Privacy Policy

1. Introduction

mbi918 ("mbi918", "we", "us", "our") operates the online casino and sportsbook platform accessible at mbi918.asia and its associated subdomains. As the data controller for personal data collected through the mbi918 platform, we take our obligations under applicable data protection law seriously.

This Privacy Policy applies to all personal data collected from individuals who register as mbi918 members, visit the mbi918 website, interact with our customer support services, or communicate with us through any channel. By using the mbi918 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

This Privacy Policy should be read alongside our Terms & Conditions, which govern the contractual relationship between you and mbi918. In the event of any conflict between this Privacy Policy and our Terms & Conditions on a matter relating to personal data, this Privacy Policy shall prevail.

2. Personal Data We Collect

2.1 Registration Data

When you create a mbi918 account, we collect the following information which you provide directly:

• Full legal name (as reflected on your Malaysian identity document — MyKad or passport);
• Date of birth (for age verification purposes — mbi918 is strictly 21+ only);
• Malaysian mobile number;
• Email address;
• Chosen username and encrypted password;
• Residential address (required for KYC compliance).

2.2 Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) obligations under our international gaming licence, mbi918 may request and process:

• Copy of government-issued photo identification (MyKad for Malaysian citizens; passport for non-citizens);
• Proof of residential address (utility bill, bank statement, or similar document not older than three months);
• Proof of payment method ownership (e.g., screenshot of e-wallet account showing matching name for Touch n Go eWallet or Boost withdrawals);
• Source of funds documentation where required by anti-money laundering controls.

2.3 Transaction Data

mbi918 records all financial transactions associated with your account, including deposit amounts, payment method details (masked where appropriate), withdrawal requests and settlements, bonus credits and wagering activity, and the complete betting and gaming history of your mbi918 account.

2.4 Technical & Usage Data

When you access the mbi918 platform, our servers and analytics systems automatically collect certain technical data, including:

• IP address and approximate geographic location derived from IP;
• Device type, operating system, and browser version;
• Session timestamps, page navigation paths, and feature interaction logs;
• Referral source (where applicable);
• Cookie identifiers (see Section 6).

2.5 Communications Data

If you contact mbi918's customer support team via Live Chat or email, the content of those communications — including any personal information you volunteer during the interaction — is recorded and retained as part of our customer service records.

3. How mbi918 Uses Your Personal Data

mbi918 uses the personal data we collect for the following purposes:

• Account creation and management: To register your mbi918 account, verify your identity, and administer your member profile;
• Service delivery: To operate the mbi918 casino, sportsbook, Toto 4D, and slots platform — processing bets, crediting winnings, and managing your unified MYR wallet;
• Payment processing: To facilitate deposits and withdrawals via your chosen payment methods (Touch n Go eWallet, Boost, GrabPay, Maybank, CIMB, and others);
• KYC and AML compliance: To verify your identity and age, and to monitor transactions for money laundering, fraud, and other financial crime indicators as required by our licensing obligations;
• Responsible gaming: To monitor account activity for signs of problematic gambling behaviour, to administer self-exclusion requests, and to apply deposit, loss, and session limits set by the member;
• Customer support: To respond to your enquiries, resolve complaints, and provide account assistance;
• Security: To detect and prevent unauthorised account access, fraud, technical abuse, and other malicious activity;
• Legal compliance: To comply with applicable laws, regulatory requirements, and the terms of our international gaming authority licence;
• Platform improvement: To analyse aggregated usage patterns (in anonymised or pseudonymised form) to improve the mbi918 platform's performance, design, and game offering.

4. Legal Basis for Processing

mbi918 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil the membership agreement between you and mbi918 — including account management, payment processing, and service delivery;
• Legal obligation: Processing required to comply with applicable laws and our licensing obligations — including KYC verification, AML monitoring, and age verification;
• Legitimate interests: Processing for fraud prevention, platform security, and aggregated analytics where those interests are not overridden by your data protection rights;
• Consent: Where mbi918 relies on your consent as a legal basis (such as for certain marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

5. Data Sharing & Disclosure

mbi918 does not sell your personal data to third parties for their own marketing purposes. We share your personal data only in the following circumstances:

• Payment processors: We share transaction data with payment service providers (including e-wallet operators and banking partners) as necessary to process your deposits and withdrawals;
• KYC and identity verification providers: We may share identity documents with accredited third-party KYC verification services to fulfil our licensing obligations;
• Fraud prevention services: Certain technical and transactional data may be shared with fraud detection and prevention service providers;
• Regulatory authorities: mbi918 is obligated under its international gaming licence and applicable law to disclose member data to regulatory authorities, law enforcement agencies, or financial intelligence units where lawfully required. mbi918 will comply with such requests and may not be permitted to notify the affected member in all circumstances;
• Responsible gaming registries: Where a member's self-exclusion status must be reported to or verified against a third-party responsible gaming registry, we will share the minimum data required for that purpose;
• Corporate transactions: In the event of a merger, acquisition, or asset sale involving mbi918, member data may be transferred as part of that transaction. Affected members will be notified where practicable and required by law.

Where mbi918 engages third-party data processors, we require them to process personal data only on our documented instructions, maintain appropriate technical and organisational security measures, and comply with applicable data protection obligations.

