mbi9 Official Policy

Privacy Policy mbi9 – Your Personal Data Protection

Mbi9 respects the privacy of every member. This document transparently explains how we collect, use, store, and protect your personal information throughout your use of our platform.

Last Updated: 1 January 2026  |  Applicable to Malaysia

Commitment Privacy Us

Six core principles that underpin how mbi9 manages your personal data.

Advanced-Level Encryption

All data transmitted between your device and mbi9 servers is protected with 256-bit SSL encryption. Sensitive information such as payment details and passwords is never stored in plain text.

No Data Sales

Mbi9 does not sell, rent, or use your personal data for third-party advertising purposes without your explicit consent. Your data belongs entirely to you.

Data Control in Your Hands

You have the right to access, amend, request a copy of, or request deletion of your personal data at any time through your account settings or by contacting our support team.

Secure & Trusted Servers

Your data is stored in data centres that comply with international security standards, with access restricted to authorised personnel only. Security audits are conducted on a regular basis.

Flexible Communication Options

You can choose the types of communications you wish to receive from mbi9 — including promotional notifications, system updates, and marketing emails. Unsubscribe options are available at any time.

Legal Compliance

Mbi9 operates in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and related data protection legislation. We stay current with regulatory changes to ensure full compliance.

Important Note: By using the mbi9 platform, you agree to the terms of this Privacy Policy. Please read this document carefully. If you do not agree, please discontinue use of the platform and contact us to close your account.

1. Introduction

This Privacy Policy ("Policy") describes how mbi9 ("we", "our platform") collects, uses, stores, and protects your personal information when you use the website https://mbi9.app, the mbi9 mobile app, and all related services.

We take our responsibilities under Malaysia's Personal Data Protection Act 2010 (PDPA) seriously. Every piece of information you provide is handled with full integrity and transparency. Our goal is simple — you should know exactly what happens to your data.

This Policy applies to all users of the mbi9 platform regardless of how you access it — whether via a standard web browser, Android app, iOS app, or any other access channel we provide.

2. Information We Collect

Mbi9 collects various categories of information to ensure a smooth, secure, and personalised user experience. The following are the types of data we collect:

Data Category Example Information Purpose of Collection
Identity Data Full name, date of birth, identification card number Identity verification (KYC), legal compliance
Contact Data Email address, phone number Account communications, customer support
Financial Data Bank account information, transaction records Processing deposits and withdrawals
Technical Data IP address, device type, web browser Security, fraud detection
Usage Data Game records, betting history, session duration Service improvement, responsible gaming
Cookie Data Session cookies, language preferences, login status Platform functionality, personalised experience

We may also receive information about you from legitimate third-party sources such as identity verification providers, payment partners, and fraud prevention agencies — solely to verify the accuracy of the information you provide us.

3. How We Use Your Data

Every piece of data we collect has a clear and lawful purpose. mbi9 uses your information for the following purposes:

  • Account management: Creating and maintaining your account, verifying your identity, and accurately processing all financial transactions
  • Service delivery: Providing access to all games, promotions, and platform features that you use
  • Security and fraud prevention: Detecting suspicious activity, preventing unauthorized access, and protecting your account from threats
  • Legal compliance: Fulfilling obligations under the PDPA, anti-money laundering (AML) requirements, and other applicable regulations
  • Communications: Sending important account updates, transaction notifications, and — with your consent — the latest promotional information
  • Platform improvements: Analyzing usage patterns to improve platform design, performance, and overall user experience
  • Responsible gaming: Monitoring wagering patterns to identify members who may need support and early intervention

Legal Basis: All data processing by mbi9 is based on one of the following lawful grounds — your consent, performance of a contract, legal obligation, or legitimate interests that do not override your fundamental rights.

4. Data Sharing with Third Parties

Mbi9 does not sell your personal data. We only share your information in the following limited circumstances:

  • Trusted service providers: Partners who help us operate the platform — including payment service providers, game providers, and cloud infrastructure providers — are bound by strict confidentiality agreements
  • Regulatory bodies and law enforcement: When required by applicable law or pursuant to a valid court order
  • Anti-fraud agency: To verify identity and prevent fraudulent activity that could compromise the security of the platform and other users
  • Business transfers: In the event of a company merger, acquisition, or asset sale where user data may be transferred as part of the business assets — with advance notice to users

All third parties who receive your data from mbi9 are required to comply with data protection standards equal to or higher than those we uphold. They are not permitted to use your data for any purpose other than what is specified in their service agreement with us.

International Transfers: If your data needs to be transferred outside Malaysia for processing purposes, we ensure that appropriate safeguards are in place in accordance with PDPA requirements and relevant data protection agreements.

