Privacy Policy

This Privacy Policy ("Policy") is published by MBI444 ("we", "us", "our"), the operator of the online casino and sports betting platform accessible at mbi444.cam (the "Platform" or "Site"). This Policy applies to all personal data collected from individuals ("you", "User", "Player") who visit, register on, or otherwise interact with the mbi444 platform.

MBI444 takes the privacy and security of personal data seriously. This Policy is designed to be transparent about our data practices and to help you make informed decisions about the information you share with us. It is intended to comply with applicable data protection legislation and international privacy best practices.

By creating an account on mbi444 or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any aspect of this Policy, you should refrain from using the Platform and may request closure of your account by contacting [email protected].

The following terms carry the meanings set out below throughout this Privacy Policy:

• "Personal Data" means any information relating to an identified or identifiable natural person — i.e., data that can, directly or indirectly, identify you as an individual.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, or deletion.
• "Data Controller" means MBI444, the entity that determines the purposes and means of processing your Personal Data.
• "Data Processor" means a third party that processes Personal Data on behalf of MBI444 under a contractual data-processing agreement.
• "Consent" means freely given, specific, informed, and unambiguous agreement to the processing of your Personal Data for a stated purpose.
• "KYC Data" means identity verification documents and information collected as part of the Know Your Customer process, including government-issued ID, proof of address, and source-of-funds documentation.
• "Cookies" means small text files placed on your device by the mbi444 platform to store session data, preferences, and analytics information.
• "Account" means your registered user account on the mbi444 platform.

MBI444 collects the following categories of Personal Data in the ordinary course of operating the Platform:

We do not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, health data, or biometric data, except where government-issued ID documents inherently include such information as part of the KYC process.

MBI444 collects Personal Data through the following methods:

• Direct submission: Information you provide when registering an Account, completing KYC, making deposits or withdrawals, contacting support, or participating in promotions.
• Automated technical collection: Data collected automatically when you access the Platform, including IP addresses, device identifiers, browser information, and session behaviour logs, via server logs and first-party cookies.
• Third-party sources: Information received from KYC verification service providers, fraud detection systems, and payment processors (including Touch 'n Go, DuitNow, FPX operators, and USDT wallet providers) in connection with transaction processing and identity verification.
• Support communications: Records of conversations conducted via live chat, email, or messaging platforms (WhatsApp, WeChat) when you contact our customer support team.

MBI444 processes your Personal Data for the following specific purposes:

1. Account Management: Creating, maintaining, and administering your Account, including authentication and access control.
2. Service Delivery: Processing deposits and withdrawals, settling wagers, crediting bonuses, and delivering all Platform features to which you are entitled as a registered Player.
3. Identity Verification (KYC): Verifying your identity and age (minimum 21 years) in compliance with applicable anti-money laundering and counter-terrorism financing obligations.
4. Fraud Prevention and Security: Detecting, investigating, and preventing fraud, money laundering, account takeover, and other prohibited activities outlined in our Terms and Conditions.
5. Regulatory Compliance: Meeting obligations under applicable laws, including maintaining transaction records and responding to lawful requests from regulatory or law enforcement authorities.
6. Customer Support: Responding to your queries, resolving disputes, processing complaints, and providing assistance in Bahasa Melayu, Chinese, and English.
7. Responsible Gambling: Monitoring gaming activity to identify patterns indicative of problem gambling; administering deposit limits, cooling-off periods, and self-exclusion tools; and communicating with Players who may require support.
8. Marketing Communications: Sending promotional offers, bonus notifications, and platform updates where you have opted in to receive such communications. You may withdraw consent at any time via your Account settings or by contacting support.
9. Platform Improvement: Analysing aggregated, anonymised usage data to improve game performance, user experience, and mobile optimisation for Malaysian players.

MBI444 processes your Personal Data on one or more of the following legal bases:

• Contractual necessity: Processing required to perform our obligations under the Terms and Conditions you agreed to upon registration — including account management, payment processing, and game delivery.
• Legal obligation: Processing required to comply with applicable laws — including KYC identity verification, AML record-keeping, and cooperation with lawful regulatory or law enforcement requests.
• Legitimate interests: Processing necessary for MBI444's legitimate operational interests — including fraud detection, security monitoring, responsible gambling oversight, and internal analytics — provided those interests are not overridden by your fundamental rights.
• Consent: Processing based on your freely given consent — including sending marketing communications and using non-essential cookies. You may withdraw consent at any time; withdrawal does not affect the lawfulness of processing prior to withdrawal.

