Mbiwallet Privacy Policy — Our Commitment to Your Data Security

To provide a safe, seamless, and personalised online wagering service, mbiwallet collects certain categories of personal information from our members. All data collection is carried out lawfully, fairly, and transparently in accordance with Malaysia's Personal Data Protection Act 2010.

Identity Data: Full name as per official documents, identity card number (MyKad) or passport, date of birth, gender, and nationality. This information is required for the mandatory identity verification (KYC) process to ensure only eligible individuals may use our platform.

Contact Data: Active email address, mobile phone number, and residential address. This information is used for account-related communications, transaction verification and important security notifications.

Financial Data: Bank account number, payment card details (stored in encrypted format), deposit and withdrawal transaction records, and wagering history on the platform. This financial data is required for secure payment processing and compliance with anti-money laundering (AML) requirements.

Technical Data: Device IP address, browser type and version, operating system, mobile device information (model, unique identifier), access logs and platform usage data. This data helps us detect suspicious activity and improve platform performance.

Mbiwallet collects personal data through several transparent and lawful channels. Understanding how data is collected helps you make more informed decisions about the information you share with us.

Directly From You: During new account registration, you complete a form with basic personal details. During the KYC verification process, you upload identity documents. When making deposits or withdrawals, payment details are collected. When contacting customer support, your conversations may be recorded for training and quality purposes.

Automatically: When you browse the mbiwallet platform — whether via the website or mobile app — our systems automatically record technical data such as your IP address, access timestamps, pages visited and actions taken. This data is collected using cookies, web pixels and industry-standard tracking technologies.

From Trusted Third Parties: In some cases, we may receive additional information from payment service partners for verification purposes, or from fraud prevention agencies to verify the identity of new members. All such third parties are bound by strict confidentiality agreements.

Mbiwallet uses your personal data only for legitimate, relevant purposes that are consistent with your reasonable expectations as a platform member. Below is the complete list of data usage purposes:

We will not use your data for any purposes beyond those listed above without first obtaining your additional consent. If you have consented to receive promotional communications, you may withdraw that consent at any time through your account settings or by contacting our support team.

Mbiwallet does not sell, rent, or disclose members' personal data to third parties for independent marketing purposes. However, in operating the platform, we may need to share certain data with trusted parties in the following limited circumstances:

• Payment Service Provider: Payment gateways, Malaysian local banks and e-wallet providers receive only the transaction information necessary to securely process your deposits and withdrawals.
• Identity Verification Service Provider: Our KYC partners receive a copy of your identity documents for verification purposes only and are bound by strict confidentiality agreements.
• Cloud Service Provider: Data is stored on trusted cloud servers under data processing agreements that comply with international standards. All data is encrypted before and during storage.
• Relevant Authority: In situations where we are required by Malaysian law or a valid court order to disclose data, we will do so after verifying the legitimacy of the request.

The security of your personal data is mbiwallet's top priority. We continuously invest in the latest security infrastructure to ensure your data is protected from unauthorized access, theft, or loss.

End-to-End Encryption: All communications between your device and mbiwallet servers are secured with the latest TLS 1.3 protocol. Sensitive data such as bank account numbers and card details are stored in encrypted format using the industry-recognised AES-256 algorithm.

Two-Factor Authentication (2FA): mbiwallet offers two-factor authentication for all member accounts. We strongly encourage all members to enable this feature for an additional layer of protection against unauthorised access.

24/7 Monitoring: Our security team continuously monitors the platform to detect any unusual or suspicious activity. Automated intrusion detection systems operate around the clock to protect all members' data.

Regular Security Audits: mbiwallet conducts regular external security audits by independent cybersecurity firms to identify and address any vulnerabilities in our systems before they can be exploited.

Cookies are small text files stored on your device when you visit the mbiwallet website. We use cookies to enhance your experience, maintain login session security, and understand how members use our platform.

Types of Cookies We Use:

• Essential Cookies: Required for core platform functions such as login authentication and session security. These cookies cannot be disabled as they are critical to platform operation.
• Performance Cookies: Collecting information on how you use the platform — which pages are visited most frequently, response times, and any errors that may occur — to help us improve platform performance.
• Functionality Cookies: Saving your preferences such as language, display theme, and account settings so you do not need to reconfigure them each time you log in.
• Analytics Cookies: Used to understand platform usage patterns in aggregate and anonymised form for continuous product improvement.

You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of some mbiwallet platform features.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you as an mbiwallet member have the following rights regarding your personal data that we hold:

Mbiwallet retains your personal data only for as long as necessary to fulfil the original purpose of collection or to comply with applicable legal requirements. Retention periods vary by data type:

• Active Account Data: For the entire duration that your account remains active on the mbiwallet platform.
• Financial Transaction Records: Minimum 7 years after a transaction is made, in line with Malaysia's financial and tax legal requirements.
• KYC Documents: Minimum 5 years after the business relationship ends, in line with established AML requirements.
• Security & Technical Logs: 12 months from the date of creation, then securely deleted.
• Support Chat Recording: 24 months from the date of interaction for quality assurance purposes.
• Marketing Data (with consent): Until you withdraw your consent or 3 years of inactivity, whichever comes first.

Once the defined retention period expires, your personal data will be securely deleted from all our systems using industry-recognised erasure methods, ensuring it cannot be recovered.

Mbiwallet reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our business practices, current legal requirements, or improvements in how we protect your data.

When significant changes are made to this Privacy Policy, we will notify you via:

• Email notification to your registered address, at least 14 days before the effective date of the changes
• A prominent notification within the mbiwallet platform when you log in
• Updates to the "Effective Date" at the top of this document

Continued use of the mbiwallet platform after the effective date of any amendment is considered your acceptance of the updated Privacy Policy. We encourage you to review this page periodically.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how mbiwallet handles your personal data, we welcome you to reach out. Our Data Protection Officer (DPO) team is ready to assist.

You can reach us via:

• Live Chat: Available 24 hours a day, 7 days a week via the chat button within the mbiwallet platform — this is the fastest way to get a response.
• Email: Send your privacy enquiry to [email protected] with the subject "Privacy Policy Enquiry".
• Help Center: Visit our FAQ section at mbiwallet.onl/faq for answers to the most frequently asked privacy questions.

We are committed to responding to all privacy-related inquiries within 3 working days and resolve official data rights requests within 30 days in accordance with the requirements of PDPA 2010.