Privacy Policy

1. Data Controller

mbi8win operates the online casino and sports betting platform accessible at mbi8win.asia. For the purposes of applicable data protection law, mbi8win is the data controller responsible for the personal data collected through and in connection with the platform. Where mbi8win engages third-party service providers to process personal data on its behalf, those providers act as data processors under contractual obligations consistent with this Policy.

2. Data We Collect

2.1 Registration & Identity Data

When you register for an mbi8win account, we collect: full legal name, date of birth, gender, nationality, email address, Malaysian phone number, and a chosen username. This data is required to create and maintain your account.

2.2 Identity Verification (KYC) Data

To comply with anti-money laundering (AML) regulations and our responsible gaming obligations, mbi8win requires identity verification before processing withdrawals. KYC data collected includes: a copy of a valid government-issued photo ID (MyKad, passport, or driving licence), proof of address (utility bill, bank statement), and in certain circumstances a selfie or live verification. This data is handled with the highest level of security and access is strictly limited.

2.3 Financial & Transaction Data

We collect records of all deposits, withdrawals, bonus credits, and gaming transactions associated with your account, including payment method identifiers (e-wallet account references, bank account details where applicable), transaction amounts in MYR, timestamps, and transaction outcomes. Full payment card numbers are never stored by mbi8win — payment processing is handled by certified third-party payment processors.

2.4 Gaming Activity Data

mbi8win records all gaming activity on the platform, including games played, bet amounts, game outcomes, session durations, and wagering history. This data is used for account management, dispute resolution, responsible gaming monitoring, and regulatory compliance purposes.

2.5 Technical & Device Data

When you access mbi8win, we automatically collect technical data including: IP address, browser type and version, operating system, device type, screen resolution, referring URL, pages visited, session duration, and error logs. This data is used for security monitoring, fraud prevention, and platform performance analysis.

2.6 Communications Data

We retain records of all communications between you and mbi8win's support team, including live chat transcripts, email correspondence, and any documentation submitted in connection with a query or dispute.

3. How We Collect Your Data

mbi8win collects personal data through the following means:

• Directly from you: via account registration, KYC submission, deposit/withdrawal requests, support communications, and preference settings.
• Automatically: via cookies, server logs, and analytics tools when you access and use the platform.
• From third parties: including payment processors (transaction confirmation and status), identity verification providers (KYC document checks), and fraud detection services.

4. Purposes & Legal Basis for Processing

mbi8win processes your personal data for the following purposes:

• Account management and service delivery — processing necessary for the performance of the contract between you and mbi8win (i.e., operating your gaming account).
• Payment processing and financial administration — necessary for contract performance and compliance with financial regulations.
• Identity verification and fraud prevention — necessary for compliance with applicable AML/KYC legal obligations and our legitimate interest in protecting the platform and other users.
• Responsible gaming monitoring — necessary for compliance with gaming authority obligations and our legitimate interest in player welfare.
• Platform security and technical operations — legitimate interest in maintaining platform integrity and preventing unauthorised access.
• Marketing communications — based on your consent, where you have opted in to receive promotional materials. You may withdraw this consent at any time.
• Legal and regulatory compliance — including responding to lawful requests from authorities, retaining records as required by applicable regulations, and cooperating with investigations where required.

5. Disclosure to Third Parties

mbi8win does not sell your personal data. We share data only in the following limited circumstances:

• Payment processors: To facilitate deposits and withdrawals via Touch n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, and USDT TRC20 payment providers. Shared data is limited to what is necessary to process the specific transaction.
• Identity verification providers: Third-party KYC providers verify the authenticity of identity documents submitted. These providers are bound by strict data processing agreements and do not retain your documents after verification is complete.
• Gaming platform providers: Certified game studios and software providers receive limited technical data (e.g., player session tokens) necessary to deliver game content. They do not receive full identity or financial data.
• Regulatory and law enforcement authorities: Where required by applicable law, court order, or regulatory direction, mbi8win may disclose personal data to relevant authorities. We will notify you of such disclosure where permitted by law.
• Fraud prevention and security services: We share IP address and technical data with fraud detection services to protect the platform and all players from fraudulent activity.

All third-party processors engaged by mbi8win are required to maintain appropriate security standards and are prohibited from using your data for any purpose other than the specific service they provide to mbi8win.

