Privacy Policy at MBI123 Malaysia 2026
Opening an account at MBI123 means you provide a name, a contact, and, later, a payment rail. This page explains, in plain language, what that file is for, who else may see a slice of it, and how to ask for a copy or a correction. The signed-in privacy text is the contract. If this guide and that page disagree, that page wins.
Malaysia’s Personal Data Protection Act (PDPA) framework is one reason operators keep identity and payment records. This article is a map, not a substitute for the live legal notice.
What we use data for
- Creating and securing the login
- Running the cashier and matching names on withdrawals
- Meeting identity and anti-fraud checks
- Settling games, bets, and tickets
- Sending service messages you asked for
- Improving site stability and spotting abuse
Play history exists because the lobby has to remember stakes, bonuses, and limits. It is not a public leaderboard.
What you typically provide
Category | Examples |
Account | Name, date of birth, contact, username |
Identity | Images or numbers required for payouts |
Payments | Bank or e-wallet references, amounts, times |
Device | Browser, app version, IP-related security signals |
Play | Game, bet, and limit records |
Who else may see a slice
Payment processors, identity vendors, hosting and security providers, and authorities when the law requires it. Affiliate systems may store a tag ID when you arrive through a partner link; that is not a license to sell your profile. Support staff sees what they need to fix a ticket, not your password.
Cookies and similar tools
Cookies keep you logged in, remember your language, and help the cashier complete your order. Analytics cookies, where used, are described in the live policy. Blocking everything may break login. That is expected, not a punishment.
Your requests
You can ask for access, correction, or — where the live policy allows — deletion after legal retention ends. Verification comes first. We will not email a full file to an unmatched address. Do not attach a password to the request.
Marketing mail, if you received it because you opted in, can be stopped via the link in the message or in account settings, where available.
Retention and security
Records stay while the account is active and for the extra period the live policy names (disputes, tax or crime-prevention rules, chargebacks). Security measures reduce risk; they do not make a phishing site safe. Bookmark the official domain. The app should come only from that domain’s download path.
Account limits and self-exclusion are described under the responsible gaming section. House rules: terms and conditions.