mbi777 Privacy Policy

1.Introduction and Data Controller

This Privacy Policy ("Policy") describes how mbi777 ("mbi777," "we," "us," "our") collects, processes, uses, stores, and discloses personal data obtained from individuals ("you," "Player," "User") who access the mbi777 website at mbi777.one, register a player account, interact with our gaming services, or otherwise engage with the mbi777 platform (collectively, the "Platform").

mbi777 acts as the data controller in respect of personal data collected through the Platform. This Policy applies to all data processing activities undertaken by mbi777 in connection with the Platform, including data collected through registration forms, gameplay activity, payment transactions, customer support interactions, and any cookies or tracking technologies deployed on the Platform.

By registering an account or using the mbi777 Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any aspect of this Policy, you should not use the Platform. This Policy should be read in conjunction with the mbi777 Terms and Conditions, which are available at /terms-conditions.

2.Personal Data We Collect

2.1 Registration Data

When you create a mbi777 account, we collect the following information which you provide directly:

• Full legal name;
• Date of birth (used for age verification — minimum age 21);
• Residential address, including postcode and state (e.g., Kuala Lumpur, Selangor, Penang, Johor);
• Email address;
• Malaysian mobile telephone number;
• Username and password (password stored in encrypted form only).

2.2 Identity Verification (KYC) Data

As part of our Know Your Customer ("KYC") and anti-money laundering obligations, mbi777 may request:

• Government-issued identity document (MyKad, passport, or other official photo ID);
• Proof of address (utility bill, bank statement, or similar document dated within 3 months);
• Source of funds documentation where required by our compliance framework;
• Selfie or live photograph for biometric identity matching, where required.

2.3 Financial and Transaction Data

When you deposit or withdraw funds through the mbi777 Platform, we collect:

• Payment method details (e.g., Touch 'n Go eWallet account reference, bank account details for CIMB, Maybank, or Public Bank transfers, or wallet address for USDT TRC20 transactions);
• Transaction amounts, timestamps, and transaction reference numbers;
• Deposit and withdrawal history associated with your mbi777 account.

mbi777 does not store full card numbers or sensitive authentication data for card-based payment methods, as all such transactions are processed through certified third-party payment processors.

2.4 Gameplay and Activity Data

The mbi777 Platform automatically records data related to your gaming activity, including:

• Games played, bet amounts, wager outcomes, and session durations;
• Bonuses claimed, wagering progress, and promotional activity;
• Login timestamps, IP addresses at time of login, and device identifiers;
• In-game chat messages where live dealer chat functionality is used.

2.5 Technical and Device Data

mbi777 collects certain technical data automatically when you visit or use the Platform:

• IP address and approximate geolocation derived from IP;
• Browser type, version, and operating system;
• Device type (desktop, mobile, tablet) and screen resolution;
• Referring URLs and pages visited within the Platform;
• Session duration and navigation patterns on the mbi777 website.

2.6 Customer Support Data

When you contact mbi777 customer support, we retain records of your communications, including the nature of your enquiry, any attachments provided, and the outcome of the support interaction. These records are used to resolve disputes, improve support quality, and for compliance record-keeping.

3.How We Use Your Personal Data

mbi777 uses the personal data described above for the following purposes:

• Account Management: Creating, maintaining, and administering your mbi777 player account;
• Age and Identity Verification: Confirming that you meet the 21+ age requirement and verifying your identity as required by our KYC obligations;
• Payment Processing: Processing your deposits and withdrawals via supported Malaysian payment methods;
• Gaming Services: Enabling your participation in slots, live casino, sportsbook, Mix Parlay, and arcade games on the mbi777 Platform;
• Fraud Prevention and Security: Detecting and preventing fraudulent activity, money laundering, collusion, and other prohibited conduct;
• Responsible Gaming: Monitoring account activity for indicators of problem gambling, enforcing deposit and session limits set by you, and administering self-exclusion requests;
• Legal and Regulatory Compliance: Meeting our obligations under applicable laws, including anti-money laundering regulations and data protection requirements;
• Customer Support: Responding to your enquiries, resolving disputes, and providing technical assistance;
• Platform Improvement: Analysing aggregated, anonymised usage data to improve the mbi777 platform's functionality, performance, and user experience;
• Marketing Communications: Sending promotional offers and platform updates to you, subject to your marketing preferences (see Section 10).

4.Legal Basis for Processing

mbi777 processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform the contract between you and mbi777 — i.e., providing the gaming platform and account services you have registered for;
• Legal Obligation: Processing required to comply with applicable laws, including KYC, anti-money laundering, and age verification requirements;
• Legitimate Interests: Processing for fraud prevention, security monitoring, platform improvement, and responsible gaming oversight, where such interests are not overridden by your data protection rights;
• Consent: Processing for optional marketing communications, where you have provided explicit consent. You may withdraw consent at any time by updating your communication preferences in your mbi777 account settings.

5.Cookies and Tracking Technologies

mbi777 uses cookies and similar tracking technologies on the Platform to enable core functionality, maintain your logged-in session, and collect analytics data. The categories of cookies used include:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies and security tokens. They cannot be disabled without impairing Platform functionality.
• Performance and Analytics Cookies: Used to collect anonymised data about how visitors use the mbi777 Platform, including pages visited, session duration, and error reports. This data helps us improve Platform performance.
• Functional Cookies: Used to remember your preferences, such as language settings and display options, to personalise your mbi777 experience.

You may configure your browser to refuse or delete cookies. Disabling strictly necessary cookies will affect your ability to use the mbi777 Platform, including the ability to remain logged in during a session. mbi777 does not use cookies to track your browsing activity on third-party websites.

