1Introduction
Mbi33 ("we", "our platform") takes user privacy extremely seriously. This Privacy Policy explains in detail how we collect, use, store, and protect your personal information when you use the mbi33 platform on mbi33.fun or our mobile app.
By registering or using any part of the mbi33 platform, you agree to the terms set out in this Privacy Policy. If you do not agree, please discontinue use of our platform. We encourage you to read this document carefully as it contains important information about your rights as a user.
This Privacy Policy is drafted in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia, as well as international best practices in personal data management. mbi33 is committed to ensuring your personal information is handled with full integrity and transparency.
Important Note: This Privacy Policy applies to all users of the mbi33 platform regardless of your location within Malaysia. The latest version of this document is always available on this page and supersedes all previous versions.
2Data We Collect
Mbi33 only collects personal information that is genuinely necessary to provide you with a safe, seamless, and quality service. Below are the categories of data we collect along with the purpose of each:
| Data Category | Sample Information | Primary Purpose |
|---|---|---|
| Identity Data | Full name, IC number, date of birth | Identity verification (KYC) & legal compliance |
| Contact Data | Email, phone number | Account communications, notifications & OTP verification |
| Financial Data | Bank account number, bank name, transaction records | Deposit & withdrawal processing |
| Technical Data | IP address, device type, web browser, operating system | Account security & fraud detection |
| Usage Data | Betting records, login history, game preferences | Service improvement & compliance |
| Location Data | General IP-based location | Regional eligibility verification & security |
We may also receive information about you from legitimate third-party sources, such as identity verification service providers or fraud prevention agencies, solely to ensure platform security and regulatory compliance.
- We never collect sensitive information such as passwords in plain text — all passwords are stored in an irreversible hashed format.
- Credit or debit card data is not stored directly on mbi33 servers — payments are processed through licensed, PCI-DSS certified third-party payment gateways.
- Information from individuals under 18 is never knowingly collected, as our platform is strictly for adults only.
3How We Use Your Data
Every piece of information we collect has a clear and legitimate purpose. mbi33 never uses your data for purposes unrelated to the provision of our betting services.
- Account Management: Creates and manages your account, processes registration, verifies your identity and ensures you can log in securely at all times.
- Transaction Processing: Processes deposits, withdrawals and all other financial transactions accurately and within the designated timeframe without any disruption.
- Platform Security: Detects and prevents fraudulent activity, unauthorised account access, money laundering and other cybersecurity threats.
- Customer Support: Provides accurate and effective assistance when you reach out to our support team via live chat or email.
- Legal Compliance: Fulfils our obligations under PDPA 2010, anti-money laundering laws (AMLA) and relevant regulatory directives.
- Service Improvement: Analyses usage patterns in an aggregated and anonymous manner to improve platform design, speed and overall user experience.
- Marketing Communications: Sends you information about relevant promotions, bonuses and special offers — only if you have given your consent to receive them.
Right to Withdraw Marketing Consent: If you no longer wish to receive marketing communications from mbi33, you may unsubscribe at any time via the "unsubscribe" link in our emails or by contacting our support team. This will not affect the functionality of your account.
4Data Sharing With Third Parties
Mbi33 does not sell, rent, or disclose your personal data to any third party for marketing or commercial purposes without your explicit consent. However, there are limited situations where we may need to share certain information with external parties as part of legitimate platform operations:
- Payment Service Providers: Required transaction information is shared with licensed payment gateways (such as DuitNow, FPX) solely to process your payments securely.
- KYC & Identity Verification Providers: Identity data is shared with licensed third-party verification services to meet mandatory KYC requirements.
- Game Software Providers: Minimum technical data required to run games is shared with licensed international casino and sports game providers.
- Legal Authority: We will disclose required information to Malaysian authorities (such as PDRM or SPRM) if mandated by a court order or applicable law.
- Business Transfer: In the event of a company merger, acquisition, or asset sale, user data may be transferred as part of that business transaction with prior notice given to users.
All third parties working with mbi33 are required to sign strict data confidentiality agreements and adhere to data protection standards equal to or exceeding our own.
Our Commitment: Your data is never sold to advertisers, data brokers, or any third party for commercial purposes. This is not just a policy — it is a core commitment mbi33 makes to every user.
5Data Security
Protecting your personal information is mbi33's highest priority. We continuously invest in the latest security infrastructure to keep your data safe from both external and internal threats.
- 256-bit SSL Encryption: All data transmitted between your device and mbi33 servers is protected by industry-standard Transport Layer Security (TLS) encryption.
