mbi77 Privacy Policy

1. Introduction

This Privacy Policy ("Policy") is issued by mbi77 ("mbi77", "we", "us", "our") and governs the collection, use, storage, and disclosure of personal data in connection with the mbi77 website located at mbi77.app and all associated services, games, and features (collectively, the "Platform").

By registering an account with mbi77 or by otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not consent, you must not use the Platform.

This Policy should be read in conjunction with mbi77's Terms & Conditions and Responsible Gaming Policy, which together form the complete agreement governing your use of the Platform.

2. Personal Data We Collect

2.1 Data You Provide Directly

When you register an account with mbi77, make a deposit or withdrawal, contact support, or interact with the Platform in any way, you may provide the following categories of personal data:

• Identity Data: Full legal name, date of birth, gender, nationality, and copies of government-issued identification documents where required for verification.
• Contact Data: Email address, Malaysian mobile phone number, and residential address (including city, state, and postcode).
• Financial Data: Payment method details including e-wallet account identifiers (Touch 'n Go, Boost, GrabPay), bank account numbers (Maybank, CIMB, Public Bank), and cryptocurrency wallet addresses (USDT TRC20). mbi77 does not store full card numbers.
• Account Data: Username, encrypted password hash, account preferences, communication preferences, and self-imposed limit settings.
• Transaction Data: Records of deposits, withdrawals, wagers placed, games played, bonuses claimed, and promotional activity.
• Communications Data: Records of live chat sessions, support ticket exchanges, and email correspondence with mbi77.

2.2 Data Collected Automatically

When you access and use the Platform, mbi77 automatically collects certain technical data, including:

• IP address and approximate geolocation (country and city level).
• Device type, operating system, and browser type and version.
• Pages visited, session duration, navigation paths, and feature interactions.
• Session cookies and local storage identifiers for authentication and fraud detection.
• Referral URL if you arrived at mbi77 via a tracked link.

3. How mbi77 Uses Your Personal Data

mbi77 uses the personal data it collects for the following purposes:

• Account Management: To create, maintain, verify, and administer your mbi77 member account.
• Service Delivery: To process your deposits and withdrawals, administer your wagers and game sessions, and deliver the gaming services you request.
• Identity and Age Verification: To verify that you meet the minimum age requirement of 21 years and to satisfy our KYC (Know Your Customer) obligations under international gaming authority requirements.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent transactions, money laundering, unauthorised account access, and other prohibited activities.
• Regulatory Compliance: To comply with applicable legal obligations, including anti-money laundering (AML) reporting, gaming authority reporting requirements, and tax reporting where applicable.
• Customer Support: To respond to your enquiries, complaints, and support requests promptly and accurately.
• Responsible Gaming: To monitor gaming activity for indicators of problem gambling, to enforce self-imposed or authority-imposed limits, and to administer self-exclusion requests.
• Platform Improvement: To analyse aggregated usage data (in anonymised form where possible) for the purpose of improving Platform performance, game selection, and user experience.
• Marketing Communications: To send promotional emails, bonus offers, and platform updates to members who have opted in to receive such communications. You may opt out at any time by updating your communication preferences in your account settings or by contacting support.

4. Legal Basis for Processing

mbi77 processes your personal data on the following legal bases:

• Contractual Necessity: Processing is necessary to perform the contract between you and mbi77 — specifically, to operate your account, process transactions, and deliver the gaming services you have requested.
• Legal Obligation: Processing is required to comply with mbi77's obligations under applicable gaming authority regulations, AML legislation, and tax laws.
• Legitimate Interests: Processing is necessary for mbi77's legitimate interests, including fraud prevention, platform security, and analytics, provided those interests are not overridden by your rights.
• Consent: For optional activities such as marketing communications and certain cookie categories, mbi77 relies on your freely given, specific, and informed consent, which you may withdraw at any time.

5. Data Sharing and Disclosure

mbi77 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. mbi77 may share your personal data with the following categories of recipients, solely to the extent necessary for the stated purpose:

• Payment Processors: To process deposits and withdrawals via Touch 'n Go, Boost, DuitNow, GrabPay, Maybank, CIMB, Public Bank, and USDT TRC20 gateways.
• Identity Verification Services: To fulfil KYC obligations, mbi77 may share identity documents with regulated third-party verification providers operating under equivalent data protection standards.
• Game Content Providers: mbi77's game providers (including Pragmatic Play, NetEnt, Play'n GO, and others) receive session tokens and anonymised player identifiers necessary to deliver game content. These providers do not receive your name, contact details, or financial data.
• Regulatory Authorities: mbi77 will disclose personal data to gaming regulators, financial intelligence units, and law enforcement agencies where required to do so by applicable law or lawful authority request.
• IT and Infrastructure Providers: Cloud hosting, database management, and cybersecurity service providers who process data strictly on mbi77's behalf and under contractual data processing agreements.

