Privacy Policy

1 Introduction

This Privacy Policy ("Policy") sets out the basis on which MBI666 ("MBI666", "we", "us", or "our"), the operator of the online casino and sports betting platform located at https://mbi666.cam, collects, processes, stores, and discloses personal data obtained from users ("you", "User", or "Player") of the platform and its associated services.

MBI666 operates primarily for the benefit of Malaysian players, including those located in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and other regions across Malaysia. We recognise that Malaysian users place significant trust in us when providing personal information, and we take that trust seriously. This Policy is designed to be transparent, practical, and easy to understand while maintaining the legal rigour required of platforms operating under international licensing.

By accessing or using MBI666, registering an account, making a deposit, or otherwise interacting with the platform, you acknowledge that you have read and understood this Privacy Policy and consent to the data processing practices described herein. If you do not agree with any aspect of this Policy, you should discontinue use of the platform and contact us to request closure of your account.

2 Definitions

For the purposes of this Privacy Policy, the following terms have the meanings assigned below:

3 Personal Data We Collect

MBI666 collects the following categories of personal data in the course of providing its Services. The precise data collected will depend on your level of engagement with the platform.

4 How We Collect Personal Data

MBI666 collects personal data through the following primary channels:

• Direct provision by you: Information you voluntarily provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or submitting promotional claims.
• Automated technical collection: Data collected automatically as you interact with the platform, including IP address, device identifiers, session data, and behavioural analytics through cookies and server logs.
• Third-party payment processors: Transaction confirmation data and payment method reference information provided to us by Malaysian payment providers including Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank, DuitNow, and FPX operators as part of payment processing.
• Third-party KYC and identity verification providers: Verification status and document authentication results provided by our licensed KYC partners to confirm the identity of Players prior to withdrawal approval.
• Fraud prevention and security services: Device fingerprinting and behavioural analysis data obtained from our platform security infrastructure to detect and prevent fraudulent activity.

5 Purposes of Data Processing

MBI666 processes personal data strictly for the following identified purposes. We do not process personal data in ways that are incompatible with these stated purposes without providing prior notice and, where required, obtaining consent.

• Account administration: To create, manage, and maintain your MBI666 account, including authentication and access control.
• Service delivery: To operate the platform, process bets and casino game participation, facilitate deposits and withdrawals, and provide the full range of gaming services to Players in Malaysia and permitted jurisdictions.
• KYC and regulatory compliance: To verify Player identity and age (minimum 21 years), conduct anti-money laundering (AML) checks, and satisfy the obligations imposed by MBI666's international licensing framework.
• Payment processing: To initiate and confirm deposits and withdrawals via supported Malaysian payment methods, including DuitNow, FPX, and e-wallets such as Touch 'n Go.
• Customer support: To respond to enquiries, resolve complaints, and provide assistance through our Live Chat, email, and multilingual support channels in English, Bahasa Melayu, and Chinese.
• Responsible gambling compliance: To monitor account activity for indicators of problem gambling behaviour, to process requests for deposit limits and self-exclusion, and to fulfil our duty of care obligations to Players.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, account misuse, money laundering, and other security threats to the platform.
• Platform improvement: To analyse aggregate usage patterns to improve platform performance, game selection, and user experience — using anonymised or pseudonymised data where practicable.
• Legal obligations: To comply with applicable laws, court orders, regulatory requests, or law enforcement inquiries as required under the laws of applicable jurisdictions.
• Marketing communications (where opted in): To send promotional offers, bonus notifications, and product updates to Players who have explicitly consented to receive such communications. You may withdraw this consent at any time.

6 Legal Basis for Processing

MBI666 processes personal data under the following legal bases, which correspond to the purposes set out in Section 5:

• Contractual necessity: Processing required to perform the contract between MBI666 and the Player, including account management, payment processing, and service delivery.
• Legal obligation: Processing required to comply with applicable laws, including KYC/AML obligations under our licensing framework, and any applicable data protection or financial crime legislation.
• Legitimate interests: Processing carried out in pursuit of MBI666's legitimate business interests, including fraud prevention, platform security, responsible gambling monitoring, and product improvement, where such interests are not overridden by your fundamental rights and freedoms.
• Consent: Where you have provided explicit, specific, and informed consent to a particular processing activity — such as the receipt of marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of processing carried out prior to withdrawal.

7 Data Sharing & Disclosure

MBI666 does not sell, rent, or commercially exploit your personal data. We disclose personal data to third parties only in the following carefully controlled circumstances:

• Payment service providers: We share necessary transaction data with Malaysian payment processors including Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank, DuitNow, FPX, and cryptocurrency processing partners, strictly to the extent required to execute payment instructions.
• KYC and identity verification partners: We share document uploads and identity data with licensed KYC verification providers to complete the identity verification process required before withdrawal approval.
• Fraud prevention and security providers: We share device and behavioural data with our fraud detection partners to protect the integrity of the platform and its Players.
• Game content providers: Anonymised or pseudonymised gameplay data may be shared with our third-party game software licensors for the purpose of game performance monitoring and RNG auditing. No personally identifiable information is shared for this purpose.
• Legal and regulatory authorities: We will disclose personal data to government agencies, law enforcement bodies, or regulators where required to do so by law, court order, or where we reasonably believe such disclosure is necessary to protect the rights or safety of MBI666 or third parties.
• Corporate transactions: In the event of a merger, acquisition, or sale of all or substantially all of MBI666's assets, personal data held by MBI666 may be transferred to the acquiring entity, subject to equivalent data protection commitments.

