructure are bound by strict confidentiality agreements.

All third parties we work with are required to comply with data protection standards equal to or higher than our own. mbi360 takes responsibility for ensuring our partners respect the privacy of your data.

Mbi360 uses cookies and similar tracking technologies to enhance the user experience, understand how you interact with our platform, and ensure smooth technical functionality.

You can manage cookie usage through your web browser settings. Please note that disabling certain cookies may affect the functionality and user experience of the mbi360 platform.

As an mbi360 member and data subject under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding the personal information we hold about you:

• Right of Access: You have the right to request a copy of the personal data we hold about you at any time.
• Right to Rectification: You have the right to request correction of inaccurate or incomplete data via your profile page or our customer support.
• Right to Erasure: In certain circumstances, you have the right to request deletion of your personal data, subject to legal compliance obligations binding on us.
• Right to Object: You have the right to object to the processing of your data for direct marketing purposes at any time.
• Right to Data Portability: You have the right to receive your personal data in a machine-readable format for transfer to another platform where applicable.
• Right to Restrict Processing: You may request that we restrict the processing of your data in certain circumstances while your request is under review.

To exercise any of these rights, contact our data protection team at [email protected]. We will process your request within 30 business days in accordance with the requirements of PDPA 2010.

Mbi360 does not retain your personal data longer than necessary for the purposes stated in this policy. Retention periods are determined based on the type of data and applicable legal requirements:

• Active Account Data: Retained for the duration your account remains active on the mbi360 platform and for the specified period following account closure.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysian financial and tax regulatory requirements.
• KYC Verification Documents: Retained for the period specified by anti-money laundering regulations.
• Communication Logs: Customer support communication records are retained for 3 years for reference and service quality purposes.
• Technical Data and Logs: Technical logs are typically retained for 90 days for security and troubleshooting purposes.

Once the retention period expires and no legal requirement prevents deletion, your data will be securely deleted or anonymised so it can no longer be linked back to you.

Mbi360 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, technological developments, legal requirements, or new services we offer.

When any significant changes occur, we will notify you via:

• A clear notice on the home page or at the top of this page.
• Notification email to the address registered in your account.
• In-app notifications in your mbi360 mobile app.

Your continued use of the mbi360 platform after any policy amendments is considered your acceptance of the revised policy. We encourage you to review this page periodically to stay informed about how we protect your privacy.

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, the mbi360 Data Protection Officer (DPO) team is ready to assist you.

• Email: [email protected]
• Response Time: We will respond to privacy-related enquiries within 5–10 business days.
• Jurisdiction: This Policy is governed by the laws of Malaysia and regulated by the Personal Data Protection Act 2010 (PDPA).

We encourage you to contact us directly with any concerns before filing a formal complaint with the authorities. mbi360 is committed to resolving every privacy issue fairly, transparently, and within a reasonable timeframe.