Privacy Policy

MBIJackpot ("we", "us", "our", "the Company") operates the online casino and sports betting platform accessible at https://mbijackpot.cam. We are fully committed to safeguarding the privacy and personal data of every individual who interacts with our platform, whether as a registered Player, a visitor, or a prospective member.

This Privacy Policy ("Policy") sets out in clear and accessible terms the types of personal data we collect, the purposes for which we process it, the legal bases on which processing is conducted, the circumstances in which data may be shared with third parties, the rights you hold in relation to your data, and the measures we take to keep it secure.

This Policy applies to all data processing activities carried out by MBIJackpot in connection with the delivery of our services to players across Malaysia, including players from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and all other regions. This Policy should be read alongside our Terms & Conditions and Responsible Gambling Policy.

For the purposes of this Privacy Policy, the following terms shall carry the meanings set out below:

• "Personal Data" — any information that identifies or could reasonably be used to identify a living natural person, either directly or in combination with other data.
• "Processing" — any operation performed on personal data, including collection, recording, storage, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" — MBIJackpot, the entity that determines the purposes and means of processing your personal data.
• "Data Processor" — any third-party service provider that processes personal data on behalf of MBIJackpot, under our documented instructions.
• "Player" / "User" / "You" — any natural person who has registered an account on the MBIJackpot platform or who accesses the platform in any capacity.
• "Sensitive Data" — a subset of personal data requiring heightened protection, including identification documents, financial account details, and any data relating to health where applicable to responsible gambling assessments.
• "Cookies" — small text files placed on your device by the platform that facilitate session management, preference retention, and analytics.
• "KYC" — Know Your Customer — the identity verification process MBIJackpot conducts to comply with applicable anti-money laundering and age verification obligations.

MBIJackpot collects personal data that is necessary to provide, secure, and improve the services we deliver. The categories of data we collect include the following:

We do not collect unnecessary data. Where data collection is optional, this will be indicated at the point of collection. MBIJackpot does not collect biometric data, precise geolocation data, or data concerning racial or ethnic origin.

MBIJackpot collects personal data through the following channels and mechanisms:

• Direct Interaction: Data you actively provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting our support team, or participating in a promotion.
• Automated Technical Collection: Data collected automatically when you access and navigate the platform, including via cookies, server logs, and session tracking technologies embedded in our platform infrastructure.
• Payment Service Providers: Financial data transmitted to us by third-party payment processors — including FPX gateway operators, DuitNow, Maybank, CIMB, Public Bank, Hong Leong Bank, and e-wallet providers such as Touch 'n Go eWallet, Boost, and GrabPay — in connection with the processing of deposit and withdrawal transactions.
• Identity Verification Services: Data returned by third-party KYC and age verification partners during the mandatory account verification process.
• Fraud Prevention and AML Services: Data received from specialist third-party services that assist us in detecting suspicious activity and complying with anti-money laundering obligations.
• Publicly Available Sources: In limited circumstances, we may supplement our records with data from publicly available sources, such as sanctions lists or regulatory databases, for compliance purposes.

MBIJackpot processes personal data only where a valid legal basis exists. Depending on the specific processing activity, the applicable legal basis will be one or more of the following:

• Contractual Necessity: Processing required to perform our obligations under the agreement between you and MBIJackpot — including account creation, game delivery, payment processing, and support services.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including age verification, anti-money laundering (AML), counter-terrorist financing (CTF), and KYC obligations.
• Legitimate Interests: Processing conducted for MBIJackpot's legitimate business interests, including fraud prevention, platform security, service improvement, and responsible gambling monitoring — provided these interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — primarily in the context of direct marketing communications. You may withdraw your consent at any time without detriment to your Account.

MBIJackpot uses the personal data we collect for the following purposes:

• Account Administration: To create, manage, verify, and maintain your registered account on the platform, including processing login credentials and enabling two-factor authentication.
• Service Delivery: To provide access to all games, sports betting markets, live dealer tables, and other platform features, and to process all associated financial transactions securely.
• Age and Identity Verification: To confirm that you meet the mandatory minimum age requirement of 21 years and to authenticate your identity in compliance with applicable regulations.
• Financial Processing: To process deposits and withdrawals via FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank, and cryptocurrency channels including BTC and USDT.
• Responsible Gambling: To monitor your gameplay patterns for indicators of problem gambling behaviour, to enforce any deposit or loss limits you have set, and to act on self-exclusion requests.
• Security and Fraud Prevention: To detect and prevent fraudulent activity, money laundering, account takeovers, and other prohibited conduct that could harm you or the integrity of our platform.
• Customer Support: To respond to your queries, resolve disputes, and maintain accurate records of communications for quality assurance and compliance purposes.
• Marketing and Promotions: To communicate relevant promotional offers, bonuses, and platform updates where you have given your consent, or where we have a legitimate interest in doing so.
• Analytics and Improvement: To analyse usage patterns and platform performance data in aggregate form to improve our services, optimise user experience, and develop new features.
• Legal Compliance: To comply with all applicable laws, regulations, regulatory notices, court orders, and requests from competent authorities.

