Privacy Policy

Privacy Policy MB365 — Your Personal Data Protection

At MB365, your privacy is more than a promise on paper — it is a responsibility we take seriously every day. This Privacy Policy clearly explains how we collect, store, use, and protect your personal data as a member of our platform in Malaysia.

Updated: 1 June 2026 Compliant with PDPA 2010 AES-256 Encryption
This Policy applies to all registered MB365 members and takes effect from 1 June 2026.
Commitment Privacy We

Six core pillars that underpin MB365's approach to protecting the data and privacy of every member.

Full Encryption

All data transmitted between your device and MB365's servers is encrypted using TLS 1.3 with AES-256 encryption — the highest security standard in the digital finance industry.

No Data Sales

Mb365 does not sell, rent, or transfer your personal data to any third party for marketing or commercial purposes without your explicit consent.

PDPA Compliance

We fully comply with Malaysia's Personal Data Protection Act 2010 (PDPA) in every aspect of member personal data collection, processing, and storage.

Control Is Yours

You have the right to access, correct, or request deletion of your personal data at any time. The request process is straightforward and handled within 14 working days.

Minimum Privacy Required

Mb365 only collects data that is strictly necessary to provide our services. We do not collect excessive information unrelated to platform operations.

Breach Notification

In the event of any security incident involving your data, MB365 is committed to notifying you within 72 hours in accordance with international data protection best practices.

Important Note: By registering and using the MB365 platform, you agree to this Privacy Policy. Please read this document carefully in full. If you do not agree, please discontinue use of our platform.

1 Scope & Purpose of This Privacy Policy

This Privacy Policy is issued by MB365 ("we", "Platform") and applies to all users who access or use our services through the mb365.win website, the official MB365 mobile app, and any other digital channels operating under the MB365 brand.

The primary purpose of this policy is to provide you as a member with full transparency regarding:

  • The types of personal data we collect from you.
  • The purpose and legal basis for processing that data.
  • Parties who may receive or access your data.
  • Data retention periods and their deletion procedures.
  • Your rights under Malaysia's Personal Data Protection Act 2010 (PDPA).
mb365 conducts internal privacy compliance reviews on a regular quarterly basis to ensure our practices remain aligned with the latest legal developments and industry standards.

2 Personal Data We Collect

Mb365 collects your personal data in several ways — directly when you register or interact with the platform, and automatically as you use our services. Below is a summary table of the data collected:

Data Category Examples of Information Collection Method
Personal Identity Full name, MyKad/passport number, date of birth, gender Account Registration & KYC
Contact Information Email address, phone number, residential address Account registration
Financial Data Bank account number, bank name, transaction records Deposits & withdrawals
Technical Data IP address, device type, operating system, web browser Automatically during use
Activity Data Wagering records, games accessed, login timestamps Automatically during gameplay
Communication Data Support chat contents, enquiry emails Interactions with customer support

We does not collect sensitive data such as health information, religious beliefs, political views, or biometric data unless specifically required by law.

For KYC (Know Your Customer) purposes, you may be asked to upload a copy of your identification document. This document is stored in a secure, fully encrypted environment.

3 How We Use Your Data

Every piece of data we collect has a clear and legitimate purpose. MB365 does not use your personal data for any purpose unrelated to the services you use. The following are the primary purposes for data use:

  • Account Management: Create, verify, and maintain your account; process logins and two-factor authentication (2FA).
  • Transaction Processing: Securely and accurately process deposits, withdrawals, and all financial transactions.
  • Identity Verification (KYC): Meet anti-money laundering (AML) compliance requirements and verify members' age eligibility.
  • Customer Support: Provide technical support, respond to enquiries, and resolve complaints efficiently.
  • Platform Security: Detect and prevent fraud, multi-account abuse, and suspicious activities that may harm other members.
  • Service Improvement: Analyse usage patterns in aggregate (without identifying individuals) to improve the user experience.
  • Essential Communications: Send important notifications relating to your account, terms updates, and security information.
  • Legal Compliance: Fulfil reporting obligations to the relevant authorities when required under Malaysian law.
Marketing Communications: We will only send you promotions and marketing offers if you have given explicit consent during registration or through your account settings. You may withdraw this consent at any time.

4 Data Sharing & Disclosure

Mb365 does not sell your personal data. However, there are limited situations where we may need to share certain information with trusted third parties:

  • Payment Processors: Transaction information is shared with approved payment service providers (FPX, e-wallets) solely to process your transactions. All such processors are bound by strict confidentiality agreements.
  • Technical Service Providers: Companies that assist us with cloud computing, analytics, and infrastructure support services — they only access data necessary to perform their specific tasks.
  • Legal Authority: When required by Malaysian law, court order, or a legitimate request from a law enforcement agency.
  • KYC Service Providers: Third-party identity verification platform used to validate member documents during the KYC process.

All third parties working with MB365 are subject to binding data protection agreements and are regularly audited to ensure their compliance with our privacy standards. We do not permit any third party to use your data for their own purposes.

Cross-Border Data Transfer: If your data needs to be transferred outside Malaysia (for example, for cloud computing services), we ensure that the destination provides a level of data protection equivalent to or higher than Malaysia's PDPA requirements.

