Privacy Policy mbiwin –
Personal Data Protection for Malaysian Users

This Privacy Policy is issued by mbiwin ("we", "platform") and applies to all individuals who access or use the mbiwin platform via mbiwin.ws, including registered players, visitors, and anyone who interacts with our platform in any capacity.

This document sets out the personal data collection, use, storage, and protection practices of mbiwin, in accordance with the requirements of Malaysia's Personal Data Protection Act 2010 (PDPA) and related legislation.

Mbiwin is committed to handling all collected personal data in a responsible, secure manner that respects individual privacy. We only collect data that is strictly necessary to deliver the services you use.

Mbiwin collects personal data across several categories depending on the nature of your interactions with the platform. Below is a full list of the types of data we may collect:

Mbiwin collects your personal data through the following methods:

• During account registration – When you complete the mbiwin registration form with your name, phone number, and other required details.
• During the KYC (Know Your Customer) process – When you submit identity verification documents such as a copy of your MyKad to facilitate withdrawal processing.
• During financial transactions – When you make a deposit or withdrawal via Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, Maybank2u, CIMB Clicks, or any other supported payment method.
• Through use of the platform – Automatically collected while you use mbiwin, including betting records, games played, and session timestamps.
• Through cookies and similar technologies – When you visit mbiwin.ws, cookies are used to remember your preferences and enhance your browsing experience.
• Through customer support channels – When you contact the mbiwin support team via live chat or email.

Mbiwin uses your personal data only for legitimate and necessary purposes. Every use of data has a sound legal basis, whether grounded in contractual necessity, legal obligation, or the platform's legitimate interests.

• Creating and managing your mbiwin account, including secure login processes and identity verification.
• Processes deposits and withdrawals via your preferred Malaysian local payment methods.
• Complying with legal obligations including anti-money laundering (AML) and Know Your Customer (KYC) requirements.
• Provides effective and responsive customer support services in Bahasa Melayu.
• Sending important account notifications such as transaction confirmations, password changes, and security updates.
• Analysing usage patterns to improve the mbiwin platform experience for all users in Malaysia.
• Detecting and preventing fraud, account abuse, and unlawful activity on the platform.
• Sending marketing communications about mbiwin promotions and offers – only where you have given explicit consent.

Mbiwin does not share, sell, or disclose your personal data to third parties except in the following situations where it is necessary to deliver our services or comply with the law:

• Payment service providers – Transaction details are shared with payment processors such as Touch 'n Go eWallet, GrabPay, DuitNow, and approved FPX gateway providers to enable secure processing of financial transactions.
• Game software providers – Limited gameplay data is shared with third-party Live Casino and slots software providers for technical and troubleshooting purposes only.
• Regulatory authority – mbiwin is required to disclose data to the relevant Malaysian authorities when mandated by law or a valid court order.
• Anti-fraud agency – Limited data may be shared with approved security agencies or identity verification companies for fraud prevention and AML purposes.
• Business transfer – In the event of a merger, acquisition, or sale of mbiwin's assets, user data may be transferred as part of the transaction, with appropriate notice given to users.

All third parties that receive data from mbiwin are bound by strict data protection agreements and are not permitted to use that data for any purpose other than those specified.

The security of your personal data is mbiwin's highest priority. We implement a range of technical and organisational security measures to protect your data from unauthorised access, misuse, loss, or destruction.

Mbiwin retains your personal data for as long as your account remains active or as long as is necessary to provide our services. Following account closure, data will be retained for the minimum period required under Malaysian law (typically 7 years for financial records) before being securely deleted.

Mbiwin uses cookies and similar tracking technologies to keep the platform running smoothly and to understand how users interact with our website. The following types of cookies are used:

• Essential Cookies (Required) – Required for core platform functions such as login, session security, and language preferences. These cookies cannot be disabled without affecting platform functionality.
• Performance & Analytics Cookies – Helping us understand which pages are visited most frequently, how long users stay, and how they navigate the platform. This data is collected in aggregate and is not used to identify individuals.
• Functional Cookies – Remembering your preferences such as favourite sports, teams you follow, and display settings to provide a more personalised experience.
• Security Cookies – Used to detect suspicious activity, prevent fraud, and protect your account from unauthorised access.

As an mbiwin user protected under Malaysia's PDPA, you have the following rights in relation to your personal data. mbiwin is committed to respecting and facilitating the exercise of these rights:

• Right to Access – You have the right to request a copy of the personal data mbiwin holds about you. Such requests will be processed within 14 business days.
• Right to Rectification – You have the right to correct any inaccurate or incomplete personal data. Most information can be updated directly from within your mbiwin account profile settings.
• Right to Erasure – Under certain circumstances, you have the right to request deletion of your personal data. This is subject to mbiwin's legal obligations to retain certain records.
• Right to Restrict Processing – You have the right to request that mbiwin restrict the way your data is processed in certain circumstances.
• Right to Object – You have the right to object to the processing of your data for direct marketing purposes at any time.
• Right to Data Portability – You have the right to receive your data in a machine-readable format for transfer to another platform upon request.

To exercise any of the above rights, please contact the mbiwin support team via live chat or email at support@mbiwin.ws by clearly stating your request. We will verify your identity before processing any data-related request.

Mbiwin strictly prohibits individuals under the age of 18 from registering or using the platform. mbiwin's Sports Betting and casino platform is intended for adult users only.

Mbiwin does not knowingly collect or process personal data from individuals under the age of 18. Should we become aware that a minor's data has been collected without proper age verification, we will promptly delete that data and close the account in question.

Mbiwin reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, Malaysian legal requirements, or technological developments. Any significant changes will be communicated to you through:

• In-platform notifications on mbiwin when you next log in.
• Email to the address registered on your mbiwin account.
• Updates the "Last Updated" date at the top of this document.

We recommend reviewing this Privacy Policy periodically to stay informed about how mbiwin protects your data. Continued use of the mbiwin platform after any amendments are published will be considered your acceptance of the latest version of this Privacy Policy.

If you have any questions, concerns, or complaints regarding mbiwin's Privacy Policy or how we handle your personal data, our support team is available 24 hours a day, 7 days a week.