Official Data Protection

Privacy Policy mbi123 — Personal Data Protection for Malaysian Players

At mbi123, your privacy is more than a legal obligation — it is a trust we take seriously. This document transparently explains how we collect, use and protect your personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).

Updated: 1 January 2026
Version 3.1
Your Data, Your Rights

Mbi123 is fully compliant with Malaysia's PDPA. You have the right to access, correct and delete your personal data.

Compliant with Malaysia's PDPA 2010
256-bit SSL Encryption
No Data Sales
24 × 7 Support
Regular Security Audits

Mbi123's Privacy Commitment to Malaysian Players

Six core principles that guide how mbi123 handles your personal data responsibly.

Bank-Grade Encryption

All data transmitted between your device and mbi123's servers is protected by 256-bit SSL encryption — the same security standard used by leading Malaysian banking institutions such as Maybank and CIMB. No third party can intercept your data in transit.

Full Control Over Your Data

As an mbi123 player, you have the full right to access, correct, update, or request deletion of your personal data at any time. Submit your request by email to support@mbi123.xyz and we will respond within 3 business days.

No Sale of Data to Third Parties

Mbi123 has never and will never sell, rent or trade players' personal data to any third party for marketing purposes. Your data is used solely for legitimate platform operations as expressly stated in this policy.

Full PDPA Malaysia Compliance

Mbi123's Privacy Policy is designed and fully implemented in accordance with the requirements of Malaysia's Personal Data Protection Act 2010 (PDPA). We appoint an internal Data Protection Officer to ensure that all our practices remain compliant with current legislation.

Minimum Data Collection

Mbi123 only collects data that is strictly necessary to provide services to you. We do not collect excessive or irrelevant data. Every type of data we retain has a clearly defined purpose and a set retention period.

Immediate Breach Notification

In the event of a security incident involving your personal data, mbi123 is committed to notifying you within 72 hours of detecting the incident — exceeding the minimum requirement set under Malaysian law.

Important Note: This Privacy Policy explains how mbi123 collects, uses, stores, and protects your personal data. By registering an account or using the mbi123 platform, you acknowledge that you have read and understood this policy. If you have any questions, our team is ready to assist at support@mbi123.xyz.

1Introduction and Scope of This Privacy Policy

Mbi123 is an online Sports Betting and casino platform serving the needs of Malaysian players. We understand that your trust is the foundation of the relationship we build together — and that trust begins with transparency about how your personal data is handled at every stage of your experience on the mbi123 platform.

This Privacy Policy applies to all individuals who use any aspect of the mbi123 platform, including the mbi123.xyz website, all online services, mobile applications, live chat, email communications, and all other interactions with mbi123. It also applies to those who browse the website without registering an account, as basic usage data is collected in that process as well.

As the data controller under Malaysia's Personal Data Protection Act 2010 (PDPA), mbi123 takes full responsibility for the protection of personal data in our possession. We appoint an internal Data Protection Officer (DPO) who is responsible for ensuring that all our data processing practices comply with applicable legal requirements in Malaysia at all times.

This policy is written in Bahasa Melayu as the primary language to facilitate understanding among Malaysian players. In the event of any ambiguity in translation or interpretation, the Bahasa Melayu version shall be definitive and binding.

Quick Summary: This policy explains what data mbi123 collects, why it is collected, who can access it, how long it is retained, and what your rights are as a player in relation to that data. Read the full document for a complete picture, or contact us if anything is unclear.

