Privacy Policy

This Privacy Policy describes how mbi44 ("mbi44", "we", "us", "our") collects, uses, stores, discloses, and protects personal data relating to users ("you", "your") of the mbi44 online casino and sports betting platform accessible at https://mbi44.cam (the "Platform").

mbi44 is committed to handling your personal data responsibly and in compliance with applicable data protection laws and regulations. This Privacy Policy applies to all personal data we process in connection with your use of the Platform, whether you are a registered user, a visitor to the site, or a person who contacts us for support.

By registering an account or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, you should refrain from using the Platform.

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information relating to an identified or identifiable natural person, including name, identification number, contact details, financial data, and online identifiers.
• "Processing" means any operation performed on personal data, including collection, recording, storage, use, disclosure, transfer, or deletion.
• "Data Controller" means mbi44, which determines the purposes and means of processing personal data collected through the Platform.
• "Data Processor" means any third party that processes personal data on behalf of mbi44 pursuant to a contractual arrangement and in accordance with mbi44's instructions.
• "User" / "You" means any individual who accesses or uses the Platform, whether as a registered account holder or an unregistered visitor.
• "KYC Data" means identity verification data collected as part of the Know Your Customer process, including government-issued identification documents and proof of address.
• "Cookies" means small data files placed on your device by the Platform for the purpose of session management, analytics, and personalisation.

mbi44 collects personal data in the following categories, depending on how you interact with the Platform:

mbi44 does not knowingly collect sensitive personal data beyond what is strictly required for identity verification and regulatory compliance. Where sensitive data such as government-issued identification is collected as part of KYC, it is handled with enhanced security measures.

mbi44 collects personal data through the following channels:

• Direct collection: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting our support team, or responding to a survey or promotion.
• Automated collection: Technical and usage data collected automatically when you access the Platform, via cookies, server logs, and similar tracking technologies.
• Payment processors: Transaction reference data shared by our payment processing partners — including GrabPay, Touch 'n Go eWallet, Boost, DuitNow, FPX-linked banks such as Maybank, CIMB, and Public Bank — to confirm the status of deposits and withdrawals.
• Identity verification services: Where mbi44 uses a third-party KYC provider to assist with document verification, data may be cross-referenced against identity databases in accordance with applicable law.
• Fraud prevention and AML services: mbi44 may receive risk signals or flagged data from anti-fraud and anti-money laundering screening services as part of our regulatory obligations.

mbi44 processes your personal data only where we have a lawful basis to do so. The primary purposes for which we process personal data, and the corresponding legal basis for each, are as follows:

1. Account registration and platform operation — Processing is necessary to perform the contract between mbi44 and you as a registered user.
2. Identity verification (KYC) — Processing is necessary to comply with legal and regulatory obligations applicable to online gaming platforms, including age verification (21+) and anti-money laundering requirements.
3. Processing deposits and withdrawals — Processing is necessary to perform the contract and to facilitate transactions via Malaysian payment methods including GrabPay, Touch 'n Go eWallet, DuitNow, and FPX.
4. Customer support — Processing is necessary to perform the contract and to respond to your legitimate enquiries and complaints.
5. Fraud prevention and security — Processing is necessary for the legitimate interests of mbi44 in maintaining the security and integrity of the Platform.
6. Responsible gambling compliance — Processing is necessary for compliance with responsible gambling obligations and for the protection of your vital interests as a player.
7. Analytics and platform improvement — Processing is based on mbi44's legitimate interest in understanding how the Platform is used and improving the user experience over time.
8. Marketing communications — Where you have provided explicit consent, mbi44 may send you promotional emails or notifications about bonuses and platform updates. You may withdraw consent at any time.
9. Legal compliance — Processing is necessary to comply with applicable laws, regulatory requirements, or court orders.

mbi44 does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. We may share your personal data with third parties only in the following circumstances:

• Payment processors: To process deposits and withdrawals, we share necessary transaction data with our payment partners, including GrabPay, Touch 'n Go eWallet, Boost, DuitNow, and FPX-enabled banks. These partners are contractually bound to process data only for the purpose of completing transactions.
• KYC and identity verification providers: To verify your identity and comply with age verification requirements (21+), we may share identity documents with licensed third-party KYC service providers.
• Fraud prevention and AML screening services: We share data with fraud detection and anti-money laundering service providers where required to protect the Platform and comply with legal obligations.
• IT and hosting service providers: Our platform infrastructure relies on third-party hosting, cloud storage, and IT service providers who may process data on our behalf as Data Processors.
• Legal and regulatory authorities: mbi44 may disclose personal data to regulatory authorities, law enforcement agencies, or courts where required by applicable law, legal process, or in response to a valid legal request.
• Business transfers: In the event of a merger, acquisition, or sale of assets, personal data may be transferred as part of that transaction, subject to the same privacy protections as described in this policy.

mbi44 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files placed on your device when you visit the Platform. They help us maintain your session, remember your preferences, and understand how users interact with the site.

