mbs66 Privacy Policy

Effective Date: 1 January 2026  |  Last Updated: 1 June 2026

1. Introduction and Scope

This Privacy Policy ("Policy") describes how mbs66 ("mbs66", "we", "us", or "our"), the operator of the online gaming platform accessible at mbs66.win, collects, uses, stores, discloses, and protects personal data provided by or collected about users ("you", "your") in connection with your use of the mbs66 platform and any related services (collectively, the "Service").

By registering an account with mbs66 or otherwise using the Service, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein. If you do not agree with any part of this Policy, you should not use the Service.

2. Data Controller

mbs66 is the data controller responsible for the personal data collected through the Platform. For all data protection enquiries, you may contact us via the details set out in Section 15 of this Policy.

3. Personal Data We Collect

mbs66 collects personal data through different channels and for different purposes. The categories of personal data we process include:

Category	Examples	Collection Method
Identity Data	Full name, date of birth, MyKad / passport number, selfie / photograph	Registration form; KYC verification
Contact Data	Email address, mobile phone number, residential address	Registration form; account settings
Financial Data	Bank account details, e-wallet identifiers (Touch 'n Go, Boost), transaction history	Cashier; payment processing
Technical Data	IP address, device type, browser type and version, operating system, session timestamps	Automatically via platform logs and cookies
Usage Data	Pages visited, games played, bet history, session duration, click-path data	Automatically via platform analytics
Communications Data	Live chat transcripts, email correspondence, support ticket content	Direct interaction with our support team

mbs66 does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, or health information beyond what is strictly required for responsible gaming assessment or legal compliance.

4. How We Use Your Personal Data

mbs66 uses the personal data we collect for the following purposes:

• Account Management: To create, maintain, and administer your mbs66 account, verify your identity, and authenticate your mbs66 login sessions.
• Service Delivery: To process deposits and withdrawals in MYR, record bets and game results, award bonuses, and provide customer support.
• Regulatory Compliance: To fulfil KYC (Know Your Customer) and AML (Anti-Money Laundering) obligations required by our licensing authority, including identity verification and transaction monitoring.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, cheating, money laundering, and other prohibited conduct on the Platform.
• Responsible Gaming: To monitor gaming patterns, enforce self-exclusion requests, and implement account-level responsible gaming tools where appropriate.
• Communications: To send transactional notifications (deposit confirmations, withdrawal updates, security alerts), service announcements, and, where you have consented, promotional communications.
• Platform Improvement: To analyse aggregate usage data, troubleshoot technical issues, and improve the performance and features of the mbs66 Platform.

5. Legal Bases for Processing

mbs66 processes your personal data on the following legal bases:

• Contract Performance: Processing necessary for the performance of the contract between you and mbs66, including account management and payment processing.
• Legal Obligation: Processing required to comply with applicable laws and gaming licence conditions, including KYC, AML, and age verification requirements.
• Legitimate Interests: Processing for fraud detection, platform security, and service improvement, where these interests are not overridden by your privacy rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit consent. You may withdraw consent at any time.

6. Disclosure of Personal Data

mbs66 does not sell, rent, or share your personal data with third parties for their own marketing purposes. We may disclose your personal data to the following categories of recipients:

• Service Providers: Payment processors, identity verification providers, cloud infrastructure providers, and customer support platforms engaged by mbs66 as data processors under binding data processing agreements.
• Licensing and Regulatory Authorities: Where required by our gaming licence conditions or applicable law, including anti-money laundering authorities and law enforcement agencies.
• Group Companies: Other entities within the mbs66 corporate group, where relevant to the delivery of the Service or for consolidated compliance purposes.
• Professional Advisers: Lawyers, auditors, and consultants under confidentiality obligations where required to protect or exercise mbs66's legal rights.

7. International Data Transfers

Some of mbs66's service providers are located outside Malaysia. Where personal data is transferred internationally, mbs66 ensures appropriate safeguards are in place, including standard contractual clauses or equivalent data protection mechanisms, to protect your data to a standard equivalent to that applicable within Malaysia.

8. Data Retention

mbs66 retains your personal data for as long as your account remains active and for a period thereafter as required by applicable laws, gaming licence conditions, and legitimate business interests. Identity and financial records are typically retained for a minimum of five (5) years following account closure to satisfy AML and gaming regulatory requirements. Technical and usage data may be retained in anonymised or aggregated form for analytical purposes beyond this period.

Where you request account closure, mbs66 will deactivate your account and suppress your data from active processing, subject to applicable legal retention obligations.

9. Cookies and Tracking Technologies

mbs66 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, maintain your mbs66 login session, and analyse platform usage. The cookies we use fall into the following categories:

• Strictly Necessary Cookies: Required for the Platform to function. These cannot be disabled without impairing the Service.
• Functional Cookies: Used to remember your preferences (such as language settings) and improve your experience on return visits.
• Analytics Cookies: Used to collect aggregate information about how users interact with the Platform. This data is anonymised and used only to improve the Service.

You may control non-essential cookies through your browser settings. Disabling strictly necessary cookies will affect Platform functionality, including your ability to maintain a mbs66 login session.

10. Security Measures

mbs66 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include 256-bit SSL encryption for all data in transit, encrypted storage for data at rest, role-based access controls for internal systems, regular penetration testing and security audits, and two-factor authentication options for user accounts. While mbs66 takes reasonable precautions, no security system is impenetrable and we cannot guarantee the absolute security of your data.

11. Your Rights

Subject to applicable law and licensing obligations, you have the following rights with respect to your personal data held by mbs66:

• Right of Access: To request a copy of the personal data mbs66 holds about you.
• Right of Rectification: To request correction of inaccurate or incomplete personal data.
• Right of Erasure: To request deletion of your personal data, where retention is no longer legally required.
• Right to Restrict Processing: To request that mbs66 limit the use of your personal data in certain circumstances.
• Right to Object: To object to processing based on legitimate interests, including profiling for direct marketing purposes.
• Right to Data Portability: To receive your personal data in a structured, machine-readable format, where technically feasible.
• Right to Withdraw Consent: Where processing is based on consent, to withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact mbs66 via live chat or email as set out in Section 15. mbs66 will respond to data rights requests within 30 days. We may require identity verification before processing a request.

12. Children and Minors

The mbs66 Platform is strictly intended for users who are 21 years of age or older. mbs66 does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under 21, we will promptly delete that data and close the associated account. If you believe a minor has registered on mbs66, please contact us immediately.

13. Third-Party Links

The mbs66 Platform may reference third-party services (such as payment processors or game providers) whose own privacy practices govern the data they collect. mbs66 is not responsible for the privacy practices of any third-party service provider. We encourage you to review the privacy policies of any third-party services you interact with in connection with the Platform.

14. Changes to This Policy

mbs66 reserves the right to update this Privacy Policy at any time. Material changes will be communicated to registered users via the email address on record or through a prominent notification on the Platform at least 14 days before the changes take effect. Continued use of the Service after the effective date of any change constitutes acceptance of the revised Policy. The "Last Updated" date at the top of this page reflects the date of the most recent revision.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or mbs66's data processing practices, please contact our Data Protection team:

Email: [email protected]
Live Chat: Available 24/7 on the mbs66 Platform (response time < 90 seconds)
Response target for written enquiries: within 5 business days