Last updated: 1 January 2026

Mbi9 Privacy Policy – Data Protection Malaysian Members' Personal Data — Our Serious Commitment

Mbi9 understands that data privacy is not something to be taken lightly. This policy clearly explains what information we collect, how we use it, who can access it, and what your rights are as a member. We have written it in plain language – not confusing legal jargon.

🔒
Privacy Policy Contents
Data Collected
How We Use Your Data
Third-Party Data Sharing
Data Security & Encryption
Member Rights Over Data
Cookie & Tracking Policy
Contact the Privacy Officer
SSL 256-bit
Confidential Data
PDPA Compliance
User Rights
Secure MY Payments
24/7 Support

Mbi9's Privacy Commitment to Every Member

Six core principles that shape how MBI9 manages and protects your personal data

Bank-Level Encryption

All personal data and financial transactions on mbi9 are protected with 256-bit SSL encryption – the same technology used by Maybank2u, CIMB Clicks, and other leading Malaysian banking institutions. Your information cannot be read by unauthorised parties, even if intercepted during transmission.

No Data Selling

Mbi9 has never sold and will never sell members' personal information to any third party for marketing or commercial purposes. Your data belongs to you. We only use your information to provide the services you request — nothing more.

Malaysia PDPA Compliance

MBI9's privacy policy is designed in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). We adhere to all applicable local legal requirements governing the collection, processing, and storage of personal data belonging to Malaysian users.

Full Control in Your Hands

As an mbi9 member, you have the full right to access, update, correct, or request deletion of your personal data at any time. The process is straightforward and can be completed through your account settings or by contacting our support team directly.

Responsible Data Retention

Mbi9 retains your personal data only for as long as it is needed for the purposes stated in this policy or as required by Malaysian law. When data is no longer needed, it is securely deleted using methods that ensure it cannot be recovered.

Immediate Incident Notification

In the event of any security incident that may affect your personal data, mbi9 is committed to notifying you and the relevant authorities within the timeframe stipulated by Malaysia's PDPA. Transparency in difficult situations is a responsibility we take seriously.

This Privacy Policy describes the personal data collection and processing practices of MBI9 through the mbi9.best platform. By using MBI9's platform, you agree to the collection and use of your information as described in this policy. Please read it carefully before registering or using any MBI9 services.

1Introduction

Mbi9 is a digital entertainment platform operating through mbi9.best, offering Sports Betting, online casino, digital lottery, baccarat, e-sports, and promotional services to members in Malaysia. In operating these services, mbi9 collects and processes certain personal data relating to members and platform users.

We understand that your trust is the most valuable asset entrusted to mbi9. We therefore take data privacy seriously and are committed to handling every piece of personal information we receive with responsibility, transparency and in accordance with applicable Malaysian law — in particular, the Personal Data Protection Act 2010 (PDPA).

This Privacy Policy applies to all information collected through the MBI9 platform, including the website, mobile interface, email communications, and any other channels MBI9 uses to interact with members. If you have any questions after reading this policy, MBI9's privacy team is available to assist at support@mbi9.best.

2Personal Data We Collect

Mbi9 collects various types of personal data depending on how you interact with our platform. The following are the main categories of data we collect:

Data Category Specific Examples How It Is Collected
Identity Information Full name, date of birth, identification card number Registration & Verification
Contact Information Phone number, email address Registration
Financial Information Bank account details, TNG/GrabPay/Boost e-wallet numbers Deposit / Withdrawal
Activity Data Betting records, games played, transaction history Platform Usage
Technical Data IP address, device type, browser, operating system Automatic (system logs)
Geolocation Data State/city location based on IP address Automatic
Communication Data Live chat transcripts, support emails Customer Support

MBI9 does not collect sensitive personal data such as health information, religious beliefs, or sexual orientation unless voluntarily provided by a member in the context of customer support. Such data is deleted as soon as it is no longer required for the relevant purpose.

Mbi9 only collects data that is strictly necessary to deliver the requested services. Data minimisation is a core principle of our privacy practice — if we don't need a piece of data, we won't ask for it.

