mbs66 Privacy Policy — How We Handle Your Personal Data

1.Scope and Data Controller

This Privacy Policy applies to all personal data processed by mbs66 in connection with the mbs66.club website and all associated platform services, including the sportsbook, live casino, slot games, 4D lottery, member accounts, and customer support channels.

For the purposes of this Policy, mbs66 acts as the data controller in respect of personal data collected from members and visitors. mbs66 is the operator of the mbs66.club platform, licensed under applicable international gaming authority regulations.

By registering an account with mbs66 or by continuing to use the Platform, you acknowledge that you have read this Privacy Policy and consent to the collection and processing of your personal data as described herein. This Policy should be read in conjunction with our Terms & Conditions.

2.Data We Collect

mbs66 collects personal data that is necessary for the operation of the Platform and the fulfilment of our legal and regulatory obligations. The categories of personal data we collect include:

mbs66 collects only the minimum personal data necessary for the stated purposes and does not seek to process sensitive personal data (such as health information or political opinions) beyond what may be strictly necessary for responsible gaming compliance purposes.

3.How We Collect Your Data

mbs66 collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated collection: Technical data collected automatically as you interact with the Platform, including through cookies, log files, pixel tags, and similar tracking technologies as described in Section 7.
• Third-party sources: Where permitted by law, mbs66 may receive data from identity verification service providers, payment processors, and fraud detection services to supplement the information you provide directly.

4.Legal Basis for Processing

mbs66 processes your personal data on one or more of the following legal bases:

• Contractual necessity: Processing required to fulfil our obligations under the member agreement, including account management, payment processing, and service delivery.
• Legal obligation: Processing required to comply with applicable law, including anti-money laundering (AML) regulations, age verification requirements, and gaming licence conditions imposed by our international gaming authority.
• Legitimate interests: Processing necessary for mbs66's legitimate interests, including fraud prevention, platform security, business analytics, and service improvement, where such interests are not overridden by your data protection rights.
• Consent: Where we rely on consent for specific processing activities (such as marketing communications), we will seek your explicit consent and you may withdraw it at any time without affecting the lawfulness of prior processing.

5.How We Use Your Personal Data

mbs66 uses the personal data we collect for the following purposes:

• To create, maintain, and administer your mbs66 member account;
• To verify your identity and age in accordance with our licensing obligations and anti-money laundering requirements;
• To process deposits, withdrawals, and other financial transactions in MYR via Touch n Go eWallet, Boost, Maybank, CIMB, Public Bank, and supported cryptocurrency channels;
• To detect, investigate, and prevent fraudulent activity, money laundering, collusion, and other prohibited conduct as described in our Terms & Conditions;
• To provide customer support via live chat, Telegram, and email;
• To monitor gaming activity for responsible gaming purposes and to apply responsible gaming tools at the member's request or where required by our licensing conditions;
• To send transactional communications, including deposit confirmations, withdrawal notifications, and account security alerts;
• To send promotional communications, including bonus offers and platform updates, where you have provided consent or where permitted under applicable law;
• To comply with requests from law enforcement agencies, gaming regulators, or other competent authorities;
• To improve the Platform's functionality, performance, and user experience through analytics and user behaviour data.

6.Disclosure to Third Parties

mbs66 does not sell, rent, or otherwise commercially exploit your personal data. We may share your data with the following categories of third parties only to the extent necessary for the stated purposes:

• Payment service providers: To process deposits and withdrawals (including Touch n Go, Boost, and banking partners). These parties act as independent data controllers in respect of payment data.
• Identity and KYC verification providers: To verify member identity and age documents as required by our licensing obligations.
• Game studio and software providers: Game providers integrated into the mbs66 Platform may receive limited session data necessary to deliver and audit game outcomes. All providers are contractually bound to handle such data securely.
• Regulatory and law enforcement authorities: Where required by our gaming licence, applicable law, or a lawful order from a competent authority, mbs66 will disclose member data to gaming regulators, financial intelligence units, and law enforcement agencies.
• Professional advisers: Lawyers, auditors, and other professional advisers acting under duties of confidentiality, where necessary for the conduct of mbs66's business.

