Privacy Policy

MBI96 ("MBI96", "we", "us", "our") respects the privacy of every individual who accesses or uses the MBI96 online gaming platform, accessible at https://mbi96.cam and any associated mobile or web interfaces (collectively, the "Platform").

This Privacy Policy ("Policy") describes how MBI96 collects, uses, stores, discloses, and protects personal information obtained from users ("you", "User", "Player") in the course of providing our online casino, live dealer, and sports betting services.

This Policy applies to all Users of the Platform, including visitors who have not registered an account, registered members, and VIP members. It should be read in conjunction with our Terms & Conditions, which govern your use of the Platform and are incorporated herein by reference.

Throughout this Privacy Policy, the following terms carry the meanings set out below:

MBI96 acts as the Data Controller in respect of all personal data collected from Users of the Platform. As Data Controller, MBI96 is responsible for determining the purposes for which your personal data is processed and for ensuring that such processing is lawful, fair, and transparent.

MBI96 operates the Platform under international online gaming licensing frameworks. Our data processing obligations are governed by the applicable data protection legislation of our operating jurisdiction.

Queries relating to data protection, including requests to exercise your data rights, should be directed to MBI96's support team using the contact details provided in Section 16 of this Policy.

MBI96 collects personal data across several categories depending on your interaction with the Platform. The table below summarises the categories of data we collect and examples of the specific data points within each:

MBI96 does not intentionally collect special categories of sensitive personal data (such as health data, racial or ethnic origin, or religious beliefs) unless specifically required for responsible gambling support purposes and only with your explicit consent.

MBI96 collects personal data through the following means:

• Direct submission: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting support, or entering a promotion;
• Automated technical collection: Data collected automatically when you access the Platform, including IP addresses, session data, device identifiers, and interaction logs via cookies and similar tracking technologies;
• Payment processing partners: Transaction confirmation data received from payment gateway partners, including Maybank, CIMB, Public Bank, FPX, Touch 'n Go, and others, to verify successful deposits and process withdrawals;
• Identity verification providers: Data received from third-party KYC/AML service providers engaged to verify the authenticity of identity documents submitted during account registration;
• Publicly available sources: Limited data obtained from legally permitted public registries or databases for compliance and fraud prevention purposes.

MBI96 processes your personal data for the following defined purposes only. Where a new processing purpose arises that is materially different from those listed below, MBI96 will notify you and, where required, seek your consent before processing begins.

MBI96 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil our obligations under the Terms & Conditions — including account creation, payment processing, and gameplay provision;
• Legal obligation: Processing required to comply with applicable laws and regulations, including AML/KYC requirements and data retention obligations imposed by our operating licence;
• Legitimate interests: Processing that serves MBI96's legitimate business interests — such as fraud prevention, platform security, and service improvement — where these interests are not overridden by your privacy rights;
• Consent: Processing based on your freely given, specific, and informed consent — in particular, for direct marketing communications and optional analytics. Consent may be withdrawn at any time.

MBI96 does not sell, rent, or trade your personal data to any third party. Your personal data may be disclosed to the following categories of recipients only where necessary and under appropriate data protection safeguards:

• Payment service providers: Banks and e-wallet operators (such as Maybank, CIMB, Public Bank, Hong Leong, Touch 'n Go, Boost, GrabPay, DuitNow, FPX) to process financial transactions;
• KYC/AML service providers: Third-party identity verification and compliance screening providers engaged to fulfil our regulatory obligations;
• Technology service providers: Cloud hosting, cybersecurity, data analytics, and IT support providers who process data on our behalf under binding data processing agreements;
• Game studio partners: Licensed game providers who receive minimum necessary technical identifiers (not full personal profiles) to facilitate gameplay and resolve game-specific disputes;
• Regulatory authorities and law enforcement: Where required by law, court order, or a lawful request from a competent regulatory or enforcement authority.

As an internationally operating platform, MBI96 may transfer your personal data to servers or service providers located in countries outside of Malaysia. Where such transfers occur, MBI96 ensures that adequate safeguards are in place to protect your data, including:

• Transfers to countries with recognised data protection standards;
• Standard contractual clauses or equivalent data transfer mechanisms incorporated into contracts with receiving parties;
• Internal data transfer policies requiring all MBI96 entities and group companies to maintain equivalent data protection standards.

By using the Platform, you acknowledge and consent to your personal data being transferred internationally in accordance with this Section.

MBI96 retains your personal data for no longer than is necessary to fulfil the purposes for which it was collected, or as required by applicable law or regulatory obligation. Our standard retention periods are as follows:

At the end of the applicable retention period, your personal data will be securely deleted or anonymised in accordance with MBI96's data disposal procedures.

MBI96 implements appropriate technical and organisational security measures to protect your personal data against accidental loss, unauthorised access, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit;
• Encryption at rest for sensitive data fields including KYC documents and financial identifiers;
• Role-based access controls, limiting internal data access to authorised personnel only;
• Regular security audits, penetration testing, and vulnerability assessments;
• Two-factor authentication requirements for administrative system access;
• Incident response procedures to identify, contain, and report data breaches in a timely manner.

MBI96 uses cookies and similar tracking technologies on the Platform to support core functionality, improve user experience, and gather aggregated analytics data. The categories of cookies we use are as follows:

You may control non-essential cookies through your browser settings. Disabling essential cookies will affect the functionality of the Platform and may prevent you from accessing your account. MBI96 does not use third-party advertising or behavioural tracking cookies.

Subject to applicable law and certain limited exceptions (such as legal retention obligations), you have the following rights in respect of your personal data held by MBI96:

1. Right of Access: You may request a copy of the personal data MBI96 holds about you. We will provide this in a structured, commonly used format within 30 calendar days of a verified request.
2. Right to Rectification: You may request that we correct any inaccurate or incomplete personal data. Where data accuracy is critical (e.g., name or date of birth), updated KYC documents may be required.
3. Right to Erasure ("Right to Be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent, or where processing is unlawful. This right is subject to overriding legal retention obligations.
4. Right to Restriction: You may request that we restrict processing of your data in certain circumstances, such as while the accuracy of the data is contested, or while an objection to processing is pending.
5. Right to Data Portability: Where processing is based on consent or contract, you may request a copy of your data in a portable, machine-readable format for transfer to another controller.
6. Right to Object: You may object to processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, subject to compelling grounds for the processing to continue.
7. Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, contact MBI96 support with the subject line "Data Rights Request". You will be required to verify your identity before the request is processed. MBI96 will respond within 30 calendar days.

Age verification is a mandatory step in the KYC process. Any account found to be registered by a person under the age of 21 will be immediately closed, and all associated personal data will be deleted or returned to its verifiable source in accordance with applicable law.

If you have reason to believe that a person under 21 has registered an account with MBI96, please contact our support team immediately at [email protected] (displayed as plain text — this is not a clickable link).

MBI96 reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, our data processing practices, or the services we provide. Amendments will take effect upon publication of the revised Policy on the Platform.

Where amendments are material — for example, changes to how your data is shared or the introduction of new processing purposes — MBI96 will provide advance notice via email to your registered address or via an in-Platform notification, where reasonably practicable.

The effective date at the top of this Policy indicates the date of the most recent revision. Your continued use of the Platform after the effective date of any amendment constitutes acceptance of the updated Policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or MBI96's data processing practices, please contact our support team. Our data protection contact point is available around the clock.

For information about responsible gambling tools and self-exclusion, visit our Responsible Gambling page. For a full overview of your rights and obligations as a Platform user, see our Terms & Conditions.