Privacy Policy mbiwin — Your Personal Data Protection

1. Introduction

Mbiwin ("we", "Platform") respects the privacy of every individual who uses our services. This Privacy Policy is designed to ensure you fully understand how your personal information is managed responsibly and transparently.

We are committed to complying with Malaysia's Personal Data Protection Act (PDPA) 2010 in all our data handling practices. This means your data is collected only for clearly defined purposes, processed lawfully, and not retained longer than necessary.

This policy applies to all information we collect through the mbiwin website, our mobile app, customer support channels, and any other digital services we offer to members in Malaysia.

2. Data We Collect

2.1 Information You Provide Directly

During the registration process and your use of the platform, we collect the following information directly from you:

• Identity Information: Full name, identification card number (MyKad) or passport, date of birth and gender
• Contact Information: Email address, mobile number, and residential address
• Financial Information: Bank account number, bank name and digital wallet details for deposit and withdrawal processing
• KYC Verification Documents: Copies of identification documents, proof of residence and other supporting documents required for identity verification
• Account Information: Username, password (encrypted) and account preference settings

2.2 Automatically Collected Information

When you use the mbiwin platform, our systems automatically record the following technical information:

• IP address and IP-based location information
• Device type, operating system, and web browser version used
• Game activity and financial transaction logs
• Date, time, and duration of each login session
• Pages visited and interaction details within the platform
• Cookie data and related tracking technologies

2.3 Information from Third Parties

In certain cases, we may receive information about you from legitimate third parties, including identity verification service providers, payment processors, and fraud prevention agencies we work with for platform security purposes.

Data Type	Purpose of Collection	Retention Period
Identity Information	KYC verification, account management	Throughout active account + 7 years
Financial Information	Deposit & withdrawal processing	Throughout active account + 7 years
Game Log	Game integrity, dispute resolution	3 years from the transaction date
Technical Data	Security, fraud detection	Rolling 12 months
Cookies & Analytics	User experience improvement	According to cookie type (see Section 7)

3. How We Use Your Data

Mbiwin uses collected personal data solely for legitimate purposes related to the provision of our services. The following are the primary purposes for which your data is used:

3.1 Account Management & Services

• Creating and maintaining your member account
• Processing deposits, withdrawals and all other financial transactions
• Verifying your identity through the mandatory KYC process
• Providing effective and accurate customer support
• Sending important notices related to your account and transactions

3.2 Security & Compliance

• Detecting and preventing fraud, money laundering and other illegal activities
• Ensuring compliance with all applicable legal and regulatory requirements
• Investigating complaints, disputes or security incidents
• Enforcing the mbiwin platform Terms and Conditions

3.3 Platform Improvements

• Analyzing usage patterns to improve platform design and functionality
• Developing new features based on member needs and feedback
• Running internal analytics to improve the overall user experience

3.4 Marketing Communications

With your consent, we use your data to send promotional updates, new bonuses, and exclusive offers relevant to your interests. You may withdraw this consent at any time through the notification settings in your account.

4. Basis for Data Processing

Mbiwin processes your personal data on valid legal grounds under PDPA 2010. Depending on the type of data and purpose of processing, the bases we rely on are:

• Consent: For marketing communications and the use of non-essential cookies, we require your explicit consent
• Contract Performance: Processing required to deliver the services you request, including account management and financial transactions
• Legitimate Interest: For security purposes, fraud prevention, and improvement of our services
• Legal Obligation: Where processing is required to comply with legal or regulatory obligations applicable to mbiwin

5. Data Sharing with Third Parties

Mbiwin does not sell or disclose members' personal data to external parties for commercial purposes. However, we share data with certain third parties in limited and controlled circumstances as follows:

5.1 Trusted Service Providers

We work with trusted third-party service providers to support platform operations, including:

• Payment processors and FPX gateways to facilitate financial transactions
• Certified KYC identity verification service providers
• Cloud computing and data storage service providers that comply with high security standards
• Analytics companies for anonymous data analysis to improve our platform

All these service providers are bound by strict data protection agreements and are only permitted to process your data for purposes we have specified.

5.2 Legally Required Disclosures

Mbiwin may disclose your personal data to government authorities or law enforcement bodies when required by Malaysian law, court order, or valid regulatory directive. We will notify you of any such disclosure wherever possible, unless prohibited by law.

6. Data Storage & Security

6.1 Technical Security Measures

Mbiwin implements multiple layers of technical security to protect your personal data from unauthorised access, loss, or misuse:

• 256-bit SSL/TLS encryption for all data transmissions between your browser and mbiwin servers
• Data encryption at rest for all sensitive information stored in our database
• Role-based access control which ensures only authorised staff can access member data
• 24/7 security monitoring to detect and respond to any threats or suspicious activity
• Regular security testing by independent security experts to identify and address system vulnerabilities

6.2 Data Retention Periods

Mbiwin retains your personal data only for as long as necessary to fulfil the purpose of collection or to comply with legal requirements. When data is no longer needed, it will be securely deleted or anonymised.

6.3 Security Incident Response

In the event of a data breach affecting your personal information, mbiwin will notify you and the relevant authorities within the timeframe required by law. We will clearly explain what occurred, the data involved and the steps taken to address the situation.

7. Cookies & Tracking Technologies

Mbiwin uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

• Essential Cookies: Required for essential platform functions such as login and session security. These cookies cannot be disabled.
• Functional Cookies: Storing your preferences such as language, display settings and game preferences for a more personalized experience.
• Analytics Cookies: Helping us understand how members use the platform so we can improve it. This data is collected anonymously.
• Marketing Cookies: Used with your consent to display relevant promotions. You may decline these cookies without affecting core platform functionality.

You can manage your cookie settings through your web browser at any time. Please note that disabling certain cookies may affect the functionality of some parts of the platform.

8. Your Rights Under the PDPA

As a data subject, you have certain rights under Malaysia's Personal Data Protection Act 2010. mbiwin respects and facilitates the exercise of these rights: