Mbs66 Privacy Policy – Personal Data Protection for Malaysian Players

Introduction & Scope of This Policy

mbs66 understands that player trust is our most valuable asset. When you register an account, make a deposit via Touch 'n Go eWallet or DuitNow, or simply browse our games pages, you are entrusting us with part of your personal information. We do not take that responsibility lightly.

This Privacy Policy explains — in plain, straightforward language, not lengthy legal jargon — what data we collect, how it is used, and who may have access to it. We believe transparency is the foundation of trust, and trust is the foundation of the mbs66 platform.

• This policy takes effect from 1 January 2026 and applies to all users of the mbs66.best platform.
• This policy covers all mbs66 services including Live Casino, poker, baccarat, roulette, Sports Betting, lottery, and all other sections of our platform.
• This policy should be read together with Terms & Conditions mbs66.
• If you disagree with any part of this policy, please stop using the platform and contact us to close your account.

Personal Data We Collect

Mbs66 collects personal data only for legitimate and necessary purposes. Below are the categories of data we collect and the reasons for collecting them:

We no collecting more information than necessary. Sensitive data such as full credit card details or banking account information is not stored directly by mbs66 — it is processed by licensed payment providers that comply with PCI DSS standards.

How We Use Your Personal Data

Mbs66 uses the personal data collected for the following purposes, all of which are lawful under Malaysia's PDPA and applicable data protection legislation:

• Account Management: To create and maintain your player account, verify your identity, and enable secure login to the mbs66 platform.
• Transaction Processing: To process deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX through Maybank2u or CIMB Clicks, and to handle withdrawals quickly and securely.
• Security & Fraud Detection: To detect and prevent suspicious activity, identity fraud, money laundering, and the use of multiple accounts in violation of mbs66's Terms & Conditions.
• Legal Compliance: To fulfil our obligations under Malaysia's PDPA, anti-money laundering laws (AMLA), and our operating licence requirements.
• Responsible Gaming: To monitor gaming patterns and identify players who may need responsible gaming support, as well as to enforce limits set by players themselves.
• Customer Support: To provide relevant assistance whenever you contact the mbs66 support team via live chat, email, or WhatsApp.
• Service Communications: To send important account-related notices — such as deposit confirmations, security alerts, terms changes, or relevant system updates.
• Platform Improvement: To understand how players interact with the mbs66 platform and to continually improve the user experience based on anonymised usage data.

Mbs66 does not use your personal data to make automated decisions that materially affect your rights without human oversight.

Sharing Data with Third Parties

Mbs66 does not sell, rent, or share players' personal data to third parties for marketing purposes. However, in certain limited and legitimate circumstances, mbs66 may need to share some of your data with the following parties:

• Payment Service Providers: Licensed payment entities that process your deposits and withdrawals — such as DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, and FPX service providers. This sharing is limited strictly to information required to process transactions.
• Gaming Technology Providers: Game software providers that partner with mbs66 to deliver live casino, slots, and Sports Betting platform games. They receive only the data necessary for game operations and are bound by strict confidentiality agreements.
• Regulatory Bodies & Law Enforcement: Where required by law, court order, or a legitimate regulatory authority, mbs66 may be required to disclose certain data. We will notify you prior to any such disclosure where permitted by law.
• Audit & KYC Service Providers: Third parties engaged to carry out identity verification (KYC) and security audits for compliance with gambling laws and fraud prevention requirements.

Data Security & Protection Measures

Protecting your personal data is a top priority at mbs66. We implement multiple layers of technical and organisational safeguards to ensure your data remains secure at all times:

• Transit Encryption: All data transmitted between your device and mbs66's servers is encrypted using TLS 1.3 with 256-bit SSL certification — the highest standard in the industry.
• Storage Encryption: Sensitive data stored in mbs66's database is encrypted at the storage level, ensuring it remains secure even in the event of an unauthorised physical access attempt.
• Internal Access Controls: Access to player data within the mbs66 organisation is restricted on a need-to-know basis. Only staff who require access to carry out their duties are granted permission.
• Intrusion Detection: An IDS/IPS (Intrusion Detection/Prevention System) operates around the clock to detect and block any unauthorised access attempts targeting mbs66's infrastructure.
• Two-Factor Authentication: mbs66 offers two-factor authentication (2FA) for all player accounts — we encourage you to enable this feature through your account settings.
• Regular Security Audits: Regular security assessments and penetration testing are conducted by independent third parties to identify and address any security vulnerabilities before they can be exploited.

