Privacy Policy

Mbi7 Privacy Policy – Data Protection You Are Our Priority

Mbi7 is committed to protecting your privacy and personal data. This document transparently explains how we collect, use, store, and protect your information as a platform user.

Updated: 1 January 2026  |  Compliant with Malaysia PDPA 2010
Full compliance with PDPA 2010
256-bit SSL Encryption
No sale of data to third parties
Right to access and correct data
24/7 security monitoring
256-bit
SSL Encryption
PDPA
Full Compliance
24/7
Security Monitoring
0
Data Sold to Third Parties

Mbi7's Six Layers of Data Protection

Mbi7 employs a layered approach to ensure your personal data is always protected against both external and internal threats.

End-to-End Encryption

All data transmitted between your device and mbi7's servers is protected using 256-bit SSL encryption — the same security standard used by leading banking institutions in Malaysia.

Secure Data Storage

Your personal data is stored on servers protected by multi-layered firewalls, strict access controls, and intrusion detection systems operating around the clock.

No Disclosure Policy

Mbi7 has never and will never sell, rent, or share your personal data with any third party for marketing or commercial purposes without your explicit consent.

User-Controlled Data

You have full rights to access, amend, download, or request deletion of your personal data through your account settings or by contacting our support team.

Malaysia PDPA Compliance

All of mbi7's data processing practices fully comply with Malaysia's Personal Data Protection Act 2010 (PDPA) — the primary data protection law governing the use of personal data in this country.

Regular Security Audits

Mbi7's security systems undergo regular independent audits by qualified third-party cybersecurity firms to ensure data protection standards are consistently maintained at the highest level.

Important Notice: This Privacy Policy explains how mbi7 collects and uses your personal data in accordance with the Malaysian Personal Data Protection Act 2010 (PDPA). By using the mbi7 platform, you agree to the practices described in this policy.

01

Introduction and Scope of This Privacy Policy

Welcome to mbi7's Privacy Policy. This document forms part of our commitment to practising full transparency in how we handle the personal data of every platform user.

Mbi7 ("we", "Platform", or "mbi7.vin") is an online entertainment platform operating in Malaysia. As a responsible data controller, we take every aspect of your privacy protection seriously and ensure that all data processing activities fully comply with the provisions of Personal Data Protection Act 2010 (PDPA) Malaysia.

This Privacy Policy applies to all users who access or use the mbi7 platform, including website visitors, registered members, and any individual who communicates with us through customer support channels. It covers all personal data we collect, whether directly from you or automatically through platform usage.

Language Note: The term "personal data" in this document refers to any information that can directly or indirectly identify you as an individual, including your name, identification number, address, financial information, and any other related data.

02

Types of Personal Data We Collect

Mbi7 collects various types of personal data depending on your interactions with the platform. We only collect data that is genuinely necessary for the stated purposes — we do not collect data excessively.

Data Categories Examples of Information Primary Purpose
Identity Full name, MyKad/passport number, date of birth, gender Account registration & KYC
Contact Email address, mobile number, residential address Communication & verification
Finance Bank account number, bank name, transaction records Deposits & fund withdrawals
Technical IP address, device type, web browser, access logs Security & performance
Usage Betting records, game preferences, usage habits Service improvement
Support Chat records, support tickets, feedback Complaint resolution

For the KYC process, you may be asked to upload supporting documents such as a MyKad photo, a verification selfie, or a recent bank statement. All such documents are processed and stored at the highest security level and accessed only by authorised personnel.

03

How We Use Your Personal Data

The personal data we collect is used solely for legitimate and stated purposes. mbi7 will not use your data for any other purpose without notifying you in advance and obtaining your consent where required.

The following are the main purposes for which your personal data is used:

  • Account Management: Creating, verifying, and managing your user account, including KYC and age verification processes.
  • Transaction Processing: Processing deposits, withdrawals, and all financial transactions accurately and securely.
  • Platform Security: Detecting and preventing fraud, money laundering, account abuse, and cybersecurity threats.
  • Customer Support: Responding to enquiries, resolving complaints, and providing necessary technical support.
  • Legal Compliance: Fulfilling legal and regulatory obligations related to the platform's operations.
  • Service Improvement: Analysing usage patterns to improve the user experience and develop better new features.
  • Marketing Communications: Sending offers, promotions, and platform update information — only to users who have given their consent.

All data processing activities are carried out on the basis of legitimate interest, contract fulfilment, legal compliance, or consent explicitly provided by you.

04

Data Sharing and Disclosure

Mbi7 maintains a very strict policy regarding data sharing. We has never sold your personal data to any external party. Data sharing only occurs in limited and controlled circumstances as follows:

  • Third-Party Service Providers: Companies that assist us in providing services such as payment processing, KYC verification, server hosting, and technical support. All such providers are bound by strict confidentiality agreements.
  • Regulatory Authority: When required by Malaysian law, court order, or directive from a relevant authority.
  • Fraud Prevention: Sharing necessary information with other agencies or platforms for the purpose of detecting and preventing financial fraud.
  • Your Consent: In other circumstances where you have given explicit consent for such data sharing.

