At mbi23, we understand that your personal information is both sensitive and valuable. This Privacy Policy clearly explains how we collect, use, store, and protect your data – all in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). We have written this in plain language because you deserve to know exactly what happens with your information.
Before reading the full policy, here are the six core commitments mbi23 makes to protect your personal data.
Mbi23 only collects data that is strictly necessary to operate our services safely and meet legal requirements. We do not collect irrelevant or excessive information from any player.
All your personal and financial data is encrypted using 256-bit SSL technology — the same level of security used by Malaysia's major commercial banks such as Maybank and CIMB. Data is stored on secure servers with multi-layered access controls.
Mbi23 does not sell, rent, or share your personal data with any third party for marketing or commercial purposes without your explicit consent. Data is only shared with parties necessary for service delivery and legal compliance.
You have the right to access, correct, transfer, and request the deletion of your personal data at mbi23 at any time. All requests are processed within 30 working days at no charge.
Your personal data is not kept indefinitely. mbi23 has a clear data retention policy – each category of data is held only for as long as necessary for its stated purpose, then securely deleted or anonymised.
The mbi23 Privacy Policy is designed and updated regularly to ensure full compliance with the Personal Data Protection Act 2010 (PDPA) Malaysia – the primary legislation governing personal data protection in our country.
Important: By registering and using the mbi23 platform, you agree to this Privacy Policy. Please read this document carefully to understand how we manage your personal data in accordance with Malaysian law.
Mbi23 ("we", "the mbi23 platform" or "mbi23.click") is an online entertainment platform operator providing slots, Live Casino, Sports Betting, progressive jackpots and a range of other digital entertainment services to Malaysian players. In the course of delivering these services, we collect and process certain personal data from our members.
This Privacy Policy is intended to explain transparently how mbi23 collects, uses, stores, protects, and in certain circumstances, shares your personal data. This document has been prepared in accordance with the requirements of Personal Data Protection Act 2010 (PDPA) Malaysia and forms part of the overall agreement between you and mbi23.
Definition of "Personal Data": In the context of this Privacy Policy, "personal data" refers to any information that can be used to identify you, directly or indirectly, as an individual – including your name, phone number, email address, identification card number, bank account information, and platform usage patterns.
This Privacy Policy applies to all users of the mbi23 platform, including those who browse the website without registering an account, registered members who are actively playing, and former members whose accounts have been terminated.
Mbi23 collects various types of data depending on how you interact with our platform. The categories of data collected are as follows:
Identity & Contact Data:
Financial & Transaction Data:
Platform Usage & Technical Data:
Communication Data:
Mbi23 collects your personal data through three main channels:
1. Directly from You: This is the primary method of data collection. You provide data voluntarily when registering a mbi23 account, updating your profile, making deposits or withdrawals, contacting customer support, or completing platform feedback forms.
2. Automatically through Your Use of the Platform: When you use the mbi23 website or app, our systems automatically record technical information such as your IP address, device type, session duration and pages visited. This is done through cookies, server logs and similar tracking technologies – more details in Section 9.
3. From Third Parties: In certain cases, mbi23 receives data from third parties, including identity verification (KYC) service providers that authenticate your documents, payment providers such as Touch 'n Go eWallet, DuitNow, and FPX-linked banks that verify financial transactions, and game suppliers that share technical data related to your gaming sessions.
Explicit Consent: mbi23 does not collect your personal data from social media, purchased third-party lists, or other public sources without your knowledge and consent. All data collection is purposeful and limited to what is necessary for platform operations.
Mbi23 uses your personal data only for legitimate, stated purposes, as outlined below:
| Purpose of Use | Data Used | Legal Basis |
|---|---|---|
| Account Management Registration, login, identity verification (KYC) |
Name, IC number, date of birth, email, phone number | Contractual compliance & legal obligations |
| Transaction Processing Deposits & withdrawals in MYR |
Bank account / e-wallet number, transaction history | Contractual compliance |
| Fraud Prevention & AML Detecting suspicious activity |
IP address, transaction patterns, login history | Legitimate interests & legal obligations |
| Customer Service Handling enquiries and complaints |
Communication records, account history | Contractual compliance |
| Responsible Gaming Detecting at-risk playing patterns |
Betting history, deposit patterns, session duration | Legitimate interests & legal obligations |
| Marketing Communications Promotions, bonuses and exclusive offers |
Email, phone number, game preferences | Consent (withdrawable at any time) |
| Platform Improvements Usage analysis to improve our products |
Anonymised usage data | Legitimate interests |
Mbi23 will not use your personal data for any purpose beyond those stated above without first obtaining your renewed consent.
