mbi777 Privacy Policy

This Privacy Policy applies to all personal data processed by mbi777 ("we", "us", "our") in connection with the operation of the mbi777 online gaming platform accessible at mbi777.bid, and any related services, communications, or interactions with us. It applies to all registered Members, prospective Members, and visitors to the platform regardless of the device or location from which the platform is accessed.

By registering a mbi777 account, using any feature of the mbi777 platform, or communicating with our customer support team, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

This policy should be read alongside mbi777's Terms & Conditions and Responsible Gaming Policy, which are incorporated by reference. In the event of any conflict between this Privacy Policy and those documents specifically regarding data handling, this Privacy Policy shall prevail.

mbi777 is the data controller responsible for the personal data collected through the mbi777.bid platform. As data controller, mbi777 determines the purposes for which and the means by which personal data is processed.

For all data protection enquiries, including requests to exercise your data subject rights, please contact us using the details set out in Section 14 of this Policy. mbi777 endeavours to respond to all data-related requests within 30 calendar days of receipt.

mbi777 collects the following categories of personal data from Members and platform visitors:

mbi777 does not collect or store full payment card numbers. Where card-based payment methods are supported, card data is processed directly by the relevant payment service provider under their own applicable security standards.

mbi777 collects personal data through the following means:

• Direct collection: Data you provide when registering your mbi777 account, completing KYC verification, making a deposit or withdrawal, setting responsible gaming controls, or contacting our support team.
• Automatic collection: Technical and usage data collected automatically when you access the mbi777 platform through cookies, server logs, and similar technologies as described in Section 7.
• Third-party sources: Identity verification data from KYC service providers; fraud and sanctions screening data from compliance data providers; payment verification data from our payment processing partners including Touch n Go eWallet, Boost, DuitNow, FPX, Maybank2u, CIMB Clicks, Public Bank Online, and Hong Leong Connect.
• Game providers: Gameplay data generated through third-party game provider integrations, including game session start and end times, bet values, game outcomes, and RNG audit logs.

mbi777 processes your personal data for the following purposes, each supported by one or more lawful bases under applicable data protection frameworks:

1. Account creation and management: To register and maintain your mbi777 account, authenticate your identity, and deliver the core Services. Legal basis: contractual necessity.
2. KYC and age verification: To verify that you are aged 21 or over and to fulfil our obligations under applicable anti-money laundering and know-your-customer requirements. Legal basis: legal obligation; legitimate interests.
3. Financial transaction processing: To process deposits, withdrawals, bonus credits, and adjustments to your mbi777 account balance. Legal basis: contractual necessity.
4. Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, multi-accounting, and other prohibited conduct. Legal basis: legitimate interests; legal obligation.
5. Responsible gaming compliance: To monitor gameplay patterns for signs of problem gambling, enforce player-imposed limits, and fulfil regulatory responsible gaming obligations. Legal basis: legal obligation; legitimate interests; protection of vital interests.
6. Customer support: To respond to your enquiries, resolve disputes, and maintain a record of communications for quality assurance. Legal basis: contractual necessity; legitimate interests.
7. Marketing communications: To send you promotional offers, bonus notifications, and relevant platform updates where you have opted in to receive such communications. Legal basis: consent. You may withdraw consent at any time via your mbi777 account settings.
8. Platform improvement: To analyse usage patterns, test new features, and improve the mbi777 platform's performance and user experience. Legal basis: legitimate interests.
9. Legal and regulatory compliance: To comply with applicable legal obligations, regulatory requirements, and lawful requests from competent authorities. Legal basis: legal obligation.

mbi777 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share personal data only in the following circumstances and only to the extent necessary:

• Game providers: Technical gameplay data is shared with certified game studios (including but not limited to PG Soft, Pragmatic Play, Evolution Gaming, and Asia Gaming) solely to facilitate game delivery and resolve gameplay disputes.
• Payment processors: Financial data necessary to execute deposit and withdrawal transactions is shared with relevant payment service providers including Malaysian e-wallet and banking partners.
• KYC and compliance providers: Identity and document data is shared with third-party identity verification and sanctions screening services to fulfil KYC obligations.
• Fraud prevention services: Device fingerprint, IP, and behavioural data may be shared with fraud detection technology providers to protect the integrity of the mbi777 platform.
• Legal authorities: mbi777 will disclose personal data to law enforcement agencies, regulatory authorities, or courts where required to do so by law, valid legal process, or to protect the rights and safety of mbi777, its Members, or the public.
• Corporate transactions: In the event of a merger, acquisition, or sale of all or part of mbi777's business, personal data may be transferred to the acquiring entity, subject to equivalent data protection obligations.

All third-party service providers with whom mbi777 shares personal data are contractually obligated to process that data only for the specified purpose, to maintain appropriate security standards, and to refrain from any secondary use or disclosure.

mbi777 uses cookies and similar tracking technologies on the mbi777.bid platform to facilitate essential platform functions, maintain your login session, remember your language and display preferences, and collect analytics data about platform usage.

