Mbi85 Privacy Policy – Data Protection Commitment Malaysian Players

Mbi85 is an online gaming platform operating in Malaysia, fully committed to protecting the privacy of every individual who uses our services. This Privacy Policy details how mbi85 collects, uses, stores, processes, discloses and safeguards your personal information.

This document has been prepared in accordance with the requirements of Malaysia's Personal Data Protection Act 2010 (PDPA), the primary legislation governing the processing of personal data in commercial transactions in Malaysia. As a platform serving Malaysian players, mbi85 fully complies with all provisions of the PDPA 2010.

This Privacy Policy applies to all information we collect through:

• The mbi85.com website and all associated subdomains
• Mbi85 mobile app (where available)
• Communications via email, live chat, WhatsApp and other support channels
• Interactions with the platform, including account registration, deposits, withdrawals and gaming activity

By registering for or using the mbi85 platform, you confirm that you have read, understood and agreed to the terms of this Privacy Policy. If you do not agree, please discontinue your use of the mbi85 platform.

Mbi85 collects the following categories of personal data from our players:

Mbi85 collects your personal data through several methods:

• Directly from You: Information you provide when registering an account, completing your profile, submitting withdrawal requests, contacting customer support or participating in mbi85 promotions.
• Automatically During Use: Technical data such as IP address, device type, web browser and activity history are collected automatically when you use the mbi85 platform via cookies, tracking pixels and similar technologies.
• From Third Parties: In certain circumstances, mbi85 may receive data from payment service providers when processing deposit or withdrawal transactions, or from identity verification agencies for KYC (Know Your Customer) purposes.
• From Public Sources: mbi85 may refer to publicly available information for identity verification or legal compliance purposes where required.

In all circumstances, mbi85 only collects data that is required for legitimate, stated purposes. We do not collect sensitive data such as health information, political affiliations or religious beliefs unless you voluntarily disclose such information in the context of a customer support interaction.

Mbi85 uses the personal data collected for the following purposes, which are lawful under Malaysia's PDPA 2010:

• Account Management: To create, verify and manage your player account on the mbi85 platform.
• Transaction Processing: Processing deposits via DuitNow, FPX, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, Maybank2u, and CIMB Clicks, as well as processing your withdrawal requests.
• Identity Verification (KYC): Fulfilling legal compliance obligations to verify player identity and prevent fraud and money laundering.
• Customer Service: Responding to enquiries, resolving complaints, and providing technical support to players.
• VIP Programme & Promotions: Calculating and crediting VIP rebates, managing VIP tier progression, and sending you relevant promotional offers based on your gaming activity.
• Platform Security: Detecting and preventing fraud, account misuse, bot activity, and other security threats that could compromise the integrity of the mbi85 platform.
• Analytics & Improvement: Analysing usage patterns in aggregate (without identifying individuals) to improve mbi85 platform products, services and user experience.
• Legal Compliance: To fulfil legal obligations under applicable Malaysian law, including retaining transaction records for the periods prescribed by law.

Mbi85 does not sell, rent, or trade players' personal data to third parties for their own commercial purposes. However, in the course of operating the platform, mbi85 may need to share data with the following parties under limited and controlled circumstances:

• Payment Service Providers: Data required to process deposit and withdrawal transactions is shared with recognised payment providers such as DuitNow, FPX, and other Malaysian eWallet providers. This sharing is limited strictly to the information needed to complete each transaction.
• Technical Service Providers: Companies providing cloud computing, server hosting and technical infrastructure services may have limited access to data in the course of delivering those services. All such providers are bound by strict data protection agreements.
• Legal Authorities: mbi85 will disclose personal data to Malaysian authorities (police, courts, regulatory bodies) when required by law or a valid court order.
• KYC Service Provider: During the identity verification process, certain information may be shared with recognised identity verification agencies to authenticate the documents you submit.

In all of the data sharing scenarios described above, mbi85 ensures that recipient parties are bound by equivalent data protection obligations and that data is used solely for the stated purposes. No data sharing takes place outside the scope described without the explicit consent of the relevant player.

Mbi85 retains players' personal data for as long as necessary to fulfil the purposes set out in this Privacy Policy, or as required by applicable Malaysian law.

General data retention period guidelines for mbi85:

• Active Account Data: Retained for as long as your account is active and updated on an ongoing basis.
• Financial Transaction Records: Retained for a minimum of 7 years from the transaction date, in line with Malaysian tax and financial record-keeping requirements.
• Communication Records: Customer support conversation records are retained for 2 years for reference and service improvement purposes.
• Closed Account Data: Upon account closure, data required for legal compliance purposes is retained for the prescribed period before being securely deleted.
• Technical & Log Data: Access logs and technical data are retained for 12 months for security and fraud detection purposes.

