Privacy Policy MBI Play — Your Data Security is Our Priority

MBI Play ("we", "platform", or "MBI Play") takes your privacy and personal data protection extremely seriously. This Privacy Policy clearly sets out our practices regarding the collection, use, storage, protection, and disclosure of information you provide to us when using the platform mbiplay.ws and all related services.

This policy applies to all users of the mbi play platform — including visitors, registered members, and any party that interacts with our services via the website, mobile app, or other related channels.

By registering an account or using the mbi play platform, you agree to the terms of this Privacy Policy. If you do not agree, please refrain from using our platform.

MBI Play only collects information that is genuinely necessary to operate the platform and provide you with the best service. Below are the categories of information we collect:

We no collecting sensitive information such as biometric data, medical records, religious beliefs, or political views. Credit/debit card details are not stored directly by mbi play — they are processed by certified third-party payment providers such as FPX processors and Malaysian digital wallets.

Mbi play uses the data collected solely for the stated and lawful purposes outlined below. We will not use your data for any other purpose without your prior consent. Those primary purposes are:

• Account management: Creating and managing your MBI Play account, including identity verification, secure login, and password management
• Payment processing: Processing deposits in MYR via Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, FPX (Maybank2u, CIMB Clicks), and withdrawals to your Malaysian bank account
• Service delivery: Giving you access to all games and platform features, including Live Casino, slots, jackpots, Malaysia Super League football betting, and badminton
• Security & fraud prevention: Detecting and preventing fraud, money laundering, bonus abuse, and other unlawful activities
• Customer support: Providing effective technical support and customer service in Bahasa Malaysia
• Legal compliance: Meeting Malaysian legal obligations including AML/KYC requirements and PDPA 2010
• Platform improvements: Analysing aggregated usage patterns (not individual behaviour) to improve the user experience
• Marketing communications: Sending relevant promotional information and special offers — only if you have consented to receive them

Mbi play does not sell, rent, or disclose your personal data to third parties for their own marketing purposes. However, there are limited circumstances where we need to share certain information in order to operate our services:

• Payment providers: Required transaction information is shared with certified payment processors such as FPX, Touch 'n Go, GrabPay, and DuitNow to process your deposits and withdrawals in RM
• Technical service providers: Server infrastructure providers, cloud services, and cybersecurity providers bound by strict confidentiality agreements
• Game providers: Third-party game software providers receive only the minimum game data required to operate the games you play
• Legal authorities: We may be required to disclose certain information to Malaysian authorities such as Bank Negara Malaysia, SPRM, or the police when mandated by law or a valid court order
• Intra-group sharing: Information may be shared within the mbi play group of companies for internal operational and administrative purposes

MBI Play takes data security seriously. Here are the layers of protection we have in place to keep your personal information safe at all times:

• 256-bit SSL/TLS Encryption: All communications between your device and MBI Play servers are encrypted — data remains unreadable even if intercepted in transit
• Encrypted data storage: Sensitive data such as passwords is stored in a hashed format that cannot be reversed, and financial data is stored in masked form
• Two-factor authentication (2FA): Available and encouraged for all accounts — an additional layer of security beyond your password
• 24/7 Monitoring: Our security team continuously monitors systems to detect any unusual activity or attempted breaches
• Periodic security audits: Our platform undergoes regular penetration testing and security audits conducted by independent experts
• Staff training: All mbi play staff who handle user data undergo rigorous data security training and are bound by confidentiality agreements
• Internal access controls: Access to user data is strictly limited to personnel who require it to perform their duties

While we take all reasonable steps to protect your data, no system is ever 100% secure. You also play an important role — always use a strong password, never share your account details, and enable 2FA on your account.

Mbi play uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small files stored in your web browser when you visit our website.

Types of cookies we use:

• Essential cookies: Required for core platform functionality — including login sessions, language preferences, and security. These cookies cannot be disabled without affecting how the platform operates
• Performance cookies: Collects information about how you use the platform (pages visited, time spent) on an anonymous basis to help us improve our services
• Functional cookies: Remembering your preferences such as game selections, display settings, and interface language
• Analytical cookies: Helps us understand platform traffic and aggregated usage patterns — no individual user is identified

As a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights, which mbi play is fully committed to upholding:

To exercise any of the rights above, please contact our Data Protection team at privacy@mbiplay.ws or via the Privacy Settings section in your account. We will respond within 14 working days.

Mbi play retains your personal data only for as long as necessary for the stated purposes or as required by Malaysian law. In general:

• Active account data: Retained for as long as your MBI Play account remains active
• Data upon account closure: Basic information is retained for 2 years for audit and customer support purposes
• Financial transaction records: Retained at minimum 7 years in accordance with Malaysia's financial and taxation legal requirements
• Support communication logs: Retained for 2 years for customer service reference
• Game data: Game history is retained for 5 years for compliance and dispute resolution purposes
• KYC / identity verification data: Retained for 5 years after the business relationship ends, in line with anti-money laundering (AML) requirements

Once the retention period expires, your data will be securely deleted or anonymised in accordance with established procedures.

As MBI Play operates on cloud infrastructure and relies on global service providers, there is a possibility that your data may be processed or stored on servers located outside Malaysia.

Where cross-border data transfers occur, mbi play ensures that:

• The recipient country or region provides a level of data protection equivalent to or higher than Malaysia's
• Appropriate and legally binding data transfer agreements have been established with the receiving parties
• Transfers are carried out solely for the purposes stated in this Privacy Policy
• All third-party providers involved adhere to the data security standards set by mbi play

Mbi play is an adult entertainment platform that not directed at individuals under the age of 18 under any circumstances. We do not knowingly collect any personal information from children or minors.

Should we become aware that a person under the age of 18 has registered an account or provided us with personal information, we will:

• Immediately suspending the account in question
• Forfeiture of all associated balances and winnings
• Deleting all personal information belonging to that individual from our systems within 72 hours
• Taking appropriate steps to prevent similar incidents from occurring in the future

Mbi play reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technology. Any amendments will be published on this page with a revised "Updated" date.

For material amendments — meaning significant changes to how we collect, use, or share your data — we are committed to:

• Sending a notification to the registered email address at least 14 days prior amendment takes effect
• Displaying a clear notice on the platform's main page
• Providing a direct link to the specific changes made so you do not need to re-read the entire document

Your continued use of the MBI Play platform after any amendments take effect will be considered your acceptance of the updated policy. If you do not agree with any amendment, you may close your account by contacting our support team.

For any enquiries, concerns, or requests relating to your privacy and personal data protection, please contact MBI Play's Data Protection Officer:

• Dedicated privacy email: privacy@mbiplay.ws — response within 3 business days
• General support: support@mbiplay.ws — for general platform enquiries
• Live Chat: Available 24/7 within the platform after login — in Bahasa Melayu

When contacting us regarding a privacy matter, please clearly state the type of request (data access, correction, erasure, etc.) and provide sufficient account information for us to verify your identity before processing the request.

We are committed to resolving all privacy-related enquiries and complaints within 14 working days. If you are not satisfied with how we have handled your data after contacting us, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia.