MBI333 Privacy Policy – Protecting Our Members' Personal Data

01 Introduction

Welcome to the MBI333 Privacy Policy page. This document is the official statement of MBI333 ("Platform", "we", or "mbi333") regarding how we handle the personal information you share while using our services at mbi333.org.

This Privacy Policy applies to all users of the mbi333 platform, including website visitors, registered members, active players, and any individual who interacts with our services through any channel we operate. By registering as a member or continuing to use our platform, you acknowledge that you have read, understood, and agreed to this Privacy Policy.

We take data protection responsibilities seriously. mbi333 is fully compliant with Personal Data Protection Act 2010 (PDPA) Malaysia and all applicable related regulations. This policy is reviewed periodically to ensure it reflects current industry best practices and legal requirements.

02 Personal Data We Collect

Mbi333 collects various types of personal data depending on how you interact with our platform. This information is collected directly from you, automatically while you use the platform, or from legitimate third parties such as payment providers.

We only collect data that is strictly necessary to provide our services safely and comply with legal requirements. We do not collect sensitive data such as your medical information, sexual orientation, or political views.

03 Purpose of Data Collection and Processing

Every piece of personal data we collect is used for clear and lawful purposes. MBI333 will not process your data for any unrelated purposes without obtaining your consent first.

• Identity Verification and KYC — To verify that you meet the age eligibility requirement (18 years and above) and confirm your identity before authorising withdrawals.
• Account Management — To create, manage and protect your member account, including password recovery and login session management.
• Financial Transaction Processing — To process deposits via FPX, DuitNow, Touch 'n Go eWallet and GrabPay, as well as withdrawals to your bank account, securely and accurately.
• Gaming Service Provision — To provide access to all games and betting on our platform, ensuring a smooth and fair experience.
• Service Communications — To send account-related notifications, transaction confirmations, service updates and customer support responses.
• Marketing and Promotions — To inform you about bonus offers, promotions and exclusive campaigns relevant to your gaming interests (subject to your preferences).
• Fraud Prevention — To detect, investigate and prevent fraudulent activity, money laundering and platform abuse.
• Legal Compliance — To fulfil obligations under Malaysia's PDPA 2010 and requirements of the relevant authorities.
• Service Improvement — To analyse platform usage patterns for product improvement and overall user experience purposes.

04 Data Sharing with Third Parties

Mbi333 does not sell, rent, or disclose your personal data to third parties for their own commercial purposes. However, in the course of delivering our services, there are limited situations where your data may be shared with trusted parties:

• Payment Providers — Such as local Malaysian banks, FPX, DuitNow, Touch 'n Go and GrabPay, required to process your financial transactions securely.
• Game Software Providers — Game provider companies that supply the technical platform for games at mbi333. They receive only the minimum data required for game functionality.
• KYC Service Providers — Identity verification companies that assist us in automated document and age verification processes.
• Competent Authorities — When required by Malaysian law, court order, or directive from the Royal Malaysia Police (PDRM), Bank Negara Malaysia, or other regulatory bodies.
• Auditors and Professional Advisors — Audit firms, lawyers and security consultants bound by professional confidentiality obligations.

All third parties we work with are required to comply with data security standards equal to or exceeding our own. Contractually binding data protection agreements are signed with every third party before any data sharing takes place.

05 Data Security

Mbi333 continuously invests in robust security infrastructure to ensure your personal data is always protected against cyber threats and unauthorized access.

Technical Security Measures We Implement:

• At-rest encryption and in-transit encryption (SSL/TLS 256-bit) for all communications between your browser and the mbi333 servers.
• Two-factor authentication (2FA) is available for all member accounts as an additional layer of security during login.
• Enterprise-grade firewall and intrusion detection system (IDS/IPS) operating 24 hours a day, 7 days a week.
• Regular data backups performed across geographically separate data centers to ensure data recovery in the event of an emergency.
• Periodic penetration testing by independent security experts to identify and patch any system vulnerabilities.
• Real-time account activity monitoring with automated alert systems for suspicious access.

While we take all reasonable steps to protect your data, no system is completely risk-free. Should a security incident occur that affects your data, we will notify you within the timeframe required under PDPA law and take immediate action to contain any damage.

You also play an important role in keeping your data secure by ensuring your account password is unique, strong, and never shared with anyone. MBI333 will never ask for your password via email, SMS, or phone call.

06 Your Rights Under the PDPA

As a mbi333 member and Malaysian citizen or resident, you have the following rights regarding your personal data under the Personal Data Protection Act 2010:

To exercise any of the above rights, please contact our privacy team via email at [email protected] or through Live Chat on the platform. We are committed to responding to every privacy rights request within the timeframe required by law.

07 Cookies and Tracking Technologies

Mbi333 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small data files stored on your device when you visit our website.

Types of Cookies We Use:

• Essential Cookies — Required for core platform functions such as login, session management and security. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies — Collects information about how you use the platform (e.g. most frequently visited pages) to help us improve website performance.
• Functional Cookies — Stores your preferences such as language, display theme and other personal settings to deliver a more personalised experience.
• Analytics Cookies — Helps us understand platform usage patterns in aggregate and anonymised form for product improvement purposes.

You can control and manage cookies through your browser settings. Please note that disabling certain cookies may affect the functionality and user experience of the mbi333 platform. The mbi333 mobile app also uses similar technologies for the same purposes.

08 Data Retention Period

Mbi333 does not retain your personal data longer than necessary. Data retention periods are determined based on the type of data and the relevant legal or operational requirements.

Upon expiry of the retention period, your data will be securely deleted or fully anonymised so that it can no longer be linked to you as an individual.

09 Changes to Privacy Policy

Mbi333 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, new legal requirements, or technological developments that affect how we handle your personal information.

When material changes are made to this Privacy Policy, we will take the following steps:

• Updating the "Last Updated" date at the top of this document with the new effective date.
• Displaying a clear notice on the mbi333 platform homepage for at least 14 days before the changes take effect.
• Sending an email notification to your registered address for changes deemed significant to your privacy rights.
• In cases where changes require new consent, we will request your explicit confirmation before proceeding with data processing.

Continued use of the mbi333 platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. If you disagree with the changes made, you have the right to close your account and request deletion of your data.

10 Contact Us Regarding Privacy

If you have any questions, concerns or complaints regarding how MBI333 handles your personal data, or wish to exercise any of your privacy rights, our Data Protection Officer (DPO) team is ready to assist.

If you feel that your complaint has not been resolved satisfactorily by us, you have the right to refer the matter to Department of Personal Data Protection Malaysia or the relevant authorities under PDPA 2010.