Privacy Policy

Introduction

This Privacy Policy ("Policy") is issued by mbi33 ("mbi33", "we", "us", or "our"), the operator of the online casino and sports betting platform accessible at mbi33.cam. It describes how we collect, process, store, and protect the personal data of individuals ("you", "User", or "Player") who register accounts, make deposits, place bets, or otherwise interact with our platform.

By creating an account or continuing to use the mbi33 platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with any provision of this Policy, you should not use the mbi33 platform and may request account closure by contacting our support team.

This Policy should be read in conjunction with our Terms & Conditions, which govern the contractual relationship between you and mbi33. Capitalised terms not defined in this Policy carry the meanings assigned to them in the Terms & Conditions.

Definitions

For the purposes of this Privacy Policy, the following terms shall have the meanings set out below:

• "Personal Data" — Any information that identifies or could reasonably be used to identify a natural person, directly or indirectly, including name, identification number, contact details, financial information, or online identifiers.
• "Processing" — Any operation performed on Personal Data, including collection, recording, storage, use, disclosure, transfer, or deletion.
• "Data Controller" — mbi33, the entity that determines the purposes and means of processing Personal Data collected through the platform.
• "Data Processor" — A third party engaged by mbi33 to process Personal Data on our behalf, subject to contractual obligations.
• "KYC Data" — Identity and verification documents submitted by Players to satisfy Know Your Customer requirements, including government-issued identification, proof of address, and source-of-funds documentation where required.
• "Cookies" — Small text files placed on a User's device by the mbi33 platform for the purposes of session management, analytics, and user experience optimisation.
• "PDPA" — The Personal Data Protection Act 2010 of Malaysia, the primary legislative framework governing the processing of personal data in Malaysia.

Data We Collect

mbi33 collects Personal Data through multiple touchpoints during your use of the platform. The categories of data we collect, and the circumstances in which we collect them, are set out in the table below:

3.1 Data Collected Automatically

Certain Technical Data is collected automatically when you access the mbi33 platform, regardless of whether you are logged into an Account. This includes IP address, browser fingerprint, device identifiers, and page interaction data. This information is used for fraud detection, security monitoring, and platform performance analytics.

3.2 Data from Third Parties

mbi33 may receive Personal Data about you from third parties in limited circumstances, including: (a) payment processors (e.g., FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB) confirming deposit and withdrawal transactions; (b) identity verification service providers conducting KYC checks; and (c) fraud prevention databases where a check is triggered by suspicious account activity.

How We Use Your Data

mbi33 processes your Personal Data for the following purposes:

• Account Management: Creating, maintaining, and securing your mbi33 Account, including processing registration, login authentication, and account settings changes.
• Service Delivery: Enabling you to place bets, play games, participate in promotions, and access all features of the mbi33 platform.
• Payment Processing: Facilitating deposits and withdrawals via your chosen payment method, including verification of payment source and settlement of transactions in MYR.
• KYC & Compliance: Verifying your identity and eligibility to use the platform in accordance with anti-money laundering (AML) obligations and responsible gambling requirements.
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent activity, multi-accounting, bonus abuse, and unauthorised access to Accounts.
• Customer Support: Responding to your enquiries, resolving disputes, and providing assistance via live chat, WhatsApp, or email in English, Bahasa Melayu, or Mandarin.
• Legal Obligations: Complying with applicable law, regulatory requests, court orders, or law enforcement requirements, including retention of financial records.
• Responsible Gambling: Monitoring gaming behaviour patterns to identify potential signs of problem gambling and facilitating access to responsible gambling tools including deposit limits and self-exclusion.
• Platform Improvement: Analysing aggregate platform usage data to improve user experience, game selection, and payment flow performance.
• Communications: Sending transactional notifications (e.g., deposit confirmations, withdrawal approvals, security alerts) and, where you have consented, promotional communications about mbi33 offers and updates.

Legal Basis for Processing

mbi33 processes your Personal Data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing required to perform our obligations under the Terms & Conditions, including account management, payment processing, and service delivery.
• Legal Obligation: Processing necessary to comply with applicable law, including AML/KYC obligations, tax reporting, and regulatory requirements.
• Legitimate Interests: Processing carried out in pursuit of mbi33's legitimate business interests, including fraud prevention, platform security, and product analytics, where such interests are not overridden by your data protection rights.
• Consent: Processing activities where you have provided explicit consent, including receipt of promotional communications. You may withdraw consent at any time by updating your communication preferences or contacting support.

Data Sharing & Disclosure

mbi33 does not sell, rent, or trade your Personal Data to third-party marketers or data brokers under any circumstances. We share Personal Data only in the limited circumstances described below:

6.1 Service Providers (Data Processors)

We share Personal Data with carefully selected third-party service providers who process data on our behalf. These include payment gateway operators (Touch 'n Go eWallet, Boost, GrabPay, FPX, DuitNow, Maybank, CIMB and other Malaysian banking partners), identity verification providers, cloud infrastructure operators, and customer support platform vendors. All Data Processors are bound by contractual data processing agreements that require them to implement appropriate security measures and process data solely on mbi33's instructions.

6.2 Regulatory & Legal Disclosure

mbi33 may disclose Personal Data to regulators, law enforcement agencies, courts, or other governmental authorities where required or permitted by applicable law, including in connection with anti-money laundering investigations, fraud enquiries, or court orders.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of mbi33's business, Personal Data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer that materially affects your data rights.

