mbi918 Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes the data processing practices of mbi918 ("mbi918", "we", "us", "our") in connection with the online gaming platform operated at mbi918.win ("Platform"). mbi918 is committed to protecting the privacy and personal data of all users ("Players", "you") who access and use the Platform.

By registering an account on mbi918, accessing the Platform, or otherwise providing us with your personal data, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein. If you do not agree with any part of this Policy, you should discontinue use of the mbi918 Platform immediately.

This Policy should be read in conjunction with the mbi918 Terms & Conditions, which govern your overall relationship with the Platform. Defined terms used in this Policy carry the same meaning as in the Terms & Conditions unless otherwise stated.

2. Data We Collect

mbi918 collects personal data in several ways — directly from you when you register and use the Platform, automatically through your device and browser when you access the Platform, and from third parties such as payment providers and identity verification services. The categories of personal data we collect include:

2.1 Registration & Account Data

• Full legal name, date of birth, gender
• Email address, mobile phone number
• Residential address, city, postcode, country (Malaysia)
• Account username and encrypted password
• Security question answers and two-factor authentication settings

2.2 Identity Verification (KYC) Data

• Government-issued identification documents: Malaysian MyKad number, passport bio-page, or equivalent
• Proof of address documentation (utility bill, bank statement)
• Selfie or liveness check image where required for biometric identity verification
• Source of funds declarations where required by compliance obligations

2.3 Financial & Transaction Data

• Deposit and withdrawal transaction records including amounts, timestamps, and payment method identifiers
• Payment method details: Touch 'n Go eWallet account reference, Boost account reference, DuitNow ID, FPX bank name and masked account number
• Bonus claim history and wagering activity records

2.4 Gaming Activity Data

• Bets placed, games played, session duration, win/loss records across live casino, sportsbook, and slots on mbi918
• Game preferences, favourite games, and responsible gaming tool settings

2.5 Technical & Device Data

• IP address, device type, operating system, browser type and version
• Login timestamps, session activity logs, geolocation data (country/city level)
• Cookie identifiers and similar tracking technology data (see Section 6)

2.6 Communications Data

• Records of live chat, email, and support interactions with the mbi918 customer service team
• Survey responses, feedback submissions, and promotional opt-in/opt-out preferences

3. How We Use Your Data

mbi918 uses your personal data for the following purposes:

4. Legal Basis for Processing

mbi918 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform our contract with you — including operating your account, processing transactions, and delivering gaming services on mbi918.
• Legal obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering (AML) obligations, identity verification requirements, and data retention obligations.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and internal analytics where these interests are not overridden by your data protection rights.
• Consent: Processing for marketing communications and non-essential cookies, where your consent has been explicitly given and may be withdrawn at any time.

5. Data Sharing

mbi918 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share your personal data only in the following limited circumstances:

5.1 Service Providers

mbi918 engages trusted third-party service providers to support the operation of the Platform. These include payment processing providers (Touch 'n Go, Boost, DuitNow, FPX), identity verification services, live casino game studios (Evolution Gaming, Pragmatic Play Live, Asia Gaming), cloud infrastructure providers, and customer support platform operators. These providers process your data only on mbi918's instructions and under contractual obligations consistent with this Policy.

5.2 Legal & Regulatory Disclosure

mbi918 may disclose your personal data to regulatory authorities, law enforcement agencies, or courts where required to do so by applicable law, court order, or regulatory requirement. Such disclosures are made only to the extent necessary and in compliance with applicable legal obligations.

5.3 Business Transfers

In the event that mbi918 undergoes a merger, acquisition, or sale of all or substantially all of its assets, your personal data may be transferred to the successor entity, subject to equivalent data protection obligations.

6. Cookies & Tracking Technologies

mbi918 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files placed on your device when you visit mbi918.win. The categories of cookies used on the mbi918 Platform include:

• Essential cookies: Required for the Platform to function correctly — including session management, login state, and security features. These cannot be disabled without impairing Platform functionality.
• Performance & analytics cookies: Used to understand how Players interact with mbi918 — page views, session duration, error rates. Data collected is aggregated and anonymised.
• Preference cookies: Used to remember your Platform preferences, such as language settings and display configurations on mbi918.
• Marketing cookies (consent required): Where you have provided consent, these cookies may be used to deliver relevant promotional content within the mbi918 Platform.

