Privacy Policy

Privacy Policy mbi55
Your Data, Our Responsibility

Mbi55 takes the protection of every member's personal information seriously. This document transparently explains how we collect, use, store, and protect your data — without complicated language.

Updated: January 2026 Bahasa Melayu (Malaysia) 256-bit SSL Encryption Complying with Malaysia's PDPA
Our Privacy Commitment

Mbi55's Six Data Protection Principles

Every decision we make regarding user data is guided by these principles — not merely legal obligations, but a sincere commitment to every member.

Full Transparency

We clearly explain what data is collected, how it is used, and how long it is retained. No hidden terms, no data collection you are unaware of.

Advanced-Level Encryption

All your personal data and financial information is protected with industry-standard 256-bit SSL encryption. Stored data is also encrypted using the latest technology.

Control Is in Your Hands

You have the right to access, correct, or request deletion of your personal data at any time via your account dashboard or by contacting our support team.

Malaysia PDPA Compliance

Mbi55 operates in compliance with the requirements of the Personal Data Protection Act 2010 (PDPA) of Malaysia. All data processing is carried out lawfully, fairly, and transparently.

No Data Sales to Third Parties

Mbi55 does not sell, rent, or trade members' personal data to any third party for marketing purposes without your explicit consent.

Minimum Data Retention

We only retain your data for as long as necessary for the stated purposes or as required by law. Data that is no longer needed is securely disposed of.

Quick Summary: mbi55 collects data necessary to operate the platform securely and comply with the law. We do not sell your data. You may request access to or deletion of your data at any time.

1 Introduction and Scope of This Policy

This Privacy Policy ("Policy") is published by mbi55 and applies to all users who access or use the mbi55 platform, including the official website at mbi55.net, the mobile app, and all related services.

This Policy describes our practices regarding the collection, use, disclosure, and protection of your personal information. By using the mbi55 platform, you agree to the practices described in this Policy. If you do not agree, please stop using the platform and contact us to close your account.

This Policy should be read together with Terms and Conditions and Responsible Gaming Policy mbi55 that forms the overall user agreement framework.

2 Types of Personal Data We Collect

Mbi55 collects various categories of personal information depending on the nature of your interaction with the platform. Below is a summary table of the data we collect:

Data Category Example Information Collection Methods
Identity Data Full name, date of birth, MyKad/passport number Registration form, KYC
Contact Data Phone number, email address, residential address Registration, profile updates
Financial Data Bank account number, bank name, transaction records Deposit/withdrawal process
Technical Data IP address, device type, web browser, OS Automatically upon access
Gaming Data Betting history, wins, session duration In-platform activity
Communication Data Live chat logs, support emails, complaints Support Interactions

We no collect credit/debit card information directly. All payment transactions are processed through licensed and registered third-party payment processors, which have their own privacy policies and security standards.

Good to Know: All KYC documents you upload are stored in a secured server environment and are only accessible by authorised personnel for verification purposes.

3 How We Use Your Data

The personal data we collect is used solely for lawful and stated purposes. The following are the primary purposes for which mbi55 uses your data:

  • Account Management: Creating, verifying, and managing your user account, including the KYC process and identity verification.
  • Transaction Processing: Processing deposits, withdrawals, and all financial transactions that occur on the platform.
  • Service Delivery: Allowing you to access all games, promotions, and features on the mbi55 platform.
  • Customer Support: Responding to inquiries, resolving complaints, and providing technical assistance when needed.
  • Security & Fraud Prevention: Detecting suspicious activity, preventing fraud, and ensuring platform integrity.
  • Legal Compliance: Fulfilling compliance obligations including anti-money laundering (AML) and KYC requirements as required by regulators.
  • Platform Enhancements: Analyzing usage data in aggregate (without identifying individuals) to improve the user experience.
  • Marketing Communications: Sending promotional offers and relevant information — only if you have consented to receive them.

Marketing Preferences: You may withdraw consent to receive marketing communications at any time via your account settings or by contacting our support team.

4 Legal Basis for Data Processing

In accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia, mbi55 processes your personal data on the following legal bases:

  • Consent: When you have given explicit consent during registration or for specific marketing purposes.
  • Contract Performance: When data processing is necessary to provide the services you have requested or to fulfil our contractual obligations to you.
  • Legal Obligation: When we are legally obligated to process your data, for example for AML, KYC, or reporting to the relevant authorities.
  • Legitimate Interest: When we have a legitimate reasonable interest such as fraud prevention, platform security, and service improvement — provided that interest does not override your fundamental privacy rights.

5 Data Sharing and Disclosure

Mbi55 does not sell, rent, or trade your personal data. However, in certain situations, we may share your data with the following parties:

  • Third-Party Service Providers: Payment processors, game providers, IT service providers, and other operational partners who assist us in delivering our services. All parties are bound by strict confidentiality agreements.
  • Regulatory Authorities: Government bodies, law enforcement agencies, or regulators when required by law or court order.
  • Identity Verification Providers: Third-party services that assist with KYC processing and document verification.
  • Auditors & Legal Advisors: Professional firms involved in auditing, legal advice, or regulatory compliance related to mbi55's operations.

Important: mbi55 ensures that all third parties receiving your data are subject to confidentiality and data protection obligations equivalent to or exceeding the standards we apply ourselves.

6 Data Security and Protection

Mbi55 implements a range of technical and organisational measures to protect your personal data from unauthorised access, loss, alteration, or unintended disclosure.

