Privacy Policy mbi44 Data Protection

1Introduction

Mbi44 ("we", "Platform", or "mbi44") values the privacy of every user who uses our services. This Privacy Policy was drafted to transparently explain how we handle your personal data from the moment you first visit our website or app through to your active use of our services.

We understand that entrusting your personal information to any platform is a significant decision. That is why we are committed to ensuring every aspect of our data handling is transparent, secure, and compliant with applicable legislation — in particular, Malaysia's Personal Data Protection Act 2010 (PDPA).

This policy applies to all mbi44 platform users, whether you are a registered member, a casual visitor, or a user of our mobile app. Please take the time to read this document carefully, as it explains your rights and our responsibilities.

2Data Collected

Mbi44 collects several categories of personal data depending on how you interact with our platform. Below is a comprehensive overview of the types of data we may collect:

We only collect data that is strictly necessary to provide the services you request. We do not collect sensitive information such as health data or religious beliefs unless specifically required by law.

3Data Collection Methods

Mbi44 collects your personal data through several primary channels:

• Account Registration: When you register a new account at mbi44, you voluntarily provide basic personal information such as your name, email, and phone number.
• Platform Usage: When you play games, make deposits, or process withdrawals, our system automatically records transaction details and related activity.
• KYC Process: To meet legal compliance requirements, we collect identity verification documents during the KYC process.
• Support Communications: When you contact our customer support team via live chat, email, or Telegram, those interactions are recorded to ensure service quality.
• Cookies and Tracking Technologies: Our platform uses cookies and similar tracking technologies to understand usage patterns and improve the user experience.
• Authorised Third Parties: In certain cases, we may receive information from payment partners or identity verification service providers that we use.

4Purpose of Data Use

The data we collect is used exclusively for legitimate and reasonable purposes. Below is a complete list of the purposes for which mbi44 uses your personal data:

• Account Management: Creating, verifying, and managing your user account on the mbi44 platform.
• Service Provision: Enabling you to access all games, make deposits and withdrawals, and use all platform features to their fullest.
• Identity Verification (KYC): Meeting legal compliance obligations including anti-money laundering and identity fraud prevention.
• Payment Processing: Processing all financial transactions securely and accurately using your preferred payment method.
• Platform Security: Detecting, investigating, and preventing any fraudulent activity, misuse, or security threats to the platform and other users.
• Customer Support: Providing technical support and resolving any issues or disputes you encounter.
• Service Communications: Sending important notifications related to your account, transactions, policy changes, and security updates.
• Platform Improvements: Analysing aggregated usage data to improve features, performance, and the overall user experience.
• Legal Compliance: Fulfilling any legal requirements or lawful requests from the relevant authorities.

5Data Sharing

Mbi44 does not sell or trade your personal data. However, in operating the platform, we may share data with the following parties under limited and controlled circumstances:

• Payment Service Providers: Required financial information is shared with payment gateway providers such as DuitNow, Touch 'n Go eWallet, GrabPay, and partner banks solely to process your transactions.
• Identity Verification Providers: KYC data is shared with authorised third-party identity verification service providers for legal compliance purposes.
• Game Providers: Usernames and session data may be shared with game providers integrated with the mbi44 platform solely for game operation purposes.
• Statutory Authorities: mbi44 will disclose required information to authorities when mandated by law, court order, or criminal investigation.
• Professional Advisors: In cases of audit, legal consultation, or business restructuring, required data may be shared with advisors bound by confidentiality obligations.

All third parties with whom we share data are required to maintain its security and use it solely for the purposes specified in a written agreement with mbi44.

6Data Security

The security of your personal data is a responsibility we take extremely seriously. mbi44 implements multiple layers of technical and organisational protection to ensure your data remains safe at all times:

• 256-bit SSL Encryption: All communications between your device and mbi44's servers are encrypted using the latest TLS protocols.
• Stored Data Encryption: Sensitive data stored in our databases is also encrypted using industry-grade encryption algorithms.
• Strict Access Control: Access to users' personal data is restricted to staff with a legitimate operational need, and every access is automatically logged.
• 24/7 Security Monitoring: Our systems are continuously monitored to detect any suspicious activity or intrusion attempts.
• Regular Security Audits: mbi44 conducts regular penetration testing and security audits through independent security specialists.
• Two-Factor Authentication (2FA): Users are fully encouraged and supported to activate 2FA for an additional layer of protection on their account.