MBI444 does not sell, rent, or trade your Personal Data to any third party for commercial purposes. Personal Data is shared only in the following limited circumstances:

• KYC and identity verification providers: Third-party vendors engaged to verify your identity and age in compliance with AML/CTF obligations. These providers operate under binding data-processing agreements and are prohibited from using your data for any purpose other than verification.
• Payment processors: Entities that facilitate deposit and withdrawal transactions, including operators of Touch 'n Go eWallet, DuitNow, FPX, Boost, Maybank, CIMB, and cryptocurrency processing infrastructure. Only the minimum data necessary to complete the transaction is shared.
• Fraud prevention and security services: Third-party systems that analyse transactional and behavioural patterns to detect and prevent fraud, account takeover, and money laundering.
• Game studio technology providers: Licensed technology partners who provide game software and RNG systems. These providers may receive anonymised session data for technical and regulatory auditing purposes but do not receive personally identifiable Account data.
• Regulatory and law enforcement authorities: MBI444 will disclose Personal Data to competent authorities where required by law or a valid legal process, including court orders and regulatory investigations.
• Business successors: In the event of a merger, acquisition, or sale of all or substantially all of mbi444's assets, Personal Data may be transferred to the acquiring entity, subject to equivalent privacy protections.

MBI444 uses first-party cookies and similar technologies on the Platform for the following purposes:

• Essential session cookies: Required for user authentication and session maintenance. These cannot be disabled without preventing use of the Platform.
• Functional cookies: Store your language preference, display settings, and responsible gambling configuration (e.g., session time reminder settings) to improve your experience across visits.
• Analytics cookies: Collect anonymised, aggregated data on page performance, load times, and user navigation patterns to help us improve the Platform. No individual player identity is attached to analytics data.
• Security cookies: Used by our fraud prevention systems to identify and flag unusual session behaviour patterns.

MBI444 does not use third-party advertising cookies or tracking pixels from social media platforms. You may manage cookie preferences through your browser settings, though disabling essential cookies will impair Platform functionality.

MBI444 retains Personal Data for no longer than is necessary for the purposes for which it was collected, subject to the following retention periods:

• Account and identity data: Retained for the duration of your active Account plus a minimum of five (5) years following account closure, as required by applicable AML/CTF regulations.
• Financial and transaction records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with financial record-keeping obligations.
• KYC documentation: Retained for a minimum of five (5) years following completion of the KYC process or account closure, whichever is later.
• Customer support communications: Retained for two (2) years from the date of the relevant interaction, or longer where a dispute is ongoing.
• Marketing preferences and consent records: Retained until withdrawal of consent or account closure, plus one (1) additional year for audit purposes.
• Analytics data: Retained in anonymised, aggregated form for up to three (3) years for platform improvement purposes.

Following the expiry of applicable retention periods, Personal Data is either securely deleted or irreversibly anonymised so that it can no longer be attributed to any identifiable individual.

MBI444 implements a comprehensive, multi-layered security programme to protect your Personal Data against unauthorised access, disclosure, alteration, and destruction. Key measures include:

• Transport encryption: All data in transit between your device and mbi444's servers is encrypted using TLS 1.3 with 256-bit AES encryption.
• At-rest encryption: Sensitive data stored in our databases, including KYC documents and financial records, is encrypted at rest using industry-standard encryption protocols.
• Access controls: Personal Data is accessible only to authorised mbi444 personnel on a strict need-to-know basis. Access is governed by role-based permissions and monitored via access logs.
• Two-factor authentication: Internal systems containing Personal Data require two-factor authentication for staff access.
• Penetration testing: The Platform undergoes regular security assessments conducted by qualified third-party security professionals.
• Incident response: MBI444 maintains a documented data breach response procedure. In the event of a breach that poses a risk to affected individuals, we will notify impacted Players within the timeframes required by applicable law.