International Data Transfers: If your data needs to be transferred outside Malaysia for processing purposes, mbi7 ensures that such transfers are carried out with protections equivalent to Malaysia's PDPA standards, including appropriate data transfer agreements.

05

Cookies and Tracking Technologies

Mbi7 uses cookies and similar tracking technologies to enhance your experience on the platform. Cookies are small text files stored on your device when you browse our website.

The following are the types of cookies we use:

Required Essential Cookies

Required for core platform functions such as login, session management, and security. Cannot be disabled.

Analytics Analytics Cookies

Helping us understand how users interact with the platform for improvement purposes. Data is collected on a non-personal basis.

Marketing Preference Cookies

Saving your personal settings such as language and display preferences for a better experience on future visits.

You can manage or delete cookies through your web browser settings at any time. However, disabling essential cookies may affect platform functionality.

06

Data Security Measures

Protecting your personal data is a responsibility we take very seriously. mbi7 implements a comprehensive range of technical and organisational security measures to prevent unauthorised access, loss, misuse, or alteration of your data.

Key security measures we implement include:

  • SSL/TLS Encryption: All data communications are protected with 256-bit encryption, ensuring that transmitted data cannot be intercepted by any third party.
  • Layered Access Controls: Only authorised personnel with a legitimate need may access users' personal data, with access records continuously audited.
  • Secure Server Infrastructure: Data is stored in data centres secured both physically and digitally, with multi-layered firewall systems and real-time intrusion detection.
  • Two-Factor Authentication (2FA): mbi7's internal systems containing user data require two-factor authentication for all staff access.
  • Regular Security Audits: Independent security assessments are conducted periodically by third-party cybersecurity experts to identify and address any vulnerabilities.

While we take all reasonable steps to protect your data, no security system can guarantee 100% absolute protection. In the event of any security breach involving your data, we will notify you within the timeframe required by law.

07

Your Rights as a User

Under the Malaysian Personal Data Protection Act 2010 (PDPA), you have certain rights regarding your personal data held by mbi7. We fully respect and facilitate the exercise of these rights.

Right of Access

You have the right to request a copy of the personal data we hold about you at any time.

Right to Rectification

You may request the correction of any inaccurate or incomplete personal data.

Right to Erasure

In certain circumstances, you may request the deletion of your personal data from our systems.

Right to Object

You may object to the processing of your personal data for direct marketing purposes at any time.

Right to Data Portability

You have the right to receive your personal data in a machine-readable format for personal use.

Right to Restriction

You may request a restriction on data processing in certain situations while your claim or objection is being handled.

To exercise any of the above rights, you may contact our Privacy Officer team via email at [email protected] or through your account settings. We will process your request within 21 business days.

08

Data Retention Period

Mbi7 retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy, or as required by applicable laws and regulations.

Data Type Retention Period Reason
Active Account Data Throughout the active account period Ongoing service management
Transaction Records 7 years after transaction Financial audit and legal requirements
KYC Documents 5 years after account closure AML/KYC legal compliance
Communication Logs 3 years Complaint resolution & referral
Technical Logs 12 months System security monitoring

Once the retention period expires, your personal data will be securely deleted or anonymised in accordance with our standard procedures. Anonymised data can no longer identify you and may be retained for analytical purposes without a time limit.

09

Changes to This Privacy Policy

Mbi7 reserves the right to modify this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform improvements. We are committed to keeping you informed of any material changes that affect how we handle your personal data.

When significant changes are made to this Privacy Policy, we will:

  • Updating the "Last Updated" date at the top of this document.
  • Displaying a clear notice on the platform's home page for a reasonable period.
  • Sending email notifications to all registered users for material changes.

Ongoing Consent: Continued use of the mbi7 platform after any Privacy Policy changes take effect will be considered your acceptance of the updated terms. If you do not agree with any changes, you have the right to close your account and discontinue use of the platform.

10

Contact Our Privacy Officer

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, do not hesitate to contact our appointed Privacy Officer (Data Protection Officer), who is dedicated to handling all data protection matters.

We aim to respond to all privacy-related enquiries within 3 working days and resolve formal requests within 21 business days. If you are not satisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia or the relevant regulatory authority.

For more information about your rights and how to use our platform safely, please also refer to Terms and Conditions as well as Responsible Gaming ours.

Your Privacy is Protected. Join mbi7 Today.

Now you can rest assured that your personal data is in safe hands. Register a free mbi7 account today and enjoy a safe, transparent, and responsible online entertainment experience alongside over 500,000 members across Malaysia.

Your data is protected with 256-bit SSL encryption in compliance with Malaysia's PDPA 2010.

Bahasa Melayu