Privacy Policy

mbi789 ("the Operator", "we", "us", "our") is committed to protecting the privacy and personal data of all users ("you", "the User", "the Member") of our online gaming platform. We understand that the personal data you share with us is sensitive, and we take our obligations as a data controller seriously.

This Privacy Policy describes the types of personal data we collect from Malaysian and international users, the purposes for which we use that data, the circumstances under which we may share it, the security measures we employ to protect it, and the rights you have over your own information.

By registering an account, depositing funds, or otherwise using the mbi789 Platform, you acknowledge that you have read this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should not use the mbi789 Platform.

mbi789 serves players across Malaysia, including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and beyond. All users, regardless of location within Malaysia, are subject to the same data protection standards described in this Policy.

The following definitions apply throughout this Privacy Policy:

• "Personal Data" means any information that relates to an identified or identifiable natural person, including but not limited to name, identification number, date of birth, email address, phone number, payment details, and device identifiers.
• "Processing" means any operation performed on personal data, including collection, storage, use, disclosure, erasure, or destruction.
• "Data Controller" means the entity that determines the purposes and means of processing personal data. mbi789 is the Data Controller for all personal data collected through this Platform.
• "Data Processor" means a third party that processes personal data on behalf of the Data Controller, under a binding data processing agreement.
• "KYC" (Know Your Customer) means the identity and age verification process conducted by mbi789 to confirm user identity, date of birth, and payment method ownership.
• "Cookies" means small text files stored on your device by your web browser when you access the Platform, used to maintain session data and support platform functionality.
• "Platform" means the mbi789 website at https://mbi789.cam, its subdomains, mobile applications, and all associated services.

mbi789 collects personal data across several categories, depending on how you interact with the Platform. The following table summarises the main categories of data we may hold:

We do not collect any special category data (such as racial or ethnic origin, health data, or biometric data) unless expressly required by our KYC or regulatory compliance obligations, and only with your explicit consent or as permitted by applicable law.

mbi789 collects personal data through the following means:

mbi789 processes your personal data only for specific, legitimate purposes. The primary purposes for which we use your data include:

• Account registration and management: Creating, maintaining, and securing your mbi789 account.
• Identity and age verification: Confirming that you are aged 21 or above and meet eligibility requirements, in compliance with our responsible gambling obligations.
• Payment processing: Facilitating MYR deposits and withdrawals through supported Malaysian payment methods, including FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, and major bank transfers.
• Anti-money laundering (AML) and fraud prevention: Monitoring transactions and account activity for suspicious patterns in compliance with applicable financial crime legislation.
• Customer support: Responding to your queries, complaints, and requests via live chat, email, or other support channels in English, Bahasa Melayu, or Mandarin Chinese.
• Platform improvement: Analysing usage data to optimise the performance, design, and functionality of the mbi789 Platform for Malaysian users.
• Responsible gambling: Monitoring for indicators of problem gambling behaviour, applying self-imposed limits, and facilitating self-exclusion requests.
• Marketing communications: Sending you promotional offers and platform updates where you have provided valid consent, with the ability to opt out at any time.
• Legal compliance: Meeting our obligations under applicable data protection, gaming, financial, and anti-money laundering laws.

mbi789 processes your personal data on one or more of the following legal bases:

• Contractual necessity: Processing that is necessary to perform the contract between you and mbi789, including account registration, payment processing, and service delivery.
• Legal obligation: Processing required to comply with applicable laws, including KYC identity verification, AML transaction monitoring, and regulatory reporting obligations.
• Legitimate interests: Processing necessary for mbi789's legitimate business interests, including fraud prevention, platform security, and service improvement, where those interests are not overridden by your privacy rights.
• Consent: Processing based on your explicit consent, including the sending of marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

mbi789 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device that enable the Platform to recognise your browser and remember certain information across sessions.

You can control cookie settings through your browser. Note that disabling certain cookies may impact Platform functionality. mbi789 does not use cookies to track your activity on third-party websites.

mbi789 does not sell your personal data. We may share your data with third parties only in the following limited circumstances:

• Payment service providers: We share necessary financial data with payment processors — including operators of FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, and cryptocurrency platforms — solely to process your transactions. These providers operate under strict contractual and regulatory obligations.
• Identity verification providers: We use third-party KYC verification services to confirm identity and age (21+). These providers process only the minimum data required for verification purposes.
• Fraud prevention and AML providers: We may share transaction data with specialist fraud detection and anti-money laundering service providers to identify and investigate suspicious activity.
• IT and infrastructure providers: Data may be accessible to our hosting, security, and software service providers who support the operation of the Platform. All such providers are bound by data processing agreements.
• Legal and regulatory authorities: We will disclose personal data to competent authorities, regulators, or courts where required to do so by applicable law, regulation, court order, or regulatory instruction.
• Business transfers: In the event of a merger, acquisition, or restructuring of mbi789, personal data may be transferred to the acquiring entity, subject to equivalent data protection commitments.