3How We Use Your Personal Data

Mbi9 uses members' personal data for the following purposes, all of which are directly related to delivering platform services:

  • Account Management: Creating, verifying, and maintaining your mbi9 account. This includes the KYC (Know Your Customer) process required to verify your identity and age before you can make full use of the mbi9 platform.
  • Transaction Processing: Processing deposits via Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and FPX, as well as withdrawals to your bank account or e-wallet. This requires us to store your payment details in a secure, encrypted format.
  • Service Provision: Giving you access to all mbi9 platform modules — EPL and Malaysia Super League Sports Betting, Live Casino, baccarat, digital lottery, e-sports and slots. Your activity data is used to personalise your gaming experience.
  • Security & Fraud Prevention: Detecting and preventing fraud, money laundering, bonus abuse, and any activity that violates MBI9's terms and conditions or Malaysian law.
  • Service Communications: Sending you important information about your account, platform updates, security issues, and responses to your customer support enquiries.
  • Marketing (with consent): Sending information about mbi9 promotions, bonuses and new offers to members who have consented to receive marketing communications. You may withdraw this consent at any time.
  • Legal Compliance: Meeting Malaysian legal compliance obligations, including reporting requirements to the relevant authorities.
  • Platform Improvements: Analysing usage data (in anonymised and aggregated form) to understand how members use the mbi9 platform and to make the necessary improvements.

Mbi9 will not use your personal data for any purpose other than those stated above without first notifying you and, where required, obtaining your fresh consent.

4Legal Basis for Data Processing

Under Malaysia's Personal Data Protection Act 2010 (PDPA), mbi9 requires a valid legal basis for each personal data processing activity. The following are the bases we rely on:

Consent
For marketing communications and the use of non-essential cookies. You may withdraw this consent at any time without affecting the validity of prior processing.
Contract Performance
To process the data required to provide the mbi9 services you have requested – including deposit and withdrawal transaction processing.
Legitimate Interest
For platform security, fraud prevention, internal analytics, and service improvement purposes, where those interests do not override your privacy rights.
Legal Obligations
To meet applicable Malaysian legal compliance requirements, including anti-money laundering (AML) reporting obligations and others.

5Data Sharing with Third Parties

MBI9 upholds strict confidentiality principles. We does not sell, rent, or disclose members' personal data to third parties for their own marketing purposes. However, there are limited situations where we need to share data with specific parties:

  • Payment Service Providers: Required transaction information is shared with e-wallet providers (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow) and banks via FPX solely to process your deposits and withdrawals. They are bound by their own privacy policies and data processing agreements with mbi9.
  • Game Providers: Minimum technical data required is shared with game providers such as Evolution Gaming, Pragmatic Play and others to ensure games function correctly. Full names and financial details are not shared.
  • Security Services & Fraud Prevention: We use specialist third-party services to detect fraud and suspicious activity. Data shared is limited to what is necessary for risk assessment.
  • Legal Authorities: MBI9 will disclose personal data when required by Malaysian law, court order, or direction from a lawful authority. In such circumstances, we will endeavour to notify you unless prohibited from doing so by law.
  • Business Restructuring: Should mbi9 be involved in any form of restructuring, merger, or acquisition, members' personal data may be transferred as part of the business assets. We will notify members before their data becomes subject to a different privacy policy.

mbi9 Guarantee: All third parties with whom we share data are bound by data processing agreements that require them to protect your information to a standard no lower than mbi9's own. mbi9 is responsible for ensuring all third-party partners comply with the applicable privacy requirements.