While we take all reasonable steps to protect your data, no system can be guaranteed 100% secure against all threats. In the event of a security incident involving your data, we will notify you within the timeframe required by applicable law.

7Data Retention Period

Mbi44 only retains your personal data for as long as necessary for the purposes stated in this policy, or as required by law. In general:

• Active Account Data: Retained for as long as your account is active and for the required period after account closure to fulfil legal obligations.
• Financial Transaction Records: Retained for a minimum of 7 years in line with Malaysia's financial and anti-money laundering legal requirements.
• KYC Documents: Retained for the period specified by applicable compliance regulations, typically 5 to 7 years.
• Support Communication Logs: Retained for 3 years for quality assurance and dispute resolution purposes.
• Technical Data & Security Logs: Retained for 12 months for fraud detection and security monitoring purposes.

When data is no longer needed, it will be securely deleted or anonymised in accordance with mbi44's internal procedures, which comply with industry standards.

8Cookies & Tracking Technologies

The mbi44 platform uses cookies and similar tracking technologies to enhance your browsing experience. Cookies are small text files stored on your device when you visit our website.

The types of cookies we use are as follows:

• Essential Cookies: Required for core platform functions such as login sessions and security. These cookies cannot be disabled.
• Performance Cookies: Helping us understand how users interact with the platform so we can improve it. Data is collected in aggregate and anonymised form.
• Functional Cookies: Saving your preferences such as language, display settings, and personal choices to deliver a more comfortable experience.
• Analytics Cookies: Used to analyse overall platform traffic and usage patterns for continuous improvement purposes.

You can manage or disable cookies through your web browser settings at any time. However, disabling certain cookies may affect platform functionality. For more information on managing cookies, please refer to your web browser's documentation.

9Your Rights

Under Malaysia's PDPA and mbi44's privacy policy, you have the following rights regarding your personal data:

To exercise any of the above rights, please contact our privacy team via email or live chat. We will process your request within 14 business days. For more complex cases, we may require up to 30 days and will notify you accordingly.

10Cross-Border Data Transfers

In operating the mbi44 platform globally, your personal data may be transferred to, stored in, or processed in countries outside Malaysia. This includes server locations and data centres we use to ensure optimal platform performance and availability.

Mbi44 ensures that all cross-border data transfers are carried out with appropriate safeguards in place, including:

• Ensuring that recipient countries maintain a level of data protection equivalent to or higher than Malaysia.
• Using binding contractual agreements with data recipients outside Malaysia to ensure adequate protection.
• Fully complying with Malaysia's PDPA requirements regarding international data transfers.

11Children

The mbi44 platform is exclusively for individuals aged 18 and above. We do not intentionally collect or process personal data from anyone under the age of 18.

If we discover that we have collected personal data from a person under the age of 18 without valid parental or guardian consent verification, we will take immediate steps to delete that data and close the relevant account. Parents or guardians who are aware that their child has registered an account at mbi44 are urged to contact us immediately.

12Policy Amendments

Mbi44 reserves the right to update or amend this Privacy Policy from time to time in line with changes in law, industry practices, or improvements to our services. Where significant changes are made, we will notify you via:

• In-account or in-app notifications on your mbi44 account.
• Emailed to your registered address before changes take effect.
• A clear notice on the mbi44 homepage or privacy policy page.

The "Last Updated" date at the top of this page will always reflect the most current version of the Privacy Policy. We encourage you to review this page periodically. Continued use of the mbi44 platform after any amendments take effect constitutes your acceptance of the updated policy.

13Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, do not hesitate to reach out to us. The mbi44 privacy team is ready to assist you:

• Live Chat: Available 24/7 directly within the mbi44 platform or app.
• Privacy Email: [email protected] (responses within 2 business days).
• Support Email: [email protected]

For requests relating to your PDPA rights, please clearly state the type of request and include sufficient identifying information so we can process it accurately and securely.