All third parties with whom mbs66 shares personal data are required, by contract or by law, to implement adequate safeguards for the protection of such data.

7.Cookies and Tracking Technologies

mbs66 uses cookies and similar tracking technologies on the Platform for the following purposes:

• Strictly necessary cookies: Required for the Platform to function, including session management, authentication, and security. These cannot be disabled.
• Functional cookies: Remember your preferences, such as language settings and whether you have accepted this Privacy Policy notice.
• Analytics cookies: Used to understand how members interact with the Platform, which pages are most visited, and where technical issues occur. Data collected is aggregated and anonymised.
• Fraud-prevention cookies: Assist in identifying suspicious access patterns and protecting against account takeover and other fraudulent activity.

You may control non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. We do not use third-party advertising or behavioural targeting cookies.

8.Data Retention

mbs66 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention period required by our gaming licence, applicable anti-money laundering law, or other legal obligation.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in a manner that prevents re-identification.

9.Data Security

mbs66 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, disclosure, or destruction:

• All data in transit between your device and mbs66 servers is encrypted using TLS 1.2 or higher (256-bit SSL);
• Sensitive data at rest, including identity documents and financial records, is encrypted using AES-256;
• Access to member data by mbs66 staff is restricted on a need-to-know basis and subject to access control and audit logging;
• Two-factor authentication is available for member accounts and is enforced for all administrative access;
• Regular penetration testing and vulnerability assessments are conducted by independent security specialists;
• An incident response procedure is in place to detect, contain, and notify affected parties in the event of a data security incident within the timeframes required by applicable law.

While mbs66 takes all reasonable steps to protect your personal data, no internet transmission is entirely secure. Members are responsible for maintaining the security of their own login credentials as described in the Terms & Conditions.

10.Your Data Rights

Subject to applicable law, you have the following rights in respect of your personal data held by mbs66:

• Right of access: To request a copy of the personal data mbs66 holds about you;
• Right to rectification: To request correction of inaccurate or incomplete personal data;
• Right to erasure: To request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to any overriding legal retention obligations;
• Right to restriction of processing: To request that mbs66 restrict the processing of your data in certain circumstances;
• Right to data portability: To receive a copy of personal data you have provided to mbs66 in a structured, commonly used, and machine-readable format;
• Right to object: To object to processing carried out on the basis of mbs66's legitimate interests, including direct marketing;
• Right to withdraw consent: Where processing is based on your consent, to withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact mbs66 via live chat or at the email address provided in Section 14. mbs66 will respond to all verified requests within 30 days. Identity verification may be required before your request is actioned.

11.International Data Transfers

mbs66 operates servers and engages service providers in multiple jurisdictions. Where your personal data is transferred outside of Malaysia to a jurisdiction that may not offer the same level of data protection, mbs66 will ensure appropriate safeguards are in place, including contractual protections equivalent to applicable data protection standards. By using the Platform, you consent to such transfers in accordance with the terms of this Policy.

12.Minors

The mbs66 Platform is strictly for individuals aged 21 years and above. 21+ mbs66 does not knowingly collect or process personal data from persons under the age of 21. Where mbs66 becomes aware that personal data belonging to a minor has been collected, such data will be deleted and the associated account terminated immediately. If you believe a minor has registered on the Platform, please contact mbs66 support immediately via live chat.

13.Updates to This Privacy Policy

mbs66 reserves the right to update this Privacy Policy from time to time to reflect changes in our data processing practices, regulatory requirements, or applicable law. Material changes will be communicated to registered members via email notification and/or a prominent notice on the Platform prior to the change taking effect. The "Last Updated" date at the top of this document indicates when the current version was adopted.

Continued use of the Platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the updated Policy, you should cease using the Platform and request account closure.

14.Contact and Complaints

If you have questions about this Privacy Policy, wish to exercise your data rights, or have a complaint about mbs66's data practices, please contact us through the following channels. Please include your registered account username and a description of your enquiry for efficient handling:

mbs66 will acknowledge privacy-related complaints within 48 hours and endeavour to resolve them within 30 days. If you are not satisfied with mbs66's response, you may escalate the matter to the relevant data protection authority or gaming regulator in the jurisdiction applicable to your complaint.