6. Cookies and Tracking Technologies

mbi77 uses the following categories of cookies and similar technologies on the Platform:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies, CSRF protection tokens, and load balancer cookies. These cannot be disabled without breaking core functionality.
• Functional Cookies: Used to remember your preferences, such as your preferred language, display settings, and last-visited game category.
• Analytics Cookies: Used to collect anonymised, aggregated data about how members use the Platform, including which pages are most visited and where navigation drop-offs occur. This data is used solely to improve Platform experience and is not linked to individual user profiles.
• Fraud Prevention Cookies: Used to detect suspicious patterns, bot activity, and potential account compromise attempts.

mbi77 does not use third-party advertising or cross-site tracking cookies. You may manage cookie preferences via your browser settings; however, disabling strictly necessary cookies will prevent you from accessing the Platform.

7. Data Retention

mbi77 retains personal data for as long as your account remains active and for a period following account closure as required by applicable gaming authority regulations and anti-money laundering laws — typically a minimum of five (5) years following the last account activity or account closure, whichever is later.

Transaction records and KYC documentation are retained for the minimum periods mandated by the relevant gaming authority and AML framework. Following the expiry of all applicable retention periods, your data will be securely deleted or anonymised.

8. Security Measures

mbi77 implements the following technical and organisational security measures to protect your personal data:

• 256-bit SSL/TLS encryption for all data transmitted between your device and mbi77's servers.
• Encryption at rest for sensitive data stored in mbi77's databases, including financial data and identity documents.
• Role-based access controls ensuring that only authorised personnel with a verified business need can access personal data.
• Regular security audits, vulnerability assessments, and penetration testing conducted by independent cybersecurity specialists.
• Multi-factor authentication requirements for all mbi77 internal systems that handle member personal data.
• Incident response procedures that include mandatory notification to affected members and relevant authorities in the event of a data breach involving personal data.

9. Your Data Rights

Subject to applicable law and verification of your identity, you have the following rights in relation to your personal data held by mbi77:

• Right of Access: You may request a copy of the personal data mbi77 holds about you.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data.
• Right to Erasure: You may request deletion of your personal data where mbi77 has no legal obligation to retain it. Note that regulatory retention requirements may limit the scope of this right.
• Right to Restriction: You may request that mbi77 restrict the processing of your personal data in certain circumstances.
• Right to Object: You may object to processing based on legitimate interests, including profiling for marketing purposes.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of the above rights, please contact mbi77 at [email protected]. mbi77 will respond to all verified requests within 30 calendar days.

10. Children and Minors

The mbi77 Platform is strictly prohibited for persons under the age of 21 years. mbi77 does not knowingly collect personal data from individuals under the age of 21. If mbi77 becomes aware that personal data has been collected from a person under this age threshold, the account will be immediately suspended and all data will be securely deleted. If you believe a minor has registered on the Platform, please contact mbi77 immediately at [email protected].

11. International Data Transfers

mbi77 operates globally and may transfer your personal data to servers and service providers located outside of Malaysia. Where such transfers occur, mbi77 ensures that appropriate safeguards are in place — such as standard contractual clauses or equivalent transfer mechanisms — to provide a level of data protection equivalent to that applicable under mbi77's operating jurisdiction. By using the Platform, you consent to such transfers as described in this Policy.

12. Changes to This Privacy Policy

mbi77 reserves the right to update or amend this Privacy Policy at any time. Where changes are material, mbi77 will notify registered members via email or prominent in-Platform notification prior to the changes taking effect. The "Last Updated" date at the top of this Policy will be revised accordingly. Your continued use of the Platform following the effective date of any revision constitutes your acceptance of the revised Policy.

13. Contact & Data Enquiries

For any questions, concerns, or requests relating to this Privacy Policy or mbi77's data handling practices, please contact our support team:

• Email: [email protected]
• Live Chat: Available 24/7 via the mbi77 Platform
• Responsible Gaming: mbi77 Responsible Gaming page

mbi77 is committed to resolving all privacy-related enquiries promptly. Formal data subject access requests will receive a written response within 30 calendar days of receipt and identity verification.