Privacy Policy mbi999 — Data Protection Malaysian Members

1Introduction

Mbi999 is an online entertainment platform offering a wide range of games including slots, live casino, fish shooting and sports betting to Malaysian users. We understand that members' trust in our platform depends not only on game quality and payout speed, but also on how we handle the personal information you entrust to us.

This Privacy Policy is drafted in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practices in personal data management. We take this responsibility very seriously — every data-related decision is made with member safety and privacy as the top priority.

This policy applies to all information collected through the mbi999 website, mobile app, customer support, official social media, and other communication channels provided by mbi999. Please read this document carefully as it contains important information about your rights as a member.

2Information Collected

2.1 Information You Provide Directly

When you register and use the mbi999 platform, we collect the following information directly from you:

• Identity Information: Full name, identity card number (MyKad) or passport number, date of birth and gender.
• Contact Information: Email address, mobile number, and residential address.
• Financial Information: Bank account number or e-wallet details used for deposits and withdrawals — stored in encrypted form.
• KYC Verification Documents: A copy of MyKad, passport, utility bill or bank statement for mandatory identity verification required of all members.
• Account Information: Username, password (hashed and never stored in plain text) and member preference settings.

2.2 Information Collected Automatically

When you use the mbi999 platform, our systems automatically record the following technical information:

• Device Data: Device type, model, operating system, browser version and screen resolution.
• Network Data: IP address, estimated geographic location (based on IP), internet service provider name.
• Usage Data: Games played, session duration, total wagering amount, transaction history and login activity.
• Cookie Data: Session cookies, preference cookies and platform analytics identifiers — see Section 5 for details.

3How We Use Your Data

The personal information we collect is used solely for legitimate and necessary purposes in the operation of the mbi999 platform. Below is a detailed list of the purposes for which your data is used:

4Data Sharing

Mbi999 has a clear commitment: we does not sell, does not rent and does not disclose members' personal data to third parties for marketing or commercial purposes. However, there are limited situations where sharing data is necessary and legally justified:

All third-party providers mentioned above are bound by strict confidentiality agreements and are only permitted to use data for the stated purposes. They are not allowed to use the data for any other purpose or share it with other parties without written consent from mbi999.

5Cookies & Tracking Technologies

Mbi999 uses cookies and similar tracking technologies to enhance the user experience and ensure smooth platform functionality. The following are the types of cookies we use:

5.1 Strictly Necessary Cookies

These cookies are required for the platform's basic operations — such as maintaining your login session and remembering your language preference. Without them, the platform cannot function properly. These cookies cannot be disabled.

5.2 Performance & Analytics Cookies

We use internal analytics tools to understand how members interact with the platform — which pages are visited most, time spent, and navigation flow. All such data is collected anonymously and used solely to improve the platform.

5.3 Functional Cookies

These cookies remember your preferences such as interface settings, favourite games and promotional choices, making your experience more personalised and comfortable on every visit.

6Data Security

Member data security is mbi999's highest priority. We implement a comprehensive multi-layered security framework:

While we take all reasonable steps to protect your data, no system is 100% immune to cyber threats. In the event of a data breach affecting your information, we will notify impacted members within 72 hours of detecting the breach, in line with industry best practices.

7Data Retention & Deletion

Mbi999 only retains your personal data for as long as it is needed for the purposes stated in this policy or as required by Malaysian law.

7.1 Retention Period

• Active Account Data: Retained for the duration your account is active and for a specified period after account closure for audit purposes.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysia's accounting and financial legal requirements.
• KYC Documents: Retained for 5 years after the business relationship ends, as required by anti-money laundering regulations.
• Support Communication Logs: Retained for 3 years for reference and dispute resolution purposes.
• Analytics Data: Anonymised data is retained indefinitely as it cannot be linked to any specific individual.

7.2 Deletion Procedure

When data is no longer needed and there is no legal obligation to retain it, mbi999 will securely delete or anonymise the data using methods that ensure it cannot be recovered. This includes secure deletion from all backup systems and servers.

8Member Rights

Under Malaysia's PDPA and mbi999's internal policies, you have the following rights regarding your personal data:

• Right of Access: You have the right to request a copy of the personal data we hold about you.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete information.
• Right to Erasure: You may request deletion of your personal data under certain circumstances, subject to legally binding obligations applicable to us.
• Right to Object: You may object to the processing of your data for marketing communications at any time.
• Right to Data Portability: You have the right to receive your personal data in a machine-readable format for transfer to another service provider.
• Right to Withdraw Consent: Where data processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

9Children's Privacy

The mbi999 platform is exclusively for individuals aged 18 and above. We do not knowingly collect, process, or store personal data of individuals under the age of 18. Should we discover that data from a minor has been inadvertently collected, we will take immediate steps to delete that data and close the associated account.

If you have reason to believe that a minor has registered or is using the mbi999 platform, please contact us immediately through our support channels so that prompt action can be taken.

10Privacy Policy Updates

Mbi999 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, technology or legal requirements. When material changes are made, we will:

• Updating the "Last Updated" date at the top of this page.
• Sending email notifications to all active members affected by the changes.
• Displaying a clear notice within the platform for at least 14 days before the changes take effect.

We encourage you to review this page periodically to stay informed about how we protect your information. Continued use of the mbi999 platform after any policy changes take effect will be considered acceptance of the updated terms.

11Contact Us

If you have any questions, concerns or requests regarding this Privacy Policy or how mbi999 handles your personal data, do not hesitate to reach us through the following channels:

Our Data Protection Officer will carefully review each request and provide a response within the stipulated timeframe. We are committed to resolving every concern professionally and transparently.