The following categories of cookies are used on the mbi777 platform:

• Strictly necessary cookies: Required for the platform to function. These include session authentication tokens, CSRF protection tokens, and load-balancing cookies. These cannot be disabled without breaking core platform functionality.
• Functional cookies: Used to remember your preferences, such as your chosen interface language and responsible gaming settings. Disabling these cookies may reduce platform personalisation.
• Analytics cookies: Used to collect anonymised or pseudonymised data about how visitors use the mbi777 platform, helping us identify areas for improvement. Analytics data is not used to identify individual users.
• Fraud prevention cookies: Used alongside device fingerprinting to detect multi-accounting, bot activity, and other security threats.

mbi777 retains personal data for as long as necessary to fulfil the purposes described in this Policy and to comply with applicable legal and regulatory obligations. Specific retention periods are as follows:

• Account and identity data: Retained for the duration of your mbi777 account and for a minimum of 5 years following account closure, in compliance with anti-money laundering record-keeping obligations.
• Transaction data: Retained for a minimum of 7 years to comply with financial record-keeping requirements.
• Customer support communications: Retained for 3 years from the date of the last interaction, or longer if related to an ongoing dispute or legal matter.
• Responsible gaming data: Self-exclusion records are retained indefinitely to prevent re-registration in breach of exclusion terms.
• Technical and usage data: Server log data is retained for up to 12 months; anonymised analytics data may be retained indefinitely.

At the end of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to an individual.

mbi777 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Key security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the mbi777 platform;
• Encryption of sensitive personal data at rest within mbi777 databases;
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis;
• Multi-factor authentication for all internal systems access by mbi777 personnel;
• Regular penetration testing and vulnerability assessments by independent security professionals;
• Real-time monitoring and alerting for suspicious access patterns and potential data breaches;
• Documented incident response procedures including notification obligations in the event of a confirmed data breach.

While mbi777 employs industry-standard security practices, no method of electronic transmission or storage is 100% secure. You acknowledge that the transmission of data over the internet involves inherent risks beyond mbi777's control. You are responsible for maintaining the security of your mbi777 login credentials and for promptly notifying mbi777 of any suspected unauthorised account access.

mbi777's platform serves Members across Malaysia, including players from Kuala Lumpur, Penang, Johor Bahru, Ipoh, Kota Kinabalu, and beyond. Some of the third-party service providers engaged by mbi777 — including game studios, KYC providers, and fraud prevention services — may process data in jurisdictions outside Malaysia.

Where personal data is transferred internationally, mbi777 ensures that appropriate safeguards are in place to protect the data, including contractual clauses requiring recipient organisations to apply data protection standards at least equivalent to those applied by mbi777 under this Policy. mbi777 does not transfer personal data to jurisdictions that do not provide an adequate level of data protection without implementing such additional safeguards.

Subject to applicable law, you have the following rights in relation to the personal data mbi777 holds about you:

1. Right of access: You may request a copy of the personal data mbi777 holds about you, together with information about how it is processed.
2. Right to rectification: You may request correction of any inaccurate or incomplete personal data. You can update most account information directly via your mbi777 account settings; for data requiring verification, please contact support.
3. Right to erasure: You may request deletion of your personal data in certain circumstances, for example where the data is no longer necessary for the purposes for which it was collected. This right is subject to mbi777's legal retention obligations under anti-money laundering and gaming regulations, which may override erasure requests in whole or in part.
4. Right to restrict processing: You may request that mbi777 restricts the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or have objected to processing pending verification of legitimate grounds.
5. Right to data portability: Where processing is based on your consent or on contractual necessity, and is carried out by automated means, you may request a machine-readable copy of your personal data.
6. Right to object: You have the right to object to processing of your personal data carried out on the basis of legitimate interests, including profiling for direct marketing purposes. You may unsubscribe from marketing communications at any time via your mbi777 account settings.
7. Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, please contact mbi777 using the details in Section 14. We will respond to all verified requests within 30 calendar days. In complex cases, this period may be extended by a further 60 days with prior notification and explanation.

The mbi777 platform is strictly restricted to individuals aged 21 years and above. mbi777 does not knowingly collect or process personal data of individuals under 21 years of age. If mbi777 becomes aware that personal data has been collected from an individual under 21, that data will be deleted promptly and the associated account permanently closed.

If you believe that a minor has registered an account on the mbi777 platform, please notify us immediately at [email protected] so that appropriate action can be taken without delay.

mbi777 reserves the right to update this Privacy Policy from time to time to reflect changes in applicable law, our data processing practices, or the structure of our business. Material changes will be communicated to registered Members via the contact details held on their mbi777 account profile, with a minimum of 14 days' advance notice before the changes take effect.

The effective date at the top of this Policy indicates when it was last reviewed and updated. Where a change significantly affects your rights or the way mbi777 processes your data, we will seek fresh consent where required by applicable law.

Continued use of the mbi777 platform following the effective date of an updated Privacy Policy constitutes your acknowledgement of the changes. We encourage you to review this Policy periodically.

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by mbi777, please contact us through the following channel:

Data Protection Enquiries: [email protected]

Live Chat: Available 24/7 directly through mbi777.bid — the recommended channel for urgent account-related data matters.

If you are not satisfied with mbi777's response to a data subject request or complaint, you may have the right to lodge a complaint with the relevant data protection supervisory authority in the jurisdiction applicable to your circumstances.