MBI 123 Privacy Policy – Personal Data Protection for Malaysian Players

This Privacy Policy is published by mbi 123 and applies to all users who register and use our platform, accessible at https://mbi123.run. It outlines our privacy practices, including the types of data we collect, the purposes for collection, how it is used and protected, and your rights in relation to that data.

We understand that trust is the foundation of our relationship with every mbi 123 player. When you share your personal data with us, you are trusting us to handle it responsibly. We do not take that trust lightly — every data-related decision is made with your interests and privacy as our first consideration.

This Privacy Policy is drawn up in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international industry best practices in personal data management. By using the mbi 123 platform, you acknowledge that you have read and understood this Privacy Policy.

Mbi 123 collects your personal data through three main sources: information you provide directly, data automatically generated when you use the platform, and in certain cases, information from legitimate third parties for verification purposes.

2.1 Data You Provide Directly

2.2 Automatically Generated Data

When you use the mbi 123 platform, our systems automatically collect certain technical information, including:

• IP address and approximate location (state within Malaysia)
• Device type, operating system, and web browser used
• Pages visited, time of visit, and navigation patterns within the platform
• Game logs and betting history (for dispute resolution purposes)
• Cookie data and related tracking technologies (see Section 6)

Mbi 123 uses your personal data only for legitimate and limited purposes. We do not use your data for any undisclosed purpose without first obtaining your consent. The following are the primary purposes for which personal data is used at mbi 123:

• Account Management: Creating, maintaining, and managing your mbi 123 account — including identity verification, login processing, and account security management.
• Transaction Processing: Processing deposits via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, and FPX (Maybank2u, CIMB Clicks), and handling withdrawals to accounts registered in your name.
• Service Delivery: Providing access to all games including Live Casino, slots, lottery, and Sports Betting such as football, badminton, cricket, and e-sports.
• Customer Support: Responding to enquiries, resolving complaints, and providing technical assistance via live chat, email, or WhatsApp.
• Security & Fraud Prevention: Detecting and preventing fraudulent activity, money laundering, or use of the platform in violation of Malaysian law.
• Personalisation: Personalising your platform experience, game recommendations, and promotional offers based on your usage patterns (with your consent).
• Legal Compliance: Meeting applicable legal and regulatory obligations in Malaysia, including anti-money laundering (AML) reporting requirements.

Mbi 123 does not sell, rent, or transfer your personal data to any third party for advertising, marketing, or other commercial purposes. However, in certain limited and lawful circumstances, your data may be shared with the following parties:

• Payment Processors: Malaysian payment service providers such as the DuitNow network, Touch 'n Go, and FPX receive the transaction data necessary to process your deposits and withdrawals. These processors are bound by strict confidentiality agreements.
• Technology Service Providers: Technology companies that provide platform infrastructure, cloud services, and security systems — all subject to strict data processing agreements and prohibited from using your data for their own purposes.
• Legal Authority: mbi 123 will disclose data to the relevant Malaysian authorities if required by law, court order, or a legitimate official investigation.
• Regulators & Auditors: Independent auditors who audit our platform for compliance and security purposes, subject to professional confidentiality obligations.

Data security is something we take extremely seriously at mbi 123. We continually invest in security technologies and procedures to ensure your personal data is protected against unauthorised access, loss, alteration, or disclosure.

5.1 Technical Security Measures

• Transit Encryption: All communications between your device and mbi 123 servers are secured with HTTPS protocol using 256-bit SSL/TLS certificates.
• Storage Encryption: Sensitive data stored in our databases, including financial information and verification documents, is encrypted using AES-256 standards.
• Password Management: Your password is stored as a hash using an irreversible bcrypt algorithm — no one at mbi 123 can ever view your original password.
• Real-Time Monitoring: Our intrusion detection system (IDS) monitors platform traffic 24/7 to identify and block any suspicious activity.
• Regular Backups: Data is backed up regularly to a secure location to ensure service continuity in the event of an emergency.

5.2 Organisational Security Measures

• Access to players' personal data is limited to staff who require it to carry out their duties (need-to-know principle).
• All staff with access to personal data undergo regular data security and privacy training.
• Security audits by independent third parties are conducted at least once a year.

Mbi 123 uses cookies and similar tracking technologies to improve your experience, maintain secure login sessions, and understand how our platform is being used. Below are the types of cookies we use:

• Essential Cookies (Required): Required for core platform functions such as login verification and session security. These cookies cannot be disabled as they are necessary for the platform to operate correctly.
• Preference Cookies: Saving your preferences such as your chosen language (Bahasa Melayu), time zone, and display settings to make your experience more comfortable.
• Analytics Cookies: Helping us understand how players use the platform — which pages are most popular, where users may encounter difficulties, and how we can improve the overall experience. This data is collected in aggregate form and contains no personally identifiable information.
• Security Cookies: Used to detect and prevent fraudulent activity and to protect your account from unauthorised access.

You can manage your cookie settings through your web browser at any time. However, disabling essential cookies may affect the functionality of the mbi 123 platform.

As an mbi 123 user and data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data:

To exercise any of the above rights, please contact us by email at privacy@mbi123.run, including your account number and details of your request. We will process your request within 14 working days.

Mbi 123 does not retain your personal data for longer than necessary for the purposes stated in this Privacy Policy. Retention periods vary depending on the type of data and applicable legal requirements:

• Active Account Data: Retained for the duration of the active account and for 2 years after account closure, unless a longer period is required by law.
• Financial Transaction Records: Retained for 7 years in accordance with Malaysian legal requirements on financial records and AML (Anti-Money Laundering) compliance.
• Support Communication Logs: Retained for 2 years for reference and dispute resolution purposes.
• Security Logs: Retained for 1 year to facilitate investigation of security incidents if required.
• KYC Documents: Retained for the period required under Malaysia's AML regulations, typically 5–7 years.

Once the retention period expires, data will be securely deleted or anonymised so that it can no longer be linked to you.

The mbi 123 platform is for users aged 18 and above only. We do not knowingly collect or process personal data from any individual under the age of 18.

If we discover that personal data of anyone under 18 has been collected without our knowledge, we will immediately take steps to delete that data and close the associated account. If you believe that information belonging to a minor under 18 may be present in our systems, please contact us right away at privacy@mbi123.run.

Mbi 123 reserves the right to update this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or updates to our platform. Any significant changes will be communicated to you via:

• A clear notice on the mbi 123 platform homepage
• Email to the address registered to your account
• In-platform notice upon login

The last updated date will always be displayed at the top of this document. Your continued use of the mbi 123 platform after any changes take effect will be considered your acceptance of the updated Privacy Policy. We recommend reviewing this page periodically.

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, you may contact the mbi 123 Data Protection Officer through the following channels:

• Privacy Email: privacy@mbi123.run — dedicated to privacy and data-related enquiries and requests
• General Support Email: support@mbi123.run — for general enquiries that may involve privacy matters
• Live Chat: Available 24/7 within the mbi 123 platform for immediate assistance

When contacting us regarding privacy, please clearly state the nature of your enquiry or request, your mbi 123 account number (if applicable), and your contact details so we can respond. All privacy enquiries are answered within Bahasa Melayu within a maximum of 5 business days.

If you are not satisfied with our response, you have the right to lodge a complaint with Malaysia's Department of Personal Data Protection or the relevant authority.