You may manage your cookie preferences through your browser settings. Note that disabling essential cookies may affect your ability to access and use the mbi918 Platform normally.

7. Data Retention

mbi918 retains your personal data for as long as your account is active and for a minimum period of five (5) years following account closure, or such longer period as is required by applicable law — particularly in relation to anti-money laundering and financial transaction record-keeping obligations. The specific retention periods applied by mbi918 are as follows:

• Account and KYC data: Retained for a minimum of 5 years from the date of account closure.
• Transaction records: Retained for a minimum of 5 years from the date of each transaction.
• Gaming activity logs: Retained for a minimum of 3 years from the date of each session.
• Customer support communications: Retained for a minimum of 2 years from the date of the interaction.
• Marketing consent records: Retained until consent is withdrawn, plus 1 year thereafter.

Upon expiry of the applicable retention period, mbi918 will securely delete or anonymise your personal data in accordance with our internal data destruction procedures.

8. Data Security

mbi918 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS 256-bit encryption for all data transmitted between your device and the mbi918 Platform
• Encrypted storage of passwords and sensitive personal data at rest
• Two-factor authentication (2FA) available for all mbi918 Player accounts
• Access controls limiting mbi918 staff access to personal data on a need-to-know basis
• Continuous security monitoring, intrusion detection, and fraud prevention systems
• Regular security audits and vulnerability assessments of the mbi918 Platform

While mbi918 takes all reasonable steps to protect your data, no method of electronic transmission or storage is 100% secure. You are responsible for maintaining the security of your own mbi918 account credentials and for notifying mbi918 promptly of any suspected unauthorised access.

9. Your Rights

Subject to applicable data protection law, you have the following rights in relation to your personal data held by mbi918:

• Right of access: You may request a copy of the personal data mbi918 holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data held in your mbi918 account.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to mbi918's legal retention obligations.
• Right to restriction: You may request that mbi918 restrict processing of your personal data in certain circumstances.
• Right to data portability: You may request a machine-readable copy of personal data you have provided to mbi918.
• Right to object: You may object to processing of your personal data based on mbi918's legitimate interests, including direct marketing processing.
• Right to withdraw consent: Where mbi918 processes your data on the basis of consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact mbi918 via live chat on the Platform or by email at [email protected]. mbi918 will respond to all valid requests within thirty (30) days. Where a request is complex or numerous, mbi918 may extend this period by up to an additional two (2) months and will notify you accordingly.

10. Children's Privacy

The mbi918 Platform is strictly intended for persons aged 21 years and older. mbi918 does not knowingly collect, process, or retain personal data from individuals below the age of 21. If mbi918 becomes aware that it has inadvertently collected personal data from a person under 21, all such data will be permanently deleted and the associated account closed without delay.

11. International Data Transfers

The mbi918 Platform may involve the transfer of your personal data to service providers and infrastructure located outside Malaysia. Where such transfers occur, mbi918 takes appropriate measures to ensure that your personal data is afforded an equivalent level of protection as it would receive under applicable Malaysian data protection standards. These measures may include contractual safeguards with third-party recipients and other appropriate transfer mechanisms.

12. Third-Party Links

The mbi918 Platform may contain references to third-party services — including game providers and payment processors — whose privacy practices are governed by their own privacy policies. mbi918 is not responsible for the privacy practices or content of any third-party websites or services. We encourage you to review the privacy policies of any third-party services you interact with in connection with your use of mbi918.

13. Policy Changes

mbi918 reserves the right to update or amend this Privacy Policy at any time. Where material changes are made, mbi918 will notify registered Players by email to their registered address or by a prominent notice on the Platform prior to the changes taking effect. The date of the most recent revision is displayed at the top of this page. Your continued use of mbi918 following the effective date of any amended Policy constitutes your acceptance of those changes.

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by mbi918, please contact our Data Protection team via:

mbi918 is committed to addressing all data-related queries and complaints fairly and promptly. Where a complaint cannot be resolved through our internal process, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.