Mbiwallet Privacy Policy – Your Personal Data Protection

1 Introduction

MBIWallet ("we", "Platform" or "MBIWallet") is committed to protecting the privacy of all users who register and use our online entertainment platform at mbiwallet.app. This Privacy Policy explains in detail how we manage your personal data — from the point of collection through to how it is used and protected.

By using the mbiwallet platform, you confirm that you have read, understood and accepted the privacy practices set out in this document. If you do not agree with any part of this policy, please stop using the platform and contact our support team to close your account.

This policy applies to all mbiwallet service channels, including the official website, mobile app (Android and iOS), and any other platforms we operate under the mbiwallet brand.

2 Data We Collect

MBIWallet only collects data that is strictly necessary to operate the platform safely and effectively. Below are the types of data we collect and their purposes:

We do not collect sensitive data such as health information, political affiliations, or religious beliefs unless required by law. All data collection is carried out transparently and with your knowledge.

3 How We Use Your Data

The data we collect is used solely for legitimate purposes directly related to the operation of the mbiwallet platform. The following are the primary purposes for which your data is used:

• Verifying identity and age: The KYC process ensures that only eligible users (aged 18 and above) can access the platform.
• Processing financial transactions: Bank details are required to process deposits and withdrawals securely and accurately.
• Providing customer support: Communication records help our team understand and resolve issues more efficiently.
• Sending important notifications: Contact information is used to send account notifications, promotions you have opted into, and security updates.
• Detecting and preventing fraud: Technical data and usage patterns help us detect suspicious activity and protect your account.
• Legal compliance: Some data must be retained to meet compliance and reporting obligations to the relevant authorities.
• Improving user experience: Anonymised usage data helps us understand user needs and improve platform features over time.

4 Sharing Information with Third Parties

MBIWallet takes a highly cautious approach when it comes to sharing user data. We does not sell your personal data to any party for marketing or commercial purposes.

Your data may be shared only in the following circumstances:

• Payment service providers: Information required to process deposits and withdrawals is shared with our payment gateway providers, subject to strict confidentiality agreements.
• Regulatory authority: We are required to disclose certain data to the relevant authorities when mandated by law, such as in cases involving financial crime investigations or money laundering.
• Platform technology providers: Some platform functions are managed by our technology partners. They receive only the data necessary to perform their specific functions and are not permitted to use that data for any other purpose.
• Audits and compliance: Independent auditors may have limited access to data required within the scope of their audit, subject to confidentiality agreements.

5 Data Security and Encryption

Protecting your data from unauthorised access is a core responsibility. MBIWallet employs multiple layers of technical and operational security measures:

• 256-bit SSL Encryption: All data transmitted between your device and our servers is protected using industry-grade SSL/TLS encryption.
• Encrypted password storage: Passwords are never stored in plain text — they are processed through hashing using industry-recognised secure algorithms.
• Two-factor authentication (2FA): An additional verification layer is available and recommended for all users to secure account access.
• 24/7 threat monitoring: Our systems are continuously monitored to detect any intrusion attempts or unusual activity.
• Regular security audits: Our platform undergoes independent security assessments to identify and patch any vulnerabilities.
• Internal access controls: Only authorised personnel may access user data, and every access is logged for audit purposes.

While we take all reasonable measures, no system can be guaranteed 100% secure. You also play an important role by keeping your password and devices secure.

6 Cookies and Tracking Technologies

MBIWallet uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you browse our website.

Types of cookies we use:

• Essential Cookies: Required for core platform functions such as login sessions and security. These cookies cannot be disabled.
• Performance Cookies: Collects information on how users interact with the platform to help us improve our services.
• Functional Cookies: Remembers your preferences such as language and display settings to make your experience more comfortable.
• Analytics Cookies: Helps us understand aggregated and anonymised usage patterns without identifying any individual user.

You can manage cookies through your web browser settings. Please note, however, that disabling certain cookies may affect platform functionality.

7 Your Rights as a User

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding the personal data we hold about you:

8 Data Retention Period

MBIWallet retains your personal data for as long as your account is active or as long as necessary to fulfil the purposes outlined in this policy. The following are general data retention guidelines:

• Account and identity data: Retained for the duration of the active account and for a minimum of 7 years after account closure to meet anti-money laundering (AML) compliance requirements.
• Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysian accounting and financial legal requirements.
• Support communication logs: Retained for 2 years from the date of last interaction.
• Technical log data: Retained for 90 days for troubleshooting and security purposes.
• Cookie data: Depends on the type of cookie; session cookies are deleted when the browser is closed, while persistent cookies have a set expiry period.

Once the retention period expires, data will be securely deleted or anonymised using methods that ensure it cannot be recovered or re-identified.

9 Changes to the Privacy Policy

MBIWallet reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or new platform features.

• Users will be notified of any material changes via in-platform notifications or email at least 7 days before the changes take effect.
• The "Updated" date at the top of this document will always reflect the latest version of this policy.
• Continued use of the platform after any changes take effect will be considered acceptance of the revised policy.
• You are encouraged to review this page periodically to stay informed about how we protect your information.

10 Contact Us Regarding Privacy

If you have any questions, concerns, or wish to exercise your rights regarding personal data, we are here to help. Our Data Protection Officer (DPO) team can be reached through the following channels:

• Live Chat: Available 24/7 via the chat icon at the bottom-right corner of the platform.
• Email: [email protected] (for specific privacy and data enquiries)
• FAQ: Visit the page FAQ us for answers to general enquiries.

We are committed to responding to all privacy-related enquiries within 5 business days. For more complex data access or deletion requests, the response period may take up to 14 business days.