Key security measures we employ include:

  • Data in transit encrypted using TLS 1.3 and 256-bit SSL protocols
  • Stored data encrypted using AES-256 standard
  • Role-based access control (RBAC) — only authorized personnel can access sensitive data
  • Integrated 24/7 security monitoring
  • Regular security audits by accredited independent third parties
  • Two-factor authentication (2FA) for internal system and user account access
  • A comprehensive security incident response plan

While we take all reasonable measures, no system can guarantee absolute security. In the event of a data security incident affecting your personal information, we will notify you and the relevant authorities within the timeframe required by law.

7 Data Retention Period

Mbi55 retains your personal data only for as long as necessary to fulfil the purposes stated in this Policy or as required by applicable law.

  • Active Account Data: Retained for the duration of your active account and for a period of 5 years after account closure, for legal compliance purposes.
  • Financial Transaction Records: Retained for a minimum of 7 years in accordance with applicable financial and AML legal requirements.
  • KYC Documents: Retained for the duration of the active account and 5 years after account closure, or as required by regulators.
  • Communication Logs: Retained for 2 years for reference and dispute resolution purposes.
  • Technical Data & Access Logs: Retained for 12 months for security and troubleshooting purposes.

Upon expiry of the retention period, your data will be securely disposed of using methods that ensure no possible recovery.

8 Your Rights as a Data Subject

Under Malaysia's PDPA and mbi55's privacy practices, you have the following rights regarding your personal data:

Right of Access

Request a copy of the personal data we hold about you.

Right to Rectification

Correct inaccurate or incomplete data.

Right to Erasure

Request deletion of your data under certain circumstances.

Right to Restriction

Restricting the processing of your data in certain situations.

Right to Portability

Receive your data in a machine-readable format.

Right to Object

Object to processing for direct marketing purposes.

To exercise any of the above rights, please contact the mbi55 support team via live chat on the platform or by email at [email protected]. We will respond to your request within 14 business days.

Data Deletion Limitations: Some data may not be deletable if its retention is required by law, such as financial transaction records for AML purposes. In such cases, we will notify you clearly.

9 Cookies and Tracking Technologies

Mbi55 uses cookies and similar tracking technologies to enhance the user experience, analyse platform traffic, and ensure the security of your login sessions.

Types of cookies we use:

  • Essential Cookies: Required for core platform functions such as login authentication and session security. These cookies cannot be disabled.
  • Performance Cookies: Collecting information on how users interact with the platform to help us improve performance and the overall experience.
  • Functional Cookies: Saving your preferences such as language and region settings to provide a more personalized experience.
  • Analytical Cookies: Used to analyze usage patterns in aggregate. This data does not personally identify individuals.

You can manage cookie settings through your web browser settings. However, disabling essential cookies may affect the functionality of the mbi55 platform.

10 Child Protection

The mbi55 platform is exclusively for individuals aged 18 and above. We do not knowingly collect or process personal data of children under the age of 18.

If we discover that personal data of a child has been collected without our knowledge, we will take immediate steps to delete that data and close the associated account. Parents or guardians who find that their child has registered on our platform are requested to contact us immediately.

Important: mbi55 applies age verification during registration and the KYC process to prevent access by underage individuals. Anyone attempting to register using false information to bypass age restrictions will be rejected and reported to the relevant authorities.

11 Amendments to This Privacy Policy

Mbi55 reserves the right to amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technology. When material amendments are made, we will:

  • Updating the "Last Updated" date at the top of this document
  • Displaying a clear notice on the platform at least 14 days before changes take effect
  • Sending notifications via registered email for significant changes

Your continued use of the mbi55 platform after any amendments to this Privacy Policy take effect will be considered your acceptance of the revised policy. We encourage you to review this page periodically.

12 Contact Our Privacy Officer

If you have any questions, concerns, or complaints regarding how mbi55 handles your personal data, please contact our Data Protection Officer (DPO):

We are committed to responding to all privacy-related inquiries within 14 business days. For more complex issues requiring in-depth investigation, we will update you on the progress within 30 days.

Our Commitment: Your satisfaction and trust are mbi55's top priority. Every privacy complaint we receive is taken seriously and handled by a dedicated team trained in PDPA compliance.

FAQ

Mbi55 Privacy FAQ

The most frequently asked questions by mbi55 members regarding data protection and privacy.

No. mbi55 does not sell or share your personal data with third parties for advertising purposes without your consent. We only share data with service providers who help us operate the platform, and they are bound by strict confidentiality agreements. You may opt out of marketing communications through your account settings.

You may request a copy of your personal data by contacting the mbi55 support team via live chat or by emailing [email protected]. Clearly state the type of data you require. We will process your request within 14 business days and deliver the data in a secure, readable format.

When you close your mbi55 account, we will retain your data for the period required by law — typically 5 to 7 years for financial records for AML compliance purposes. After this period, your data will be securely disposed of. Data not required for legal purposes will be deleted earlier in accordance with our retention schedule.

Yes. The mbi55 mobile app uses the same 256-bit SSL encryption as the website for all data communications. The app does not store sensitive information locally on your device without encryption. We recommend enabling screen lock and biometric authentication on your device for an additional layer of security.

You may request data deletion, but certain limitations apply. Data required to be retained by law (such as financial transaction records for AML purposes) cannot be deleted immediately. However, we will restrict its use for other purposes and delete it once the mandatory retention period expires. Contact [email protected] to initiate this process.

Contact mbi55 support via live chat immediately. We will help you change your password, review your account activity logs, and take the necessary security measures. If you suspect any unauthorized transaction, report it to us within 24 hours so that an investigation can be carried out promptly.
Trusted & Secure Platform

Your Privacy Is Protected — Join mbi55 with Full Confidence

With 256-bit SSL encryption, full PDPA compliance, and our commitment to transparency, your personal data is always in safe hands at mbi55.

256-bit SSL Encryption • Compliant with Malaysia PDPA • 18+ only • Play responsibly

Bahasa Melayu