Privacy Policy mbi8win — Our Commitment to Protecting Your Data

Welcome to the mbi8win Privacy Policy page. At mbi8win, we understand that your personal data is a highly valuable asset that deserves full protection. This policy is written not merely to satisfy legal requirements — it reflects our genuine commitment to managing your information with complete trust and integrity.

This Privacy Policy applies to all users who access the mbi8win platform via the website mbi8win.vin or the mbi8win mobile app. It explains the types of data we collect, why we need it, how we use it, and the steps we take to keep your data safe at all times.

Mbi8win operates in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). We appoint an internal data protection officer responsible for ensuring all our data management practices remain in line with current applicable legislation.

Mbi8win only collects data that is strictly necessary to provide a safe, efficient, and responsible service. We do not collect data beyond what is required — the principle of data minimisation is central to our privacy approach.

Data You Provide Directly

Automatically Collected Data

When you use the mbi8win platform, we automatically collect certain technical data that helps us ensure the platform operates smoothly and securely:

• IP address and country-level location information (state level only)
• Device type, operating system, and web browser version used
• Access times and dates, pages visited, and session duration
• In-platform game log data and transaction history
• Cookie information and device identifiers for security purposes

Every piece of data we collect is used for a clear and legitimate purpose. mbi8win will not use your data for any purpose beyond what is stated without first obtaining your renewed consent.

Mbi8win does not sell, rent, or commercialise your personal data to any third party. However, there are certain circumstances where we need to share your data with trusted parties in order to deliver our services to you:

Trusted Service Providers

We work with selected third-party service providers to support platform operations, including:

• Payment processor: Process deposit and withdrawal transactions securely through integrated channels.
• KYC service provider: Verify user identity to meet compliance requirements.
• Cloud infrastructure provider: Store and process data in a secure, certified server environment.
• Analytics companies: Helps us understand platform usage patterns for continuous improvement.

All third-party service providers are bound by strict Data Processing Agreements (DPA) and are only permitted to use your data for the purposes explicitly agreed upon.

Legal Requirements

In certain circumstances, mbi8win may be required to disclose user data to lawful authorities, including law enforcement agencies, regulatory bodies, or courts, when directed to do so under applicable Malaysian law. We will notify you of any such disclosure if we are legally permitted to do so.

Mbi8win uses cookies and similar tracking technologies to enhance the user experience, maintain login session security, and understand how users interact with our platform.

Types of Cookies We Use

You can manage cookie settings through your web browser. However, please note that disabling essential cookies may affect the login functionality and account security of your mbi8win account.

User data security is mbi8win's absolute top priority. We continuously invest in advanced security technologies and processes to ensure your data is always protected from unauthorized access, loss, or misuse.

• End-to-end encryption: All sensitive data is encrypted in transit using TLS 1.3 and at rest using AES-256.
• Layered access controls: Only authorised personnel with a legitimate business need may access user data, and every access is recorded in an audit log.
• Periodic penetration testing: Internal and external security teams conduct regular system vulnerability assessments throughout the year.
• 24/7 Monitoring: Automated security monitoring systems operate around the clock to detect and respond to any threats.
• Secure data backup: User data is securely backed up and can be restored within a short timeframe in the event of any system disruption.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by mbi8win. We fully respect and facilitate the exercise of these rights:

To exercise any of the above rights, please contact the mbi8win support team via the platform's live chat or our support email. We will process your request within 30 business days in accordance with PDPA requirements.

Mbi8win retains your personal data only for as long as necessary for the purposes stated in this policy or as required by law. Our data retention policy is as follows:

• Active account data: Retained for the duration your account is active and for 7 years after account closure for legal compliance purposes.
• Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysia's financial and taxation legal requirements.
• Game logs: Retained for 2 years for dispute resolution and audit purposes.
• Support communication data: Retained for 3 years for reference and service quality improvement.
• Anonymous analytics data: May be retained indefinitely as it cannot be used to identify individuals.

Once the retention period expires, your data will be securely deleted or fully anonymised using industry-standard procedures.

The mbi8win platform is exclusively for adult users aged 18 years and above only. We do not knowingly collect or process any personal data from individuals under the age of 18.

If we discover that personal data of a child has been collected without our knowledge, we will immediately take steps to delete that data and close the account in question. Parents or guardians who suspect their child has registered on the mbi8win platform are encouraged to contact us promptly through the provided support channels.

Mbi8win may update this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or improvements to platform operations. Each new version of this Privacy Policy will display an updated "Last Updated" date at the top of the document.

For changes that are material and significant, we will notify users via a prominent notice on the platform or to the registered email address at least 14 days before the changes take effect. Continued use of the mbi8win platform after the effective date of such changes constitutes your acceptance of the updated Privacy Policy.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact our Data Protection Officer (DPO) through the following channels:

For more information about your rights as a user and our commitment to platform security, please review Terms and Conditions as well as the Responsible Gaming ours.