Mbi777 Privacy Policy – Our Commitment to Protecting Malaysian Users' Data

This Privacy Policy is issued by mbi777 (referred to as "we", "mbi777", or "the Platform") and applies to all individuals who use the mbi777 platform via the website https://mbi777.wine or our mobile application ("Users" or "Members"). This Policy covers all services provided by mbi777, including Sports Betting, Live Casino, slots, e-sports, and all other platform features.

In this document, the following terms carry the meanings defined below:

• "Personal Data" – any information that can be used to identify you directly or indirectly, including your name, phone number, email address, IP address, and device information.
• "Processing" – any operation carried out on personal data, including collection, storage, use, sharing, or deletion.
• "Third Party" – parties other than mbi777 and members themselves, including service providers, technology partners, and relevant authorities.
• "Cookie" – small data files stored on your device when you visit the mbi777 platform.

Mbi777 collects only the data genuinely necessary to provide our services, meet legal requirements, and improve the user experience. The table below describes the categories of data we collect:

Your personal data is collected by mbi777 through several key channels:

• Account Registration – information you provide when registering an mbi777 account, such as your name, phone number, and password.
• Platform Usage – data automatically generated when you use mbi777, including matches you watch, bets you place, and games you play.
• Financial Transactions – information collected when you make a deposit via Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, or FPX, or when you withdraw your winnings.
• Customer Support – information you share when interacting with the mbi777 support team via live chat or email.
• Cookies & Tracking Technologies – technical data automatically collected via cookies, pixels, and similar technologies when you visit the mbi777 platform.
• Identity Verification – documents you submit as part of the KYC (Know Your Customer) process, such as a photo of your IC or passport if requested.

Mbi777 does not purchase or obtain your personal data from any other third-party sources beyond those stated above, except in identity verification cases where we may use approved third-party verification services to authenticate the documents you submit.

Mbi777 uses your personal data solely for legitimate purposes as set out below. We do not use your data for any other purpose without prior notice or your consent:

• Service Provision – processing registrations, deposits via TNG, GrabPay, DuitNow and others, withdrawals, Sports Betting, and access to Live Casino games and slots on mbi777.
• Identity Verification – to verify that you meet the minimum age requirement (18 years old) and other eligibility criteria in accordance with legal compliance requirements.
• Fraud Prevention – detecting and preventing fraudulent activity, duplicate account registrations, bonus abuse, and money laundering.
• Customer Support – handling enquiries, complaints, and support requests submitted to the mbi777 support team.
• Service Communications – sending important notifications related to your account, transactions, changes to our terms, and relevant security updates.
• Marketing – sending promotional offers, bonus information, and relevant content – only if you have given explicit consent for marketing communications.
• Responsible Gaming – monitors gameplay patterns to identify signs of problem gambling and provide appropriate support.
• Platform Enhancement – to analyse usage data in aggregate (not at an individual level) to improve the functionality, design, and performance of the mbi777 platform.
• Legal Compliance – meeting reporting and documentation requirements under applicable Malaysian law.

Mbi777 processes your personal data on the basis of one or more of the following valid legal grounds:

• Contract Performance – processing necessary to fulfil the agreement between you and mbi777, including account management, deposits, betting, and withdrawals.
• Legitimate Interest – processing necessary for mbi777's legitimate interests, such as platform security, fraud prevention, and service improvement, provided it does not override your fundamental rights.
• Legal Compliance – processing required under Malaysian law, including Anti-Money Laundering (AML) and KYC obligations.
• Consent – for marketing communications and non-essential cookies, we rely on your explicit consent. You may withdraw this consent at any time.

Mbi777 operates in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). All personal data processing we carry out complies with the provisions of this legislation and its subsidiary regulations. Should the law change in a way that requires updates to our privacy practices, this policy will be revised accordingly.

Mbi777 strictly does not sell, rent, or share members' personal data for third-party commercial purposes. Data sharing only occurs in limited, justified situations as outlined below:

• Technology Service Providers – companies that provide technical infrastructure for mbi777 (web hosting, payment processing, analytics) are subject to strict confidentiality agreements and may only use your data for purposes specified in the contract.
• Game Providers – casino and sports game providers (such as Evolution Gaming, Pragmatic Play) receive only the minimum data necessary to deliver games to you within the mbi777 platform.
• Identity Verification Provider – third-party KYC service providers that assist in verifying your identity receive verification data and are required to delete it once the verification process is complete.
• Legal Authorities – mbi777 will disclose personal data to Malaysian authorities if required by a court order, legislation, or AML compliance obligations. We only share the minimum data necessary in such situations.
• Business Transfer – if mbi777 is involved in a merger, acquisition, or asset transfer, member data may be transferred as part of the business assets. Members will be notified in advance should this situation arise.