6. International Data Transfers

mbi8win's platform infrastructure and some third-party service providers may be located outside Malaysia. Where personal data is transferred internationally, mbi8win ensures that appropriate safeguards are in place — including contractual data protection clauses — to maintain a level of protection equivalent to applicable data protection standards. By using the mbi8win platform, you acknowledge that your data may be transferred and processed in jurisdictions outside Malaysia for the purposes described in this Policy.

7. Data Retention

mbi8win retains personal data for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, regulatory, accounting, or reporting requirements. Specific retention periods include:

• Account data: Retained for the duration of the account relationship and for a minimum of five (5) years following account closure, as required for AML compliance.
• KYC documents: Retained for the period mandated by applicable AML regulations, typically five (5) years after the end of the business relationship.
• Transaction records: Retained for a minimum of five (5) years for financial compliance and audit purposes.
• Support communications: Retained for three (3) years from the date of the last interaction, or longer if related to an unresolved dispute.
• Technical/log data: Retained for up to twelve (12) months for security and fraud analysis purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised.

8. Cookies & Similar Technologies

8.1 Essential Cookies

These cookies are strictly necessary for the mbi8win platform to function. They manage your login session, maintain security tokens, and remember your language preferences. The platform cannot function without them and no consent is required for their use.

8.2 Analytical Cookies

mbi8win uses analytics cookies to understand how players navigate the platform — which pages are visited, how long sessions last, and where users encounter errors. This data is aggregated and anonymised. We do not use Google Analytics or similar third-party analytics services that share data with advertising networks.

8.3 No Advertising Cookies

mbi8win does not use third-party advertising cookies, retargeting pixels, or cross-site tracking technologies. Your browsing activity on the mbi8win platform is not shared with advertising networks.

8.4 Managing Cookies

You can control cookie settings through your browser preferences. Note that disabling essential cookies will prevent the mbi8win platform from functioning correctly.

9. Security Measures

mbi8win implements a range of technical and organisational security measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. These include:

• TLS/SSL encryption for all data in transit between your device and our servers
• Encryption of sensitive data at rest, including identity documents and payment details
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis
• Two-factor authentication (2FA) for player accounts and all internal administrative access
• Regular security audits and penetration testing by independent security professionals
• Automated intrusion detection systems monitoring for suspicious access patterns

While mbi8win employs industry-standard security practices, no online platform can guarantee absolute security. In the event of a data breach that poses a risk to your rights, mbi8win will notify affected players and relevant authorities in accordance with applicable law.

10. Your Rights

Subject to applicable law, you have the following rights regarding the personal data mbi8win holds about you:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete personal data.
• Right to Erasure: Request deletion of your personal data where we have no legal obligation or legitimate reason to retain it. Note that regulatory retention obligations (AML/KYC) may prevent immediate deletion of certain data categories.
• Right to Restriction: Request that we restrict processing of your personal data in certain circumstances (e.g., while accuracy is disputed).
• Right to Data Portability: Receive your personal data in a structured, commonly used, machine-readable format where technically feasible.
• Right to Object: Object to processing of your personal data based on legitimate interests, including profiling for marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact the mbi8win support team via the 24/7 live chat in-platform or by emailing [email protected]. We will respond within the timeframe required by applicable data protection law. We may require identity verification before processing certain requests.

11. Children & Minors

The mbi8win platform is strictly intended for adults aged 21 years and above. mbi8win does not knowingly collect personal data from individuals under 21. If we become aware that a registered player is under the minimum age, their account will be immediately suspended, all data associated with the account will be reviewed, and the account will be permanently closed. If you are a parent or guardian and believe a minor has registered on the platform, please contact us immediately at [email protected].

12. Changes to This Policy

mbi8win reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, platform functionality, or applicable legal requirements. When material changes are made, we will notify registered players via email or in-platform notification. The revised Policy will take effect from its publication date on mbi8win.asia. Your continued use of the platform following notification of a revised Policy constitutes your acceptance of the changes. We recommend reviewing this Policy periodically.

13. Contact & Data Requests

For privacy-related enquiries, data subject access requests, or concerns regarding how mbi8win handles your personal data, please contact us through the following channels:

• Email: [email protected]
• 24/7 Live Chat: Available in-platform after mbi8win Login

We aim to acknowledge all privacy enquiries within 72 hours and to resolve them within the applicable legal timeframe. Where you are not satisfied with our response, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.