While we take all reasonable steps to protect your data, no online system can be guaranteed to be 100% secure. We encourage you to take your own security precautions as well, such as using a strong and unique password and never sharing your login credentials with anyone.

Cookies & Tracking Technologies

Mbs66 uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

• Essential Cookies (Required): These cookies are essential for the basic operation of the mbs66 platform — including login authentication, session security, and language preferences. Without them, the platform cannot function properly. These cookies cannot be disabled.
• Analytics Cookies: We use anonymised analytics data to understand how players use the mbs66 platform — which pages are visited most, how long sessions last, and where users may be experiencing difficulties. This data helps us continuously improve the overall user experience.
• Functional Cookies: These cookies remember your personal preferences — such as display settings, language choice, and game preferences — so you don't have to reconfigure them every time you log in to mbs66.
• Security Cookies: Used to detect suspicious activity, prevent fraud, and maintain the integrity of your login session.

You can manage your cookie preferences through your browser settings. However, disabling certain cookies may affect the functionality of the mbs66 platform. For more information on managing cookies, refer to the help documentation for your browser.

Your Rights Under Malaysia's PDPA

As an mbs66 player based in Malaysia, you have the following rights regarding your personal data under the Personal Data Protection Act 2010 (Malaysia PDPA):

To exercise any of the rights above, please contact the mbs66 privacy team by email at support@mbs66.best by stating your request clearly. We will make every effort to process your request within the timeframe required by law.

Data Retention & Deletion Period

Mbs66 does not retain your personal data for longer than is necessary for the purpose it was collected, or longer than required by applicable law. The following are retention period guidelines for different data categories:

• Active Account Data: For as long as your account remains active and you continue using mbs66's services, your account data will be retained to support the ongoing operation of those services.
• Financial Transaction Data: Financial transaction records — including deposit history via DuitNow, GrabPay, Touch 'n Go eWallet, or FPX, as well as withdrawal history — are retained for a minimum of 7 years after the transaction date, in accordance with accounting and anti-money laundering legal requirements.
• Identity Verification Data (KYC): Identity verification documents such as a copy of your MyKad are retained for 5 years after account closure, in accordance with compliance requirements.
• Game Activity Logs: Detailed game history is retained for 2 years after a game session ends for dispute resolution and responsible gaming purposes.
• Support Communication Logs: Support chat session records and emails are retained for 1 year for quality control and dispute resolution purposes.
• Data After Account Closure: Upon account closure, mbs66 will delete or anonymise data that is no longer required within a reasonable timeframe, subject to the legal retention obligations stated above.

Changes to This Privacy Policy

Mbs66 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data protection practices, new legal requirements, or service improvements. When material changes are made:

• We will update the "Last Updated" date at the top of this document.
• For material and significant changes, we will send a notice to your registered email address at least 7 days before the changes take effect.
• In-platform notices on mbs66 will also be displayed upon login to ensure you are aware of any changes.
• Your continued use of the mbs66 platform after any changes take effect constitutes your acceptance of the updated Privacy Policy.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. The latest version is always available on this page.

Contact Us for Privacy Inquiries

If you have any questions, concerns, or requests regarding this Privacy Policy or how mbs66 handles your personal data, please reach out to us through the following channels:

• Privacy Email: support@mbs66.best — for official requests relating to data rights or privacy complaints
• Live Chat: Available 24 hours on the mbs66.best platform — for general privacy enquiries
• Website: https://mbs66.best

We are committed to responding to all privacy-related enquiries within 2 business days. For formal data rights requests (such as access or deletion requests), we aim to resolve them within 21 business days in accordance with Malaysia PDPA requirements.

If you are not satisfied with mbs66's response to your privacy complaint, you have the right to refer the matter to the Department of Personal Data Protection Malaysia or the relevant regulatory authority under applicable law.