Mbi23 does not sell your personal data to any party. We only share data in the following limited situations:
Trusted Service Providers: We work with carefully selected third-party companies to help operate the platform – these include KYC providers, payment processors such as Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay and FPX, server hosting providers, and game suppliers such as Pragmatic Play and Microgaming. All service providers are bound by strict confidentiality agreements and are only permitted to use your data for the specific purposes defined.
Legal Requirements: mbi23 may be required to disclose your data to Malaysian authorities when mandated by a court order, official investigation, or anti-money laundering legislation (AMLA 2001). In such circumstances, we will comply with legal requirements while taking steps to protect your privacy to the greatest extent possible.
Cross-Border Data Transfers: Some of our service providers operate outside Malaysia. In such cases, your data may be transferred overseas. mbi23 ensures that any such transfers are carried out with adequate safeguards as described in Section 11.
Mbi23 does not share your data with parent companies, subsidiaries, or affiliated entities for cross-marketing purposes without your consent. We do not sell data to data brokers, advertising companies, or any commercial entity that has no direct relationship with mbi23's operations.
The security of your personal data is an absolute priority for mbi23. We implement comprehensive technical and organisational security measures to protect your data against unauthorised access, loss, misuse or accidental disclosure.
Technical Security Measures:
Organisational Security Measures:
While we implement comprehensive security measures, no system can be 100% impenetrable. In the event of a data breach that may affect your rights, mbi23 will notify you within 72 hours, in line with industry best practices and applicable legal requirements.
Mbi23 retains your personal data only for as long as necessary for the stated purposes or as required by Malaysian law. Below are the retention period guidelines for the various types of data:
Longer retention periods may apply where there is an active investigation, legal claim or regulatory compliance requirement that necessitates retaining the data for longer. Once data is no longer needed, it is securely deleted or anonymised so that it can no longer be linked back to you.
As a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights in relation to your personal data held by mbi23:
You have the right to request a copy of the personal data we hold about you. mbi23 will provide a data report within 30 days of receiving your request.
If your data is inaccurate or outdated, you have the right to request a correction. Simple updates can be made directly through your mbi23 account settings.
You may request the deletion of your personal data when it is no longer needed, subject to data retention obligations under Malaysian law.
You may object to the processing of your data for direct marketing purposes at any time. Click "unsubscribe" in any mbi23 marketing email or contact our support team.
You have the right to receive your personal data in a machine-readable format (such as CSV) for transfer to another service should you choose to do so.
Where processing of your data is based on consent (e.g. marketing communications), you may withdraw that consent at any time without affecting your right to use the platform.
How to Exercise Your Rights: To submit any request relating to your personal data rights, send an email to support@mbi23.click with the subject line "PDPA Request – [request type]" along with a copy of your MyKad for identity verification. We will respond within 30 working days. No fee is charged for the first request of each type within any 12-month period.
Mbi23 uses cookies and similar tracking technologies to enhance your experience on the platform, maintain session security, and understand how our platform is used. The types of cookies we use are as follows:
You can manage your cookie settings through your web browser. Please note that disabling certain cookies may affect the functionality of the mbi23 platform. For instructions on managing cookies in popular browsers, please refer to your browser's help documentation (Chrome, Firefox, Safari or Edge).
The mbi23 platform is for individuals aged 18 years of age and above only. We do not knowingly collect or process personal data from individuals under the age of 18. Registration by minors is strictly prohibited.
If we discover that personal data belonging to an individual under 18 has been collected without our knowledge, we will take immediate action to delete that data and terminate the relevant account. If you are aware of a minor using the mbi23 platform, please notify us at support@mbi23.click immediately.
In its operations, mbi23 works with certain service providers that may operate or store data outside Malaysia – in particular, server hosting providers, KYC service providers and certain international game suppliers.
