Privacy Policy

Your privacy is important to mbi7. This Privacy Policy ("Policy") describes how mbi7.one ("mbi7", "we", "us", "our") handles personal data in connection with the mbi7 online gaming platform. By registering an account or using mbi7's services, you acknowledge that you have read and understood this Policy.

1 Introduction

mbi7 operates an online gaming platform at mbi7.one, offering casino games, live dealer tables, slot games, sportsbook betting, esports wagering, and related services to players in Malaysia and other permitted jurisdictions. In the course of providing these services, mbi7 necessarily processes certain personal data about registered players and website visitors.

This Policy applies to all personal data processed by mbi7 in connection with: (a) account registration and verification; (b) platform usage including games, betting, and transactions; (c) communications between you and mbi7; and (d) visits to the mbi7 website. This Policy should be read alongside mbi7's Terms & Conditions, which are incorporated herein by reference.

2 Data Controller

mbi7.one acts as the data controller in respect of personal data processed under this Policy. As data controller, mbi7 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is conducted lawfully, fairly, and transparently in accordance with applicable data protection legislation and international gaming regulatory requirements.

3 Data We Collect

mbi7 collects the following categories of personal data:

• Identity Data: Full legal name, date of birth, gender, nationality, and copies of government-issued identity documents submitted for Know Your Customer (KYC) verification purposes.
• Contact Data: Email address, mobile phone number, and residential address.
• Financial Data: Payment method details (e-wallet identifiers, bank account references for FPX), transaction history, deposit and withdrawal records, and MYR account balances.
• Gaming Data: Game session history, bet records, win/loss data, game preferences, bonus redemption history, and responsible gaming tool settings.
• Technical Data: IP address, device type and identifiers, browser type and version, operating system, session timestamps, and geolocation data at the time of login.
• Usage Data: Pages visited, features used, referral source, and navigation patterns within the mbi7 platform.
• Communications Data: Records of live chat conversations, email correspondence, and support ticket history with mbi7's customer service team.

4 How We Collect Data

mbi7 collects personal data through the following means:

• Directly from you: When you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or update your account settings;
• Automated technical collection: Through cookies, log files, and similar technologies when you access the mbi7 website or platform (see Section 10);
• Third-party payment processors: When you use Touch n Go eWallet, Boost, GrabPay, FPX, or USDT to transact, relevant transaction data is shared with mbi7 by your payment provider;
• Identity verification services: Where mbi7 uses third-party KYC providers to verify the identity documents you submit, those providers may share verification outcomes and flags with mbi7;
• Game providers: Technical and session data relating to your gameplay may be transmitted to mbi7 by our licensed game content providers, including live casino studio operators.

5 Purpose & Legal Basis for Processing

mbi7 processes your personal data for the following purposes and on the following legal bases:

• Contract performance: To create and manage your mbi7 account, process deposits and withdrawals in MYR, settle bets, provide customer support, and deliver the gaming services you have contracted to receive.
• Legal obligation: To comply with Anti-Money Laundering (AML) obligations, KYC requirements, age verification (21+), regulatory reporting to applicable gaming authorities, and tax record-keeping obligations.
• Legitimate interests: To detect and prevent fraud, abuse, money laundering, and multi-accounting; to improve mbi7's platform and services through aggregated analytics; to maintain the security and integrity of the platform.
• Consent: Where you have opted in, to send you promotional communications about mbi7 bonuses, new games, and special offers. You may withdraw consent at any time via your account notification settings.

6 Data Sharing & Disclosure

mbi7 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share your data only in the following limited circumstances:

• Payment processors: To process your MYR deposits and withdrawals via Touch n Go eWallet, Boost, GrabPay, Maybank FPX, CIMB, Public Bank, and USDT TRC20. Each payment processor operates under its own privacy terms.
• Game content providers: Technical session data is shared with licensed game providers (such as Evolution Gaming, Pragmatic Play, PG Soft, and SA Gaming) solely to facilitate the delivery of game content to your device.
• KYC and fraud prevention services: Identity documents and verification data may be processed by mbi7's KYC partners to fulfil age verification and AML obligations.
• Regulatory and legal authorities: mbi7 will disclose personal data to competent regulatory bodies, law enforcement agencies, or courts when required to do so by applicable law or court order.
• Corporate transactions: In the event of a merger, acquisition, or asset sale involving mbi7, player data may be transferred to the acquiring entity subject to equivalent data protection obligations.

7 International Data Transfers

As an online gaming platform serving Malaysian players, some of mbi7's data processing activities — particularly those involving international game providers and payment processors — may involve the transfer of personal data across international borders. Where such transfers occur, mbi7 takes reasonable steps to ensure that the recipient provides adequate data protection safeguards, including standard contractual clauses, binding corporate rules, or equivalent mechanisms recognised under applicable data protection frameworks.