2Personal Data We Collect

2.1 Data You Provide Directly

When you register and use the mbi123 platform, you provide us with the following personal data directly:

  • Identity Information: Full name, date of birth, identity card number (MyKad) or passport number
  • Contact Information: Email address, mobile phone number, residential address
  • Financial Information: Bank account number, account holder name, and payment method details used (FPX, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow)
  • Verification Documents: MyKad or passport copy for KYC (Know Your Customer) verification, bank statements or proof of address documents when required
  • Account Information: Username, password (stored as an irreversible hash), account preferences and settings

2.2 Automatically Collected Data

When you use the mbi123 platform, our systems automatically record the following technical information for security and service improvement purposes:

  • Device Data: Device type, operating system, phone model, screen resolution, browser version
  • Network Data: IP address, internet service provider (ISP) name, approximate geographic location based on IP
  • Activity Data: Pages visited, session duration, clicks and in-platform interactions, matches viewed, and bets placed
  • Transaction Data: Complete history of deposits, withdrawals, bets and winnings
  • Real-Time Data: Login session information, including the time and location of each access

2.3 Data Types & Purpose of Collection Schedule

Data Type Primary Purpose Legal Basis
Name & IC/Passport Identity verification (KYC), fraud prevention Legal obligation
Email & Phone Service communications, security notifications Contract performance
Payment Details Processing of deposits and withdrawals Contract performance
Betting History Platform operations, responsible gambling Legitimate interests
IP Address & Device Account security, fraud prevention Legitimate interests
Game Selection Personalise your experience, game recommendations Consent

3How We Use Your Personal Data

Mbi123 uses collected personal data solely for legitimate, stated purposes. We will not use your data for any other purpose without first informing you. The following are the primary purposes for which your data is used at mbi123:

3.1 Platform Operations & Services

Your data is used to run the day-to-day operations of the mbi123 platform, including processing account registrations, identity verification, deposit processing via FPX, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay or DuitNow, withdrawal processing, management of betting and winnings records, and providing access to all games and markets on the platform — including Malaysian Super League football, badminton, e-sports, live casino, slots and poker.

3.2 Security and Fraud Prevention

Mbi123 uses personal data and technical data to monitor suspicious activity, identify fraud attempts, prevent money laundering, detect the use of multiple accounts, and verify the legitimacy of every financial transaction. Our anti-fraud monitoring system operates 24 hours a day to protect the accounts of all Malaysian players on the mbi123 platform.

3.3 Communication & Customer Support

Your contact details are used to send important account notifications such as deposit confirmations, withdrawal confirmations, security alerts and policy updates. With your consent, we also use your email and phone number to send promotional information and the latest mbi123 bonus offers. You may withdraw this consent at any time through your account settings or by contacting our support team.

3.4 Responsible Gambling

Your betting activity history on mbi123 is analysed internally to identify patterns that may indicate problem gambling. This analysis is conducted solely to protect your interests — not for marketing purposes. If our systems detect concerning patterns, the mbi123 responsible gambling team may reach out to you with relevant support information.

Limited Purpose Principle: mbi123 will not use your data for purposes unrelated to platform operations or not stated in this policy without first obtaining your explicit consent. If we wish to use your data for a new purpose, you will be informed and given the option to consent or decline.

4Data Sharing and Disclosure

4.1 No Data Sale Policy

Mbi123 does not sell, rent, or trade player personal data to any third party for marketing or commercial purposes. This is our absolute commitment and will not change without clear notice to all players and an opportunity to opt out.

4.2 Authorised Third-Party Service Providers

Your personal data may be shared with selected service providers who assist mbi123 in its operations, including:

  • Payment Processors: FPX, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, and DuitNow operators process your transactions — only the minimum data required for each transaction is shared
  • Identity Verification Providers: Accredited third-party KYC services for verifying player identity on high-value transactions
  • Cloud Service Providers: Server infrastructure that stores and processes mbi123 platform data under strict security standards
  • Gaming Software Providers: Minimal game transaction data shared with providers such as Evolution Gaming for Live Casino games

All third-party providers are required to sign data processing agreements stipulating that they may only use the data received for approved purposes and must comply with the security standards set by mbi123.

4.3 Disclosure to Authorities

Mbi123 may disclose personal data to Malaysian authorities, including the police, the Malaysian Anti-Corruption Commission, Bank Negara Malaysia, or other regulatory bodies, where required by law or a valid court order. In such cases, mbi123 will endeavour to notify you in advance unless doing so is prohibited by law or would compromise an active investigation.