6. Cookies & Tracking Technologies

The mbi918 website uses cookies and similar tracking technologies to operate the platform correctly, remember your session and preferences, and analyse how the platform is used. The following categories of cookies are used on mbi918:

• Strictly necessary cookies: Required for core platform functionality including session management, login persistence, and security. These cannot be disabled without impairing your ability to use mbi918;
• Performance cookies: Collect anonymised data about how pages are used on mbi918 to help us identify areas for improvement. These do not identify you personally;
• Functional cookies: Remember your preferences (such as preferred language or display settings) to provide a more personalised mbi918 experience;
• Analytics cookies: Used to understand aggregate user behaviour patterns on the mbi918 platform. Data collected through analytics cookies is pseudonymised and used only for internal platform improvement purposes.

You may manage cookie preferences through your browser settings. Blocking strictly necessary cookies will impair the core functionality of the mbi918 platform. Blocking other categories of cookies will not prevent you from using mbi918 but may affect certain personalisation features.

7. Data Retention

mbi918 retains personal data for the period necessary to fulfil the purposes for which it was collected, subject to longer retention where required by law or our licensing obligations.

• Active account data: Retained for the duration of your mbi918 membership and for a minimum of five (5) years following account closure, consistent with anti-money laundering record-keeping requirements;
• KYC documentation: Retained for a minimum of five (5) years following the end of the business relationship, as required under our licensing framework;
• Transaction records: Retained for a minimum of five (5) years following each transaction for AML and regulatory compliance purposes;
• Customer support communications: Retained for two (2) years following resolution of the relevant interaction, unless the matter is subject to ongoing dispute or legal proceedings;
• Technical and usage logs: Typically retained for twelve (12) months for security and fraud analysis purposes.

Upon expiry of the applicable retention period, mbi918 will securely delete or anonymise personal data in accordance with our data disposal procedures.

8. Data Security

mbi918 implements a range of technical and organisational security measures to protect the personal data we hold against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption on all mbi918 platform sessions and data transmissions;
• Encrypted storage of passwords using industry-standard hashing algorithms — mbi918 staff cannot view your plain-text password;
• Access controls restricting personal data access to staff who require it to perform their duties;
• Regular security audits and penetration testing of the mbi918 platform infrastructure;
• Two-factor authentication available for all mbi918 member accounts;
• Automated anomaly detection monitoring login patterns for signs of unauthorised access.

9. Your Data Rights

Subject to applicable law and the limitations imposed by our legal obligations (including AML and KYC record-keeping requirements), you have the following rights in relation to your personal data held by mbi918:

• Right of access: You may request a copy of the personal data mbi918 holds about you;
• Right to rectification: You may request correction of inaccurate or incomplete personal data associated with your mbi918 account;
• Right to erasure: You may request deletion of your personal data, subject to retention obligations imposed by law and our licensing requirements;
• Right to restriction: You may request that mbi918 restricts processing of your personal data in certain circumstances;
• Right to data portability: Where processing is based on your consent or a contract, you may request your data in a structured, commonly used, machine-readable format;
• Right to object: You may object to processing based on legitimate interests, including profiling for direct marketing purposes;
• Right to withdraw consent: Where mbi918 relies on your consent as the legal basis for processing, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact mbi918 via Live Chat (24/7) or email [email protected] with "Data Rights Request" in the subject line. mbi918 will respond within thirty (30) days. Identity verification will be required before any rights request is actioned.

10. Children & Minors

Parents and guardians are encouraged to use parental control software to restrict access to online gambling platforms on shared or family devices. mbi918 supports responsible measures to prevent underage access to online gaming services.

11. International Data Transfers

mbi918 operates under an international gaming authority licence and may engage service providers whose infrastructure is located outside Malaysia. Where personal data is transferred internationally, mbi918 ensures that appropriate safeguards are in place consistent with applicable data protection standards. These safeguards may include contractual data processing agreements incorporating standard data protection clauses, adequacy decisions where applicable, or other recognised transfer mechanisms.

By using the mbi918 platform, you acknowledge that your personal data may be processed in jurisdictions outside Malaysia where data protection laws may differ from those in Malaysia. mbi918 takes reasonable steps to ensure that any such processing is conducted to a standard consistent with this Privacy Policy regardless of geographic location.

12. Third-Party Game Providers & Services

The mbi918 platform hosts games and betting products developed by third-party providers including software studios and live casino streaming operators. When you play a game or use a betting product provided by a third party through the mbi918 platform, certain gameplay and interaction data may be processed by those providers as part of their service delivery infrastructure. mbi918 requires its game providers to maintain appropriate data protection standards and to process member data only as required to deliver the specific service.

This Privacy Policy does not extend to third-party websites that may be linked from the mbi918 platform in any context. mbi918 is not responsible for the privacy practices of external sites and recommends that you review the privacy policies of any third-party services you use independently of the mbi918 platform.

13. Amendments to This Privacy Policy

mbi918 reserves the right to update or amend this Privacy Policy at any time. When we make material changes, we will update the "Last Updated" date at the top of this page and, where required by law or appropriate given the nature of the change, notify affected members via their registered email address or by a prominent notice on the mbi918 platform.

Your continued use of the mbi918 platform following publication of an amended Privacy Policy constitutes your acceptance of the revised policy. We encourage you to review this page periodically to stay informed about how mbi918 handles your personal data.

14. Contact & Data Protection Complaints

If you have any questions about this Privacy Policy, wish to exercise your data rights, or have a concern about how mbi918 processes your personal data, please contact us through the following channels:

mbi918 aims to respond to all privacy-related enquiries within thirty (30) days. If you are not satisfied with mbi918's response to a privacy complaint, you may have the right to escalate your complaint to the relevant data protection supervisory authority or to the dispute resolution body designated under mbi918's licensing framework.