8 Data Retention

mbi7 retains personal data for as long as necessary to fulfil the purposes for which it was collected, including compliance with legal, regulatory, and accounting obligations. Specifically:

• Account and transaction records are retained for a minimum of five (5) years following account closure, in accordance with AML record-keeping requirements;
• KYC identity documents are retained for a minimum of five (5) years from the date of verification or account closure, whichever is later;
• Support and communications records are retained for three (3) years following the closure of the relevant support interaction;
• Marketing consent records are retained until consent is withdrawn and for a further period as required to demonstrate compliance.

After applicable retention periods expire, mbi7 will securely delete or anonymise your personal data.

9 Security Measures

mbi7 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and the mbi7 platform;
• Encrypted storage of sensitive personal data including financial identifiers and identity document copies;
• Access controls restricting internal access to personal data on a strict need-to-know basis;
• Regular security audits and vulnerability assessments of the mbi7 platform infrastructure;
• Two-factor authentication (2FA) available to all players for their mbi7 account login.

While mbi7 takes extensive precautions, no internet transmission or electronic storage system is completely secure. You are responsible for keeping your mbi7 login credentials confidential and for notifying us immediately of any suspected unauthorised account access.

10 Cookies & Tracking Technologies

mbi7 uses cookies and similar tracking technologies (including local storage and session tokens) to operate the platform, maintain login sessions, remember your preferences, and analyse usage patterns. The following cookie categories are used:

• Strictly necessary cookies: Required for the platform to function, including session authentication tokens, language preferences, and security tokens. These cannot be disabled.
• Functional cookies: Store your platform preferences such as game lobby layout, odds format, and notification settings to personalise your mbi7 experience.
• Analytics cookies: Aggregate data about how players navigate and use the mbi7 platform, used by mbi7's internal analytics tools to improve user experience. These do not identify you personally.

You may control non-essential cookies through your browser settings. Disabling certain cookies may affect the functionality of the mbi7 platform.

11 Your Data Rights

Subject to applicable law and mbi7's legitimate regulatory obligations, you have the following rights in relation to your personal data held by mbi7:

• Right of Access: To request a copy of the personal data mbi7 holds about you;
• Right of Rectification: To request correction of inaccurate or incomplete personal data;
• Right of Erasure: To request deletion of your personal data where mbi7 no longer has a lawful basis for retaining it (subject to legal retention obligations);
• Right to Restrict Processing: To request that mbi7 restrict the processing of your data in certain circumstances;
• Right to Data Portability: To receive your personal data in a structured, commonly used, machine-readable format;
• Right to Object: To object to processing of your personal data based on mbi7's legitimate interests, including direct marketing.

To exercise any of these rights, please contact mbi7 via the 24/7 live chat or by email at [email protected]. mbi7 will respond to verified requests within thirty (30) calendar days.

12 Children & Minors

mbi7 strictly prohibits the registration or use of the platform by persons under the age of 21 years. mbi7 does not knowingly collect or process personal data from minors. If mbi7 becomes aware that a player is under 21, the account will be immediately suspended, all balances will be reviewed, and the registration data will be handled in accordance with applicable child data protection obligations. If you believe a minor has registered on mbi7, please contact us immediately via live chat or at [email protected].

13 Responsible Gaming & Data

Personal data — including your gaming history, deposit patterns, session duration, and responsible gaming tool usage — is processed by mbi7 in connection with its responsible gaming obligations. This includes using behavioural data to identify potential indicators of problem gambling and to proactively offer responsible gaming resources where appropriate.

mbi7's responsible gaming tools (deposit limits, self-exclusion, cooling-off periods, and session time limits) are available from your account dashboard. For more information, visit our Responsible Gaming page. mbi7 enforces a strict 21+ age policy and takes its player protection obligations under applicable international gaming regulations seriously.

14 Amendments to This Policy

mbi7 may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or platform functionality. Material changes will be communicated to registered players via a notice on the mbi7 platform or by email to your registered address at least seven (7) days before taking effect. The "Last Updated" date at the top of this Policy reflects the date of the most recent revision. Continued use of mbi7 following the effective date of any update constitutes acceptance of the revised Policy.

15 Contact & Complaints

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way mbi7 handles your personal data, please contact our Data Privacy team:

• Live Chat: 24/7 support available from your mbi7 account dashboard — average response under 2 minutes.
• Email: [email protected] (plain text — not a clickable link).

mbi7 takes all privacy-related queries seriously and will respond within thirty (30) calendar days. If you are not satisfied with mbi7's response, you have the right to escalate your complaint to the relevant data protection authority or regulatory body in the applicable jurisdiction.

© 2026 mbi7.one — All Rights Reserved.