5 Data Security Measures

Mb365 continually invests in security infrastructure to protect your personal data from unauthorized access, loss, or misuse. Key security measures we employ include:

  • Encryption of Data in Transit: All communications are protected with TLS 1.3 protocol, ensuring that data in transit between your device and our servers cannot be intercepted.
  • Encryption of Data at Rest: Sensitive data stored in our databases is encrypted using AES-256, the same standard used by financial institutions and high-level government agencies.
  • Multi-Layer Access Control: Only authorised staff with a legitimate business need may access member personal data, and all access is logged and audited.
  • Real-Time Threat Detection: A 24/7 security monitoring system that uses artificial intelligence to detect and immediately block unauthorized access attempts.
  • Regular Penetration Testing: We conduct regular security testing (penetration testing) with the involvement of independent cybersecurity experts.
  • Secure Data Backups: Regular backups are performed and stored at separate locations with full encryption to ensure data recovery in the event of an incident.
While we take all reasonable measures, no digital system can guarantee 100% security. You also play an important role in keeping your account secure by using a strong password and not sharing it with anyone.

6 Cookies & Tracking Technologies

Mb365 uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

  • Essential Cookies (Required): Required for core platform operations — including login session management and security preferences. These cookies cannot be disabled.
  • Performance Cookies: Collect information about how you use the platform (e.g. most frequently visited pages) to help us improve our services. This data is collected in aggregate and does not identify individuals.
  • Functional Cookies: Remember your preferences such as language, display settings, and game choices to deliver a more personalised experience.
  • Analytics Cookies: Used to understand overall usage patterns for product improvement purposes.

You can manage or delete cookies through your web browser settings at any time. Please note that disabling essential cookies may affect the overall functionality of the platform.

mb365 does not use third-party tracking cookies for external advertising purposes. We do not share your browsing behaviour data with outside advertising networks.

7 Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data that we hold:

🔍
Right to Access

Request a copy of the personal data we hold about you at any time.

✏️
Right to Rectification

Request correction of any inaccurate or incomplete personal data held in our records.

🗑️
Right to Erasure

Request deletion of your personal data under certain circumstances permitted by law.

🚫
Right to Object

Object to the processing of your data for direct marketing or certain other purposes.

📦
Right to Data Portability

Receive your personal data in a machine-readable format for transfer to another platform.

⏸️
Right to Restrict Processing

Request that we restrict the processing of your data in specific situations while an investigation is ongoing.

To exercise any of the above rights, please contact our privacy team by email at [email protected]. Your request will be processed within 14 working days. In complex cases, this period may be extended up to 30 days, with prior notice given to you.

8 Data Retention & Deletion Period

Mb365 retains your personal data for as long as necessary to fulfil the purpose for which it was collected, or as required by Malaysian law. The following are our data retention guidelines:

  • Active Account Data: Retained for the duration of your active account plus 7 years after account closure, to meet financial regulatory compliance requirements.
  • Financial Transaction Records: Retained for a minimum of 7 years in accordance with the Companies Act and Malaysia's anti-money laundering regulations.
  • KYC Documents: Retained for the duration of the active account and a minimum of 5 years after account closure.
  • Support Communication Logs: Retained for 3 years from the date of last interaction.
  • Technical Data & Access Logs: Retained for 12 months for security and troubleshooting purposes.

When data is no longer needed and there is no legal obligation to retain it, MB365 will securely delete or anonymise it using methods that comply with international information security standards.

After your account is closed and the mandatory retention period has expired, all your personal data will be permanently deleted from all our active systems and backups within 90 days.

9 Amendments to This Privacy Policy

Mb365 reserves the right to update or amend this Privacy Policy from time to time in line with changes in law, technology, or our business operations. We are committed to notifying you of any material changes through:

  • Clear and prominent in-app or on-site notifications on the mb365 platform.
  • An email notification will be sent to your registered email address at least 14 days before the changes take effect.
  • Updated on the "Last Updated" date shown at the top of this document.

Your continued use of the mb365 platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. If you do not agree with the changes, you have the right to close your account before the changes take effect.

We maintain an archive of previous versions of the Privacy Policy. If you wish to review an earlier version, please contact our support team and we will provide the relevant document upon request.

10 Contact Our Privacy Officer

If you have any questions, concerns, or wish to exercise your rights under this Privacy Policy or Malaysia's PDPA, please contact our Data Protection Officer (DPO) through the following channels:

  • Privacy Email: [email protected] — for all privacy-related enquiries and data rights requests.
  • General Support Email: [email protected] — for general enquiries about your account and services.
  • Live Chat: Available 24/7 within the mb365 platform for immediate support.

We will acknowledge receipt of your enquiry within 2 working days and aim to provide a full response within 14 working days. For cases requiring further investigation, we will keep you informed of the progress on a regular basis.

If you believe that MB365 has not handled your privacy complaint satisfactorily, you have the right to lodge a complaint with Malaysia Personal Data Protection Department or any other relevant authority.

Your privacy is more than a legal obligation to us — it is the foundation of trust that binds the relationship between MB365 and every one of our members. We are committed to being a platform you can trust completely.

Your Privacy, Protected, Play With Peace of Mind

Mb365 ensures your information is fully protected so you can focus on an enjoyable gaming experience without worrying about data security.

AES-256 Encrypted Data Compliant with PDPA 2010 24/7 Privacy Support
Bahasa Melayu