6mbi9 Data Security Measures

Mbi9 continually invests in security infrastructure to ensure members' personal data remains well protected at all times. The key security measures we have in place are:

  • 256-bit SSL Encryption: All communications between your browser and mbi9's servers are encrypted using TLS 1.3 with 256-bit encryption. This means data in transit cannot be read even if it is successfully intercepted by an unauthorised party.
  • Stored Data Encryption: Sensitive data stored in mbi9's databases – including passwords, payment details, and identification numbers – is stored in encrypted or hashed form. Even mbi9 staff cannot read your password in its original form.
  • Two-Factor Authentication (2FA): We provide and encourage the use of 2FA for all mbi9 accounts. With 2FA enabled, accessing your account requires two layers of verification – your password and an OTP code sent to your phone.
  • 24/7 Security Monitoring: The mbi9 security team monitors platform activity around the clock using an automated anomaly detection system capable of identifying unauthorised access attempts in real time.
  • Regular Security Audits: MBI9 undergoes independent security audits every quarter, conducted by qualified third-party cybersecurity firms. Audit findings are acted upon promptly.
  • Internal Access Controls: mbi9 staff access to members' personal data is restricted on a need-to-know basis. All access is logged and monitored to ensure there is no internal misuse.

While MBI9 takes all reasonable measures to protect your data, no online security system is 100% impenetrable. You also play an important role in keeping your MBI9 account secure — use a strong password, never share your login credentials, and enable 2FA.

7Data Retention Period

MBI9 retains your personal data only for as long as necessary for the purposes stated in this policy or as required by Malaysian law. The following are general guidelines for our retention periods:

  • Active Account Data: For as long as your mbi9 account remains active, we retain all relevant data to ensure you can use our services without interruption.
  • Financial Transaction Records: Retained for a minimum of 7 years after the transaction date, in line with Malaysia's tax legislation and financial reporting requirements.
  • Gaming Activity Records: Retained for a minimum of 5 years for dispute resolution, compliance auditing, and regulatory reporting purposes.
  • Security & Access Logs: Retained for 2 years for security incident investigation purposes if one occurs.
  • Support Communication Records: Retained for 3 years from the date of last interaction for reference and quality assurance purposes.
  • Marketing Data: Retained until you withdraw consent or request deletion, whichever comes first.

Once the retention period expires, data is securely deleted or anonymised using methods that ensure it cannot be recovered or re-linked to any specific individual.

8Your Rights as an mbi9 Member

Under Malaysia's PDPA, you have the following rights in relation to your personal data held by MBI9. We are committed to facilitating the exercise of these rights without unnecessary obstacles:

Right of Access

You have the right to request a copy of the personal data mbi9 holds about you. We will provide this copy in an easily understandable format within 21 days of the date of your request.

Right to Rectification

If your personal data is inaccurate or outdated, you have the right to request a correction. Simple updates such as your phone number or email address can be made directly through your account settings.

Right to Erasure

You may request deletion of your personal data when it is no longer needed, when consent is withdrawn, or when processing is unlawful. This right is subject to legal obligations that require us to retain certain data.

Right to Object

You have the right to object to the processing of your data for direct marketing purposes at any time. Your objection will take effect immediately and will have no negative impact on your account.

Right to Data Portability

You may request your data in a machine-readable format (such as CSV or JSON) for portability to another platform. This right applies to data you have actively provided to MBI9.

Right to Restriction of Processing

In certain circumstances, you may request that MBI9 restrict the processing of your data — for example, while a dispute over data accuracy is ongoing or during the investigation of a complaint.

To exercise any of the rights above, please contact mbi9's Privacy Officer by email at support@mbi9.best with the subject line "Privacy Rights Request". We will respond within 5 business days and fulfil the request within 21 days as required under the PDPA.

9Cookie Policy & Tracking Technologies

The mbi9 platform uses cookies and similar tracking technologies to enhance the user experience and gather information on how the platform is used. The following are the categories of cookies we use:

  • Essential Cookies (Required): Required for core mbi9 platform functions such as login session authentication, account security, and transaction processing. These cookies cannot be disabled without affecting platform functionality. No sensitive personal data is stored in this type of cookie.
  • Performance & Analytics Cookies: Used to understand how members interact with the mbi9 platform — which pages are visited most, where technical issues occur, and similar insights. This data is collected in aggregated and anonymised form. You may opt out of these cookies through your browser settings.
  • Functional Cookies: Stores your personal preferences such as display language, text size, and game preferences to deliver a more personalised experience. Can be disabled, but doing so will affect the level of personalisation on the platform.
  • Marketing Cookies: Used to display relevant promotions and advertisements based on your interests and activity. Only activated with your consent. Can be disabled via the cookie settings within the MBI9 platform.

