Privacy Policy mbs66 — Your Data Protection

Welcome to the mbs66 Privacy Policy. This document explains how the mbs66 platform ("we", "company", or "Platform") collects, uses, discloses, and protects your personal information when you use mbs66.fun and all related services.

We understand that your trust is the most valuable asset entrusted to us. That is why we are committed to managing your personal data in a transparent, responsible manner and in compliance with applicable data protection laws in Malaysia, including the Personal Data Protection Act 2010 (PDPA).

By registering or continuing to use the mbs66 platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any provision herein, please discontinue use of the platform and contact us for further assistance.

Mbs66 collects your personal information through several means — whether provided directly by you, collected automatically during platform use, or received from legitimate third parties. The following are the main categories of information we collect:

We only collect information that is strictly necessary for the stated purposes. Sensitive information such as KYC documents is stored with additional encryption and accessed only by authorised compliance staff.

The personal information we collect is used solely for legitimate purposes related to the operation of the mbs66 platform. Specifically, your data is used to:

• Account Management: Create and maintain your player account, including identity verification and the required KYC process.
• Transaction Processing: Process deposits, withdrawals, and bonus payments securely and accurately.
• Service Delivery: Allow you to access all games and features on the mbs66 platform smoothly.
• Platform Security: Detect and prevent fraud, money laundering, and other suspicious activities.
• Communications: Send important notifications relating to your account, promotions, and relevant platform updates.
• Service Improvement: Analyze usage patterns to enhance the player experience and platform functionality.
• Legal Compliance: Meet applicable legal and regulatory obligations, including reporting to authorities when required.
• Customer Support: Provide technical support and resolve inquiries or complaints effectively.

Mbs66 does not sell, rent, or trade players' personal information to third parties for commercial purposes. However, under certain limited circumstances, we may share your data with the following parties:

• Payment Service Provider: Such as card processors, digital wallet providers, and partner banks — solely to securely process your financial transactions.
• Identity Verification Provider: Third parties that assist with KYC processing and age verification, subject to strict confidentiality agreements.
• Game Provider: Gaming software companies that provide games on the mbs66 platform may receive the minimum technical data required for game operations.
• Authorities: We will disclose information to regulatory authorities, law enforcement agencies, or courts when required by law or a valid court order.
• Business Transfer: In the event of a merger, acquisition, or asset sale, player data will be transferred to the successor entity with appropriate notice given to players.

All third parties that receive your data are bound by confidentiality obligations and are required to handle that data in accordance with data protection standards equal to or higher than our own.

Mbs66 invests seriously in security infrastructure to ensure your personal data is always protected. Our key security measures include:

• 256-bit SSL Encryption for all data transmitted between your device and mbs66's servers.
• Data encryption at rest for all sensitive information stored in our databases.
• Two-factor authentication (2FA) for account access and high-value financial transactions.
• 24/7 security monitoring with a real-time threat detection system.
• Role-based access control that ensures staff can only access the data required for their specific duties.
• Regular security audits and penetration testing by independent security experts.
• Incident response procedure to swiftly and effectively address any data breaches.

While we take all reasonable steps to protect your data, no method of data transmission or storage is 100% secure. We encourage you to take your own precautions as well, such as using a strong password and never sharing your login credentials with anyone.

Mbs66 uses cookies and similar tracking technologies to enhance your experience on the platform. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login and session security. These cookies cannot be disabled.
• Performance Cookies: Gather information on how users interact with the platform to help us improve our services. All data is collected anonymously.
• Functional Cookies: Save your preferences such as language, region, and display settings to deliver a more personalized experience.
• Analytics Cookies: Help us understand traffic patterns and platform usage for continuous improvement.

You can manage or delete cookies through your web browser settings. Please note that disabling certain cookies may affect the functionality and user experience of the mbs66 platform.

As an mbs66 player, you have the following rights regarding your personal data, in accordance with Malaysia's PDPA provisions:

To exercise any of the above rights, please contact the mbs66 support team via live chat or email at [email protected]. We will process your request within 30 business days.

Mbs66 retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy, or as required by applicable law.

• Active Account Data: Retained for as long as your account remains active and for a set period following account closure.
• Financial Records: Retained for a minimum of seven (7) years in compliance with Malaysia's financial and tax legal requirements.
• Security Logs: Retained for 12 months for fraud investigation and security audit purposes.
• Communication Data: Customer support emails and logs are retained for three (3) years for reference and dispute resolution purposes.

Once the retention period expires, your data will be securely deleted or anonymised so it can no longer be linked to you. The deletion process is carried out using methods compliant with information security industry standards.

The mbs66 platform is strictly for individuals aged 18 and above. We do not intentionally collect or process any personal information from children or individuals under the age of 18.

If we find that we have inadvertently collected personal data from a minor, we will take immediate steps to delete that information and close the account in question. Parents or guardians who believe their child has registered on the mbs66 platform are urged to contact us immediately at [email protected].

Mbs66 reserves the right to amend or update this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or platform improvements.

In the event of material changes, we will:

• Display a clear notice on the platform's home page for at least 14 days before any changes take effect.
• Send email notifications to all registered players with active accounts.
• Update the "Last Updated" date at the top of this document.

Your continued use of the mbs66 platform after the effective date of any amendments constitutes your acceptance of the updated Privacy Policy. We encourage you to review this page periodically.

If you have any questions, concerns, or wish to exercise your personal data rights, the mbs66 Data Privacy Officer team is ready to assist you.

• Live Chat: Available 24 hours a day, 7 days a week on the mbs66 platform — the fastest way to get immediate assistance.
• Email: [email protected] — for written inquiries and data rights requests.
• FAQ: Visit page FAQ for answers to the most frequently asked questions.

We are committed to responding to all privacy-related enquiries within 5 business days. For more complex data rights requests, we may require up to 30 business days to complete them, and you will be kept informed of the progress throughout the process.