Fraud Warning: mbi123 will never contact you to request your password, PIN or bank account OTP. If you receive a call or message claiming to be from mbi123 asking for such information, it is a scam. Please report it to our support team immediately.

5Data Retention Period

Mbi123 does not retain your personal data longer than necessary for the purposes outlined in this policy. The following are the retention period guidelines for each major data category:

  • Active Account Data: Retained for the duration of the active account and up to 7 years after account closure for legal and tax compliance purposes
  • Financial Transaction Records: Retained for a minimum of 7 years in compliance with Malaysia's Anti-Money Laundering Act (AMLA)
  • Security & Activity Logs: Retained for 2 years for security incident investigation purposes where required
  • KYC Document Data: Retained for the duration of the active account and 7 years after account closure
  • Support Communication Data: Retained for 3 years as a complaint resolution record
  • Non-Essential Cookie Data: Disposed of in accordance with the expiry period set for each cookie, typically between 30 days and 1 year

When data is no longer needed, mbi123 will securely delete or anonymise it in accordance with established data deletion procedures. Anonymised data is no longer considered personal data and may be retained for statistical analysis purposes without a time limit.

6Data Security Measures

Mbi123 implements multiple layers of technical and operational security to protect your personal data from unauthorised access, loss, destruction, or accidental disclosure.

6.1 Technical Security

  • 256-bit SSL/TLS Encryption: All data communications are encrypted using the latest SSL/TLS technology
  • Network Isolation: Database servers are isolated from the public internet behind multiple layers of firewalls
  • Two-Factor Authentication (2FA): Available and encouraged for all mbi123 player accounts
  • 24/7 Monitoring: An intrusion detection system (IDS) operates continuously to identify threats in real time
  • Automated Data Backup: Daily backups of critical data to geographically separate secure locations

6.2 Internal Access Control

Mbi123 staff access to player personal data is restricted on a need-to-know basis. Only personnel who require access to specific data to carry out their duties are permitted to do so. All internal access is logged and monitored automatically. Any unusual access immediately triggers an alert for investigation.

6.3 Regular Security Audits

Mbi123 undergoes independent security audits at least once a year, conducted by accredited third-party cybersecurity firms. The findings are used to identify and address vulnerabilities before they can be exploited. Penetration testing is also carried out on a regular basis to assess the resilience of our defence systems.

Shared Responsibility: While mbi123 takes all reasonable steps to protect your data, the security of your account also depends on your own actions. Use a strong password, enable 2FA, never share your login credentials, and always log out after using the platform on a shared device.

7Your Rights as an mbi123 Player

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you as an mbi123 player have the following rights regarding your personal data:

Right of Access

You have the right to request a copy of the personal data mbi123 holds about you. Requests will be processed within 21 working days. A nominal fee may be charged in accordance with applicable law.

Right to Rectification

If your personal data in mbi123's records is inaccurate or incomplete, you have the right to request a correction. Simple updates can be made directly through your account settings.

Right to Erasure

Under certain circumstances, you may request the deletion of your personal data. This right may be limited where mbi123 has a legal obligation to retain that data, such as financial records required under AMLA.

Right to Restrict Processing

You may request a restriction on the processing of your data in certain situations, such as when you are disputing the accuracy of your data or awaiting the outcome of a deletion request.

Right to Data Portability

You have the right to receive the personal data you have provided to mbi123 in a machine-readable format (such as CSV) for transfer to another operator, should you choose to do so.

Right to Object

You may object to the processing of your data for specific purposes, such as direct marketing. Once an objection to marketing is received, mbi123 will immediately cease using your data for that purpose.

To exercise any of the rights above, please contact the mbi123 Data Protection Officer by email support@mbi123.xyz with the subject line "Personal Data Rights Request". Please include your account number and the type of request you are making. We will acknowledge receipt of your request within 3 business days and resolve it within 21 business days.

