Privacy Policy MBI96 – Our Commitment to Protecting the Personal Data of Malaysian Players

MBI96 collects various categories of personal information necessary to provide a safe, fair and legally compliant online casino platform. The following are the categories of information we collect:

Information You Provide Directly

• Registration information: Your full name, Malaysian phone number, email address, date of birth and the password you set when registering your MBI96 account.
• Identity verification information: National identification number (MyKad), a copy of your identity document, and any other information that may be required for the KYC (Know Your Customer) process as mandated by law.
• Financial information: Bank account number, phone number linked to Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, or DuitNow that you use for deposits and withdrawals at MBI96.
• Communications: Messages, enquiries, and feedback you send to the MBI96 support team via Live Chat, email, or WhatsApp.

Automatically Collected Information

• Technical data: IP address, browser type, device operating system, screen resolution, and other technical information automatically transmitted by your device when you visit the MBI96 platform.
• Usage data: Pages you visit on MBI96, games you play (slots, Live Casino, roulette), session times and duration, bets placed, and winnings received.
• Location data: General location information derived from your IP address, used to verify that you are accessing MBI96 from Malaysia and to meet applicable legal requirements.
• Cookie data: Information stored on your device via cookies to facilitate a seamless user experience and session verification on MBI96. Further details are provided in Section 6 of this Privacy Policy.

MBI96 uses the information collected for a variety of legitimate and operationally necessary purposes. All data use is subject to the principle of purpose limitation — we do not use your data for any purpose beyond those stated below:

MBI96 also uses anonymised usage data for internal analytics purposes to understand overall platform usage patterns. This data cannot be traced back to any specific individual and is used solely to improve the experience of all MBI96 players.

MBI96 takes a strictly limited approach to sharing member data. Our core principle is simple: we do not sell, rent, or share members' personal data for commercial purposes. However, there are limited situations where MBI96 may need to share data with certain third parties:

• Licensed game providers: Platforms such as Evolution Gaming, Pragmatic Play, and Bally Technologies receive only the minimum technical data required to run the games you play on MBI96. All these providers are bound by strict data confidentiality agreements and comply with international industry standards.
• Payment processors: Transaction information is shared with local payment service providers — including Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX — solely for the purpose of processing your deposits and withdrawals. No additional information is shared beyond what is strictly necessary for each transaction.
• Legal obligations: MBI96 may be required under Malaysian law to disclose member information to government authorities or law enforcement agencies when compelled through valid legal process. We will comply with such directives while making every effort to protect members' interests to the fullest extent permitted by applicable law.
• Technical service providers: Third-party companies that support MBI96's technical operations — such as cloud services, analytics, and cybersecurity — may have limited access to data solely to carry out their designated functions. All such providers are bound by strict data processing agreements and are not permitted to use MBI96 members' data for any other purpose.

MBI96 continuously invests in security infrastructure to safeguard all members' personal data against cyber threats, unauthorised access, and data breaches. Key security measures we have in place include:

• 256-bit SSL Encryption: All data transmitted between your device and MBI96's servers is encrypted using TLS 1.3 protocol with 256-bit keys — an encryption standard considered unbreakable by conventional computing technology today.
• Encryption of data at rest: Sensitive data stored in MBI96's databases — including hashed passwords and financial information — is encrypted at rest for an additional layer of protection.
• Role-based access control: Only MBI96 staff with a legitimate business need are permitted to access member data, and every instance of such access is recorded in system logs that are monitored on a regular basis.
• 24/7 security monitoring: MBI96's cybersecurity team monitors all system activity in real time to detect any anomalies or intrusion attempts that could potentially compromise member data.
• Regular security audits: MBI96 conducts regular penetration testing and independent security audits to identify and address vulnerabilities before they can be exploited.
• Two-factor authentication (2FA): MBI96 strongly encourages all members to enable two-factor authentication on their accounts as an added layer of security — protecting against unauthorised access even in the event of a compromised password.

While MBI96 takes all reasonable and appropriate security measures, no online system can guarantee absolute 100% security. We are committed to continuously strengthening our security infrastructure in line with the ever-evolving landscape of cyber threats. Should any security incident occur that affects your data, MBI96 will notify you promptly in accordance with Malaysia's PDPA requirements.

As a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding the personal information MBI96 holds about you. We fully respect and support the exercise of these rights:

• Right to Access: You have the right to request a copy of the personal data MBI96 holds about you. We will provide this information in a readable format within 14 business days of receiving a valid request.
• Right to Rectification: If any personal data held by MBI96 about you is inaccurate or incomplete, you have the right to request a correction. You may also update much of your personal information directly through your MBI96 account profile page.
• Right to Erasure: Under certain circumstances, you have the right to request that MBI96 delete your personal data. Such requests will be considered in light of MBI96's legal obligations to retain specific records for periods prescribed by Malaysian law.
• Right to Restrict Processing: You may request that MBI96 restrict how we process your data under certain circumstances — for example, while you are disputing the accuracy of your data or while a review is in progress.
• Right to Object: You may object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on MBI96's legitimate interests in certain circumstances.
• Right to Data Portability: You have the right to receive your personal data in a structured, machine-readable format for transfer to another service provider, should you choose to do so.

To exercise any of the above rights, please contact MBI96's privacy team via email [email protected] by stating the right you wish to exercise along with sufficient identity verification information. We will process your request within the timeframe stipulated by Malaysia's PDPA and keep you informed of the action taken.

MBI96 uses cookies and similar tracking technologies to enhance the user experience, ensure security features function correctly, and better understand how our platform is used. Below is an overview of the types of cookies we use:

• Essential Cookies (Required): These cookies are required for core MBI96 platform functions such as login session verification, security and basic navigation. Without them, the platform will not function properly. Essential cookies cannot be disabled.
• Preference Cookies: These cookies store your preferences — such as your preferred language, display settings, and the last game you played — to deliver a more personalised experience on your next visit to MBI96.
• Analytics Cookies: These cookies help MBI96 understand how members use the platform — which pages are visited most, which features are used most frequently, and where users encounter difficulties. This information is used for ongoing platform improvements. Analytics data is anonymised and not linked to individual accounts.
• Security Cookies: Used to detect suspicious activity, prevent fraud, and maintain the integrity of your MBI96 login sessions. These cookies form a critical part of our platform's security infrastructure.

You can manage your cookie settings through your web browser's preferences. However, disabling certain cookies may affect the functionality of the MBI96 platform. For detailed guidance on managing cookies in your browser, please refer to your browser's help documentation.

MBI96 reserves the right to update or amend this Privacy Policy from time to time in response to changes in law, technology, or our business practices. When material changes are made, we will:

• Publishing an updated Privacy Policy on this page with a refreshed "last updated" date.
• Notifying members via their registered email address of any significant changes made.
• In cases where changes require fresh consent, we will explicitly request your agreement before those changes apply to the processing of your data.

We encourage you to review this Privacy Policy periodically to stay informed about how MBI96 protects your information. Continued use of the MBI96 platform after any changes are published constitutes your acceptance of the updated policy, except in situations where explicit consent is required.

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way MBI96 handles your personal data, please reach out to us through the following channels:

• Email: [email protected]
• Live Chat: Available 24 hours a day, 7 days a week via the MBI96 platform
• WhatsApp: Via the number displayed on the MBI96 support page

The MBI96 privacy team will endeavour to respond to all enquiries within 3 business days. For more serious complaints involving PDPA violations, you also have the right to report the matter to Department of Personal Data Protection Malaysia through the channels designated by the relevant ministry.