Privacy Policy mbi365

1. Introduction and Scope of This Policy

This Privacy Policy is issued by mbi365 ("Platform", "we", "us") operating under international licensing. This policy describes how we handle personal information collected from users of the mbi365 platform at https://mbi365.club.

This policy applies to all users who register an account, use online gaming services, make deposits or withdrawals, and interact with any part of our platform. If you do not agree with any part of this policy, please stop using the platform immediately.

2. Types of Personal Information Collected

To provide a secure, legitimate and functional service, mbi365 collects several categories of personal information from users. This collection is done directly from you or automatically through your use of the platform.

a) Information You Provide Directly

• Full name as shown on your MyKad or valid identification document
• Identification card number (MyKad) or passport number for identity verification purposes
• Date of birth to confirm you meet the minimum age requirement of 21 years
• An active email address for account communications
• Mobile phone number for two-factor authentication and account notifications
• Encrypted password for account login security
• Payment method details such as e-wallet account name and related information

b) Information Collected Automatically

• IP address and general location information for security and compliance purposes
• Browser type and version, and your device's operating system
• Activity log data including login times, logout times and actions taken on the platform
• Game session information including games played and transaction history
• Cookie and tracker data to improve the user experience

c) Information from Third Parties

• Identity verification data from licensed KYC (Know Your Customer) service providers
• Transaction information from payment processors such as Touch 'n Go eWallet, DuitNow, FPX and ShopeePay

3. Purposes for Processing Personal Data

mbi365 processes your personal data based on the legitimate operational requirements of the platform, legal compliance and the consent you have given. The main purposes of processing are as follows:

4. Data Sharing and Disclosure

mbi365 does not sell, rent or trade your personal data to any third party for marketing purposes. However, in certain limited circumstances, we may share your information with the following parties:

• Licensed payment processors — to facilitate deposits and withdrawals via Touch 'n Go eWallet, DuitNow, FPX online banking, ShopeePay and cryptocurrency (USDT, BTC, ETH)
• Game service providers — including game software developers who provide the gaming platform for technical operational purposes only
• Regulatory authorities — when required by law or by the direction of a regulatory body with jurisdiction
• KYC service providers — for the identity verification process to comply with anti-money laundering requirements

All third parties we work with are subject to strict data protection agreements and are required to handle your information in accordance with the security standards we set.

5. Cookie Policy and Tracking Technologies

The mbi365 website uses cookies and similar tracking technologies to improve platform functionality, enhance security and provide a better user experience. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

• Session Cookies — temporary cookies that expire when you close your browser; used to maintain your login session
• Functional Cookies — store your preferences such as language and display settings for future visits
• Security Cookies — used to detect suspicious activity and protect your account
• Analytics Cookies — collect aggregated information about how users use the platform for internal improvement purposes

You can control or block cookies through your browser settings. However, blocking certain cookies may affect platform functionality and your user experience.

6. Technical and Organisational Security Measures

mbi365 implements multiple layers of technical and organisational security measures to protect your personal data from unauthorised access, loss, misuse or unintended disclosure.

• Data encryption in transit using the latest TLS protocols
• Data encryption at rest in secure databases
• Two-factor authentication for account login security
• Continuous 24-hour monitoring of suspicious activity or anomalies
• Role-based access controls for internal staff
• Regular security reviews by the internal cybersecurity team
• Established incident response procedures to address any data breaches

While we take the protection of your data seriously, no security system is completely foolproof. You are also responsible for keeping your account password confidential and not sharing your login details with any other party.

7. Your Rights as a User

As a user of the mbi365 platform, you have the following rights regarding your personal data. We are committed to processing all data rights requests within a reasonable timeframe.

• Right of Access — you have the right to request a copy of the personal data we hold about you
• Right to Rectification — you have the right to request correction of inaccurate or incomplete data
• Right to Erasure — you may request deletion of your data in certain circumstances, subject to legal retention obligations
• Right to Object — you have the right to object to the processing of your data for direct marketing purposes
• Right to Data Portability — you have the right to receive your data in a structured, machine-readable format
• Right to Withdraw Consent — you may withdraw your consent at any time without affecting the validity of processing carried out before the withdrawal

To submit any data rights request, please contact our support team via live chat or email at [email protected]. We provide 24/7 support in Malay and English.

8. Data Retention Period

mbi365 retains your personal data for as long as necessary to fulfil the purposes stated in this policy, or as required by applicable laws and regulations. Our general retention principles are as follows:

• Active account data is retained throughout the period your account remains active
• Upon account closure, transaction records and identity verification data may be retained for the period required by licensing requirements and anti-money laundering regulations
• Customer support communication data is retained for internal audit and service improvement purposes
• Cookies and temporary session data are deleted automatically according to the set expiry period

When data is no longer needed, we will securely delete or anonymise that information in accordance with established data management procedures.

9. Changes to This Privacy Policy

mbi365 reserves the right to modify this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform developments. Any material changes will be communicated to you via:

• Notification to your registered email address at least 14 days before the changes take effect
• A prominent notice on the mbi365 platform homepage
• An update to the "Last Updated" date shown on this document

Continued use of the platform after the date the changes take effect will be considered your acceptance of the updated terms. If you do not agree with the changes, you must stop using the platform and may request account closure.

10. Contact Us Regarding Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact our dedicated privacy team:

• Email: [email protected]
• Live Chat: Available 24/7 on the mbi365 platform
• Support Languages: Malay and English

We will endeavour to respond to all privacy-related requests within a reasonable timeframe. For complaints that require thorough investigation, we will inform you of the estimated resolution timeline.