Subject to applicable law and MBI444's legitimate operational needs, you hold the following rights in respect of your Personal Data:

• Right of Access: You may request a copy of the Personal Data MBI444 holds about you, along with information about how it is being processed.
• Right to Rectification: You may request correction of inaccurate or incomplete Personal Data. For basic Account information (email, phone number, city of residence), corrections can be made directly via Account settings.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your Personal Data. This right is subject to MBI444's obligations to retain certain data under applicable AML, financial, and regulatory requirements, which take precedence over erasure requests for the specified retention periods.
• Right to Data Portability: You may request an export of your Personal Data in a commonly used, machine-readable format (e.g., CSV or JSON).
• Right to Restriction of Processing: You may request that mbi444 restrict processing of your Personal Data while a dispute regarding accuracy or lawfulness is under investigation.
• Right to Object: You may object to processing of your Personal Data based on legitimate interests, including automated profiling. You may also withdraw consent to marketing communications at any time via your Account settings.
• Rights Related to Automated Decision-Making: Where mbi444 uses automated systems to make decisions that significantly affect you (e.g., risk-based account restrictions), you have the right to request human review of that decision.

To exercise any of the above rights, please submit a written request to [email protected] with the subject line "Data Rights Request" and include your registered Account email address and a description of the right you wish to exercise. MBI444 will acknowledge your request within five (5) business days and respond substantively within thirty (30) calendar days, subject to identity verification requirements.

The mbi444 platform is strictly intended for adults aged 21 years and above. We do not knowingly collect Personal Data from individuals under the age of 21.

If MBI444 becomes aware that Personal Data has been collected from a person under the age of 21, that data will be immediately deleted and the associated Account closed. If you believe that a minor has registered on the Platform or provided personal data to mbi444, please notify us immediately at [email protected].

MBI444 operates internationally and may process or store your Personal Data on servers or infrastructure located outside of Malaysia. When Personal Data is transferred to a jurisdiction outside of your country of residence, mbi444 will ensure that appropriate safeguards are in place to maintain an equivalent level of data protection, including:

• Data processing agreements incorporating standard contractual clauses that impose data protection obligations on the receiving party equivalent to those in this Policy.
• Restricting transfers to jurisdictions that have been assessed as providing adequate data protection standards, or to service providers that have obtained recognised certification under applicable data protection frameworks.

If you require further information about cross-border data transfers applicable to your Personal Data, please contact [email protected].

The mbi444 platform does not contain links to external third-party websites for general browsing purposes. Where third-party services are integrated into the Platform (such as payment gateways for Touch 'n Go eWallet, DuitNow, FPX, and USDT processing), those services are governed by the privacy policies of the respective third-party providers, over which mbi444 has no control.

MBI444 recommends that you review the privacy policies of any third-party payment provider you use in connection with your mbi444 Account. MBI444 accepts no responsibility for the data practices of third-party service providers beyond the contractual obligations imposed on them under mbi444's vendor agreements.

MBI444 reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or our data processing practices. When material changes are made, we will:

• Update the "Last Updated" date at the top of this Policy;
• Publish the revised Policy on this page (mbi444.cam/privacy-policy) with immediate effect; and
• Where the changes materially affect how we process your Personal Data, provide notice to registered Players via their registered email address with reasonable advance notice where practicable.

Your continued use of the mbi444 Platform following the publication of an amended Privacy Policy constitutes your acknowledgement of the revised terms. If you do not accept the amended Policy, you should discontinue use of the Platform and request account closure.

If you have any questions, concerns, or requests regarding this Privacy Policy or MBI444's data processing practices, please contact our Data Privacy team through the following channels:

• Email: [email protected] — Subject line: "Privacy Enquiry" or "Data Rights Request"
• Live Chat: Available 24/7 via the mbi444 Platform in Bahasa Melayu, Chinese, and English
• Response time: Acknowledgement within 5 business days; substantive response within 30 calendar days

For complaints related to our data practices that have not been resolved through our internal process, you may contact the relevant data protection authority in your jurisdiction.

This Privacy Policy was last reviewed and updated on 1 January 2026. MBI444 — For players aged 21 and above only. Play responsibly.