Your Privacy Our Priority

1 Information We Collect

To enable mbi8win to provide you with a safe, fair and appropriate service, we collect several categories of information during the registration process and your use of the platform. This information falls into two main categories:

a) Information you provide directly:

• Identity information — full name, date of birth, MyKad or passport number, current residential address.
• Account information — username, password (stored in hashed form that cannot be read), email address and mobile phone number.
• Financial information — bank account or e-wallet details used for deposits and withdrawals, including Touch 'n Go eWallet, DuitNow, FPX, Boost and cryptocurrency accounts (USDT, BTC, ETH).
• Verification documents — copies of your MyKad, passport or other supporting documents submitted during the KYC (Know Your Customer) process.

b) Information collected automatically:

• IP address, device type, operating system and web browser version you are using.
• Server log data including login times, game activity and transaction history.
• Cookies and similar tracking technologies used to recognise your session and improve the user experience.

2 How We Use Your Information

Information collected by mbi8win is used solely for legitimate purposes related to platform operations. We do not use your data for any other purpose without your explicit consent.

• Identity verification — ensuring every account belongs to a genuine individual aged 21 and above who is not subject to gambling restrictions.
• Transaction processing — managing deposits and withdrawals through your chosen payment method.
• Fraud and money laundering prevention — monitoring suspicious activity in line with our licensing compliance obligations.
• Customer support — enabling our 24/7 support team in Bahasa Melayu and English to assist you effectively.
• Experience personalisation — suggesting relevant promotions, bonuses and games based on your activity patterns on the platform.
• Official communications — sending important notices relating to your account, policy changes or security information.
• Legal compliance — meeting disclosure requirements set by our regulatory authority or valid court orders.

3 Disclosure to Third Parties

mbi8win does not disclose your personal information to outside parties except in the following circumstances:

• Payment service providers — payment gateway providers such as FPX processors, Touch 'n Go, DuitNow and Boost require basic transaction information to process your deposits and withdrawals.
• Game software providers — game providers may receive non-personally identifiable session data for audit and game fairness purposes.
• Regulatory bodies and authorities — we will disclose information lawfully required by the relevant authorities, courts or our licensing regulatory body.
• Audit and security partners — independent audit firms or cybersecurity companies engaged to assess the integrity of our platform are subject to binding confidentiality agreements.

4 Cookies and Tracking Technologies

The mbi8win platform uses session cookies and persistent cookies to improve the user experience. Session cookies are deleted automatically when you close your web browser, while persistent cookies are stored for a longer period to remember your preferences on future visits.

The cookies we use serve to verify your login, save your language and region preferences, monitor platform performance and help prevent unauthorised access. You may disable cookies through your web browser settings, though this may affect certain platform functions.

We do not use third-party cookies for advertising or cross-site tracking purposes.

5 Data Security and Retention Period

mbi8win implements adequate technical and organisational measures to protect your personal data from unauthorised access, loss, destruction or accidental disclosure. These measures include data encryption during transmission and storage, role-based access controls, continuous security monitoring and regular penetration testing by independent third parties.

Your personal data will be retained for as long as your account is active or as long as it is needed for platform operations. After an account is closed, we retain certain records for a period set by applicable licensing and legal requirements before the data is permanently deleted or anonymised.

6 Cross-Border Data Transfers

Because mbi8win operates under an international licence, your data may be stored or processed on servers located outside Malaysia. In such cases, we ensure that such data transfers are carried out in accordance with data protection standards equivalent to or higher than local requirements, through recognised mechanisms such as contractually binding data processing agreements.

7 Protection of Underage Users

The mbi8win platform is intended for individuals aged 21 and above only. We do not intentionally collect or store personal information from individuals below this age limit. Our KYC process is specifically designed to verify the age and identity of every user before an account is fully activated.

Should we find that personal data of an underage user has been collected unintentionally, we will take immediate action to delete that data and close the account concerned.

8 Changes to This Privacy Policy

mbi8win reserves the right to update or amend this Privacy Policy from time to time to reflect changes in operational practices, licensing requirements or applicable laws. Any material changes will be communicated to you via your registered email or a prominent notice on our platform before the changes take effect.

Continued use of the mbi8win platform after such a change notice is considered your acceptance of the latest version of this Privacy Policy. You are encouraged to review this policy periodically.