MBIJackpot does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share personal data only in the following limited and controlled circumstances:

• Payment Processors and Banking Partners: We share the financial data necessary to process your transactions with payment gateway operators and financial institutions, including providers supporting FPX, DuitNow, Maybank, CIMB, and e-wallet services. These parties act as independent data controllers subject to their own privacy obligations.
• KYC and Verification Providers: Identity and age verification data is shared with licensed third-party KYC service providers who process this data on our behalf under strict contractual data processing agreements.
• Fraud Prevention and AML Partners: We may share technical and financial data with specialist fraud detection and anti-money laundering service providers as part of our compliance obligations.
• Game Content Providers: Certain technical data — including session identifiers and gameplay data — is shared with our licensed game studio partners to facilitate game delivery and support. These providers do not receive identifiable personal data beyond what is operationally required.
• Regulatory and Law Enforcement Authorities: We will disclose personal data to competent governmental, regulatory, or law enforcement authorities where required by applicable law, court order, or in connection with any legal proceeding.
• Professional Advisers: In limited circumstances, we may share data with our legal counsel, auditors, or other professional advisers who are bound by professional duties of confidentiality.

MBIJackpot uses cookies and similar tracking technologies to operate essential platform functionality, remember your preferences, maintain session security, and gather anonymised analytics data that helps us improve the user experience for all players.

The cookies we use fall into the following categories:

• Strictly Necessary Cookies: Essential to the operation of the platform. They enable core functions such as session authentication, security token management, and load balancing. These cookies cannot be disabled without impairing your ability to use the platform.
• Functional Cookies: Used to remember your preferences — such as language settings, previously selected games, and display configurations — to provide a more personalised experience across sessions.
• Analytics Cookies: Used to collect aggregated, anonymised data on how players navigate and interact with the platform. This data helps us identify technical issues, measure feature adoption, and improve service design.
• Security Cookies: Used to detect fraudulent activity, support two-factor authentication flows, and protect your account against unauthorised access attempts.

You may configure your browser settings to refuse certain categories of non-essential cookies. However, disabling strictly necessary cookies will affect platform functionality. For full control over cookie preferences, please access the cookie settings panel within your account settings.

MBIJackpot retains personal data for as long as is necessary to fulfil the purposes set out in this Privacy Policy, or for such longer period as may be required or permitted by applicable law.

In practice, our retention periods are guided by the following principles:

• Active Accounts: Personal data associated with an active player account is retained for the duration of the account relationship and for a minimum period thereafter as required by applicable regulatory obligations.
• KYC and Financial Records: Identity verification documents and financial transaction records are retained for a minimum of five (5) years following the end of the account relationship, in compliance with anti-money laundering regulations.
• Communications Records: Support correspondence and live chat transcripts are retained for up to three (3) years for dispute resolution and quality assurance purposes.
• Closed or Terminated Accounts: Where an account is closed — whether voluntarily or as a result of a breach — core identity and financial records are retained for the minimum statutory period before being securely deleted or anonymised.
• Marketing Data: Consent records and marketing interaction data are retained until consent is withdrawn, after which marketing data is promptly suppressed.

Upon expiry of the applicable retention period, personal data is either securely deleted or anonymised in a manner that prevents re-identification.

MBIJackpot implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security architecture includes:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and our platform is encrypted using industry-standard TLS protocols, equivalent to those used by major Malaysian banking institutions including Maybank and CIMB.
• Two-Factor Authentication (2FA): We offer and strongly recommend 2FA for all player accounts, providing a critical second layer of protection against credential-based attacks.
• Encrypted Data Storage: Personal and financial data held in our databases is encrypted at rest using AES-256 encryption standards.
• Access Controls: Access to personal data is restricted to authorised MBIJackpot personnel on a strict need-to-know basis. All internal access is logged and subject to periodic review.
• Intrusion Detection and Monitoring: Our infrastructure is continuously monitored for anomalous activity. Automated intrusion detection systems provide real-time alerts to our security operations team.
• Regular Security Audits: We conduct periodic third-party security assessments and penetration testing to identify and remediate vulnerabilities proactively.

Subject to applicable data protection law and any overriding legal obligations, you hold the following rights in respect of your personal data held by MBIJackpot. To exercise any of these rights, please contact us at [email protected].

If MBIJackpot becomes aware that it has inadvertently collected personal data from a person below the minimum age threshold, we will immediately terminate the relevant account, delete all associated personal data without delay, and reverse any financial transactions where permissible.

If you have reason to believe that a minor has registered an account on MBIJackpot, please notify us immediately at [email protected] so that we may take appropriate action.

In order to deliver our services, personal data held by MBIJackpot may be transferred to, and processed in, countries other than Malaysia. This includes transfers to jurisdictions where our game studio partners, payment processors, and infrastructure service providers operate.

Where such transfers occur, MBIJackpot takes steps to ensure that adequate safeguards are in place to protect your personal data to a standard that is at least equivalent to the protections afforded under applicable Malaysian data protection law. These safeguards may include contractual data protection clauses, processor agreements that impose binding obligations on recipient parties, or transfers to jurisdictions that have been assessed to provide an adequate level of data protection.

By using the MBIJackpot platform, you acknowledge and consent to the transfer of your personal data to jurisdictions outside Malaysia where necessary for the performance of our services, subject to the safeguards described in this Policy.

MBIJackpot reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, operational requirements, or applicable law. Material changes will be communicated to registered Players via the email address associated with their account, or by a prominent notice on the platform, no less than fourteen (14) days before the change takes effect.

The version of this Policy displaying the most recent "Last Updated" date at the top of the page constitutes the current and binding policy between you and MBIJackpot. We encourage you to review this page periodically to stay informed of how we protect your data.

Your continued use of the MBIJackpot platform following the effective date of any amendment constitutes your acceptance of the revised Policy. If you do not agree with the updated terms, you must discontinue use of the platform and contact us to request account closure.

For any questions, concerns, or requests relating to this Privacy Policy, your personal data, or the exercise of your data rights, please contact MBIJackpot's Player Support team through the following channels:

When submitting a data rights request, please provide sufficient information to enable us to verify your identity and locate your account records. We may request additional documentation for verification purposes before processing your request.