The following types of cookies are used on the Platform:

• Strictly necessary cookies: Essential for the Platform to function. These enable core features such as account login, session management, and security. These cannot be disabled without disrupting core Platform functionality.
• Functional cookies: Used to remember your preferences and settings, such as language preferences and display options, to personalise your experience on the Platform.
• Analytics cookies: Used to collect aggregated, anonymised data about how users navigate and interact with the Platform. This data helps us improve site performance and user experience. No personally identifiable information is linked to analytics cookies without your consent.
• Security cookies: Used to detect and prevent fraudulent activity, bot access, and other security threats.

You can manage cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. By continuing to use the Platform without adjusting your cookie settings, you consent to the use of cookies as described in this section.

mbi44 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform.
• Encrypted storage of sensitive personal and financial data at rest.
• Access controls restricting internal access to personal data on a strict need-to-know basis.
• Regular security assessments, penetration testing, and vulnerability scanning of the Platform infrastructure.
• Secure processing of payment data via certified payment processors — mbi44 does not store full payment credentials on its own servers.
• Multi-factor authentication requirements for internal administrative access to systems holding personal data.

While mbi44 takes all reasonable steps to protect your data, no internet-based platform can guarantee absolute security. You are also responsible for maintaining the confidentiality of your Account login credentials. If you suspect unauthorised access to your Account, please contact our support team immediately via live chat.

mbi44 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law and regulatory obligations. The following general retention principles apply:

• Active account data: Retained for the lifetime of your account, and for a period thereafter as required by applicable anti-money laundering, gaming, and financial regulations.
• KYC and identity verification documents: Retained for the period required by applicable regulatory obligations, which typically extends for a minimum of five years following account closure.
• Transaction records: Financial transaction data is retained for a minimum of five years in accordance with anti-money laundering legislation and financial record-keeping requirements.
• Support and communications data: Live chat transcripts and support correspondence are typically retained for up to two years, unless a longer period is required in connection with a dispute or regulatory matter.
• Technical and usage data: Aggregated analytics data may be retained indefinitely in anonymised form. Personally identifiable technical data is retained for up to 12 months.
• Marketing consent records: Records of your consent to receive marketing communications are retained for as long as you remain a registered user and for a reasonable period thereafter.

Upon expiry of the applicable retention period, personal data is securely deleted, destroyed, or anonymised so that it can no longer be attributed to an identifiable individual.

Subject to applicable law, you have the following rights in respect of the personal data mbi44 holds about you:

1. Right of Access: You have the right to request a copy of the personal data mbi44 holds about you, together with information about how it is processed.
2. Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data. You may update certain account details directly through your Account settings.
3. Right to Erasure: In certain circumstances, you have the right to request deletion of your personal data. Note that mbi44 may be required to retain certain data to comply with legal obligations, even following an erasure request.
4. Right to Restrict Processing: You have the right to request that mbi44 restricts the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or object to its use.
5. Right to Data Portability: Where processing is based on your consent or the performance of a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format.
6. Right to Object: You have the right to object to the processing of your personal data where processing is based on mbi44's legitimate interests. You also have the right to object to the use of your data for direct marketing at any time.
7. Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of the above rights, please contact our support team via live chat or by emailing [email protected]. We will respond to your request within a reasonable timeframe and in accordance with applicable law. We may need to verify your identity before processing certain requests.

The Platform is strictly intended for adults aged 21 and above. mbi44 does not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory part of the account registration and KYC process.

If mbi44 becomes aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data and suspend the associated account. If you believe that a person under 21 has registered on the Platform, please contact our support team immediately.

The Platform may contain references to third-party services or payment providers (such as GrabPay, Touch 'n Go eWallet, Boost, or Visa/Mastercard) for informational purposes. These third parties operate their own independent privacy policies and data practices, which are outside mbi44's control.

mbi44 is not responsible for the privacy practices of any third-party service providers, payment processors, or other external entities. We encourage you to review the privacy policies of any third-party services you use in connection with your mbi44 account.

In certain circumstances, the operation of the Platform may require personal data to be transferred to, stored in, or processed in jurisdictions outside of Malaysia. This may occur, for example, where mbi44 uses cloud infrastructure providers or third-party service partners operating in other countries.

Where such transfers occur, mbi44 takes appropriate steps to ensure that your personal data continues to receive a level of protection consistent with the principles set out in this Privacy Policy. This may include entering into data transfer agreements with the relevant third parties or relying on other lawful transfer mechanisms.

By using the Platform, you acknowledge and consent to the transfer of your personal data to jurisdictions outside Malaysia where necessary for the purposes described in this Privacy Policy.

mbi44 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or the features of the Platform. When material changes are made, we will endeavour to notify registered users by email or via an on-platform notification prior to the changes taking effect.

The "Last Updated" date at the top of this page will be revised each time the Privacy Policy is amended. Your continued use of the Platform following publication of a revised Privacy Policy constitutes your acknowledgement of the updated terms.

We encourage you to review this page periodically to stay informed about how mbi44 is protecting your personal data.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way mbi44 handles your personal data, please contact us through any of the following channels:

• Live Chat: Available 24/7 directly on the Platform — the fastest and most direct way to reach our support and data team.
• Email: [email protected] — for formal written data requests, including access requests, erasure requests, and complaints. Please allow up to 5 working days for a response to formal data requests.

When submitting a data rights request by email, please include your registered Account username and a brief description of your request so we can verify your identity and process your request efficiently.