Personal Data Protection

Privacy Policy mbi7 — Member Personal Data Protection

Your privacy is more than a legal obligation to us — it is a responsibility we take seriously. This document clearly explains how mbi7 collects, uses, stores, and protects every piece of personal information you entrust to us.

Updated: 1 January 2026
256-bit SSL
PCI-DSS Compliant
mbi7.vu
256-bit SSL EncryptionAll data transmitted securely
PCI-DSS LicensedPayment security standards
KYC VerificationYour identity is protected
Secure StorageServers protected 24/7
mbi7 Privacy Policy Summary mbi7 collects your personal data solely to operate our services, ensure account security, and enhance your experience. We do not sell your data to third parties. All data is protected with 256-bit SSL encryption and a multi-layered security system.
1

Introduction

Welcome to the mbi7 Privacy Policy. This document is published by mbi7 Entertainment Sdn Bhd ("mbi7", "we", "our platform") and applies to all users and members who access the mbi7.vu website and the mbi7 mobile app.

We understand that entrusting personal information to an online platform is no small matter. That is why mbi7 takes a transparent and responsible approach to handling every piece of data you share with us. This Privacy Policy is written in plain language — free of confusing legal jargon — so you know exactly what happens to your information.

By registering an account or using any mbi7 service, you agree to the terms set out in this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of the platform and contact our support team to close your account.

Our Commitment to You Privacy is not just a document at mbi7 — it is our workplace culture. Every mbi7 employee undergoes rigorous data protection training and is bound by legally enforceable confidentiality agreements.
2

Personal Data We Collect

Mbi7 only collects data that is genuinely necessary to operate our services safely and effectively. The following are the categories of data we collect:

2.1 Identity Information

  • Full name as stated on your official identification document.
  • Date of birth for age verification (must be 18 years or above).
  • National identification number (MyKad) or passport number for the KYC process.
  • Identity document images and a selfie for identity verification.

2.2 Contact Information

  • An active email address for account communications and notifications.
  • A valid Malaysian mobile number for two-factor authentication (2FA).
  • Full residential address for legal compliance purposes.

2.3 Financial Information

  • Bank account number, bank name and account holder name for withdrawal processing.
  • Transaction records include deposit history, withdrawal history, and wagering activity.
  • Digital wallet information (TNG eWallet, GrabPay, etc.) if used as a payment method.

2.4 Technical Information

  • IP address and approximate geographic location at login.
  • Device type, operating system and web browser version used.
  • Session activity logs including login times, logout times and in-platform actions.
  • Cookie data and session identifiers for account management.
Data Categories Example Mandatory?
Identity InformationName, IC, Date of BirthYes
Contact InformationEmail, Phone NumberYes
Financial InformationBank Account No.For Withdrawal
Technical InformationIP Address, Device TypeAutomatic
Game DataBetting HistoryAutomatic
3

How We Collect Data

Your personal data is collected through several different channels when you interact with the mbi7 platform:

  • Account Registration: Information you enter directly during the registration process, including name, email, phone number and date of birth.
  • Identity Verification (KYC): Documents and images you upload during the identity verification process as required by regulatory authorities.
  • Financial Transactions: Information collected automatically when you make a deposit or submit a withdrawal request through the platform.
  • Platform Usage: Data generated automatically as you browse the website, play games, or use features on the mbi7 platform.
  • Support Communications: Information you share when contacting our customer support team via live chat or email.
  • Cookies and Tracking Technologies: Technical data collected automatically via first-party cookies for security purposes and to improve the user experience.
We Do Not Purchase Data From Third Parties mbi7 does not purchase, rent, or acquire your personal data from data brokers, social media networks, or any external third parties. All data we hold has been provided directly by you or generated through your interactions with our platform.
4

Purpose of Data Use

Mbi7 uses your personal data for specific and legitimate purposes only. We do not use your data for any purpose beyond those stated below without obtaining your additional consent:

