Mbi96 Privacy Policy — Protection Personal Data Member

01Introduction & Policy Scope

Welcome to the mbi96 Privacy Policy page. This document explains in detail how the mbi96 platform — accessible via the official website at mbi96.pro as well as the Android and iOS mobile apps — collects, stores, processes, and uses your personal information as a registered member.

This Privacy Policy is drawn up in accordance with the Malaysian Personal Data Protection Act 2010 (PDPA) and relevant international standards. We are committed to ensuring that every piece of information you entrust to us is handled with care, responsibility, and full transparency.

By registering or continuing to use the mbi96 platform, you are deemed to have read and understood this Privacy Policy. If you do not agree with any part of this policy, please stop using the platform and contact our support team for further action regarding your account.

02Personal Data We Collect

MBI96 only collects information that is strictly necessary to operate the platform, verify member identities, process transactions, and comply with legal requirements. The following are the categories of data we collect:

Data is collected through several channels: online registration forms, the KYC process, platform interactions during gameplay, communications with the customer support team, and automated tracking technologies such as cookies and server logs.

03How We Use Your Data

Every piece of information we collect has a clear and legitimate purpose. mbi96 does not use your data for any purpose unrelated to the provision of our platform services. The following are the primary purposes for data use:

• Account Management: Creating, verifying, and maintaining your member account, including the mandatory KYC process.
• Transaction Processing: Processing deposits, withdrawals, and all financial transactions promptly and accurately.
• Platform Security: Detecting and preventing fraud, money laundering, account abuse, and other suspicious activities.
• Customer Support: Answering enquiries, resolving complaints, and providing technical assistance to members.
• Important Communications: Sending notifications related to your account, transactions, policy changes, and critical security information.
• Service Improvement: Analysing usage patterns to improve platform design, speed, and the overall user experience.
• Legal Compliance: Fulfilling obligations to regulatory bodies, legal authorities, and applicable reporting requirements.
• Responsible Gaming: Monitoring gaming patterns to identify members who may need responsible gaming support.

Marketing communications such as promotional offers and bonus information will only be sent to members who have given explicit consent. You may withdraw this consent at any time through your account settings or by contacting our support team.

04Data Sharing With Third Parties

MBI96 does not sell, rent, or trade members' personal data to any third party for marketing or commercial purposes. However, in the following limited situations, we may need to share some of your information:

• Payment Service Providers: Registered and licensed payment gateways and transaction processors, required to securely process your deposits and withdrawals.
• Technology Providers: Companies providing technical infrastructure such as cloud services, fraud detection systems, and analytics platforms — all bound by strict data confidentiality agreements.
• Legal Authorities: When required by law, court order, or a valid request from a law enforcement agency in Malaysia.
• Regulatory Body: Information required for compliance reporting to the relevant licensing and regulatory authorities.
• Fraud Prevention: Limited information shared with industry fraud prevention networks to protect all members from security threats.

All third parties we work with are required to sign a Data Processing Agreement (DPA) ensuring they handle your data to a security standard equal to or exceeding our own.

05Data Security Measures

MBI96 continually invests in high-grade security infrastructure to ensure member data remains protected at all times. The following are the key security layers we employ:

• 256-bit SSL/TLS Encryption: All data communications between our platform and users are protected by bank-grade encryption that cannot be broken by unauthorised parties.
• Two-Factor Authentication (2FA): Available to all member accounts and mandatory for sensitive operations such as large withdrawals and account information changes.
• Real-Time Monitoring: An intrusion detection system and traffic monitoring solution operating 24/7 to identify and respond to security threats in real time.
• Strict Access Control: Only employees granted specific authorisation may access member data, and every access is automatically logged and audited.
• Regular Backups: Data is regularly backed up to separate secure locations to ensure full recovery in the event of a technical incident.
• Penetration Testing: We conduct regular penetration testing by independent security experts to identify vulnerabilities before they can be exploited.

While we take all reasonable steps to protect your data, it is important to remember that no system can guarantee 100% absolute security. You also play a vital role by keeping your account password confidential and not sharing your login credentials with anyone.

06Cookies & Tracking Technologies

MBI96 uses cookies and similar tracking technologies to enhance the user experience on our platform. Cookies are small text files stored on your device when you visit our website. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login session verification, security, and language preferences. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collecting anonymous information about how you use the platform — pages visited, time spent, and any errors encountered. This helps us improve platform performance.
• Functional Cookies: Saving your preferences such as display settings, favourite games, and other personal choices to make your experience smoother and more personalised.
• Analytics Cookies: Used to understand aggregated traffic patterns and platform usage for continuous improvement purposes. This data cannot be used to personally identify you.

You can manage or delete cookies through your web browser settings at any time. However, disabling essential cookies may affect the functionality and security of your mbi96 account. The mbi96 mobile app uses similar local tracking technologies, which can be managed through your device's privacy settings.

07Your Rights as a Data Subject

Under the Malaysian Personal Data Protection Act 2010 and the mbi96 privacy policy, you have the following rights regarding your personal data:

To exercise any of these rights, contact our data protection team via live chat or support email. We will process your request within 14 working days. In complex cases, this period may be extended to up to 30 days with notice to you.

08Data Retention & Deletion Period

MBI96 retains your personal data only for as long as necessary to fulfil the purposes stated in this policy or as required by applicable law. The following are our data retention guidelines:

• Active Account Data: Retained for as long as your account is active and you continue using mbi96 services.
• Post-Account Closure Data: Basic information and transaction records are retained for seven (7) years after account closure to meet legal reporting and anti-money laundering (AML) requirements.
• KYC Data: Identity verification documents are retained for five (5) years after the end of the business relationship, in line with Malaysia's AML legal requirements.
• Security Logs: Access logs and security activity records are retained for two (2) years for incident investigation and digital forensics purposes.
• Marketing Data: Information used for marketing communications is deleted immediately upon withdrawal of your consent.

When the retention period expires, data is securely deleted using methods that ensure it cannot be recovered. For physical data, secure destruction procedures are applied in line with industry standards.

09Changes to This Privacy Policy

MBI96 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new technologies, updated legal requirements, or other legitimate operational reasons.

When we make significant changes to this policy, we will take the following steps to ensure you are always informed:

• Updating the "Last Updated" date shown at the top of this page
• Sending a notification to your registered email address at least seven (7) days before the changes take effect
• Displaying a prominent notice on the mbi96 platform homepage during the transition period
• For very significant changes, we may request your renewed consent before continuing to provide services

Your continued use of the mbi96 platform after any policy amendment takes effect constitutes your acceptance of the updated terms. We encourage you to review this page periodically to stay informed about how we protect your information.

10Contact Our Data Protection Officer

MBI96 has a dedicated Data Protection Officer (DPO) appointed specifically to oversee privacy compliance and handle enquiries related to members' personal data. If you have any questions, concerns, or wish to exercise your rights as stated in this policy, you may contact us through the following channels:

We are committed to responding to all privacy-related enquiries seriously and professionally. If you are not satisfied with our response, you also have the right to file a complaint with the Department of Personal Data Protection Malaysia (JPDP) as the relevant regulatory authority.