Mbi9 Privacy Policy – Malaysian Player Personal Data Protection

This Privacy Policy ("Policy") is published by mbi9 ("we", "the platform") and describes our commitment to protecting the personal data of all users who access or use the mbi9.pro platform ("Platform"). This document forms part of the Terms and Conditions and should be read together with it.

Your privacy is not merely a legal obligation to us — it is a core value we uphold firmly. From day one of mbi9's operations, we have built systems and processes that place member data protection as a priority, not an afterthought. This means every technical and operational decision we make takes into account its impact on your privacy.

This Policy applies to all personal information collected through our Platform, including via the mbi9.pro website, the mbi9 mobile app, email communications, live chat, and any other interaction channels between you and mbi9. By continuing to use our Platform after reading this Policy, you confirm your understanding of and agreement to the practices described herein.

Mbi9 follows a data minimization principle — we only collect information that is strictly necessary to provide a safe, fair, and regulatory-compliant service. The following are the categories of data we collect:

We do not collect sensitive data such as health information, political views or religious beliefs unless directly relevant to the program Responsible Gaming and you provide explicit consent to do so.

Every piece of data we collect has a clear and legitimate purpose. mbi9 uses your personal data for the following purposes:

• Account management: Create and maintain your account, process registration and verify your identity through the required KYC process
• Transaction processing: Process deposits, verify withdrawal requests and record all financial activity in your account
• Service provision: Allows you to access all games, promotions and platform features you are entitled to enjoy as a registered member
• Security and fraud prevention: Detect and investigate suspicious activity, protecting your account from unauthorised access
• Service communication: Send important account-related notifications, security updates and transaction confirmations
• Platform improvement: Analyse aggregated usage patterns to improve user experience and platform performance
• Regulatory compliance: Fulfil reporting obligations and legal compliance requirements applicable to our platform's operations
• Marketing (with consent): Send relevant promotional offers and bonuses — only if you have given consent to receive such communications

Mbi9 does not sell your personal data. However, in operating a safe and legally compliant platform, we may share your personal data with a limited set of third-party categories as follows:

• Payment processing providers: Required financial data is shared with authorised payment providers such as local banks and digital wallet providers to process your transactions
• Identity verification providers: Identity information is shared with approved third-party KYC verification services to verify your identity in accordance with regulatory requirements
• Technical service providers: Cloud and security infrastructure providers that help us operate the platform, subject to strict confidentiality agreements
• Regulatory authorities and law enforcement: We will disclose required information if mandated by law, court order or the directive of a legitimate authority

All third parties that receive personal data from mbi9 members are bound by strict data protection agreements and are only permitted to process data for the stated purposes. mbi9 has zero tolerance for any use of member data beyond the agreed scope.

Protecting your personal data from unauthorised access, loss or disclosure is a core technical and operational priority at mbi9. We continuously invest in the latest security infrastructure to ensure the highest protection standards are always maintained.

The technical security measures we implement include:

• Transit encryption: All communications between your device and our servers are secured with TLS 1.3 protocol using AES-256 encryption.
• Storage encryption: Sensitive data stored in our databases is encrypted using industry-recognised encryption algorithms
• Multi-factor access control: Access to systems containing members' personal data is protected by multi-factor authentication and the principle of least privilege
• Continuous security monitoring: Our SIEM (Security Information and Event Management) system monitors traffic and system activity 24/7 to detect threats in real time.
• Regular penetration testing: We conduct regular security assessments and penetration testing by independent security experts
• Incident response plan: We have clear procedures in place to handle any data security incidents, including notifying affected members within the required timeframe

While we take all reasonable precautions, no security system is perfect. We therefore encourage you to play your part in protecting your account by using a strong password, enabling two-factor authentication, and not sharing your login credentials with anyone.

Mbi9 uses cookies and similar tracking technologies to enhance platform functionality, understand usage patterns, and ensure the security of your session. The following are the types of cookies we use:

• Essential cookies: Required for the platform to function properly, including login session management and security. These cookies cannot be disabled.
• Functional cookies: Save your preferences such as language, theme and display settings to enhance your experience on your next visit.
• Analytics cookies: Collect aggregated and anonymised usage data to help us understand how users interact with the platform and identify areas for improvement.
• Security cookies: Used to detect and prevent fraudulent activity, including identifying suspicious login attempts.

You can manage your cookie settings through your web browser at any time. Please note that disabling certain cookies may affect the functionality or security of your experience on the mbi9 platform. Third-party cookies for advertising purposes are not used on our platform.

As an mbi9 member, you have the following rights regarding your personal data. We are committed to making it easy for you to exercise these rights:

To exercise any of the above rights, please contact the mbi9 support team via 24/7 live chat. All requests will be acknowledged within 3 business days and resolved within 14 business days.

Mbi9 retains your personal data only for as long as necessary to fulfil the purposes stated in this Policy or as required by law. Our data retention policy is as follows:

• Active account data: Retained for the duration your account remains active with mbi9
• Financial Transaction Records: Retained for a minimum of 7 years after the transaction occurs, in line with financial and tax legal requirements
• KYC documents: Retained for a minimum of 5 years after account closure, in line with anti-money laundering requirements
• Support communication logs: Retained for 2 years for quality control and dispute resolution purposes
• Technical log data: Retained for 90 days for security and system debugging purposes

Once the applicable retention period has expired, your data will be securely deleted or anonymized using industry-recognized procedures. Anonymized data may be retained for aggregate analytics purposes without a time limit.

Mbi9 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or service improvements. We are committed to notifying you of any material changes in a clear and timely manner.

When material changes are made to this Policy:

• We will update the "Updated" date at the top of this document
• Notifications will be sent to your registered email at least 14 days before changes take effect
• In-platform notifications will be displayed the first time you log in after the changes
• For highly significant changes, we may require your renewed consent before you can continue using the platform.

We encourage you to review this Privacy Policy periodically. Continued use of the mbi9 platform after the effective date of any changes constitutes your acceptance of the updated terms.

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, the mbi9 privacy team is here to help.

You can reach us via:

• Live Chat 24/7: The fastest way to get a response — our support team is available anytime via the chat icon at the corner of the platform
• Support email: [email protected] — for written inquiries requiring documentation or further reference.

For more information about your rights as a player, please also refer to our Responsible Gaming and FAQ which contains answers to the most frequently asked questions by mbi9 members.