  • Account Management: Creating, managing and maintaining your account on the mbi7 platform, including login processing, identity verification and session management.
  • Transaction Processing: Processing all deposits and withdrawal requests securely, ensuring your funds reach the right destination within the promised timeframe.
  • Security and Fraud Prevention: Detecting and preventing suspicious activity, money laundering, identity fraud and the use of multiple accounts in violation of the terms of service.
  • Legal Compliance: Fulfilling compliance obligations to regulatory bodies and applicable laws, including anti-money laundering (AML) and know your customer (KYC) requirements.
  • Service Communications: Sending important account-related notifications, transaction confirmations, security alerts and terms of service updates.
  • Customer Support: Providing technical assistance and resolving complaints or enquiries you submit to our support team.
  • Platform Improvements: Analysing usage patterns in aggregate and anonymised form to improve the design, performance and overall experience of the mbi7 platform.
  • Promotions and Marketing (with consent): Sending information about bonus offers, the latest promotions and mbi7 news — only to members who have consented to receive marketing communications.
5

Data Sharing With Third Parties

Mbi7 does not sell, rent, or disclose your personal data to any third party for their own commercial purposes. However, in certain limited situations, we may need to share some of your data with the following parties:

5.1 Payment Service Providers

Financial information required to process your transactions is shared with licensed payment processors such as FPX, DuitNow and digital wallet providers. These processors are contractually obligated to protect your data and use it solely for payment processing purposes.

5.2 Game Software Providers

Third-party game developers providing slot games, Live Casino and sports games within the mbi7 platform may receive technically necessary game session information. This data is limited and does not include your personal financial information.

5.3 Regulatory Bodies and Law Enforcement

Mbi7 is required to disclose data requested by competent authorities, licensed regulatory bodies, or courts when mandated by law. Such disclosures are made in accordance with valid legal procedures and only to the extent required by law.

Confidentiality Agreement With All Partners Every third-party service provider working with mbi7 is required to sign a legally binding Data Processing Agreement (DPA). They are prohibited from using your data for any purpose beyond what has been agreed, and are subject to periodic security audits by our team.
6

Data Security

Protecting your personal data is mbi7's top priority. We continuously invest in the latest security infrastructure to ensure every bit of your information is shielded from cyber threats.

6.1 Data Encryption

All data transmitted between your device and mbi7 servers is protected by TLS 1.3 encryption protocol with AES-256 encryption keys. This means that even if someone intercepts the data in transit, they will be unable to read it without the correct encryption key.

6.2 Server Infrastructure

Your data is stored in enterprise-grade data centres equipped with multi-layered physical access controls, 24/7 security monitoring, intrusion detection systems (IDS/IPS), and a comprehensive disaster recovery plan.

6.3 Internal Access Controls

Access to members' personal data within the mbi7 organisation is strictly restricted on a least-privilege basis. Only staff who require access to perform their duties are granted permission, and all access is recorded in immutable audit logs.

6.4 Ongoing Security Testing

Mbi7 conducts regular penetration testing by independent third-party security experts, and maintains a responsible vulnerability disclosure programme to promptly identify and address any security weaknesses.

7

Your Rights Regarding Personal Data

As the owner of your personal data, you hold several rights recognised under applicable data protection law. mbi7 is committed to respecting and facilitating the exercise of these rights:

Right to Access

You have the right to request a copy of all personal data we hold about you. Such requests will be processed within 14 business days.

Right to Rectification

If any data we hold is inaccurate or outdated, you have the right to request immediate correction through your account settings or customer support.

Right to Erasure

You may request the deletion of your personal data, subject to any legally binding retention obligations applicable to us.

Right to Object

You have the right to object to the processing of your data for direct marketing purposes at any time, without needing to provide a reason.

Right to Data Portability

You may request that your data be transferred in a machine-readable format for your own use or for use on another platform.

Right to Restriction

In certain circumstances, you may request that we restrict the processing of your data while a dispute or review is in progress.

How to Exercise Your Rights To submit any request regarding your privacy rights, contact our Data Protection team via in-app live chat or email at [email protected]. All requests will be processed within 14 business days. We may need to verify your identity before processing any request to ensure the security of your account.
8

Cookies and Tracking Technologies

Mbi7 uses cookies and similar tracking technologies to ensure the platform functions smoothly and securely. Cookies are small text files stored on your device when you browse our website.

8.1 Types of Cookies We Use

  • Essential Cookies: Required for core platform functions such as login session management, account security, and language preferences. These cookies cannot be disabled as the platform will not function properly without them.
  • Performance Cookies: Helps us understand how members interact with the platform — which pages are visited most frequently and where users encounter issues — so we can improve your experience.
  • Functional Cookies: Saving your personal preferences such as language, time zone and display settings so you do not have to reconfigure them each time.

