Privacy Policy – How mbi888 Collects, Uses & Protects Your Data

1 Who We Are

mbi888 ("the Company," "we," "us," "our") operates the online casino and sportsbook platform accessible at https://mbi888.asia (the "Platform"). mbi888 is the data controller responsible for the personal information collected through the Platform.

This Privacy Policy applies to all users of the mbi888 Platform, including visitors who have not registered an account, registered users, and former account holders whose data we continue to retain in accordance with our legal obligations. For the purposes of this policy, "personal data" means any information that identifies or can reasonably identify a living individual.

If you have any questions about how mbi888 handles your data, or wish to exercise any of the rights described in this policy, please contact our Data Protection team at [email protected] with the subject line "Privacy Enquiry."

2 Data We Collect

mbi888 collects personal data through several channels. The categories of data we collect include:

• Registration Data: Full legal name, date of birth, email address, and any optional profile information you provide at the time of account creation;
• Identity Verification (KYC) Data: Government-issued identification documents (such as MyKad or passport), proof of address, and source-of-funds documentation, where required by our licensing and anti-money laundering obligations;
• Financial Data: Payment method details (e.g., Touch n Go eWallet reference, Boost account, FPX bank details, USDT wallet address), transaction history, deposit and withdrawal records. Note: mbi888 does not store full payment card numbers;
• Gaming Activity Data: Bets placed, game sessions, wager amounts, game outcomes, bonus usage, and responsible gaming tool settings;
• Technical Data: IP address, browser type and version, device type, operating system, session identifiers, referral URL, and time-stamped access logs;
• Communications Data: Content of messages you send to our customer support team, including Live Chat transcripts and email correspondence;
• Marketing Preferences: Your stated preferences for receiving promotional communications and your opt-in/opt-out history.

We collect data directly from you when you register, deposit, play, contact support, or interact with the Platform. We also collect certain technical data automatically as you use the Platform.

3 How We Use Your Data

mbi888 uses your personal data for the following purposes:

• Account Management: To create and maintain your mbi888 account, authenticate your login, and provide access to Platform features;
• Service Delivery: To process deposits and withdrawals, settle bets, award bonuses, and provide all gaming and sportsbook services you request;
• Identity Verification & Fraud Prevention: To verify your identity, confirm eligibility (including age verification — you must be 21+), and detect, investigate, and prevent fraudulent transactions, money laundering, and other prohibited conduct;
• Legal Compliance: To meet our obligations under our international gaming licence, applicable anti-money laundering (AML) regulations, and any lawful requests from regulatory or law enforcement authorities;
• Responsible Gaming: To administer and enforce the responsible gaming tools you activate (e.g., deposit limits, self-exclusion), and to identify patterns of play that may indicate problem gambling;
• Customer Support: To respond to your queries, complaints, and support requests;
• Platform Improvement: To analyse aggregated usage patterns, improve Platform performance, and enhance the user experience;
• Marketing Communications: To send you promotional offers, bonus notifications, and relevant Platform updates, subject to your communication preferences. You may opt out at any time.

4 Legal Basis for Processing

mbi888 processes your personal data on the following legal grounds, depending on the purpose:

• Contractual Necessity: Processing required to perform our contractual obligations to you as a registered Platform user — including account management, payment processing, and game delivery;
• Legal Obligation: Processing required to comply with applicable laws and regulations, including AML legislation, licensing requirements, and regulatory reporting obligations;
• Legitimate Interests: Processing carried out to pursue the legitimate interests of mbi888 or third parties, where those interests are not overridden by your rights — including fraud prevention, platform security, and business analytics;
• Consent: Where we rely on your consent — for example, for certain marketing communications — you may withdraw that consent at any time by contacting us or updating your account preferences.

5 Data Sharing

mbi888 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may share your data with the following categories of third parties where necessary to operate the Platform:

• Game Providers: Licensed game studios (e.g., Pragmatic Play, Playtech, Habanero) receive limited session data necessary to deliver game content. They act as data processors under contracts that bind them to data protection standards;
• Payment Processors: Providers of Touch n Go eWallet, Boost, GrabPay, FPX banking, and USDT network services receive transaction data required to process your deposits and withdrawals;
• Identity Verification Services: Third-party KYC providers may process your identification documents to assist with age and identity verification;
• Regulatory & Law Enforcement Authorities: We will disclose data to competent authorities where required by law, court order, or our gaming licence obligations;
• Technology & Infrastructure Providers: Cloud hosting, cybersecurity, and platform monitoring service providers who process data on our behalf under data processing agreements.

