mbi666 Privacy Policy

mbi666 (referred to in this Privacy Policy as "mbi666", "we", "us", or "the Operator") operates the online casino and sports betting platform accessible at mbi666.org and all associated subdomains and mobile interfaces (collectively, the "Platform").

mbi666 acts as the data controller for the personal information collected from players and visitors to the Platform. As data controller, mbi666 determines the purposes and means by which personal data is processed. This Privacy Policy applies to all personal data collected or processed in connection with your access to and use of the mbi666 Platform, including data collected during registration, account operation, gameplay, financial transactions, and customer support interactions.

mbi666 collects the following categories of personal data in connection with your use of the Platform:

• Identity Data: Full legal name, date of birth, nationality, and government-issued identification document details (such as Malaysian MyKad number, passport number) collected during registration and KYC verification.
• Contact Data: Malaysian mobile number, email address, and residential address provided during account registration or subsequent updates.
• Financial Data: Payment method details (e.g., Touch 'n Go eWallet ID, Boost account reference, FPX bank account details), transaction history, deposit amounts, and withdrawal records.
• Technical Data: IP address, browser type and version, device identifiers, operating system, referring URLs, and session timestamps collected automatically when you access the Platform.
• Usage Data: Games played, bet amounts, session durations, wagering patterns, and feature usage within the mbi666 Platform.
• Communications Data: Records of your interactions with mbi666 customer support, including live chat transcripts and email correspondence.
• Verification Data: Documents submitted for KYC purposes, including scanned identification documents and proof of payment method ownership.

Where mbi666 is required to collect certain data by law or under the terms of its international gaming authority licence, failure to provide such data may prevent mbi666 from fulfilling its legal obligations and may result in suspension or closure of your account.

mbi666 uses collected personal data for the following purposes:

• To create and manage your mbi666 account and verify your identity at registration and at each mbi666 Login session.
• To process your deposits and withdrawals in Malaysian Ringgit (MYR) through your chosen payment method.
• To fulfil our Know Your Customer ("KYC") and Anti-Money Laundering ("AML") obligations under applicable law and our gaming licence.
• To operate, maintain, and improve the mbi666 Platform, including personalisation of game recommendations and promotional offers.
• To detect, investigate, and prevent fraudulent transactions, cheating, and other prohibited activities as defined in the mbi666 Terms & Conditions.
• To provide customer support and respond to your enquiries and complaints.
• To send you service communications, including account notifications, security alerts, and policy updates.
• To send you marketing communications about mbi666 promotions and offers, where you have provided consent or where permitted under applicable law.
• To conduct internal analytics and platform performance monitoring.
• To comply with legal obligations, including reporting to regulatory authorities as required by our gaming licence.

mbi666 processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform the agreement between you and mbi666 — including account registration, game access, and financial transaction processing.
• Legal Obligation: Processing required to comply with applicable law, regulatory requirements, and the conditions of mbi666's international gaming authority licence — including KYC, AML, and age verification obligations.
• Legitimate Interests: Processing for mbi666's legitimate business interests, including fraud prevention, platform security, analytics, and responsible gaming monitoring, where such interests are not overridden by your fundamental rights.
• Consent: Processing based on your explicit consent, including the sending of marketing communications. You may withdraw consent at any time by contacting mbi666 support or using the unsubscribe mechanism in marketing emails.

mbi666 does not sell your personal data. We may share your data with the following categories of third parties, strictly to the extent necessary for the stated purpose:

• Licensed Game Providers: Where gameplay data is transmitted to third-party game studios (such as live casino operators) to facilitate game delivery and technical support.
• Payment Processors: Financial data shared with payment service providers (including Touch 'n Go, Boost, and bank FPX operators) to process your deposits and withdrawals.
• KYC and Identity Verification Services: Identity and document data shared with licensed verification providers to fulfil our regulatory compliance obligations.
• IT and Cloud Service Providers: Technical and usage data processed by our infrastructure and hosting partners under contractual data protection agreements.
• Regulatory and Law Enforcement Authorities: Where mbi666 is legally required to disclose information to gaming regulators, financial intelligence units, or law enforcement agencies.

All third parties with whom mbi666 shares personal data are required to maintain appropriate technical and organisational security measures and to process data only for the specified purpose.

The mbi666 Platform uses cookies and similar tracking technologies to operate core platform functions, remember your preferences, maintain your mbi666 Login session, and collect anonymous usage analytics.

The following types of cookies are used on the mbi666 Platform:

• Essential Cookies: Required for basic Platform functionality including session management and mbi666 Login authentication. These cannot be disabled without affecting Platform operation.
• Functional Cookies: Remember your preferences such as language settings, display options, and last-visited game categories.
• Analytics Cookies: Collect anonymous data about how players interact with the Platform — pages visited, session duration, and feature usage — to inform product improvements.
• Security Cookies: Support fraud detection and login anomaly monitoring by maintaining a device fingerprint for your registered sessions.

You can manage non-essential cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality and performance of the mbi666 Platform.

mbi666 implements a multi-layered security framework to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Key security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the mbi666 Platform, including during mbi666 Login and financial transactions.
• Encryption of sensitive personal data at rest within mbi666's database infrastructure.
• Role-based access controls limiting internal access to personal data to authorised personnel only.
• Regular independent security audits and penetration testing of the Platform.
• Automated monitoring for suspicious activity patterns, including unusual mbi666 Login attempts and atypical withdrawal requests.

While mbi666 takes all reasonable steps to protect your data, no internet-based platform can guarantee absolute security. You are responsible for maintaining the security of your mbi666 Login credentials and for notifying mbi666 immediately if you suspect any unauthorised access to your account.

mbi666 retains personal data for the period necessary to fulfil the purpose for which it was collected, unless a longer retention period is required by law or our international gaming authority licence.

Specific retention guidelines applicable to mbi666 accounts include:

• Active account data is retained for the duration of the account relationship and for a minimum of five (5) years following account closure.
• Financial transaction records are retained for a minimum of five (5) years from the date of the transaction, in compliance with anti-money laundering legislation.
• KYC documentation is retained for a minimum of five (5) years from the end of the customer relationship.
• Customer support records are retained for three (3) years from the date of the interaction.
• Technical and session log data is retained for up to twelve (12) months for security and fraud monitoring purposes.

Upon expiry of applicable retention periods, personal data is securely deleted or anonymised in accordance with mbi666's data disposal procedures.

Subject to applicable law and the conditions of mbi666's gaming licence, you have the following rights with respect to your personal data held by mbi666:

• Right of Access: You may request a copy of the personal data mbi666 holds about you.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data.
• Right to Erasure: You may request deletion of your personal data where retention is no longer necessary, subject to legal retention obligations.
• Right to Restriction: You may request that mbi666 restrict processing of your data in certain circumstances, such as while a dispute is being resolved.
• Right to Object: You may object to processing based on mbi666's legitimate interests, including profiling for marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact the mbi666 support team via live chat or the email address listed in the footer. mbi666 will respond to verified requests within thirty (30) days. In complex or high-volume cases, this period may be extended by a further sixty (60) days with notice.

The mbi666 Platform is strictly intended for individuals aged 21 years and above. mbi666 does not knowingly collect personal data from individuals below this age. If mbi666 discovers that personal data has been collected from a person under 21, the relevant account will be immediately terminated and all associated data deleted, except where retention is required for legal or investigatory purposes.

If you believe that a minor has registered on the mbi666 Platform, please contact our support team immediately with details so that appropriate action can be taken without delay.