Privacy Policy

Privacy Policy mbiwin
Your Personal Data Protection

Your privacy is our priority. mbiwin is committed to ensuring that every piece of personal information you share with us is handled with full responsibility, security, and transparency in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).

Updated: 1 January 2026
🔐
mbiwin Privacy Commitment
PDPA 2010 Compliance
256-bit SSL Encryption
No Data Selling
Right of Access & Correction

How mbiwin Protecting Your Information

Six data protection principles we practise every day to ensure your privacy is always upheld.

Layered Encryption

All data transmitted between your device and mbiwin servers is protected with industry-standard 256-bit SSL encryption, ensuring your information cannot be intercepted by any third party.

Secure Data Storage

Your personal data is stored on servers protected by strict access controls, continuous monitoring, and regular backups to prevent loss or unauthorised access.

No Data Selling

Mbiwin has never and will never sell, rent, or share your personal information with third-party marketers for advertising or promotional purposes without your consent.

Strict Access Control

Only mbiwin staff who require access to your data to perform their duties are permitted to do so, with every access logged and actively monitored.

PDPA 2010 Compliance

Mbiwin's Privacy Policy is fully designed to comply with Malaysia's Personal Data Protection Act 2010, ensuring your rights as a data subject are always respected and protected.

Review & Updates

This Privacy Policy is reviewed periodically to ensure it remains relevant and aligned with the latest technological developments and data protection legislation.

01 Introduction

Mbiwin ("we", "our platform") takes user privacy very seriously. This Privacy Policy explains in detail how we collect, use, store, protect, and share your personal information when you use the website, mobile app, or any services offered by mbiwin.

This document is prepared in accordance with the requirements of Malaysia's Personal Data Protection Act 2010 (PDPA). By registering an account or using the mbiwin platform, you agree to how we handle your personal data as described in this Privacy Policy.

Please read this Privacy Policy carefully. If you do not agree with any part of it, please stop using the platform and contact us to close your account.

02 Information We Collect

We collect various types of information depending on how you interact with the mbiwin platform. Below are the categories of information we collect:

Information You Provide Directly

  • Full name as shown on official identification documents.
  • Date of birth for age verification purposes.
  • Email address and phone number for account communications.
  • Current residential address.
  • Bank account or e-wallet details for transaction processing purposes.
  • A copy of your identification document (MyKad or passport) for the KYC process.

Automatically Collected Information

  • IP address and general location information of your device.
  • Device type, operating system, and web browser version.
  • Gaming activity data including bets placed, winnings, and session duration.
  • Financial transaction logs including deposits and withdrawals.
  • Platform usage data including pages visited and features used.
Data Type Primary Purpose Retention Period
Identity Information KYC verification & legal compliance Throughout the active account period + 7 years
Transaction Data Payment processing & financial audits 7 years after the transaction
Game Data Dispute resolution & platform analytics 3 years after the session
Technical Logs Security & troubleshooting 90 days
Cookie Data Platform functionality & user experience Until cookies are deleted

03 How We Use Your Information

Mbiwin uses your personal information only for legitimate and reasonable purposes. We do not use your data for purposes beyond the scope stated in this Privacy Policy without first obtaining your consent.

  • Account Management: Creating and managing your account, including identity verification and user eligibility.
  • Transaction Processing: Processing deposits, withdrawals, and all financial transactions on the platform.
  • Legal Compliance: Meeting legal obligations including PDPA requirements, anti-money laundering (AML) compliance, and KYC.
  • Platform Security: Detecting and preventing fraud, account abuse, and cybersecurity threats.
  • Customer Support: Providing technical support and resolving your disputes or enquiries.
  • Platform Communications: Sending important notifications related to your account, transactions, and policy changes.
  • Service Improvements: Analysing usage patterns to enhance the platform user experience.

You may contact us at any time to withdraw consent for the use of your data for marketing purposes. Withdrawal of consent will not affect the operation of your existing account.

04 Sharing Information With Third Parties

Mbiwin does not sell, rent, or disclose your personal information to third parties for their own marketing purposes. However, there are specific circumstances where we may need to share your data with carefully selected third parties:

  • Payment Providers: Required transaction information is shared with authorised payment service providers to process your deposits and withdrawals.
  • Game Providers: Minimum required data is shared with third-party game providers to enable you to play on their platforms through mbiwin.
  • Authorities: Information disclosed to law enforcement agencies or relevant authorities when required by law or court order.
  • Technical Service Providers: Cloud infrastructure and technical service providers bound by strict confidentiality agreements.