Mbi777 has no data-sharing relationship with any third-party advertising companies for the purpose of targeted advertising outside our platform. We do not use your browsing data to display ads on other websites.

Mbi777 retains your personal data only for as long as necessary for the purposes outlined in this policy, or as required by law. Our general principle is "keep only what is needed, delete when no longer relevant".

• Active Account Data – retained for the duration your account remains active and for 7 years after account closure, in accordance with Malaysian financial record-keeping and AML requirements.
• Transaction History – retained for 7 years in accordance with Malaysian legal requirements for financial records and tax compliance.
• Session Data & Activity Logs – retained for 12 months for security and fraud detection purposes, then deleted or anonymised.
• Customer Support Data – retained for 3 years from the date of last interaction for reference and dispute resolution purposes.
• Cookie Data – depends on the cookie type; session cookies are deleted when you close your browser, while persistent cookies have a set expiry period.
• KYC Documents – retained for the duration of the active account and 7 years after account closure in accordance with AML requirements.

Mbi777 continuously invests in security infrastructure to protect members' personal data. The key security measures we have in place include:

• Data Encryption in Transit – all communications between your device and mbi777's servers are encrypted using TLS 1.3 / SSL 256-bit.
• Data Encryption at Rest – sensitive data stored in mbi777's databases is encrypted using the latest encryption standards.
• Layered Access Controls – only staff with a legitimate work requirement may access members' personal data, and all access is logged and monitored.
• 24/7 Security Monitoring – automated monitoring systems operate around the clock to detect suspicious activity or attempted data breaches.
• Periodic Penetration Testing – the mbi777 platform undergoes penetration testing by independent security firms at least twice a year.
• Security Awareness Training – all mbi777 staff who handle personal data undergo regular data security training.
• Incident Response Plan – mbi777 maintains a documented incident response procedure, including a member notification process within 72 hours in the event of a data breach.

While mbi777 takes all reasonable precautions to protect your data, no security system can guarantee absolute protection. In the event of a security breach affecting your data, mbi777 will notify you via your registered email within the stipulated timeframe and provide guidance on protective steps you can take.

The mbi777 platform uses cookies and similar technologies to deliver a better user experience and keep your account secure. Here are the types of cookies we use:

• Essential Cookies (Mandatory) – required for core platform functions such as login authentication, session security, and language preferences. These cookies cannot be disabled without affecting platform functionality.
• Preference Cookies – stores your preferences such as language selection, display settings, and odds format to ensure a consistent experience every time you log in to mbi777.
• Analytics Cookies – collects anonymised usage data to help us understand how members use the platform and identify areas for improvement. This data is not linked to any individual's identity.
• Security Cookies – helping to detect and prevent fraudulent activity, duplicate accounts, and unauthorised access attempts to member accounts.

Mbi777 does not use third-party tracking technologies for cross-site advertising. The analytics we use operate solely within our platform, and no data is shared with external advertising networks.

As an mbi777 member, you have the following rights regarding your personal data. All rights requests can be submitted to us by email at support@mbi777.wine or via live chat within the platform:

The mbi777 platform is exclusively for individuals aged 18 and above. mbi777 does not knowingly collect or process personal data from individuals under the age of 18.

Should we discover that personal data of an underage individual has been collected without our knowledge, we will take the following steps immediately:

• Suspending the relevant account pending completion of the investigation.
• Deleting all personal data associated with that individual from our systems.
• Returning any remaining account balance in accordance with the appropriate procedures.
• Strengthening age verification procedures to prevent similar incidents in the future.

If you have any questions, concerns, or complaints regarding how mbi777 handles your personal data, or if you wish to exercise any of your privacy rights, please contact us through the following channels:

When contacting us about a privacy matter, please include your mbi777 account number (if applicable), a clear description of your enquiry or request, and any supporting documents where relevant. This will help us respond to you more efficiently.