At mbiplay, we take the privacy of every user seriously. This document transparently explains how we collect, store, use, and protect your personal information — all in full compliance with Malaysian data protection laws.
Your data is protected with 256-bit SSL encryption at all times.
Your personal data is never sold or shared with third parties for marketing purposes.
You may request access to, correction of, or deletion of your data at any time.
Mbiplay operates in compliance with Malaysia's Personal Data Protection Act 2010.
Welcome to the mbiplay Privacy Policy page. We, mbiplay, are fully committed to protecting the privacy and personal data of every user who registers and uses our platform. This Policy is formulated in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and clearly outlines your rights as a user and our responsibilities as a data controller.
By registering for or using any mbiplay service — whether through the website, mobile app, or any other channel we provide — you agree to the collection and use of information as described in this Privacy Policy. If you do not agree with any part of this policy, please stop using our platform and contact our support team to close your account.
This Privacy Policy may be updated from time to time. Any material changes will be communicated to active users via email or an in-platform notice. The latest effective date will always be noted at the top of this document for your reference.
Mbiplay collects several categories of information from users for legitimate and stated purposes. We do not collect data beyond what is needed to operate the platform. The types of data we collect are as follows:
| Data Categories | Examples | Requirements |
|---|---|---|
| Identity Data | Full name, date of birth, identification card number, gender | Required (KYC) |
| Contact Data | Email address, phone number, residential address | Required |
| Financial Data | Bank account details, transaction history, deposit & withdrawal records | Required |
| Technical Data | IP address, device type, web browser, operating system, access logs | Automatic |
| Gaming Data | Betting history, wins, game preferences, set limits | Automatic |
| Communication Data | Customer support conversation records, emails, feedback | Specific circumstances |
Every piece of information we collect is used for a clear and legitimate purpose. mbiplay does not use your data for purposes not stated here without first obtaining your consent.
Mbiplay does not sell, rent, or transfer your personal data to third parties for their commercial purposes. However, there are specific circumstances where we need to share your information with trusted parties:
Protecting your personal data is mbiplay's highest priority. We employ multiple layers of technical and organisational security to keep your data safe at all times:
All data transmitted between your device and mbiplay's servers is protected by 256-bit SSL encryption — the same standard used by global banking institutions.
We offer two-factor authentication (2FA) for all accounts to ensure that only you can access your account, even if your password is compromised.
Your data is stored on servers protected by multi-layered firewalls, intrusion detection systems, and database encryption.
Our security team continuously monitors the system around the clock to detect any suspicious activity or unauthorised access attempts.
Mbiplay conducts regular internal and external security audits to ensure our systems continuously meet the latest security standards.
Access to user data within mbiplay is strictly restricted on a need-to-know basis — only employees who require access to perform their duties are permitted.
While we take comprehensive security measures, no system can be guaranteed 100% secure. In the event of a data breach affecting your information, mbiplay is committed to notifying you within a reasonable timeframe and taking immediate remedial action.
Mbiplay uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.
You may manage or delete cookies through your web browser settings at any time. However, disabling certain cookies may affect the functionality or user experience of the mbiplay platform.
As a mbiplay user and an individual protected under Malaysia's PDPA, you have the following rights regarding your personal data:
You have the right to request and receive a copy of the personal data we hold about you at any time.
If your data is inaccurate or out of date, you have the right to request an immediate correction.
In certain circumstances, you may request deletion of your data, subject to legal data retention obligations.
You may request that we restrict the processing of your data in certain situations, such as while a dispute is under review.
You may object to the use of your data for direct marketing at any time without providing a reason.
You have the right to receive your data in a machine-readable format for transfer to another provider.
To exercise any of the above rights, please contact our data protection team via support email or live chat. We will process your request within 14 business days. No fee is charged for reasonable requests.
Mbiplay retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy, or as required by Malaysian law. The following is a general guide to our data retention periods:
| Data Type | Retention Period | Reason |
|---|---|---|
| Active account data | Throughout account activity | Operational requirements |
| KYC and identity data | 7 years after account closure | AMLA 2001 Compliance |
| Financial transaction records | 7 years from the transaction date | Tax & audit requirements |
| Support communication logs | 3 years | Dispute resolution |
| Technical data & access logs | 12 months | System security |
| Marketing data (with consent) | Until consent is withdrawn | Consent-based |
Once the retention period expires, your data will be securely deleted or anonymised in accordance with our established data deletion procedures.
The mbiplay platform is exclusively for individuals aged 18 and above. We do not knowingly collect personal data from underage individuals. Should we discover that a minor's data has been collected without parental or guardian consent, we will take immediate steps to delete that data and close the relevant account.
If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please do not hesitate to contact our Data Protection Officer (DPO).
Our team is ready to assist you in both Malay and English, 24 hours a day, 7 days a week, through the following channels:
We are committed to responding to all privacy-related inquiries within 72 hours business days. For formal data rights requests, please clearly state the type of request (access, correction, deletion, etc.) and include sufficient identification details for us to process your request securely.
Join over 500,000 mbiplay members enjoying a wagering experience in a safe, fair, and responsible environment.
256-bit SSL Protected | PDPA Compliance | 18+ Only