5. Cookies & Tracking Technologies

Mbi9 uses cookies and similar tracking technologies to enhance the functionality and security of the platform. The following are the types of cookies we use:

  • Essential Cookies: Required for core platform functions such as login session management and security. These cookies cannot be disabled without affecting platform functionality
  • Functional Cookies: Saving your preferences such as language, display format, and other personal settings for a more comfortable experience
  • Analytics Cookies: Helping us understand how users interact with the platform so we can continuously improve our services — this data is collected in aggregate and does not identify individuals
  • Security Cookies: Used to detect suspicious activity, prevent unauthorised access, and protect the integrity of your session

You can manage your cookie preferences through your web browser settings. Please note that disabling certain cookies may affect the functionality of some areas of the mbi9 platform. The mbi9 mobile app also uses similar technologies for the same purposes.

6. Data Security

Mbi9 invests seriously in security infrastructure to ensure your data is always protected. The technical and organisational security measures we implement include:

  • 256-bit SSL/TLS Encryption for all data transmitted between your device and our servers
  • Data encryption at rest for sensitive information stored in our databases
  • Two-factor authentication (2FA) available and encouraged for all mbi9 accounts
  • 24/7 security monitoring by our cybersecurity team to detect and respond to threats in real time
  • Regular security audits by independent third parties to identify and address potential vulnerabilities
  • Role-based access control that ensures only authorised staff can access user data, and only to the extent required for their responsibilities
  • Incident Response Procedure that is comprehensive to address any data breach swiftly and effectively

Incident Reporting: In the event of a data breach affecting your rights and freedoms, mbi9 will notify you and the relevant authorities within the timeframe required by applicable law.

7. Your Rights

As a user of the mbi9 platform and a data subject under Malaysia's PDPA, you have the following rights regarding your personal data:

Right to Access

Request a copy of the personal data we hold about you in a readable format.

Right to Rectification

Request correction of inaccurate or incomplete data in our records.

Right to Erasure

Request deletion of your personal data, subject to our legal obligations.

Right to Restrict Processing

Request that we restrict the processing of your data under certain permitted circumstances.

Right to Object

Object to the processing of your data for direct marketing purposes at any time.

Right to Data Portability

Receive your data in a structured format that can be transferred to another platform.

To exercise any of the above rights, please contact the mbi9 support team via live chat or email. We will process your request within 30 business days. In some cases, we may need to verify your identity before processing the request.

8. Data Retention Period

Mbi9 retains your personal data only for as long as necessary to fulfil the purposes stated in this Policy or as required by law. Our general data retention period guidelines are as follows:

  • Active account data: Retained for the duration your account remains active and in continuous use
  • Financial transaction data: Retained for a minimum of 7 years as required by Malaysian accounting and AML regulations
  • KYC records and identity verification: Retained for 5 years after account termination in accordance with compliance requirements
  • Customer support communication logs: Retained for 3 years for dispute resolution and service quality improvement purposes
  • Technical data and access logs: Retained for 12 months for security and system analysis purposes
  • Marketing data: Deleted within 30 days after you withdraw consent for marketing communications

Upon expiry of the applicable retention period, your data will be securely deleted or irreversibly anonymised in accordance with industry best practices.

9. Third-Party Links and Services

The mbi9 platform integrates third-party services such as game providers, payment gateways, and analytics tools. While we carefully select our partners and bind them to strict data protection agreements, this Privacy Policy applies only to data processing carried out directly by mbi9.

Third-party game providers integrated within the mbi9 platform may collect certain technical data for the operation of their games. Use of those services is also subject to their respective privacy policies. We encourage you to read the relevant provider's privacy policy if you wish to learn more.

Note: mbi9 is not responsible for the privacy practices of any third parties operating independently of our platform. Any privacy-related enquiries concerning third parties should be directed to them.

10. Changes to the Privacy Policy

Mbi9 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, technology used, legal requirements, or other relevant factors. When significant changes are made, we will:

  • Displaying a clear notice on the main page of the mbi9 platform for at least 14 days before changes take effect
  • Sending notifications via your registered email for material changes that require your attention
  • Updating the "Last Updated" date at the top of this document
  • Maintaining an archive of previous versions of the Privacy Policy for your reference if needed

Your continued use of the mbi9 platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. If you do not agree with the changes made, you have the right to close your account.

11. Contact Us Regarding Privacy

For any questions, concerns, or requests related to this Privacy Policy or the processing of your personal data by mbi9, please contact us through the following channels:

  • Live Chat: Available 24/7 via the chat icon on the mbi9 platform — the fastest way to get a response
  • Privacy Email: [email protected] — for formal requests relating to data rights and privacy complaints
  • General Support: [email protected] — for general enquiries related to your account and the platform

We are committed to responding to all privacy-related inquiries within 14 working days. For more complex requests such as data transfers or account deletions, processing may take slightly longer, but we will keep you informed of your request's progress.

Complaints to Authorities: If you believe that mbi9 has not handled your data in accordance with applicable law and the matter cannot be resolved directly with us, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia or the relevant regulatory authority.

Your Data Is Safe With mbi9

We take your privacy seriously at every step. Join over 500,000 members who have trusted mbi9 as their online gaming platform of choice.

PDPA Compliance
256-bit SSL Encryption
No data sales
Full control in your hands
Bahasa Melayu