mbi666 Privacy Policy

1Who We Are (Data Controller)

mbi666 ("we", "us", "our") operates the online gaming platform accessible at mbi666.app and is the data controller responsible for your personal information as defined in this Privacy Policy. As the data controller, mbi666 determines the purposes and means by which your personal data is processed.

This Privacy Policy applies to all personal data collected through: the mbi666 website at mbi666.app; your mbi666 account registration and ongoing use; communications between you and mbi666 support; and your use of any mbi666 promotional or bonus programmes. It applies to all players and visitors regardless of location, though the platform is primarily operated for Malaysian users.

This Privacy Policy should be read together with mbi666's Terms & Conditions. Capitalised terms not defined here have the meaning given to them in the Terms & Conditions.

2Personal Data We Collect

mbi666 collects personal data in two ways: data you provide directly to us, and data we collect automatically as you use the Platform.

Data you provide directly:

• Identity data: Full legal name, date of birth, nationality, and identity document details (NRIC or passport number) provided during registration and KYC verification;
• Contact data: Email address, Malaysian mobile phone number, and any correspondence you send to mbi666 support;
• Financial data: Payment method details, transaction history, deposit and withdrawal amounts, and wallet or bank account identifiers associated with Touch 'n Go eWallet, Boost, GrabPay, DuitNow, and FPX transactions;
• Account credentials: Username and hashed password (we do not store your password in plain text);
• Responsible gaming data: Deposit limits, loss limits, session limit preferences, cool-off requests, and self-exclusion requests you submit.

Data collected automatically:

• Technical data: IP address, browser type and version, operating system, device identifiers, and screen resolution;
• Usage data: Pages visited, games played, wagers placed, session duration, login timestamps, and navigation patterns within the Platform;
• Cookie data: Data from cookies and similar tracking technologies as described in Section 7 of this Policy.

3How We Use Your Personal Data

mbi666 uses your personal data for the following purposes:

• Account management: To create, verify, maintain, and administer your mbi666 account, and to authenticate your identity at login;
• Service delivery: To provide you with access to casino games, sports betting, live dealer tables, and all other mbi666 platform features;
• Payment processing: To process deposits and withdrawals via Touch 'n Go eWallet, Boost, DuitNow, FPX, and other supported Malaysian payment methods, and to verify the ownership of payment instruments;
• Customer support: To investigate and respond to enquiries, complaints, and disputes submitted by you to the mbi666 support team;
• Legal compliance: To fulfil our obligations under applicable anti-money laundering (AML) laws, know-your-customer (KYC) requirements, and any reporting obligations imposed by gaming regulatory authorities;
• Responsible gaming: To apply and manage deposit limits, session timers, cool-off periods, and self-exclusion requests, and to identify patterns of play that may indicate problem gambling;
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, account takeovers, bonus abuse, and other prohibited activities;
• Platform improvement: To analyse aggregated usage data in order to improve the mbi666 platform, personalise your experience, and develop new features;
• Marketing (with consent): To send you promotional communications about mbi666 bonuses, new games, and offers, where you have provided consent to receive such communications. You may withdraw consent at any time.

4Legal Basis for Processing

mbi666 processes your personal data on the following legal grounds:

• Performance of a contract: Processing your identity, contact, and financial data is necessary to provide the mbi666 service under the Terms & Conditions you accepted at registration;
• Legal obligation: Processing for KYC verification, AML compliance, age verification, and regulatory reporting is required by law;
• Legitimate interests: Processing for fraud prevention, platform security, technical operation, and analytics is based on mbi666's legitimate interests in operating a safe and functional platform, balanced against your data protection rights;
• Consent: Marketing communications are sent only where you have given explicit, informed consent. You may withdraw this consent at any time by contacting mbi666 support or updating your account preferences.

5Data Sharing & Third Parties

mbi666 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may share your data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:

• Payment processors: Touch 'n Go eWallet, Boost, GrabPay, DuitNow, and FPX banking partners receive the financial data necessary to process your deposits and withdrawals. These processors are bound by their own privacy policies and applicable financial data protection standards;
• Game providers: Licensed game studios (including Pragmatic Play, PG Soft, Evolution Gaming, and others) receive anonymised or pseudonymised session and game data necessary to deliver game content and detect cheating or technical issues;
• Identity verification providers: Third-party KYC service providers may process your identity document data to verify your identity and age in compliance with our legal obligations;
• Regulatory authorities: mbi666 may be required by law or by gaming regulatory authorities to disclose certain account or transaction data. We will comply with such requests to the extent required by applicable law;
• IT and infrastructure providers: Cloud hosting, database, and cybersecurity service providers may have access to data as part of providing infrastructure services to mbi666. All such providers are bound by appropriate data processing agreements;
• Professional advisers: Lawyers, auditors, and accountants may process limited personal data in connection with legal, compliance, or financial advisory services provided to mbi666.