All third-party service providers engaged by MBI666 are required to process personal data strictly in accordance with documented instructions and to implement appropriate technical and organisational security measures.

8 International Data Transfers

MBI666 operates under international licensing and may, in the course of providing its Services to Malaysian players, transfer personal data to countries outside Malaysia. This may occur where our servers, service providers, or operational personnel are located in jurisdictions other than Malaysia.

Where personal data is transferred internationally, MBI666 ensures that appropriate safeguards are in place to protect such data. These safeguards may include contractual arrangements with data recipients that impose data protection obligations equivalent to or exceeding those applicable under our licensing jurisdiction.

9 Data Retention

MBI666 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or licensing obligations. The following general retention guidelines apply:

• Active account data: Retained throughout the life of your active account and for a minimum of five (5) years following account closure, in accordance with anti-money laundering record-keeping requirements under our licensing framework.
• KYC documentation: Retained for a minimum of five (5) years from the date of verification or account closure, whichever is later, as required by our licensing obligations.
• Financial transaction records: Retained for a minimum of five (5) years to satisfy financial crime prevention and audit trail requirements.
• Customer support communications: Retained for three (3) years from the date of the most recent interaction, for quality assurance and dispute resolution purposes.
• Marketing consent records: Retained for the duration of your account and for one (1) year after consent withdrawal, to demonstrate compliance with consent obligations.
• Technical and usage logs: Retained for up to twelve (12) months, after which they are aggregated or deleted unless required for an ongoing security or fraud investigation.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be attributed to any identifiable individual.

10 Cookies & Tracking Technologies

MBI666 uses cookies and similar tracking technologies to ensure the proper functioning of the platform, to maintain session state, and to generate aggregate analytics that help us improve the user experience for Malaysian players and others.

The following categories of cookies are used on the MBI666 platform:

• Strictly necessary cookies: These cookies are essential for the platform to function and cannot be disabled. They include session authentication cookies that keep you logged in during a session and security cookies that protect against cross-site request forgery (CSRF) attacks.
• Functional cookies: These cookies remember your preferences, such as your preferred language (English, Bahasa Melayu, or Chinese), currency display setting (MYR/RM), and notification preferences, so you do not need to re-enter them on each visit.
• Analytics cookies: We use first-party analytics tools to understand aggregate usage patterns — which game categories are most popular, how players navigate the platform, and where usability issues may exist. This data is anonymised and is not used to profile individual users.

MBI666 does not use third-party advertising cookies, retargeting pixels, or any tracking technology designed to build advertising profiles for the benefit of external marketing networks.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies may impair your ability to use core platform features, including login and payment functions.

11 Security Measures

MBI666 implements a layered set of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include, but are not limited to:

• Transport Layer Security (TLS/SSL) encryption for all data transmitted between your device and our platform;
• Hashing of account passwords using industry-standard cryptographic algorithms — we do not store passwords in recoverable plain text;
• Segregated storage of Player funds in accounts separate from MBI666's operational funds;
• Role-based access controls ensuring that staff can only access personal data required for their specific function;
• Regular security audits and penetration testing of the platform infrastructure;
• Monitoring systems that detect and alert on anomalous access patterns or unusual account activity;
• Documented incident response procedures for managing data security breaches in accordance with applicable obligations.

12 Your Data Rights

Subject to applicable law and the terms of our licensing obligations, you have the following rights in relation to your personal data held by MBI666. To exercise any of these rights, please contact us using the details provided in Section 15.

To submit a data rights request, please contact us via Live Chat or email ([email protected]) with the subject line "Data Rights Request". We will verify your identity before processing any request, to ensure your data is not disclosed to or actioned by an unauthorised party.

13 Children's Privacy

MBI666's Services are strictly restricted to persons aged 21 years and above. We do not knowingly collect personal data from any person under the age of 21. Registration on the platform constitutes a representation by the registering individual that they are at least 21 years of age.

Where MBI666 becomes aware that personal data has been collected from a person under the age of 21, we will immediately close the associated account, delete or quarantine the personal data in question, and take appropriate steps to prevent recurrence. If you believe that MBI666 may have inadvertently collected data from a minor, please contact us immediately using the details in Section 15.

14 Policy Amendments

MBI666 reserves the right to update or amend this Privacy Policy at any time, to reflect changes in our data processing practices, legal obligations, platform features, or regulatory requirements. Where amendments are material — meaning they substantively change how we collect or use your personal data — we will provide notice through a visible notification on the platform and, where practicable, via the email address registered to your account.

The effective date at the top of this Policy will be updated to reflect the date of the most recent revision. Your continued use of MBI666 following any such amendment will be deemed acceptance of the updated Policy. We recommend that you review this page periodically to stay informed of any changes.

15 Contact Us & Complaints

If you have any questions about this Privacy Policy, wish to exercise your data rights, have a concern about how your personal data has been handled, or wish to lodge a formal privacy complaint, please contact our team using the details below:

If you submit a formal privacy complaint and are not satisfied with MBI666's response, you may refer the matter to the relevant data protection authority in the jurisdiction applicable to your circumstances. We will cooperate fully with any such authority in the course of any investigation.