8.2 Managing Cookies

You can manage or delete cookies at any time through your web browser settings. Please note, however, that disabling essential cookies may affect your ability to use certain features of the mbi7 platform, including the ability to stay logged in.

9

Data Retention Period

Mbi7 retains your personal data for as long as it is needed for the purposes stated in this policy, or for as long as we are legally obliged to do so. The following are our data retention guidelines:

  • Active Account Data: Retained for as long as your account is active and for 7 years after account closure for anti-money laundering compliance purposes.
  • Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysia's financial and tax legal requirements.
  • Security Logs: Activity and security logs are retained for 12 months for security investigation and fraud detection purposes.
  • Support Communication Data: Live chat and support email records are retained for 2 years for quality assurance and reference purposes.
  • Marketing Data: Data used for marketing communications is deleted immediately upon withdrawal of your consent.

Once the retention period expires, your data will be securely deleted or permanently anonymised so it can no longer be linked to you.

10

Child Protection

The mbi7 platform is strictly for individuals aged 18 and above. We do not knowingly collect or store any personal data from individuals under the age of 18.

If you are a parent or guardian and you believe your child under the age of 18 has registered an account at mbi7 or provided us with personal data, please contact our support team immediately. We will take prompt steps to verify the age, close the account and delete all related data within 48 hours of receiving confirmation.

Mandatory Age Verification mbi7 conducts strict age checks during registration and the KYC process. Members who fail to prove they are aged 18 and above will have their registration rejected and their account closed immediately.
11

Privacy Policy Amendments

Mbi7 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, legal requirements, or technological developments. When significant amendments are made, we will notify you via in-app notification or email at least 14 days before the amendment takes effect.

The "Updated" date at the top of this document will always reflect the date of the latest version of the Privacy Policy. We encourage you to review this page periodically. Continued use of the mbi7 platform after the effective date of any amendment constitutes your acceptance of the updated policy.

12

Contact Our Data Protection Officer

If you have any questions, concerns or complaints regarding how mbi7 handles your personal data, we encourage you to contact us directly. Our Data Protection Team is ready to assist:

  • Live Chat: The fastest way — available 24/7 directly in the mbi7 app or on our website, with an average response time of under two minutes.
  • Data Protection Email: [email protected] — state "Privacy Inquiry" in your email subject line. We aim to respond within 24 hours.
  • Help Centre: Visit page FAQ us for answers to frequently asked questions about privacy and account security.

If you are not satisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia or the relevant regulatory authority in your jurisdiction.

Why Become a Member Trust mbi7?

Six key pillars that make mbi7 a safe and trusted platform for over 300,000 members in Malaysia.

256-bit SSL Encryption

Every piece of data transmitted between your device and mbi7 servers is protected by TLS 1.3 encryption protocol — the same standard used by leading banks worldwide. Your data cannot be read by anyone while in transit.

KYC Identity Verification

Our strict KYC (Know Your Customer) process ensures every mbi7 account is held by a verified individual aged 18 and above. This protects you from unauthorised identity use and keeps the platform free from irresponsible elements.

PCI-DSS Compliance

All financial transaction processing at mbi7 complies with PCI-DSS (Payment Card Industry Data Security Standard) — the highest security standard in the global payments industry. Your card data and banking information are never stored on our servers in unencrypted form.

Real-Time Fraud Detection

Mbi7's AI-powered fraud monitoring system operates 24/7, analysing every transaction and login activity in real time. If suspicious activity is detected on your account, we will immediately block access and notify you for re-verification.

Integrated Data Storage

Your personal data is stored on fully encrypted, segregated servers. Our storage infrastructure features automated backup systems, disaster recovery, and multi-layered physical access controls at Tier-3 rated data centres.

No Data Sale Policy

Mbi7 operates on a simple principle: your data belongs to you. We do not sell, rent, or exchange members' personal data with any third party for commercial purposes. This commitment is not merely a promise — it is embedded in our operating agreements.

Your Data is Safe.
Your Experience is Guaranteed.

Over 300,000 members have trusted mbi7 with their online entertainment experience. With industry-grade data protection and a transparent platform, you can focus on your favourite games with complete confidence.

256-bit SSL
Data Protected
PCI-DSS Compliant
24/7 Support
Bahasa Melayu