In addition to cookies, MBI9 also uses similar technologies such as web beacons, pixels, and local storage for the same purposes. You can manage your cookie preferences at any time via the "Cookie Settings" link found in the footer of the MBI9 website.

Disabling essential cookies will prevent you from logging in or using core features of the mbi9 platform. All other cookies are optional — disabling them will not affect your access to our main services.

10Marketing & Promotional Communications

MBI9 likes to keep members informed about the latest promotions, new bonuses, and special offers that may be of interest. That said, we respect your right to choose what types of communications you receive.

By registering an MBI9 account, you will by default receive essential service communications such as transaction confirmations, security alerts, and important account-related updates. These communications cannot be unsubscribed from, as they are necessary for the security and management of your account.

For optional marketing communications such as promotional offers, the latest cashback deals, deposit bonuses, sports rebates, and platform news, you can manage your preferences through the following methods:

  • Update your notification preferences in your mbi9 account settings
  • Click the "Unsubscribe" link found at the bottom of any marketing email
  • Contact the mbi9 support team via live chat or email at support@mbi9.best

Unsubscribe requests will be processed within 5 business days. After that, you will no longer receive any marketing communications from mbi9. Please note that opting out of marketing communications will not affect the delivery of essential service notifications.

11Cross-Border Data Transfers

The mbi9 platform operates with technical infrastructure support that may involve data processing outside Malaysia in limited circumstances — for example, for cloud hosting services or international fraud detection services.

When data is transferred across borders, MBI9 ensures that:

  • Transfers are only made to countries or parties that provide a level of data protection equivalent to or higher than Malaysia's
  • Appropriate data transfer agreements, such as standard contractual clauses or recognised mechanisms, are in place
  • Only the minimum necessary personal data is transferred
  • All overseas data recipients are bound by confidentiality and security obligations equivalent to those of MBI9's own policy

If you have concerns about cross-border data transfers involving your data, please contact mbi9's Privacy Officer for further information.

12Children's Privacy

The mbi9 platform is strictly for individuals aged 21 years and above. MBI9 does not knowingly collect personal data from individuals under the age of 21.

All account registrations require age verification, and mbi9 conducts periodic checks to identify any accounts that may belong to underage individuals. Any account confirmed to belong to someone under 21 will be closed immediately, and all associated data will be permanently deleted.

If you believe that mbi9 has inadvertently collected data from an individual under the age of 21, please notify us immediately at support@mbi9.best. We will take prompt action to delete that data.

13Changes to This Privacy Policy

Mbi9 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our practices, new technologies, legal requirements, or other reasonable grounds.

When we make significant changes to this policy, we will:

  • Updating the "Last Updated" date at the top of this page
  • Sending notifications to all active members via email or in-platform notifications at least 14 days before changes take effect
  • Clearly highlighting key changes so you can assess how they affect you

Your continued use of the mbi9 platform after any changes take effect constitutes your acceptance of the updated policy. If you disagree with the changes, you have the right to close your account and request deletion of your data.

For minor changes such as language corrections or clarifications that do not substantively affect your rights, mbi9 reserves the right to make such updates without prior notice. The last updated date will always be revised to reflect any changes.

14Contact the mbi9 Privacy Officer

If you have any questions, concerns, or requests regarding this privacy policy or how MBI9 handles your personal data, please contact our Privacy Officer:

Email
support@mbi9.best – Please use the subject line "Privacy Enquiry" for priority handling. Response time within 2 hours.
Live Chat
Available 24/7 within the mbi9 platform — average response time under 5 minutes. Support is available in Bahasa Malaysia, English and Mandarin.
Response Time
Privacy rights requests are resolved within 21 business days. General enquiries are answered within 2 hours (live chat) or 24 hours (email).
Language
We communicate in Bahasa Melayu, English, and Mandarin.

