Mbi9 Privacy Policy – User Personal Data Protection

1Introduction

Mbi9 is an online gaming platform managed and operated by mbi9 Group. We understand that privacy is a matter of great importance to our users, particularly in the context of a financial and online entertainment platform.

This Privacy Policy explains in detail how mbi9 collects, processes, stores, uses, and protects your personal data when you use our platform — whether via the mbi9 website or mobile app.

We are committed to ensuring that all personal information you entrust to us is handled with integrity, transparency, and in full compliance with applicable data protection laws, including Malaysia's Personal Data Protection Act 2010 (PDPA).

2Personal Data We Collect

Mbi9 collects several categories of personal information from our users. The type of data collected depends on how you interact with our platform:

Identity Data

• Full name as stated in your official identification document.
• Date of birth and identification card or passport number (for KYC verification).
• Current residential address and postcode.
• Active mobile phone number and personal email address.
• Photo or scan of identity documents submitted during the KYC process.

Financial Data

• Bank account or e-wallet details used for deposits and withdrawals.
• Historical transaction records including amounts, dates, and payment methods.
• Information related to wagering and gaming activity within your account.

Technical & Usage Data

• IP address, browser type, and device information you use.
• Cookie data and related tracking technologies on website usage.
• Session activity logs including pages visited and time spent.
• General location information based on IP address (not precise GPS location).

3Purpose of Data Collection and Use

Mbi9 uses the personal data collected for legitimate and clearly stated purposes as follows:

• Account registration and management: To create, verify, and maintain your user account on the mbi9 platform.
• Identity verification (KYC): To ensure all users meet the required age and identity criteria, and to comply with anti-money laundering legal requirements.
• Payment processing: To process deposits, withdrawals, and other financial transactions securely and efficiently.
• Platform security: To detect, investigate, and prevent fraudulent activity, hacking, or platform abuse.
• Customer support: To enable our support team to assist you effectively with enquiries, complaints, or technical issues.
• Service communications: To send important notifications relating to your account, transactions, security updates, and policy changes.
• Marketing (with consent): To send promotional information, bonus offers, and platform updates — only to users who have consented to receive such communications.
• Platform improvement: To analyse usage patterns and improve the user experience on the mbi9 platform.

4Legal Basis for Data Processing

Every instance of personal data processing carried out by mbi9 has a valid legal basis in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA):

• Contract performance: Processing required to provide mbi9 platform services to you under the user agreement.
• Legal obligations: Processing required to comply with legal obligations such as AML, KYC, and financial reporting.
• Legitimate interests: Processing for platform security, fraud prevention, and service improvement purposes.
• User permissions: Processing for marketing and promotional communications, which requires your explicit consent and may be withdrawn at any time.

5Sharing Information with Third Parties

Mbi9 does not sell your personal data. However, there are limited situations where we may need to share certain information with trusted third parties:

Authorized Service Providers

Mbi9 works with third-party service providers that help us operate the platform, including payment processing providers, cloud service providers, and identity verification companies. All such providers are bound by strict confidentiality agreements and may only use your data for agreed purposes.

Legal Obligations

Mbi9 may be required to disclose user information to the relevant authorities when mandated by law, court order, or official investigation. This includes requests related to AML compliance and financial crime prevention.

Game Providers

Limited game data may be shared with relevant game providers for wagering settlement and game result verification purposes. Information shared is limited to what is strictly necessary.

6Data Storage and Retention Period

Mbi9 retains your personal data for as long as necessary to fulfil the original purpose of collection or to comply with applicable legal requirements.

• Active account data: Retained for the duration your account remains active and for any additional period required by law following account closure.
• Financial transaction records: Retained for a minimum of 7 years in line with Malaysia's financial reporting and tax legislation requirements.
• KYC documents: Retained for a minimum of 5 years after the submission date or account closure, whichever is later, in accordance with AML requirements.
• Technical and security logs: Retained for 12 months for investigation and troubleshooting purposes.
• Marketing data: Retained until you withdraw your consent to receive marketing communications.

Upon expiry of the retention period, your personal data will be securely deleted or anonymised so that it can no longer be linked to you.

7Data Security Measures

Mbi9 implements a comprehensive range of technical and organisational security measures to protect your personal data from unauthorised access, loss, or disclosure:

• 256-bit SSL encryption: All communications between your device and mbi9 servers are encrypted using the latest TLS protocols.
• Database encryption: Sensitive data stored in our databases is encrypted at the storage level using AES-256 encryption standards.
• Access control: Access to user data among mbi9 staff is restricted on a need-to-know basis, with all access logged and monitored.
• Two-factor authentication: mbi9's internal systems are protected with two-factor authentication for all staff who have access to user data.
• Regular security audits: The mbi9 platform undergoes regular penetration testing and security audits by independent security experts.
• 24/7 monitoring: An active threat monitoring system operates around the clock to detect and respond to any suspicious activity.

8Cookies and Tracking Technologies

Mbi9 uses cookies and similar tracking technologies to enhance the user experience, maintain session security, and analyse platform usage.

Types of Cookies Used

• Essential Cookies: Required for core platform functions such as login verification and session security. These cookies cannot be disabled.
• Preference Cookies: Stores your preferences such as language and display settings to provide a more personalized experience.
• Analytics Cookies: Collects information on how users interact with the platform to help us improve our services. This data is aggregated and does not personally identify you.
• Security Cookies: Helps detect suspicious activity and protects your account from unauthorized access.

You can manage cookie settings through your internet browser. However, disabling essential cookies may affect the functionality of the mbi9 platform.

9User Rights Regarding Personal Data

As an mbi9 user, you have the following rights regarding your personal data, in accordance with Malaysia's PDPA:

• Right of Access: You may request a copy of the personal data we hold about you at any time.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data.
• Right to Erasure: You may request deletion of your personal data in certain situations, subject to our legal obligations to retain specific records.
• Right to Restrict Processing: You may request that we restrict the processing of your data in certain circumstances.
• Right to Withdraw Consent: You may withdraw consent previously given for marketing communications at any time.
• Right to Complain: You have the right to lodge a complaint with the relevant data protection authority if you believe your privacy rights have been violated.

10Links to Third-Party Platforms

The mbi9 platform may contain references to or integrations with third-party services such as game providers, payment processors, and identity verification providers. It is important that you understand the following:

• The mbi9 Privacy Policy applies only to platforms and services operated directly by mbi9.
• Every third-party provider integrated with the mbi9 platform has its own privacy policy governing how they handle data.
• Mbi9 is not responsible for the privacy practices of any third-party platform or service.

Mbi9 only works with third-party providers that have a strong reputation and a clear commitment to user data protection. All data sharing with third parties is limited to what is strictly necessary and is protected by binding confidentiality agreements.

11Changes to the Privacy Policy

Mbi9 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in platform practices, legal requirements, or technologies used.

Any material changes to this Privacy Policy will be communicated to registered users via an in-platform notice or email at least 7 days before the changes take effect. Minor changes such as language corrections or additional clarifications may be made without prior notice.

The date of the last update will always be displayed at the top of this page. Continued use of the mbi9 platform after any amendment takes effect will be considered your acceptance of the updated Privacy Policy.

12Contact Us About Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or how mbi9 handles your personal data, please contact us through the following channels:

• Live Chat Platform: Available 24 hours a day, 7 days a week via the chat icon at the bottom corner of the mbi9 platform.
• Data Protection Officer Email: [email protected]
• Platform FAQ: Visit page FAQ our page for quick answers to the most frequently asked questions.

The mbi9 Data Protection Officer (DPO) team is ready to assist you within 14 working days for each privacy-related request received.