In all cases, data shared with third parties is limited to what is strictly necessary for the stated purpose, and all third parties are required to process your data in accordance with applicable data protection standards.

mbi789 operates as an international online gaming platform. As a result, personal data collected from Malaysian users — including those in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, and Shah Alam — may be transferred to and processed in countries outside of Malaysia.

Where such international transfers occur, mbi789 ensures that appropriate safeguards are in place to protect your data to standards equivalent to those applicable in Malaysia. These safeguards may include binding contractual clauses with the receiving entity, or transfers to jurisdictions with recognised adequate data protection frameworks.

By using the mbi789 Platform, you consent to the transfer of your personal data in the manner described in this section, subject to the safeguards outlined above.

mbi789 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention guidelines apply:

• Active account data: Retained for the duration of your active account relationship with mbi789, and for a minimum of five (5) years after account closure, to comply with AML and regulatory requirements.
• KYC verification documents: Retained for a minimum of five (5) years following account closure or the completion of the transaction to which they relate.
• Transaction records: All deposit, withdrawal, betting, and financial records are retained for a minimum of five (5) years from the date of the transaction.
• Support communications: Live chat logs, email correspondence, and complaint records are retained for a minimum of two (2) years following the closure of the relevant interaction.
• Marketing consent records: Records of your marketing consent or opt-out are retained for the duration of your account and for six (6) months following account closure.

Where data is no longer required for any lawful purpose, it will be securely deleted or anonymised in accordance with our internal data destruction procedures.

Subject to applicable law and certain limited exceptions, you have the following rights in relation to your personal data held by mbi789. You may exercise any of these rights by contacting our support team as described in Section 16.

mbi789 will respond to all valid data rights requests within thirty (30) calendar days of receipt. Where a request is complex or we receive a high volume of requests, we may extend this period by a further thirty (30) days, in which case we will notify you of the extension and the reason for it.

The mbi789 Platform is strictly intended for use by persons aged 21 years and above. We do not knowingly collect or process personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person below the minimum age, we will promptly delete that data and close the associated account.

If you believe that a minor has registered on the mbi789 Platform, please contact our support team immediately so that appropriate action can be taken. Age verification is a core component of our responsible gambling and data protection obligations.

mbi789 implements a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your browser and our servers;
• Two-factor authentication (2FA) available for all user accounts as an additional access control layer;
• Access controls restricting internal access to personal data on a need-to-know basis;
• Regular security audits and penetration testing of our Platform infrastructure;
• Encrypted storage of sensitive data, including KYC documents and financial credentials;
• Incident response procedures for detecting, reporting, and addressing data security incidents in accordance with applicable notification obligations.

While mbi789 takes all reasonable steps to protect your data, no electronic system is entirely immune from security risk. You are responsible for maintaining the confidentiality of your own account credentials and for notifying mbi789 promptly in the event of any suspected unauthorised access to your account.

The mbi789 Platform may contain references to or integrations with third-party services, such as payment providers and verification platforms. Where you access third-party services, those services operate under their own privacy policies, and mbi789 is not responsible for the privacy practices of third-party operators.

We encourage you to review the privacy policies of any third-party services you use in connection with your mbi789 account, particularly those of payment service providers such as Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank, FPX, and DuitNow.

mbi789 reserves the right to update or modify this Privacy Policy at any time. The date of the most recent revision is displayed at the top of this document. Where material changes are made, we will provide notice through the Platform or by email to your registered address.

Your continued use of the mbi789 Platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not accept the updated Policy, you should cease using the Platform and contact our support team to request account closure.

We recommend reviewing this Privacy Policy periodically to stay informed of any changes. All previous versions of this Policy are available upon request from our support team.

If you wish to exercise any of your data rights, have a question about this Privacy Policy, or wish to raise a data protection concern, please contact the mbi789 data protection team through any of the following channels:

• Live Chat: Available on the Platform 24 hours a day, 7 days a week — average response time 3–5 minutes.
• Email: [email protected] (plain text — not a clickable link). Data rights requests submitted by email will receive a substantive response within thirty (30) days.
• Languages: Queries may be submitted in English, Bahasa Melayu, or Mandarin Chinese.

When submitting a data rights request, please include your registered account email address, the nature of your request, and any relevant details that will assist us in processing your request accurately and promptly.

This Privacy Policy was last updated on 1 January 2026.