If you are not satisfied with mbi9's response to your privacy request, you have the right to file a complaint with the Department of Personal Data Protection (JPDP) Malaysia through their official channels.

Frequently Asked Questions About mbi9's Privacy Policy

The most frequently asked questions about how mbi9 protects and manages members' personal data

No, absolutely not. mbi9 has never and will never sell, rent, or commercialise members' personal data to any third party — including advertisers, marketing firms, or data brokers. Your data is used solely to provide the mbi9 services you request and to fulfil applicable legal obligations. This is a core commitment we will not compromise on.

Yes, you may request deletion of your personal data by contacting support@mbi9.best. However, please be aware that there are legal limitations on complete deletion. Financial transaction records, for instance, must be retained for a minimum of 7 years under Malaysian law. Data not subject to legal retention requirements will be deleted within 30 days of your request. We will inform you of which data can be deleted and which must be retained, along with the legal justification.

When you close your mbi9 account, active data such as marketing preferences and session data will be deleted immediately. However, financial and transaction records required for legal compliance will be retained for the prescribed period — typically 7 years for financial records. After this period, all data associated with your account will be permanently deleted or anonymised. You may request full details of the data retained by contacting our Privacy Officer.

Yes, completely secure. Your e-wallet account details used for transactions on MBI9 are stored in encrypted form using AES-256 encryption. MBI9 staff cannot view your full account number — only the last few digits are displayed for verification purposes. All communications between MBI9 and e-wallet providers (TNG, GrabPay, Boost, ShopeePay) follow security protocols set by Bank Negara Malaysia. We also do not store any credit or debit card information in any format.

There are three ways to stop receiving mbi9 promotional emails. First, click the "Unsubscribe" link at the bottom of any promotional email you receive — this is the quickest method. Second, log in to your mbi9 account, go to Account Settings and turn off the "Promotional Notifications" option. Third, contact live chat or email support@mbi9.best with an unsubscribe request. Requests will be processed within 5 business days. Please note that you will still receive essential service emails such as transaction confirmations and security alerts, which cannot be unsubscribed from.

mbi9 only shares data with government authorities when required by applicable Malaysian law — for example, pursuant to a valid court order, a directive from Bank Negara Malaysia, or reporting obligations under the Anti-Money Laundering Act (AMLA). In such cases, we disclose only the minimum data required and will endeavour to notify you of the disclosure, unless prohibited by law or a confidentiality order. mbi9 does not voluntarily provide data to any government agency without a clear legal basis.

A Summary of Your Privacy Rights at MBI9

These rights are guaranteed under Malaysia's PDPA and mbi9 is committed to facilitating their exercise

Access

Request a copy of all your data within 21 days

Correct

Correct inaccurate or outdated data promptly

Delete

Request deletion of data that is no longer required

Object

Opt out of direct marketing at any time

Portability

Receive your data in a portable format

Restrict

Restrict data processing during an active dispute

To exercise any of the rights above, contact us at support@mbi9.best with the subject line "Privacy Rights Request"

Your Data Is Safe at mbi9 – Register with Confidence

MBI9 protects your personal information with 256-bit SSL encryption, a PDPA-compliant privacy policy, and a firm commitment to never selling your data. Register today and enjoy everything MBI9 has to offer with complete peace of mind.

🔒
Protected Data
256-bit SSL | PDPA Compliant

Related mbi9 Policy Documents

Read our other policy documents for a complete understanding of the mbi9 platform

Terms & Conditions

Complete mbi9 platform rules covering accounts, deposits, bonuses and games.

Read Now
Responsible Gaming

A guide to responsible gaming using mbi9's self-exclusion and control tools.

Read Now
Frequently Asked Questions

Answers to questions frequently asked by mbi9 members.

Read Now
About Us

Learn more about mbi9 and our commitment to our members.

Read Now
Bahasa Melayu