Mbi85 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration or destruction:

• SSL/TLS Encryption: All communications between your browser and mbi85 servers are encrypted using 256-bit SSL/TLS protocols to prevent data interception.
• Stored Data Encryption: Sensitive data stored in mbi85's databases is encrypted using strong encryption algorithms, meaning the data remains unreadable even in the event of a server breach.
• Strict Access Controls: Only mbi85 staff who require access to specific data to perform their duties are permitted to do so. All access is logged and monitored.
• Continuous Security Monitoring: An automated security monitoring system operates 24 hours a day to detect and respond to any security threats immediately.
• Regular Security Testing: mbi85 conducts regular penetration testing and security audits to identify and address system vulnerabilities before they can be exploited.
• Data Backup: Player data is securely and regularly backed up to ensure service continuity and recovery in the event of a disaster.

While mbi85 takes all reasonable steps to protect your data, no security system can be guaranteed to be entirely risk-free. We encourage players to take their own precautions as well, such as using strong passwords and keeping their login credentials private.

As an mbi85 player whose data is being processed, you have the following rights under Malaysia's Personal Data Protection Act 2010 (PDPA):

To exercise any of the rights above, please contact the mbi85 data protection team by emailing support@mbi85.com or via mbi85 platform live chat. We will process your request within 21 working days in accordance with the requirements of PDPA 2010. Where a request requires more time to process, we will notify you within the initial timeframe.

The mbi85 platform uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions correctly. Cookies are small text files stored on your device when you visit the mbi85 website.

Types of cookies used by mbi85:

• Essential Cookies: Required for core platform functions such as login session verification and account security. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Used to analyse how players interact with the platform so we can improve the user experience. Data collected is in aggregate form and cannot be used to identify any individual.
• Functional Cookies: Stores user preferences such as language settings and display configurations to provide a more personalised experience each time you return to the mbi85 platform.
• Security Cookies: Used to detect and prevent fraudulent activity, cyberattacks and unauthorised access to player accounts.

You can manage or disable cookies through your web browser settings. However, disabling essential cookies may affect the functionality of the mbi85 platform and your gaming experience. For guidance on managing cookies in popular browsers, please refer to the support documentation for your browser.

In the course of platform operations, player personal data may need to be stored or processed on servers located outside Malaysia. This occurs primarily in the context of cloud computing services and technical infrastructure used by mbi85.

When cross-border data transfers are necessary, mbi85 ensures that:

• Transfers are only made to countries or providers that maintain data protection standards equivalent to or higher than those in Malaysia.
• Legally binding data protection agreements are established with all parties receiving data outside of Malaysia.
• Transfers are carried out in accordance with the provisions of Malaysia's PDPA 2010 regarding international data transfers.
• All transferred data is encrypted in transit to prevent interception.

Mbi85 does not transfer players' personal data to countries without adequate data protection laws unless appropriate additional safeguards are in place.

The mbi85 platform is strictly for adults aged 18 and above. mbi85 does not knowingly collect personal data from individuals under the age of 18. Should we discover that a child's personal data has been collected without our knowledge, that data will be deleted immediately and the associated account will be suspended.

If you are a parent or guardian who believes your child may have registered an account with mbi85, please contact us immediately at support@mbi85.com with the relevant details so we can take appropriate action without delay. mbi85 takes the protection of minors from gambling seriously and will cooperate fully with parents or guardians to resolve any such situation.

If you have any questions, concerns, or requests regarding this Privacy Policy or how mbi85 handles your personal data, please contact our data protection team through the following channels:

• Email: support@mbi85.com (please label the email subject as "Data Privacy Enquiry")
• Live Chat: Via the mbi85 platform's live chat function, available 24 hours a day, 7 days a week
• WhatsApp: Available to VIP Gold members and above via their dedicated VIP manager's contact number

Mbi85 aims to respond to all privacy-related enquiries within 3 business days. For formal requests under PDPA 2010, such as data access or deletion requests, we will process them within 21 business days as required by law.

This Privacy Policy was last updated on 1 January 2026. mbi85 reserves the right to update this Privacy Policy from time to time. Any material changes will be communicated to players via in-platform notifications or email at least 14 days before the changes take effect. Continued use of the mbi85 platform after the effective date of any changes constitutes acceptance of the updated Privacy Policy.