All third parties we work with are bound by strict data protection agreements and are required to use your information solely for the stated purposes. mbiwin is responsible for ensuring all such third parties comply with data protection standards consistent with our own policy.

05 Personal Data Security

Mbiwin continuously invests in security infrastructure to ensure your personal data is always protected against unauthorized access, loss, modification, or unintentional disclosure.

  • 256-bit SSL encryption for all data communications between your device and mbiwin servers.
  • Encryption of sensitive data in databases using industry-recognised algorithms.
  • Two-factor authentication (2FA) available for all user accounts.
  • 24/7 security monitoring with automated anomaly detection and suspicious activity alerts.
  • Regular penetration testing conducted by independent security experts.
  • Mandatory security awareness training for all mbiwin staff.

While we take all reasonable security measures, no system can guarantee absolute security. You are also responsible for keeping your password and account login credentials safe.

06 Cookies & Tracking Technologies

The mbiwin platform uses cookies and similar tracking technologies to enhance your experience, ensure the platform functions correctly, and analyse usage patterns in aggregate.

Types of Cookies We Use

  • Essential Cookies: Required for core platform operations such as login, game sessions, and security. These cookies cannot be disabled.
  • Performance Cookies: Helps us understand how users interact with the platform for improvement purposes. All data is collected anonymously.
  • Functional Cookies: Storing user preferences such as language, display settings, and login details for your convenience.

You may manage or disable non-essential cookies through your web browser settings. Please note that disabling certain cookies may affect platform functionality and your user experience.

07 Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010, you have certain rights regarding the personal data we hold about you. mbiwin is committed to respecting and facilitating the exercise of these rights:

Right of Access

You have the right to request a copy of the personal data we hold about you.

Right to Rectification

You have the right to request correction of inaccurate or incomplete personal data.

Right to Erasure

You may request deletion of your personal data, subject to our legal obligations.

Right to Object

You may object to the processing of your data for specific purposes such as direct marketing.

Right to Data Portability

You have the right to receive your personal data in a machine-readable format.

Right to Restriction

You may request restriction of your data processing under certain circumstances as defined by law.

To exercise any of the above rights, please contact our data protection team by email at [email protected]. We will respond to your request within 21 business days.

08 Data Retention & Deletion

Mbiwin retains your personal data for as long as necessary to fulfil the purposes described in this Privacy Policy, or as required by applicable law. When data is no longer needed, we will securely delete or anonymize it.

Retention periods vary depending on the type of data and legal requirements. Generally, account and transaction data is retained for 7 years after account closure to meet legal and financial audit requirements in Malaysia. Technical data and system logs are kept for a shorter period.

Once the retention period expires, all data is securely deleted using industry-standard methods to ensure it cannot be recovered.

09 Cross-Border Data Transfers

In the course of its operations, mbiwin may transfer your personal data to servers or processing facilities located outside Malaysia. Any such transfer will be carried out with adequate safeguards, including contractually binding data transfer agreements that ensure a level of protection equivalent to Malaysia's PDPA.

We only work with cloud service and technical infrastructure providers that hold recognised security certifications and have a strong track record in customer data protection.

10 Child Protection

The mbiwin platform is strictly for individuals aged 18 and above. We do not knowingly collect personal information from anyone under 18. A rigorous KYC process is implemented during registration to ensure compliance with this age requirement.

If we discover that we have inadvertently collected personal data from minors, we will take immediate steps to delete that information and close the account in question.

11 Privacy Policy Amendments

Mbiwin reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, legal requirements, or platform services. The latest version will always be published on this page with an updated revision date.

For significant changes, we will notify you via in-platform notification or your registered email at least 7 days before the changes take effect. Continued use of the platform after the notification period is considered acceptance of the updated Privacy Policy.

12 Contact Our Data Protection Officer

If you have any questions, concerns, or wish to exercise your rights regarding personal data, you may contact mbiwin's Data Protection Officer (DPO) through the following channels:

  • Privacy Email: [email protected]
  • General Support Email: [email protected]
  • Live Chat: Available 24/7 on the mbiwin platform
  • Target response time: 21 business days for data-related requests

You also have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia if you believe your rights under PDPA 2010 have been violated, after contacting us first.

For more information on how we protect your interests as a user, please visit the Responsible Gaming and Terms and Conditions us.

Your Privacy is Protected, Your Game is Secure

With a transparent privacy policy and layered security, you can play on mbiwin with full confidence. Join the millions of Malaysian players who trust our platform today.

PDPA-Protected Data 256-bit SSL Encryption No Data Selling
Bahasa Melayu