When your data is transferred outside Malaysia, mbi23 ensures adequate protection through:
Mbi23 will not transfer your data to any country that does not provide an adequate level of data protection without approved additional safeguards in place.
Mbi23 reserves the right to update this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or changes in how we handle data.
When this Privacy Policy is updated:
If you have any questions, concerns, or requests regarding this Privacy Policy or how mbi23 handles your personal data, please reach out to us through the following channels:
Filing a Complaint with the Authorities: If you are dissatisfied with how mbi23 has handled your privacy request, you have the right to file a complaint with the Department of Personal Data Protection Malaysia (JPDP) or the relevant regulatory authority. mbi23 is committed to fully cooperating with any official investigation.
This Privacy Policy was last updated on 1 January 2026 and takes effect immediately. The latest version of the mbi23 Privacy Policy is always available on this page.
Most people only read a privacy policy when something goes wrong. At mbi23, we want you to understand from the outset how we handle your data — so you can play with peace of mind and full confidence.
In the online entertainment industry, trust is the most valuable currency. When you deposit RM50 into your mbi23 account via Touch 'n Go eWallet, you are not just entrusting us with your money — you are also entrusting us with your name, phone number, email address, and e-wallet account details. We understand the weight of that trust, and we do not take the responsibility that comes with it lightly.
A question mbi23 players frequently ask is: "Why do you need a copy of my MyKad?" The answer is straightforward — this is not our choice; it is a legal requirement under Malaysian law. The Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act (AMLA 2001) requires all financial and gaming platforms to verify the identity of their users. Without this verification, a platform cannot operate legally. What we can promise is that any documents you submit are stored with strict encryption and accessed only by authorised personnel for verification purposes.
On the topic of cookies – we know most people have little interest in reading about cookies when all they want to do is play slots or check the latest EPL match odds. But the cookies we use at mbi23 are not there to track you across other websites or sell your behavioural data to advertisers. Our cookies serve three basic purposes: keeping your login session secure, remembering your preferences so you do not have to reconfigure your settings every time, and helping our technical team identify which parts of the platform need improvement. Nothing more than that.
The aspect most commonly misunderstood by players is "data sharing with payment providers". When you make a deposit of RM100 via DuitNow, mbi23 needs to communicate with the DuitNow provider to confirm that the payment was successful. In this process, the DuitNow provider receives only the minimum information required – the transaction amount and reference number. They do not receive your betting history, the types of games you prefer, or how much you have won. The data shared is minimal and used solely for the purpose of processing your transaction.
Our data retention periods reflect a balance between operational requirements and your right to privacy. Financial transaction records are kept for 7 years not by choice – it is the minimum requirement under Malaysian tax and anti-money laundering laws. Once that period expires, the records are securely deleted. Other data, such as customer support communication logs, is retained for only 3 years – sufficient for reference in the event of a dispute, but not so long as to become an unnecessary privacy burden.
We want to be absolutely clear that mbi23 has never sold and will never sell our players' personal data to any party for commercial purposes. This is not merely a policy – it is a core value. The mbi23 business model is built on providing a great entertainment platform for Malaysian players, not on monetising our members' personal data. The trust you place in us is far too valuable to compromise for the sake of short-term advertising revenue.
If at any point you feel uncomfortable about how your data is being used, or you would like to find out more about the specific data we hold on you – please do not hesitate to get in touch. The mbi23 support team is on hand 24 hours a day and is ready to assist with any privacy-related enquiries. Your right to know and control your personal data is one we respect fully, and we are always open to discussing these matters.
This Privacy Policy is to be read alongside Terms & Conditions and Responsible Gaming Policy mbi23, which forms part of our comprehensive consumer protection framework. Together, these three documents outline mbi23's commitment to Malaysian players.
Responsible Gaming: The mbi23 platform is for adult entertainment only and is strictly for individuals aged 18 and above. Please do not bet with money you cannot afford to lose. If you or someone you know is struggling with a gambling problem, please contact Talian Kasih 15999 or visit the website Responsible Gaming us to access free and confidential professional support.
Knowing how mbi23 safeguards your privacy means you can play on our platform with greater peace of mind and confidence. Join over 280,000 Malaysian players who trust mbi23.
Data protected by 256-bit SSL · PDPA 2010 Compliant · 24/7 Privacy Support in BM