Mbi44 Privacy Policy – User Personal Data Protection

Welcome to the mbi44 Privacy Policy. We understand that privacy is more than just a word — it is a fundamental right of every user who uses our online services. At mbi44, we take our responsibility seriously in managing your personal data in a proper, transparent, and secure manner.

This Privacy Policy explains in detail how mbi44 ("we", "Platform") collects, processes, stores, protects, and in certain circumstances, discloses your personal information when you use our website, mobile app, and all services we offer.

This document is written in Bahasa Melayu to ensure Malaysian users can clearly understand their rights and responsibilities without having to interpret complex legal language. If you have any questions after reading this policy, our support team is ready to assist.

Mbi44 collects various types of personal information when you register and use our platform. This is done to ensure you receive the best user experience, secure financial transactions, and compliance with relevant legal requirements.

a) Information You Provide Directly

• Full name as it appears on your official identification document.
• Active email address and mobile phone number.
• Date of birth for minimum age verification of 18 years.
• Bank account or digital wallet details for deposit and withdrawal purposes.
• KYC documents including a copy of your national ID or passport for identity verification purposes.
• Current residential address.

b) Information Collected Automatically

• IP address and general geographic location information.
• Device type, operating system, and web browser version used.
• Session activity logs including pages visited and duration of use.
• Cookie data and similar tracking technologies.
• Gaming activity records and financial transaction history.

The personal information we collect is used solely for legitimate and necessary purposes in operating the mbi44 platform efficiently and responsibly. The following are the primary purposes for which your data is used:

Mbi44 will not use your data for any purpose other than those stated above without obtaining your consent first. You may withdraw consent for marketing at any time through your account settings or by contacting our support team.

Mbi44 does not sell, rent, or trade your personal data to any third party. However, in the course of platform operations, there are certain situations where we need to share information with trusted parties:

• Payment Service Providers: To process your deposits and withdrawals via FPX, DuitNow, Touch 'n Go, Boost, GrabPay, and other payment methods available on our platform.
• Technology Service Providers: Companies that help us manage server infrastructure, cybersecurity, and platform analytics. They are bound by strict confidentiality agreements.
• Regulatory Authorities: When required by law, court order, or directive from a relevant authority in Malaysia.
• KYC Service Providers: Trusted third parties engaged to assist in securely verifying user identities in compliance with international standards.

All third parties we work with are bound by data protection agreements that require them to handle your information at a level of security equal to or higher than mbi44 standards.

The security of your personal data is mbi44's highest priority. We implement multiple layers of technical and organisational protection to ensure your information remains safe from unauthorised access, breaches, or misuse.

• 256-bit SSL Encryption: All data transmitted between your device and mbi44 servers is encrypted using the latest TLS protocol, ensuring no third party can intercept or read your information during transmission.
• Data-at-Rest Encryption: Personal and financial data stored in our databases is also encrypted using industry-standard encryption algorithms.
• Two-Factor Authentication (2FA): An additional security layer available to all user accounts to prevent unauthorised access even if your password is compromised.
• Real-Time Security Monitoring: An automated threat detection system that monitors suspicious activity around the clock and responds immediately.
• Internal Access Controls: Only specifically authorised mbi44 staff may access users' personal data, and every access is logged for audit purposes.
• Regular Security Testing: The mbi44 platform undergoes regular penetration testing and security audits conducted by independent experts.

Mbi44 uses cookies and similar tracking technologies to enhance user experience, maintain session security, and understand how users interact with our platform.

Types of Cookies We Use:

• Essential Cookies: Required for core platform functions such as login authentication and session security. These cookies cannot be disabled as they are critical to platform operations.
• Performance Cookies: Collects information on how you use the platform to help us improve the overall user experience. This data cannot personally identify you.
• Functional Cookies: Saves your preferences such as language, region, and display settings to provide a more personalised experience.
• Analytics Cookies: Used through trusted third-party analytics tools to understand usage patterns and continuously improve our platform.

You can manage or disable cookies through your web browser settings at any time. However, disabling essential cookies may affect certain functions of the mbi44 platform.

As an mbi44 user, you have certain rights regarding your personal data. We respect these rights and ensure you can exercise them easily through the channels provided.

To exercise any of the above rights, please contact the mbi44 customer support team. We will process your request within 30 calendar days from the date of receipt.

Mbi44 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law.

• Active Account Data: Retained for the duration your account remains active and in continuous use.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysia's financial and tax legal requirements.
• KYC Documents: Retained for a minimum of 5 years after account closure or the date of the last transaction, whichever is later.
• Support Communication Logs: Retained for 3 years for reference and dispute resolution purposes.
• System Log Data: Retained for 12 months before being automatically deleted.

When the retention period expires, your data will be securely deleted or anonymised using methods that ensure it cannot be recovered. Anonymisation means your data is processed in such a way that you can no longer be identified from it.

Mbi44 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform service improvements.

When significant changes occur, we will notify you through one or more of the following methods:

• A prominent notice on the mbi44 platform's home page or login page.
• A notification email sent to your registered email address.
• An in-app notification during your next login session.

Continued use of the mbi44 platform after any Privacy Policy changes are published will be considered your acceptance of the updated policy. The date of the last update is always shown at the top of this document for your reference.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please do not hesitate to contact us. The mbi44 Data Protection Officer (DPO) team is ready to assist you.

• Privacy Email: [email protected]
• Customer Support: Via the in-platform ticket system on mbi44 (available 24/7).
• Response Time: We aim to respond to all privacy-related enquiries within 5 business days.

For more complex requests such as data access, deletion, or data processing disputes, please clearly state your request details and include your account number to expedite the process. We will acknowledge receipt of your request and provide updates within the designated timeframe.