Mbs66 Privacy Policy – Data Protection & Member Security

1. Our Introduction & Commitment

MBS66 values the privacy of every member who trusts our platform. This Privacy Policy document explains in detail how MBS66 collects, uses, stores, protects, and in certain circumstances, discloses your personal information when you use our services.

As an online gaming platform serving users in Malaysia, we understand how important your trust is. That is why we are committed to being fully transparent about our data management practices. This policy covers all your interactions with mbs66 — whether through our official website, iOS and Android mobile apps, customer support live chat, or any of our other official communication channels.

2. Information We Collect

MBS66 only collects information necessary to provide a safe, fair, and high-quality service to all members. Here are the types of data we collect:

2.1 Data You Provide Directly

• Registration information: full name, date of birth, identity card number (MyKad), email address, and phone number.
• Identity verification documents (KYC): copies of MyKad, passport, or other official identity documents requested during the verification process.
• Financial information: bank account numbers, e-wallet details (Touch 'n Go, GrabPay), or crypto wallet information for deposit and withdrawal purposes.
• Customer support communications: any information you share during live chat sessions, email, or other communication channels with our team.

2.2 Automatically Collected Data

• Technical data: IP address, web browser type, operating system, screen resolution, and device information.
• Usage data: pages visited, session duration, games played, betting history, and platform usage patterns.
• Location data: general location based on IP address for legal jurisdiction compliance purposes.
• Cookie and tracking data: session information, user preferences, and platform analytics data.

Data Types	Purpose of Collection	Retention Period
Registration Data	Identity verification, account operations	Throughout active account + 7 years
KYC Documents	AML/KYC Compliance	5 years after account closure
Transaction Data	Payment processing, auditing	7 years (legal requirement)
Usage Data	Platform improvement, analytics	2 years
Technical Data	Security, fraud prevention	12 months
Communication Records	Customer support, complaint resolution	3 years

3. How We Use Your Data

Every piece of data we collect has a clear and lawful purpose. mbs66 uses your personal information for the following purposes:

• Processing account registration and verifying your identity through the required KYC process.
• Processing deposits, withdrawals, and other financial transactions securely and promptly.
• Providing responsive and personalised customer support services.
• Detecting and preventing fraud, money laundering, and other illegal activities that could harm the platform and other members.
• Ensuring compliance with applicable laws, regulations, and regulatory body requirements.
• Sending important communications related to your account, security, and policy changes — you cannot opt out of this type of communication.
• Sending promotional offers and relevant marketing communications — you may opt out of marketing emails at any time.
• Improving the platform, games, and user experience based on anonymised usage data analysis.
• Supporting responsible gaming programmes and monitoring usage patterns that may indicate problem gambling.

4. Legal Basis for Data Processing

MBS66 processes your personal data on valid legal grounds under Malaysia's Personal Data Protection Act 2010 (PDPA) and related regulations. The legal bases we rely on are:

• Contract: Data processing required to fulfil the service agreement between you and MBS66, including account management and transaction processing.
• Legal Obligation: Processing required to comply with anti-money laundering (AML) laws, KYC requirements, and reporting obligations to authorities.
• Legitimate Interest: Processing for fraud prevention, platform security, and service improvement purposes based on legitimate business interests.
• Consent: Processing for marketing and promotional communication purposes, where you have given explicit consent.

5. Data Sharing & Disclosure

MBS66 respects the confidentiality of your data. We do not sell or rent your personal information to any party. However, in certain situations, we may need to share your data with the following parties:

5.1 Trusted Service Providers

MBS66 works with carefully selected third-party service providers to support platform operations. These include payment processing providers (FPX, Touch 'n Go, GrabPay, USDT processors), identity verification service providers, platform analytics companies, and cloud service providers that store our data. All partners are required to comply with strict data protection standards through legally binding confidentiality and data protection agreements.

5.2 Legal Requirements & Regulatory Authorities

MBS66 may disclose your personal data to government authorities, law enforcement bodies, or regulatory agencies where required to do so by law, court order, or valid legal process. In such situations, we will notify you where permitted by law.

5.3 Business Transfers

Should mbs66 be involved in any merger, acquisition, or sale of business assets, members' personal data may be transferred as part of those business assets. You will be informed via a clear notice before your data is transferred and becomes subject to a different privacy policy.

6. Data Security

MBS66 implements a range of robust technical and organisational measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction:

• Data encryption in transit using 256-bit TLS/SSL protocols for all communications between your device and our servers.
• Data encryption at rest for all sensitive information, including financial data and identity verification documents.
• Role-based access control (RBAC) ensures that only authorised staff can access member data, and only for legitimate purposes.
• Continuous 24/7 security monitoring using intrusion detection systems (IDS) and next-generation firewalls.
• Regular security audits and penetration testing by independent third parties to identify and address vulnerabilities.
• Mandatory data security training for all MBS66 staff who handle member data.
• Tested and documented security incident response procedures, including data breach notifications to the relevant authorities within 72 hours.

7. Your Privacy Rights

As a registered mbs66 member in Malaysia, you have privacy rights protected under the Personal Data Protection Act 2010 (PDPA). mbs66 respects and facilitates the exercise of these rights: