Privacy Policy mbi356 — We Take Your Data Seriously

1Introduction & Scope of Privacy Policy

This Privacy Policy is published by mbi356 ("we", "Platform") and applies to all users who access or use the mbi356 platform via the official website, iOS and Android mobile apps, and any of our official communication channels.

This document clearly outlines:

• The types of personal data we collect from you.
• Why we need that data and how it is used.
• Who your data may be shared with under certain circumstances.
• Your rights as the owner of that personal data.
• The security measures we take to protect your information.

This Privacy Policy should be read together with Terms & Conditions mbi356 as both documents form the contractual framework between you and our platform.

2Types of Personal Data We Collect

Mbi356 collects various types of personal data when you register, use the platform, or contact our support team. Below is a detailed summary of the types of data we collect and their purposes:

3How We Use Your Personal Data

Every piece of data we collect is used for legitimate, stated purposes. mbi356 uses your personal data for the following:

• Account Management: Creating, verifying, and managing your mbi356 account, including secure login processes and two-factor authentication.
• Transaction Processing: Processing all fund deposits and withdrawals securely through payment channels supported by the platform.
• Legal Compliance (KYC/AML): Conducting required background checks to comply with anti-money laundering laws and verify player identities.
• Platform Security: Detecting and preventing fraud, account abuse, unauthorised access, and suspicious activity that could compromise the security of other players.
• Customer Support: Resolving queries, complaints, and support requests you submit to the mbi356 support team.
• Platform Communications: Sending important account-related notifications, security updates, and promotional information (with your consent).
• Service Improvement: Analysing usage patterns in aggregate to improve the overall user experience and platform performance.

4Data Sharing with Third Parties

Mbi356 does not sell or disclose your personal data to third parties for commercial purposes. However, in certain limited situations, we may need to share your information with the following parties:

• Payment Service Providers: Required transaction information is shared with registered payment gateway providers to enable your deposits and withdrawals to be processed securely.
• Identity Verification Providers: Required KYC data is shared with trusted third-party identity verification services to ensure the validity of your account.
• Regulatory Body: Where required by law, mbi356 may need to disclose certain information to the relevant authorities.
• Platform Technology Providers: Server infrastructure providers and cloud computing services used by mbi356 have limited access to data for technical operational purposes only.

All third parties that receive your data are bound by strict confidentiality agreements and are required to process data only in accordance with mbi356's instructions and solely for the stated purposes.

5Data Security & Protection Measures

Mbi356 implements multiple layers of technical and organisational security to protect your personal data from unauthorised access, loss, alteration, or unintended disclosure:

• Encryption of Data in Transit: All communications between your device and mbi356 servers are secured with TLS 1.3 protocol and 256-bit SSL encryption.
• Encryption of Stored Data: Sensitive data such as financial information and passwords are stored in encrypted form using the latest encryption algorithms — your password is not stored in any human-readable format.
• Internal Access Controls: Access to player data is restricted on a minimum-privilege basis — only staff who require access to perform their duties are permitted.
• Continuous Security Monitoring: A 24/7 monitoring system detects any suspicious activity or security breach attempts in real time.
• Regular Penetration Testing: mbi356 conducts regular security testing and independent audits to identify and address any system vulnerabilities before they can be exploited.
• Incident Response Plan: Detailed incident response procedures are in place in the event of any data breach, including notification protocols for affected users.

6Cookies, Tracking Technologies & Your Choices

Mbi356 uses cookies and similar tracking technologies to enhance the user experience, maintain your login session, and understand how the platform is used. The following are the types of cookies we use:

• Essential Cookies: Required for core platform operations such as login verification and session security. These cookies cannot be disabled without affecting platform functionality.
• Functional Cookies: Storing your preferences such as language and display settings to provide a more personalised experience.
• Analytical Cookies: Helping us understand how players use the platform through aggregated and anonymised usage data for improvement purposes.
• Security Cookies: Used to detect suspicious activity, failed login attempts, and patterns that may indicate potential fraud.

You can manage your cookie settings through your web browser at any time. However, disabling certain cookies may affect the functionality or security of your account on the mbi356 platform.

7Your Rights Regarding Personal Data

As a mbi356 player and owner of your personal data, you have the following rights, which you may exercise at any time:

To exercise any of the above rights, please contact the mbi356 Data Protection team via email at [email protected]. We will process your request within seven (7) business days.

8Personal Data Retention Period

Mbi356 does not retain your personal data longer than necessary. Our data retention periods are as follows:

• Active Account Data: Retained for the duration that your account remains active on the mbi356 platform.
• KYC & Financial Data: Retained for a minimum of five (5) years after account closure, as required under Malaysia's anti-money laundering laws.
• Transaction Records: Retained for seven (7) years for audit and financial compliance purposes.
• Security Logs: Retained for twelve (12) months for security incident investigation purposes where necessary.
• Support Communication Data: Customer support conversation records are retained for two (2) years for quality control purposes.

Once the designated retention period has expired, your data will be securely deleted or anonymised in accordance with data deletion procedures approved by mbi356.

9Children's Privacy & Protection of Young Persons

Mbi356 takes child protection extremely seriously. Our platform is strictly not intended for individuals under the age of 18, and we do not knowingly collect any personal data from children.

The measures we take to protect minors include:

• Strict age verification process during new account registration.
• Identity document verification for users undergoing the KYC process.
• Immediate closure of any account found to be held by an underage individual.
• Notification to parents or guardians if we suspect use of the platform by a minor.

If you become aware that someone under the age of 18 has registered or is using the mbi356 platform, please contact us immediately at [email protected] so that immediate action can be taken.

10Changes to This Privacy Policy

Mbi356 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data management practices, new legal requirements, or improvements in how we protect your information.

When there are significant changes to this Privacy Policy, we will:

• Updating the "Last Updated" date displayed at the top of this document.
• Sending notifications to your registered email address regarding major changes that affect your privacy rights.
• Displaying clear notices on the mbi356 homepage during policy change transition periods.

11Contact Our Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, you may contact us through the following channels:

• Data Protection Email: [email protected]
• General Support Email: [email protected]
• Live Chat: Available 24/7 directly within the mbi356 platform.
• Response Time: All privacy-related enquiries are responded to within 7 business days.

If you are not satisfied with our response to any privacy-related complaint, you have the right to lodge a complaint with the Malaysian Communications and Multimedia Commission (MCMC) or the relevant regulatory body in your jurisdiction.