Privacy Policy mbi360 — Your Personal Data Protection

1 Personal Information We Collect

When you register and use the mbi360 platform, we collect several categories of personal information to enable us to provide you with a secure, seamless and responsible service. The following are the types of data we collect:

2 How We Collect Your Information

Mbi360 collects your personal information through transparent and lawful means. Here are the data collection channels we use:

• Account Registration — Information you enter directly during the new account registration process on the mbi360 platform.
• KYC Process — Identity verification documents you upload to complete the mandatory Know Your Customer (KYC) process.
• Financial Transactions — Information automatically recorded each time you make a deposit or withdrawal.
• Gaming Activity — Game data automatically recorded by our system while you use any game on the platform.
• Support Communications — Information you provide when interacting with our customer support team via Live Chat.
• Cookies and Tracking Technologies — Technical data automatically collected via cookies, pixels, and similar technologies while you browse our platform.

3 Purpose of Using Your Personal Data

Every piece of information we collect is used for specific, lawful, and pre-defined purposes. mbi360 uses your personal data for the following:

• Creating and managing your account and enabling secure access to the mbi360 platform.
• Processing deposits, withdrawals, and all financial transactions you make accurately and securely.
• Verifying your identity through the KYC process to comply with anti-money laundering (AML) legal requirements.
• Providing responsive and effective customer support whenever you need assistance.
• Sending account-related notifications, transaction updates, promotions, and relevant platform announcements.
• Identifying and preventing fraud, system abuse, and suspicious activity.
• Complying with all legal and regulatory obligations applicable to the operation of the mbi360 platform.
• Enhancing user experience, platform performance, and the development of new products.
• Conducting platform analytics to understand usage patterns and improve our services.

4 Information Sharing with Third Parties

Mbi360 takes a highly cautious approach to sharing user data. We do not sell, rent or disclose your personal information to third parties for their own commercial purposes. However, there are limited situations where data sharing is necessary:

• Payment Service Providers — Transaction information is shared with authorised payment processors such as FPX, DuitNow, and digital wallet providers to facilitate the processing of your financial transactions.
• Game Software Providers — Certain game data is shared with authorised game software providers to ensure game integrity and fairness.
• Legal Authorities — Required information may be disclosed to government authorities or law enforcement bodies if mandated by Malaysian law.
• Identity Verification Services — KYC data is shared with authorised third-party identity verification service providers to verify the authenticity of your documents.

5 Data Security and Protection

Protecting your personal data is a top priority at mbi360. We continuously invest in the latest security infrastructure to keep your information safe from cyber threats and unauthorized access.

• 256-bit SSL encryption is applied to all data transmitted between your device and mbi360 servers.
• All passwords are stored in an unreadable hashed format, never as plain text.
• Two-factor authentication (2FA) is available for an additional layer of security on your account.
• Mbi360 servers are protected by advanced firewalls and an intrusion detection system (IDS) operating 24/7.
• Security audits are conducted periodically by our internal security team and independent third-party experts.
• Access to user data within our internal systems is restricted and only permitted to staff who require it to perform their duties.

6 Cookies and Tracking Technologies

The mbi360 platform uses cookies and similar tracking technologies to enhance user experience, analyze platform performance, and maintain the security of your login session. The following are the types of cookies we use:

• Essential Cookies — Required for core platform functions such as login authentication, game sessions, and security. These cookies cannot be disabled.
• Functional Cookies — Stores your preferences such as language, display settings, and game choices for a more personalised experience.
• Analytics Cookies — Helps us understand how users interact with the platform for continuous improvement purposes.
• Security Cookies — Used to detect and prevent fraudulent activity and to ensure the integrity of your session.

7 Your Rights as a User

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have certain rights regarding the personal data we hold about you. mbi360 is committed to respecting and facilitating the exercise of these rights:

8 Data Retention Period

Mbi360 only retains your personal data for as long as necessary for the purposes stated in this policy, or as required by Malaysian law. The following are our data retention guidelines:

• Active account information is retained for as long as your account remains active and in use on the mbi360 platform.
• Financial transaction records and gaming history are retained for a minimum of 7 years in accordance with Malaysia's financial and tax legal requirements.
• KYC documents are retained for a minimum of 6 years after account closure to meet anti-money laundering legal requirements.
• Customer support communication logs are retained for 2 years for quality control and dispute resolution purposes.
• Cookie and analytics data is retained for between 30 days and 2 years depending on the type of cookie used.

9 Changes to This Privacy Policy

Mbi360 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, new legal requirements, or improvements to the way we operate.

For any significant and material changes to the way we process your personal data, mbi360 will provide clear notice via in-platform notifications or the email registered to your account, at least 30 days before the changes take effect.

• The latest update date of this Privacy Policy will always be displayed at the top of this page.
• Continued use of the mbi360 platform after the effective date of any changes constitutes acceptance of the updated policy.
• If you do not agree with the changes, you have the right to close your account and withdraw your valid balance before the effective date.

10 Contact Us About Privacy

If you have any questions, concerns or complaints regarding this Privacy Policy or how mbi360 handles your personal data, our team is ready to assist you.

You may contact our Data Protection Officer (DPO) via Live Chat on the mbi360 platform, available 24 hours a day, 7 days a week. All privacy-related enquiries are handled with high priority and responded to within 3 business days.

For formal complaints regarding personal data protection that cannot be resolved through our support channels, you may also refer to the Department of Personal Data Protection (JPDP) Malaysia, the regulatory body responsible under the Personal Data Protection Act 2010.