6Payment Data & Security Measures

The security of your financial data is a top priority at mbi666. All connections to the mbi666 Platform are protected by 256-bit SSL (Secure Sockets Layer) encryption, which ensures that data transmitted between your device and mbi666's servers cannot be intercepted or read by third parties.

mbi666 does not store full payment card numbers or full e-wallet credentials on its own servers. Payment data is processed directly by certified payment processing partners who maintain Payment Card Industry Data Security Standard (PCI-DSS) compliance or equivalent standards applicable to their payment type.

Touch 'n Go eWallet and Boost transaction data is processed through the respective platforms' secure APIs. mbi666 retains only transaction identifiers and amounts necessary for account balance management, dispute resolution, and regulatory record-keeping.

7Cookies & Tracking Technologies

mbi666 uses cookies and similar tracking technologies (including web beacons and local storage) to operate the Platform and improve your experience. The categories of cookies we use are:

• Strictly necessary cookies: Required for the Platform to function, including session management, authentication, and security. These cannot be disabled without breaking core functionality;
• Performance cookies: Collect anonymised data about how players use the Platform — which pages are visited most, how long sessions last, and where errors occur. This data helps us improve the Platform;
• Functional cookies: Remember your preferences, such as language settings, preferred payment methods, and recently played games, to personalise your experience;
• Analytics cookies: Used to understand aggregate traffic patterns. mbi666 uses privacy-respecting analytics tools configured to anonymise IP addresses.

You may manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from accessing your mbi666 account. mbi666 does not use third-party advertising or retargeting cookies.

8Data Retention

mbi666 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, and in accordance with our legal and regulatory obligations. Our general retention periods are:

• Account data: Retained for the duration of your account's active status plus a minimum period after account closure as required by applicable gaming and anti-money laundering regulations;
• Transaction and financial records: Retained for a minimum of 5 years from the date of each transaction, in line with standard financial record-keeping requirements;
• KYC and identity verification records: Retained for the duration of your account plus the legally required post-closure period;
• Customer support communications: Retained for a reasonable period to allow for follow-up and dispute resolution;
• Marketing consent records: Retained until consent is withdrawn plus a reasonable period for record-keeping purposes.

When your data is no longer required, it is securely deleted or anonymised in accordance with our data disposal procedures.

9Your Data Rights

Subject to applicable law and certain exceptions, you have the following rights regarding your personal data held by mbi666:

• Right of access: You may request a copy of the personal data mbi666 holds about you;
• Right to rectification: You may request that inaccurate or incomplete personal data be corrected;
• Right to erasure ("right to be forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal obligations to retain certain data;
• Right to restrict processing: You may request that mbi666 limit the processing of your data in certain circumstances;
• Right to data portability: You may request that mbi666 provide your data in a structured, commonly used, machine-readable format;
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw consent at any time without affecting the lawfulness of processing carried out before the withdrawal;
• Right to object: You may object to processing based on mbi666's legitimate interests.

To exercise any of these rights, please contact mbi666 support as described in Section 13. We will respond to all data rights requests within a reasonable timeframe. Please note that exercising certain rights (for example, the right to erasure) may result in the closure of your mbi666 account where the data concerned is essential to the account's operation.

10Children's Privacy

21+The mbi666 platform is strictly for adults aged 21 years and above. mbi666 does not knowingly collect personal data from individuals under the age of 21. All account registrations require age verification before real-money gaming is permitted.

If mbi666 becomes aware that personal data has been collected from a person under 21 years of age, that account will be immediately closed, all data deleted, and any funds returned to the payment method used. If you believe that mbi666 may have inadvertently collected data from a minor, please contact our support team immediately.

11International Data Transfers

The mbi666 platform serves Malaysian players and primarily processes data using infrastructure and service providers in Asia. Where personal data is transferred to service providers located outside Malaysia — for example, certain cloud infrastructure or game studio partners — mbi666 ensures that appropriate safeguards are in place to protect your data in accordance with applicable international data protection standards.

Such safeguards may include data processing agreements incorporating standard contractual clauses, assessments of the data protection laws in the recipient country, and technical measures such as pseudonymisation and encryption of transferred data. By using the mbi666 Platform, you acknowledge that your data may be transferred and processed in jurisdictions outside Malaysia in accordance with this Policy.

12Changes to This Privacy Policy

mbi666 reserves the right to update or amend this Privacy Policy at any time. The current version of the Policy will always be accessible on this page, with the "Last Updated" date reflecting the most recent revision. Where changes are material, mbi666 will take reasonable steps to notify registered players, which may include an in-platform notification or an email to your registered address.

Your continued use of the mbi666 Platform after the effective date of any amended Privacy Policy constitutes your acknowledgment of and agreement to the updated terms. We encourage you to review this Policy periodically to stay informed about how mbi666 handles your personal information.

13Contact & Data Enquiries

For all privacy-related enquiries, data rights requests, or concerns about how mbi666 handles your personal data, please contact our support team:

• Live Chat: Available 24/7 within the mbi666 Platform — the fastest way to reach us
• Email: [email protected]

Please clearly state "Privacy Request" or "Data Rights Request" in your subject line so we can route your enquiry to the appropriate team. We aim to respond to all privacy-related requests within 30 days. In certain complex cases, this period may be extended by a further 30 days, in which case we will notify you of the extension and the reasons for it.