Privacy Policy mbi98
Your Data Security Is Our Priority
mbi98 is committed to protecting the personal information of every member. This privacy policy clearly explains how we collect, use, store and disclose your data, in line with internationally recognised data protection practices.
Six Data Protection Principles of mbi98
We manage your information based on the following principles, which form the core of mbi98's operations as a responsible platform.
Purpose-Based Collection
We only collect data required for specific purposes — account registration, identity verification, payment processing and service improvement. No data is collected beyond those needs.
High-Level Encryption
All data is transmitted over secure connections using 256-bit SSL encryption technology. Sensitive data such as payment information and passwords is stored in encrypted form on our servers.
No Third-Party Data Selling
mbi98 does not sell, rent or trade members' personal information to any third party for marketing purposes. Your data stays within the mbi98 ecosystem only.
Full Control by Members
Every member has the right to access, correct and request deletion of their personal data. Requests are processed through our official support channels, which operate around the clock. 🔐
Licensing Compliance
As a platform operating under international licensing, mbi98 complies with data protection requirements set by regulatory authorities, including mandatory KYC procedures.
Change Notification
Any amendments to this Privacy Policy will be communicated to members via email or in-account notifications. The update date will always be displayed clearly at the top of this policy. 📋
Information We Collect
mbi98 collects two categories of information from users of our platform — information you provide directly and information collected automatically when you use our services.
Information you provide directly:
- Full name as stated on your identity card (MyKad) or passport
- Date of birth for age verification purposes — only members aged 21 and above are permitted
- Active mobile phone number and email address
- E-wallet account number (Touch 'n Go eWallet) or bank account details for deposit and withdrawal purposes
- Identity documents uploaded during the KYC (Know Your Customer) process
Information collected automatically:
- IP address, browser type and operating system of your device
- Session data, including pages visited, time spent and actions taken within your account
- Cookies and similar tracking technologies for user experience purposes
- Transaction logs for deposits, withdrawals and betting activity
Purpose of Information Use
The data we collect is used exclusively for legitimate and permitted operational purposes. mbi98 does not use your data for any other purpose without your explicit consent.
- Account management: registration, identity verification, age requirement checks (21+), password recovery and account access.
- Financial processing: processing deposit and withdrawal transactions via Touch 'n Go eWallet, DuitNow, FPX and cryptocurrency (USDT, BTC, ETH).
- Legal compliance: fulfilling anti-money laundering (AML) obligations, KYC procedures and international licensing regulatory requirements.
- Customer service: providing 24/7 support via live chat and email in Malay and English.
- Platform security: detecting and preventing fraud, unauthorised access and suspicious activity.
- Service improvement: analysing usage patterns to improve the interface and gaming experience.
Disclosure to Third Parties
mbi98 does not sell or trade members' personal data to third parties for marketing or commercial purposes. However, there are limited situations where data may be shared:
- Payment service providers: required data is shared with approved payment processors solely to complete financial transactions.
- Regulatory authorities: mbi98 will disclose information to the relevant authorities when required by law or court order.
- Technical service providers: infrastructure and security vendors bound by strict confidentiality agreements to support our platform operations.
- Fraud investigations: in confirmed cases of fraud, relevant data may be shared with the authorities for criminal investigation purposes.
All third parties that receive data from mbi98 are required to comply with data protection policies that are equivalent to or stricter than our own.
Data Storage and Retention Period
Your personal data is stored on servers protected by multi-layered security protocols. Server locations meet international security standards set by the relevant licensing bodies.
The data retention period depends on the purpose of collection:
- Active account data: retained for as long as your account is active and registered with mbi98.
- Financial transaction data: retained for a minimum of five (5) years after the last transaction, in line with financial compliance and anti-money laundering requirements.
- KYC and identity verification data: retained in accordance with the period set by the licensing authority.
- After account closure: basic data is retained for the period required by law, then securely disposed of.
Use of Cookies and Tracking Technologies
mbi98 uses cookies and similar technologies to improve the user experience on our platform. Cookies are small files stored on your device when you visit our website.
Types of cookies we use:
- Session Cookies: required to maintain your login session and ensure account security during active use.
- Preference Cookies: store your language settings and display preferences for convenience on repeat visits.
- Analytics Cookies: collect non-personally identifiable usage statistics for platform improvement purposes.
- Security Cookies: help detect suspicious access attempts and protect your account.
You can manage cookie settings through the browser you use. However, disabling certain cookies may affect the functionality of some features on our platform.
Data Security and Protection Measures
mbi98 implements multiple layers of technical security measures and procedures to protect your personal data from unauthorised access, loss, misuse or unintended disclosure.
- Data encryption during transmission using TLS/SSL protocol with 256-bit strength
- Password storage in irreversible hashed form (one-way hashing)
- Two-factor authentication (2FA) system available for all member accounts
- Continuous security monitoring with real-time intrusion detection systems
- Regular security audits by internal and external cybersecurity teams
- Mandatory data protection training for all staff with access to member data
In the event of a security breach involving your personal data, mbi98 will notify you within a reasonable period via the email registered to your account.
Cross-Border Data Transfers
Due to the global nature of our platform's operations, your personal data may be processed or stored on servers located outside Malaysia. In all such cases, mbi98 ensures that:
- Data transfers are carried out only to destinations with adequate data protection in place.
- Appropriate data transfer agreements are established with data recipients outside the country.
- All data transfers comply with the international licensing conditions binding mbi98's operations.
Amendments to the Privacy Policy
mbi98 reserves the right to amend this Privacy Policy from time to time to reflect changes in operations, legal compliance or industry practices. Each amendment will:
- Be communicated to all registered members via official email or in-account notifications.
- Be updated on this page with a clear effective date.
- Be given a reasonable notice period before taking effect, except for amendments required by law that need immediate implementation.
Continued use of the mbi98 platform after an amendment takes effect will be considered acceptance of the updated Privacy Policy.
Member Rights Regarding Personal Data
As an mbi98 member, you have the following rights regarding your personal data. To exercise any of these rights, contact our support team which operates 24 hours a day, 7 days a week.
All data-related requests will be processed within a reasonable period. We may require identity verification before processing any request.
Right of Access
You have the right to obtain a copy of all personal data we hold relating to your account. Requests can be submitted via live chat or support email.
Right of Rectification
If there are errors in the data we hold, you have the right to request a correction. Basic account information can be updated through your own account panel.
Right of Erasure
You may request deletion of your personal data by closing your account. However, some data may be retained to fulfil ongoing legal obligations.
Right to Restriction of Processing
In certain recognised circumstances, you may request that the processing of your data be temporarily restricted while awaiting resolution of a dispute or review.
Right to Data Portability
You have the right to receive your personal data in a structured, machine-readable format, to be transferred to another service provider where applicable.
Right to Object
You have the right to object to the processing of your personal data for certain purposes, including direct marketing. Objections can be submitted through our support channel, which operates 24/7.
Ready to Get Started with mbi98?
Register your account and enjoy full data protection along with a 150% welcome bonus of up to RM888. Keeping your information secure is our responsibility.