123mbi Privacy Policy — Member Personal Data Protection

1 Introduction

Welcome to the 123mbi Privacy Policy. This document explains in detail how 123mbi collects, uses, discloses, and protects your personal information when you use our platform at 123mbi.com — including the website, Android and iOS mobile apps, and all associated services.

We understand that your trust is the most valuable asset we hold. That is why we take a transparent and responsible approach to every aspect of personal data management. Your privacy is not merely a legal obligation for us — it is a core value that shapes how we operate every day.

By accessing or using the 123mbi platform, you agree to the collection and use of information as described in this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of the platform and contact us to close your account.

2 Personal Data We Collect

123mbi collects various categories of personal information depending on how you interact with our platform. Below are full details of the data we collect and its sources:

A. Information You Provide Directly

• Registration information: Full name, date of birth, email address, mobile number, and password.
• Identity verification information (KYC): A copy of your identity card (MyKad), passport, or other valid identification document; proof of address such as a utility bill or bank statement.
• Financial information: Bank account details, digital wallet account numbers (Touch 'n Go, GrabPay, Boost), and records of deposit and withdrawal transactions.
• Communication information: Content from customer support chats, emails, and feedback you send to us.

B. Information Collected Automatically

• Device data: Device type, operating system, app version, and unique device identifier.
• Network data: IP address, internet service provider (ISP), and geographic location based on IP.
• Behavioral data: Games played, session duration, betting history, and platform usage patterns.
• Cookie data: Session cookies, preference cookies, and analytics cookies (detailed in Section 5).

3 How We Use Your Data

Every piece of data we collect has a clear and legitimate purpose. Below is a full description of how 123mbi uses your personal information:

• Account management: Creating and managing your member account, processing registration, and verifying identity through the required KYC process.
• Transaction processing: Processing deposits, withdrawals, and all financial transactions on the platform securely and efficiently.
• Platform security: Detecting and preventing fraud, money laundering, unauthorised access, and other suspicious activities that could compromise member security.
• Customer support: Responding to enquiries, resolving complaints, and providing the technical assistance members need.
• Legal compliance: Fulfilling legal obligations, including reporting to the relevant authorities when required by law.
• Service improvements: Analysing usage patterns to improve platform performance, enhance the user interface, and develop new features.
• Marketing communications: Sending promotional information, bonus offers, and platform updates — subject to the notification preferences you have set.
• Responsible gaming: Monitoring gameplay patterns to identify signs of problem gambling and help members maintain healthy gaming habits.

4 Data Sharing & Disclosure

123mbi does not sell or trade members' personal data to third parties. However, there are certain situations where we need to share data to ensure our services function properly or to meet legal obligations:

Parties Who May Receive Your Data

• Payment service providers: Financial institutions, digital wallet providers, and payment gateways that process your transactions. They receive only the data necessary for payment processing.
• Game provider: Third-party gaming platforms (such as Playtech, Microgaming, Evolution Gaming) that provide game content. Data sharing is limited to session information only.
• Technology service providers: Companies providing IT infrastructure, cloud services, analytics tools, and customer support services that are bound by strict confidentiality agreements.
• Legal authorities: Police, prosecutors, courts, or regulatory bodies when required by law or a valid court order.
• Fraud prevention bodies: Agencies that assist in detecting and preventing fraud, money laundering, and other financial crimes.

All third parties we work with are bound by strict data protection agreements. They are only permitted to use your data for the stated purposes and may not use it for any other purpose without 123mbi's written consent. We conduct regular audits of all third-party providers to ensure ongoing compliance.

5 Cookies & Tracking Technologies

123mbi uses cookies and similar tracking technologies to enhance the user experience, analyze platform performance, and ensure the security of your account. Below is a detailed explanation of the types of cookies we use:

You can manage cookie settings through your web browser. Most modern browsers allow you to view, manage, and delete cookies via the settings menu. Please note that disabling essential cookies may affect platform functionality and your gaming experience.

6 Data Retention Period

123mbi retains your personal data for as long as your account is active or as long as necessary to provide our services. We also retain data to fulfill legal obligations, resolve disputes, and enforce our agreements.

• Active account data: Retained for the duration that your account remains active at 123mbi.
• Financial transaction data: Retained for a minimum of 7 years after a transaction occurs, in accordance with Malaysia's financial regulatory requirements.
• KYC records and identity verification: Retained for a minimum of 5 years after account closure, in accordance with anti-money laundering (AML) regulations.
• Customer support communication logs: Retained for 3 years for reference and dispute resolution purposes.
• Anonymized analytics data: May be retained indefinitely as it contains no personally identifiable information.
• Inactive accounts: Account data that has been inactive for more than 3 years may be anonymized or deleted once all legal obligations have been fulfilled.

When data is no longer needed, we will securely delete it or permanently anonymize it so that it can no longer be associated with you.

7 Your Rights as a User

As a 123mbi member, you have clearly defined and protected rights regarding your personal data. Below is a summary of those rights and how to exercise them:

To exercise any of the above rights, you may contact our data protection team via live chat or support email. We will process your request within 30 working days. In complex cases, this period may be extended up to 60 days with prior notice to you.

8 Data Security Measures

123mbi continually invests in the latest security infrastructure to ensure your personal data is always protected against unauthorized access, loss, or misuse. The following are the key security measures we implement:

• 256-bit SSL/TLS encryption: All communications between your device and our servers are secured with the highest industry-standard encryption protocols.
• Data-at-rest encryption (AES-256): Sensitive data stored in our databases is encrypted using the globally recognized AES-256 standard.
• Two-factor authentication (2FA): An additional security layer for account login that protects you even if your password is compromised.
• 24/7 Monitoring: An active security monitoring system that detects and alerts on suspicious activity around the clock.
• Periodic penetration testing: Professional security testing conducted on a regular basis to identify and close system vulnerabilities before they can be exploited.
• Role-based access control: 123mbi staff have access only to the data required for their specific roles, with a full audit trail for every access.
• Secure data backups: Regular backups across multiple secure locations to ensure rapid recovery in the event of an unexpected incident.

9 Changes to the Privacy Policy

123mbi reserves the right to update or amend this Privacy Policy from time to time in response to changes in legislation, industry practices, or improvements to our services. We are committed to keeping you informed of any significant changes.

When significant changes occur, we will:

• Displaying a clear notice on the platform's home page for at least 7 days before the changes take effect.
• Sending a notification to your registered email regarding the nature and effective date of any changes.
• In the case of significant changes, request your renewed consent before you may continue using the platform.

Your continued use of the 123mbi platform after the effective date of any changes indicates your acceptance of the updated Privacy Policy. We recommend reviewing this page periodically to stay informed about how we handle your data.

10 Contact Us

If you have any questions, concerns, or wish to exercise your privacy rights, the 123mbi data protection team is ready to assist you. There are several ways to reach us:

• Live chat: Available 24 hours a day, 7 days a week via the chat icon at the bottom right corner of the platform.
• Support email: [email protected] — we aim to respond within 24 hours for all privacy-related enquiries.
• Help Centre: Visit page FAQ us for quick answers to frequently asked questions.

For specific or complex data protection enquiries, you may request to speak with our appointed Data Protection Officer (DPO), who is dedicated to ensuring compliance with 123mbi's privacy policy. All privacy-related communications are handled with complete confidentiality and the highest level of professionalism.