8Cookies, Tracking & Similar Technologies

Mbi123 uses cookies and similar tracking technologies to enhance your experience on the platform, maintain account security, and understand how players use our services. The following are the types of cookies we use:

You can manage cookies through your web browser settings. Disabling certain cookies may affect the functionality of the mbi123 platform. Note: Disabling essential cookies will impair your ability to log in and use the platform securely.

9Protection of Minors

The mbi123 platform is strictly restricted to individuals aged 18 and above. mbi123 does not knowingly collect personal data from individuals under the age of 18. The mbi123 registration process requires age verification and identity documentation confirming that the applicant is 18 years of age or older.

If a parent or guardian believes their minor child has registered a mbi123 account without their knowledge, please contact us immediately at support@mbi123.xyz. We will investigate, close the account, and delete all associated data within 72 hours of receiving a verified report.

Strict Age Limit: Registration on mbi123 by individuals under the age of 18 is a serious violation of our terms of service. All balances and winnings in such accounts will be forfeited and no refunds will be issued. mbi123 fully supports efforts to protect minors from the harms of gambling.

10Cross-Border Data Transfers

As an online platform, mbi123 operates server infrastructure that may be located across multiple geographic locations to ensure platform performance and reliability. In such cases, your personal data may be stored or processed on servers located outside Malaysia.

Any transfer of personal data outside Malaysia by mbi123 or our service providers will only be made to countries or entities that provide a level of data protection equivalent to or greater than Malaysia's PDPA requirements. Appropriate data transfer agreements will be in place to safeguard your rights in all such transfers.

Data transfers to Malaysian local payment processors — including the FPX network, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay and DuitNow — remain within Malaysia and are subject to Bank Negara Malaysia regulations and applicable local laws.

11Amendments to This Privacy Policy

Mbi123 may update this Privacy Policy from time to time to reflect changes in law, technology or our operational practices. The latest version of this Privacy Policy is always available on this page, with a clear "last updated" date displayed at the top of the document.

For material amendments (significant changes that affect your rights), mbi123 will notify you via your registered email and in-platform notifications at least 14 days before the changes take effect. This gives you sufficient time to review the updates and make an informed decision.

Continued use of the mbi123 platform after the effective date of any amendment constitutes acceptance of the updated policy. If you do not agree with the changes, you have the right to close your account and withdraw all remaining balance before the effective date.

12Contact mbi123's Data Protection Officer

If you have any questions, concerns, or complaints regarding how mbi123 handles your personal data, we encourage you to reach out to our Data Protection Officer (DPO) through the following channels:

  • DPO Email: support@mbi123.xyz (subject: Privacy Policy Enquiry)
  • Live Chat: Available 24 hours a day, 7 days a week via the mbi123 platform
  • Response Time: Acknowledged within 3 business days, resolved within 21 business days

If you are not satisfied with mbi123's response to your privacy request or complaint, you have the right to lodge a complaint with the Department of Personal Data Protection (JPDP) Malaysia, the regulatory body for PDPA compliance in Malaysia.

Mbi123 takes every privacy complaint seriously and is committed to resolving each one fairly and promptly. The trust of our Malaysian players is our most valued asset, and we will always strive to be worthy of it.

Thank you for taking the time to read mbi123's Privacy Policy in full. This transparency reflects our commitment to you as a valued Malaysian player. If any part is unclear, please don't hesitate to reach out — our team is Bahasa Melayu-speaking and always ready to help.

Your Data is Fully Protected by mbi123

Play with Peace of Mind — Your Privacy Is Secured at mbi123

Register an mbi123 account today and enjoy a Sports Betting, Live Casino and e-sports experience that is secure, fair and truly respectful of your privacy as a Malaysian player.

PDPA 2010 Compliant 256-bit SSL Encryption No Data Sales 24/7 Bahasa Malaysia Support
Bahasa Melayu