Cookies & Tracking Technologies

The mbi33 platform uses cookies and similar tracking technologies to support core functionality and improve the user experience. The types of cookies used are as follows:

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication cookies and security tokens. These cannot be disabled without affecting platform functionality.
• Performance & Analytics Cookies: Used to collect anonymised data about how Players interact with the platform, including pages visited, session duration, and error events. This data is used to identify and resolve performance issues.
• Functionality Cookies: Remember your preferences such as language selection, responsible gambling settings, and display options to personalise your experience on return visits.
• Security Cookies: Used for fraud detection, bot prevention, and detection of suspicious login behaviour. These cookies form part of mbi33's security infrastructure.

You can control cookie preferences through your browser settings. Please note that disabling certain categories of cookies may affect the availability or performance of platform features. mbi33 does not use third-party advertising or cross-site tracking cookies.

Data Retention

mbi33 retains Personal Data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention guidelines apply:

• Account and Identity Data: Retained for the duration of the Account and for a minimum of 5 years following permanent account closure, in accordance with AML regulatory requirements.
• Financial Transaction Records: Retained for a minimum of 7 years from the date of each transaction, in accordance with applicable financial record-keeping obligations.
• KYC Documents: Retained for a minimum of 5 years following Account closure or the completion of the relevant verification process.
• Gaming Activity Logs: Retained for a minimum of 2 years for dispute resolution and responsible gambling monitoring purposes.
• Customer Support Communications: Retained for up to 3 years from the date of the interaction.
• Technical / Log Data: Retained for up to 12 months unless extended for ongoing fraud investigation or security monitoring purposes.

On expiry of the applicable retention period, Personal Data is securely deleted or anonymised in accordance with industry-standard data destruction practices.

Data Security

mbi33 implements robust technical and organisational security measures to protect your Personal Data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and the mbi33 platform.
• Encrypted storage of sensitive data, including passwords (stored as salted cryptographic hashes, never in plaintext) and KYC document files.
• Role-based access controls limiting staff access to Personal Data on a need-to-know basis, with audit logging of all data access events.
• Regular penetration testing and vulnerability assessments conducted by independent security specialists.
• Intrusion detection systems monitoring for abnormal access patterns and potential data breach indicators.
• Physical and network security controls governing access to server infrastructure and databases.

Despite these measures, no data transmission over the internet or electronic storage system can be guaranteed to be 100% secure. mbi33 will notify affected Users and relevant authorities of any confirmed personal data breach in accordance with applicable legal requirements.

International Data Transfers

In the course of providing services to Malaysian players, mbi33 may transfer certain Personal Data to Data Processors or infrastructure located outside of Malaysia. Such transfers may occur in connection with cloud hosting, payment processing, or identity verification services.

Where Personal Data is transferred internationally, mbi33 ensures that appropriate safeguards are in place to protect your data at a standard equivalent to that required under the PDPA. This may include contractual data transfer agreements, standard contractual clauses, or transfers to jurisdictions recognised as providing adequate data protection.

Your Data Rights

Subject to applicable law, you have the following rights in respect of your Personal Data held by mbi33:

To exercise any of the above rights, please submit a written request to [email protected] with the subject line "Data Rights Request". mbi33 will respond within 30 days. We may require identity verification before processing a rights request to prevent unauthorised access to another person's data.

Children & Minors

The mbi33 platform is strictly intended for adults aged 21 years and above. mbi33 does not knowingly collect, process, or store Personal Data belonging to persons under the age of 21.

If mbi33 becomes aware that an Account has been registered by or on behalf of a person under 21 years of age, we will immediately suspend the Account, delete all associated Personal Data to the extent not required by law, and report the matter as required by applicable child protection or regulatory obligations.

If you believe a minor has accessed or registered on the mbi33 platform, please notify us immediately at [email protected].

Third-Party Services & Links

The mbi33 platform integrates with third-party services including payment processors, game providers, and customer communication tools. While mbi33 requires all third-party service providers to comply with data protection standards equivalent to our own, we are not responsible for the independent privacy practices of third-party operators.

mbi33's payment integrations — including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, and cryptocurrency networks — each operate under their own privacy policies and terms of service. Players are encouraged to review the privacy terms of any third-party service they use in connection with their mbi33 Account.

Game content on the mbi33 platform is sourced from licensed game providers. These providers may receive anonymised gameplay data for the purpose of game functionality and RTP auditing but do not receive personal identifying information of individual players without authorisation from mbi33.

Amendments to This Policy

mbi33 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, business practices, or data processing activities. Where an amendment constitutes a material change to your rights or to how your data is processed, mbi33 will notify registered Players by email or via a platform notification prior to the amended Policy taking effect.

The "Last Updated" date at the top of this Policy indicates when the most recent revision was made. Your continued use of the mbi33 platform following the effective date of any amendment constitutes your acceptance of the revised Policy. The current version of this Policy is always accessible at mbi33.cam/privacy-policy.

Contact Us

If you have questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data by mbi33, please contact us through the following channels:

• Email: [email protected] — subject line: "Privacy Enquiry" or "Data Rights Request"
• Live Chat: Available 24/7 on the mbi33 platform — average response time 3–5 minutes
• WhatsApp Support: Available in English, Bahasa Melayu, and Mandarin
• Support Hours: 24 hours a day, 7 days a week

For responsible gambling enquiries including deposit limits and self-exclusion requests, please visit our Responsible Gambling page or include "Responsible Gambling" in your support message subject line.