MBI918 Privacy Policy – Data Protection & Security Information

This Privacy Policy is issued by MBI918 ("we", "Platform", "company") and applies to all individuals who access or use the MBI918 website at mbi918.onl, the MBI918 mobile app, and all related services under the MBI918 brand.

This document clearly outlines the types of personal information we collect when you interact with our platform, the purposes for collection, how we protect that information, and your rights as a data owner. We use plain language so you truly understand what happens with your information — not just legal text that fills pages but is difficult to follow.

This policy covers all data processing activities within the scope of MBI918's services, including account registration, KYC (Know Your Customer) processes, financial transactions, game usage, customer support communications, and general use of our website.

Mbi918 collects personal information only when necessary to operate our services safely and effectively. Below are the main categories of information we collect:

We do not collect sensitive information such as medical records, political views, or religious beliefs. Should there be an exceptional need to collect such sensitive data categories, we will obtain your explicit consent beforehand.

Information you provide when contacting our customer support team — whether via Live Chat, email, or any other communication channel — is also stored as part of your interaction records with mbi918.

Mbi918 uses collected personal information solely for legitimate and transparent purposes. Below is the full list of how your data is used:

• Account management: Registering and verifying your account, processing logins, and managing your account settings.
• Transaction processing: Processing deposits, withdrawals, and all financial transactions you carry out on our platform.
• Identity verification (KYC): Fulfilling our legal obligations under anti-money laundering and counter-terrorism financing regulations.
• Customer support: Responding to inquiries, resolving complaints, and providing technical assistance.
• Platform communications: Sending important notifications about your account, including security alerts, policy updates, and transaction information.
• Service improvement: Analyzing aggregated usage patterns to improve the user experience, identify technical issues, and optimize the platform.
• Fraud prevention: Detecting and investigating suspicious activity, preventing unauthorized use of the platform, and protecting the interests of all members.
• Responsible gaming: Monitoring gaming patterns to identify signs of problem gambling and offer appropriate support to members who need it.
• Marketing (with consent): Sending relevant promotional offers and bonus information, only to members who have consented to receive marketing communications.

The security of your personal data is mbi918's highest priority. We continuously invest in infrastructure and security practices to ensure your information is protected against unauthorized access, loss, alteration, or disclosure.

Technical security measures we implement:

• Data encryption at rest: All personal data stored in our databases is encrypted using AES-256, a globally recognised encryption standard.
• Data encryption in transit: All communications between your device and our servers are secured with TLS 1.3, the latest and most secure version of the transport security protocol.
• Two-factor authentication (2FA): All member accounts and staff accounts accessing internal systems are required to use two-factor authentication.
• 24/7 Monitoring: Our systems are monitored around the clock by our cybersecurity team to detect and respond to any threats in real time.
• Regular penetration testing: We conduct regular security tests (penetration testing) by independent third parties to identify and patch vulnerabilities before they can be exploited.
• Secure data backup: Data is automatically backed up to separate, geographically distinct secure locations to ensure rapid recovery in the event of an unexpected incident.

Your personal data is stored on servers located in data centres that comply with the highest physical security standards, including biometric access controls, intrusion detection systems, and protection against natural disasters.

Mbi918 does not sell, rent, or disclose your personal information to third parties for their own marketing purposes. However, there are specific situations where we need to share your data with certain parties in order to operate our services:

• Payment service providers: Providers such as DuitNow, FPX, Touch 'n Go eWallet, GrabPay, and cryptocurrency processors receive only the minimum transaction information required to process your payment. They are bound by strict confidentiality agreements with mbi918.
• Game software providers: Gaming technology companies that provide games on our platform may receive the session information necessary to operate those games correctly.
• Identity verification services: Third-party KYC providers who assist us in verifying member identities receive the required verification documents under strict data processing agreements.
• Competent authorities: mbi918 will disclose personal information to government authorities or law enforcement when required to do so by a valid court order, warrant, or legal obligation.
• Business transfers: In the event of a merger, acquisition, or business asset transfer, user data may be transferred to the successor entity with notice to members, provided the data remains protected to the same or higher standard.

All third parties that receive personal data of mbi918 members are required to comply with privacy standards equal to or exceeding those we uphold ourselves. We conduct due diligence reviews on all our service providers before granting them access to any member data.

Mbi918 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

• Essential Cookies: These cookies are required for core platform functions such as login, game sessions, and security. The platform cannot function properly without them and they cannot be disabled.
• Functional Cookies: Saving your preferences such as language, display settings, and favorite games so you do not need to reconfigure them each time.
• Analytics Cookies: Helping us understand how members use our platform — which pages are most popular, where users encounter issues, and how we can improve the user experience. This data is collected anonymously.
• Performance Cookies: Monitoring our platform's performance to ensure fast load times and a smooth experience, especially during peak traffic periods.

You can control and manage cookie settings through your browser preferences. Please note that disabling certain cookies may affect the functionality of some parts of our platform. For the best experience, we recommend allowing at least essential and functional cookies.

As an mbi918 member and owner of your personal data, you have the following rights under Malaysia's Personal Data Protection Act 2010 (PDPA):

To exercise any of the rights above, contact our privacy team by email at [email protected] stating the right you wish to exercise and the information needed to verify your identity. We will process your request within 30 business days.

Mbi918 does not retain your personal data longer than necessary for the stated purposes, or as required by applicable law. Below are our general data retention guidelines:

• Active account data: Retained for the duration your account is active on the MBI918 platform, plus the required holding period following account closure.
• Financial transaction records: Retained for a minimum of 7 years from the transaction date, as required by Malaysian financial and tax laws.
• KYC Documents: Retained for a minimum of 6 years from the date of last association with your account, in accordance with anti-money laundering regulatory requirements.
• Support communication logs: Retained for 3 years from the date of communication for reference and dispute resolution purposes.
• Analytics data and system logs: Anonymised or deleted after 24 months from the date of collection.

Once the retention period has expired and there are no other legal obligations or legitimate interests requiring continued storage, MBI918 will securely delete or anonymise your personal data using industry-standard deletion methods to ensure it cannot be recovered.

Mbi918 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, new legal requirements, or improvements to our services. We are committed to notifying you of any significant changes.

How we notify you of changes:

• In-platform notifications via pop-ups or clear informational banners upon your next login.
• Notification emails are sent to the email address registered to your account at least 14 days before a significant change takes effect.
• The "Last Updated" date at the top of this document will be updated to reflect the date of the latest revision.

Your continued use of the mbi918 platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. If you disagree with any changes, you have the right to stop using the platform and close your account by contacting our support team.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal information. Previous versions of this document are available upon request via our support email.

If you have any questions, concerns, or complaints regarding how mbi918 handles your personal data, or if you wish to exercise any of your rights under this Privacy Policy, please contact us through the following channels:

We are committed to responding to all privacy inquiries within 3 business days. For more complex personal data rights requests, the response period may take up to 30 business days.

You also have the right to lodge a complaint with the Department of Personal Data Protection Malaysia if you believe MBI918 has not processed your personal data in accordance with the Personal Data Protection Act 2010. However, we encourage you to contact us first so we have the opportunity to resolve your concerns directly.