6.Third-Party Data Sharing

mbi777 does not sell your personal data to third parties. We share personal data only as described below and only where necessary:

• KYC and Identity Verification Providers: Certified third-party services that verify identity documents and perform age verification checks on behalf of mbi777;
• Payment Processors: Licensed payment service providers who process your deposits and withdrawals, including Touch 'n Go, Boost, GrabPay, and banking partners for Maybank, CIMB, and Public Bank transactions;
• Game Providers: Licensed gaming studios (such as Pragmatic Play, PG Soft, Evolution Gaming) receive minimal technical data required to authenticate your session and record game outcomes;
• Fraud Prevention Services: Third-party providers that assist in detecting fraudulent account activity, money laundering, and abuse of promotional offers;
• Legal and Regulatory Authorities: Where required by law, court order, or regulatory authority, mbi777 will disclose personal data to relevant authorities. This includes disclosures to financial intelligence units in connection with anti-money laundering obligations;
• Corporate Transactions: In the event of a merger, acquisition, or sale of substantially all assets, player data may be transferred as part of that transaction, subject to the same privacy protections as described in this Policy.

All third-party service providers who receive personal data from mbi777 are required to maintain appropriate data security standards and are contractually restricted from using that data for any purpose beyond the specified service.

7.Data Security

mbi777 implements appropriate technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the mbi777 Platform;
• Bcrypt hashing for stored passwords — plain-text passwords are never stored in mbi777 systems;
• Access controls restricting internal employee access to personal data on a need-to-know basis;
• Regular security assessments and penetration testing of the mbi777 infrastructure;
• Two-factor authentication available for player accounts to provide an additional layer of access security;
• Encrypted storage for sensitive KYC documents.

Despite these measures, no data transmission over the internet or electronic storage system is completely secure. mbi777 cannot guarantee absolute security. In the event of a data breach that poses a risk to your rights and freedoms, mbi777 will notify affected players in accordance with applicable legal requirements.

8.Data Retention

mbi777 retains personal data for as long as necessary to fulfil the purposes described in this Policy, and in any event for the minimum periods required by applicable law:

• Account and KYC Data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in accordance with anti-money laundering record-keeping requirements;
• Transaction and Financial Records: Retained for a minimum of seven (7) years to comply with financial record-keeping obligations;
• Gameplay Records: Retained for three (3) years following the gaming session, or longer where required for dispute resolution or regulatory audit purposes;
• Customer Support Records: Retained for three (3) years from the date of the support interaction;
• Marketing Consent Records: Retained for the duration of your marketing consent and for one (1) year following withdrawal of consent, as evidence of the consent status at relevant times.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised such that it can no longer be associated with an identifiable individual.

9.Your Data Rights

Subject to applicable legal limitations, you have the following rights in respect of the personal data mbi777 holds about you:

• Right of Access: You may request a copy of the personal data mbi777 holds about you;
• Right to Rectification: You may request correction of inaccurate or incomplete personal data;
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to overriding legal retention obligations;
• Right to Restriction: You may request that mbi777 restricts processing of your data in certain circumstances;
• Right to Data Portability: Where processing is based on your consent or contractual necessity, you may request that your data be provided to you in a structured, commonly used, machine-readable format;
• Right to Object: You may object to processing based on legitimate interests, including profiling for marketing purposes.

To exercise any of the above rights, please contact the mbi777 support team. mbi777 will respond to valid requests within 30 days. We may request identity verification before processing data subject requests to ensure we do not disclose personal data to unauthorised persons.

10.Marketing Communications

With your consent, mbi777 may send you promotional communications regarding bonuses, new games, sports betting offers, and platform updates. Marketing communications may be delivered via email or on-platform notifications.

You may opt out of marketing communications at any time by updating your notification preferences within your mbi777 account settings, or by contacting mbi777 support directly. Withdrawal of marketing consent does not affect the processing of data necessary for the operation of your account or for compliance purposes.

mbi777 does not share personal data with unaffiliated third parties for the purpose of those parties conducting their own direct marketing.

11.Minors and Age Restrictions

The mbi777 Platform is strictly restricted to individuals aged 21 years and above. mbi777 does not knowingly collect personal data from persons under 21. If mbi777 becomes aware that an account has been registered by an underage individual, the account will be immediately closed and any associated personal data will be deleted, except where retention is required by law to document the violation and associated remediation. Parents or guardians who believe their child has registered an account at mbi777 should contact support immediately.

12.International Data Transfers

mbi777 operates in Malaysia and processes the majority of player data within the region. Where personal data is transferred to, or accessible from, a jurisdiction outside Malaysia — for example, where a licensed game provider's data processing infrastructure is located abroad — mbi777 ensures that appropriate safeguards are in place, including data processing agreements that bind the receiving party to data protection standards equivalent to those described in this Policy.

13.Changes to This Privacy Policy

mbi777 reserves the right to update or amend this Privacy Policy at any time. Where material changes are made, mbi777 will provide reasonable notice through the Platform or via email to your registered address prior to the changes taking effect. The effective date at the top of this document will be updated to reflect the date of the most recent revision. Your continued use of the mbi777 Platform following notification of changes constitutes your acceptance of the revised Policy. The most current version of this Policy will always be available at /privacy-policy.

14.Contact and Data Enquiries

For any questions, concerns, or requests relating to this Privacy Policy, or to exercise your data rights, please contact the mbi777 support team via live chat available on the Platform. All privacy-related requests are handled by our dedicated data protection team. Please mark your enquiry as "Privacy Request" to ensure it is directed to the appropriate team promptly.

mbi777 is committed to resolving privacy concerns in a fair and timely manner. Where a concern cannot be resolved through direct contact with mbi777, you may have the right to lodge a complaint with a relevant data protection authority in your jurisdiction.

This Privacy Policy was last updated on 1 June 2026. This version supersedes all previous versions of the mbi777 Privacy Policy.