- Two-Factor Authentication (2FA): We provide an additional layer of security through OTP verification via SMS or email for every login and critical transaction.
- 24/7 Monitoring: Our security systems operate around the clock to detect any unusual activity or intrusion attempts in real time.
- Secure Servers: Data is stored in certified data centres equipped with physical access controls, intrusion detection systems, and disaster recovery plans.
- Regular Security Audits: Our infrastructure undergoes regular penetration testing and independent security audits to identify and address any vulnerabilities.
- Restricted Access: Access to users' personal data within our internal systems is limited to authorised personnel only, based on a need-to-know principle.
What You Need to Do: While we protect your data on our end, your account security also depends on your own actions. Please use a strong and unique password, enable two-factor authentication, and never share your login credentials with anyone.
6Cookies & Tracking Technologies
Mbi33 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.
- Essential Cookies: Required for core platform functions such as maintaining your login session and ensuring transaction security. These cookies cannot be disabled.
- Preference Cookies: Saves your preferences such as language and display settings to ensure a more personalised experience on every visit.
- Analytics Cookies: Helps us understand how users interact with our platform in an aggregated and anonymous manner, for the purpose of continuous improvement.
- Marketing Cookies: Used to display more relevant advertisements. You may opt out of these cookies via your browser settings without affecting the core functions of the platform.
You can manage or delete cookies at any time through your web browser settings. Please note that disabling all cookies may affect certain functions of the mbi33 platform. To learn more about managing cookies, refer to your browser's help documentation.
7Your Rights as a User
Under the Personal Data Protection Act 2010 (PDPA) of Malaysia, you have certain rights regarding the personal data we hold about you. mbi33 fully respects these rights and provides straightforward mechanisms for you to exercise them.
Right of Access
You have the right to request a copy of all personal data we hold about you at any time.
Right to Rectification
You have the right to request correction of any inaccurate or incomplete personal data we hold about you.
Right to Erasure
You may request the deletion of your personal data, subject to our legal retention obligations.
Right to Object
You have the right to object to the processing of your data for direct marketing purposes at any time.
Right to Data Portability
You have the right to receive your data in a structured, machine-readable format for transfer to another provider.
Right to Restriction of Processing
You may request that we restrict the processing of your data under certain circumstances provided for under the PDPA.
How to Exercise Your Rights: To submit any request regarding your privacy rights, contact our privacy team by email at [email protected], stating the type of request and your identification details. We will process your request within 14 business days.
8Data Retention Period
Mbi33 does not retain your personal data longer than necessary for the purposes stated in this Privacy Policy or as required by applicable Malaysian law.
- Active Account Data: Retained for the duration your account is active plus any additional period required by law following account closure.
- Financial Transaction Records: Retained for a minimum of 7 years in accordance with anti-money laundering and tax regulatory requirements.
- KYC Records: Retained for a minimum of 6 years after the account closure date or the date of the last transaction, whichever is later.
- Security Logs: Technical log data is retained for a maximum of 12 months for security incident investigation and audit purposes.
- Communication Data: Customer support communication records are retained for 3 years for service quality and dispute resolution purposes.
Once the retention period ends, your personal data will be securely deleted or permanently anonymised so it can no longer be associated with you as an individual.
9Changes to This Privacy Policy
Mbi33 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or new service developments. We are committed to informing you of any significant changes.
- Any significant amendments will be communicated via in-platform notifications or email to your registered address at least 14 days before the changes take effect.
- The "Last Updated" date at the top of this page will always reflect the date of the most recent amendments made.
- Continued use of the mbi33 platform after the effective date of any amendment means you accept and agree to the updated version of the Privacy Policy.
- You are advised to check this page periodically to stay up to date on how we handle your personal data.
10Contact Us
If you have any questions, concerns or complaints regarding this Privacy Policy or how mbi33 handles your personal data, our team is available to assist you at any time.
- Live Chat: The fastest way — available directly within the mbi33 platform and app with an average response time of under 2 minutes, 24 hours a day.
- Privacy Email: [email protected] — for enquiries related to privacy rights, data access requests, or formal complaints requiring documentation.
- FAQ: Visit page FAQ us for instant answers to the most frequently asked privacy questions.
Privacy Support in Bahasa Melayu: All privacy-related enquiries may be submitted in Bahasa Melayu. We ensure every complaint is taken seriously and resolved within the stipulated timeframe — no question is too small or too large for us to handle.