All third-party data processors engaged by mbi888 are contractually required to process data only for the specified purposes and in accordance with applicable data protection law.

6 Cookies & Tracking Technologies

The mbi888 Platform uses cookies and similar tracking technologies to improve your browsing experience and support Platform functionality. The categories of cookies we use include:

• Strictly Necessary Cookies: Essential for the operation of the Platform, including session management, login authentication, and security. These cannot be disabled;
• Functional Cookies: Enable the Platform to remember your preferences, such as language settings and display options;
• Analytical Cookies: Used to understand how users interact with the Platform in aggregate — helping us identify popular features and areas for improvement. Data is aggregated and anonymised where possible;
• Marketing Cookies: Used to deliver relevant promotional content and track the effectiveness of mbi888 campaigns. These are only placed where you have given consent.

You may manage your cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the Platform. A more detailed cookie disclosure is available within your account settings.

7 Data Retention

mbi888 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, including for the satisfaction of any legal, regulatory, accounting, or reporting requirements.

• Active Account Data: Retained for the duration of your account relationship with mbi888;
• Transaction and Gaming Records: Retained for a minimum of five (5) years following account closure or the date of the relevant transaction, in compliance with AML regulations and our gaming licence obligations;
• KYC Documentation: Retained for a minimum of five (5) years following account closure;
• Support Communications: Retained for up to three (3) years from the date of the communication;
• Marketing Preferences: Retained until you withdraw consent or update your preferences, plus a reasonable period for evidencing consent history.

After the applicable retention period, data is securely deleted or anonymised. We maintain a formal data retention schedule and review it periodically to ensure continued compliance.

8 Data Security

mbi888 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security measures include:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and mbi888 servers;
• Encryption of sensitive data fields (including passwords and payment references) at rest using industry-standard algorithms;
• Role-based access controls ensuring that only authorised personnel with a legitimate need can access personal data;
• Regular penetration testing and vulnerability assessments of Platform infrastructure;
• Incident response procedures for detecting, reporting, and managing personal data breaches in accordance with applicable notification requirements.

9 Your Rights

Subject to applicable law, you have the following rights in respect of your personal data held by mbi888:

• Right of Access: You may request a copy of the personal data we hold about you;
• Right to Rectification: You may request correction of inaccurate or incomplete personal data;
• Right to Erasure: You may request deletion of your personal data in certain circumstances, subject to our legal retention obligations;
• Right to Restriction of Processing: You may request that we limit how we use your data in certain circumstances;
• Right to Data Portability: You may request a machine-readable copy of personal data you have provided to us, where processing is based on consent or contract;
• Right to Object: You may object to processing based on legitimate interests, including for direct marketing purposes;
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request." We will respond within the timeframe required by applicable data protection law. We may need to verify your identity before processing your request.

10 Children's Privacy

The mbi888 Platform is strictly for adults aged 21 years and above. We do not knowingly collect, process, or retain personal data from individuals under the age of 21. If we become aware that a minor has registered an account or submitted personal data, we will promptly close the account, void any transactions, and securely delete the associated data.

If you believe that a minor has accessed or registered on the mbi888 Platform, please notify us immediately at [email protected]. mbi888 takes its underage access prevention obligations seriously and operates age verification procedures at registration and during KYC reviews.

11 Changes to This Policy

mbi888 may update this Privacy Policy from time to time to reflect changes in our data processing practices, regulatory requirements, or Platform features. When we make material changes, we will notify registered users by email to the address on file and display a prominent notice on the Platform prior to the changes taking effect.

The version of this Privacy Policy displayed on the Platform is always the current version. The "Last updated" date at the top of this page indicates when the most recent revision was made. We encourage you to review this policy periodically to stay informed about how we protect your information.

Your continued use of the mbi888 Platform after any updated Privacy Policy takes effect constitutes your acceptance of the revised terms.

12 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way mbi888 handles your personal data, please contact our Data Protection team:

• Email: [email protected] (Subject: "Privacy Enquiry")
• Live Chat: Available in-platform 24/7 after mbi888 login

We will acknowledge your enquiry promptly and aim to provide a substantive response within ten (10) business days. For data rights requests, we will comply within the applicable statutory timeframe.

This Privacy Policy was last reviewed and updated on 1 January 2026. For the full terms governing your use of the mbi888 Platform, please refer to our Terms & Conditions.