Privacy Policy mba66 – Malaysian Player Data Protection

This Privacy Policy is published by mba66, an online casino platform operating at https://mba66.best, and applies to all individuals who access or use our services, including registered members, website visitors, and anyone who interacts with the mba66 platform in any capacity.

Mba66 operates in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). We take data protection responsibilities seriously and ensure that all our data management practices comply with applicable Malaysian law. This policy transparently sets out what we do with your information — nothing more, nothing less.

This policy covers all mba66 channels, including the main website, mobile app (where applicable), and any communications we send you via email, SMS, or WhatsApp. For more information about your general rights and responsibilities, please also refer to Terms & Conditions mba66.

Mba66 collects several categories of personal information depending on how you interact with our platform. Below is a full list of the types of data we may collect:

Mba66 collects your personal information through several different channels. Understanding how this data collection works helps you make more informed choices about how you interact with our platform:

• Account Registration: Information you enter directly when completing the mba66 registration form — including your name, email address, phone number, and password.
• Platform Usage: Usage data is collected automatically when you log in and use the platform — including the games you play, time spent playing, bet amounts, and your transaction history.
• Identity Verification (KYC): When you are required to verify your identity — typically before your first withdrawal or when exceeding certain thresholds — you will be asked to upload an official identification document.
• Financial Transactions: Every deposit and withdrawal processed through Malaysian local payment methods (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, FPX) generates a transaction record that is retained for financial compliance purposes.
• Support Communications: When you reach the mba66 support team via live chat, email, or WhatsApp, those conversations may be recorded for training and quality assurance purposes.
• Cookies & Similar Technologies: mba66 uses cookies and other tracking technologies to keep the platform running smoothly and to understand how players use our platform. Further details on cookies are explained in Section 9.

Mba66 uses collected personal data solely for legitimate purposes directly related to the provision of platform services. Below is a full list of how your data is used:

• Service Provision: Processing account registrations, enabling secure logins, handling deposits and withdrawals, and ensuring all platform functions run smoothly for you.
• Identity Verification: To verify that every mba66 member is a real individual aged 18 or above and to meet the KYC (Know Your Customer) requirements mandated under Malaysian law.
• Fraud Prevention: Detecting and preventing fraudulent activity, money laundering, multiple account registrations, and any other unauthorised activity that could compromise the security of the platform or other members.
• Customer Support: Enabling the mba66 support team to assist you more effectively by accessing your account records and transaction history when you contact us.
• Service Communications: Sending important notifications relating to your account, security updates, or changes to terms and policies that require your attention.
• Marketing (with consent): Sending promotional information, bonus offers, and platform updates to members who have consented to receive marketing communications. You may withdraw this consent at any time.
• Platform Improvements: Analysing aggregated, anonymised usage data to understand usage patterns and improve the overall user experience on the mba66 platform.
• Legal Compliance: Complying with Malaysian legal requirements, including anti-money laundering (AML) reporting obligations, Know Your Customer (KYC) requirements, and any valid court orders.

Mba66 does not sell, rent, or trade members' personal information to any third party. However, there are limited situations where we may need to share certain information with trusted parties for legitimate operational purposes:

• Payment Providers: Required transaction information is shared with approved payment providers such as Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX gateways solely for the purpose of processing your financial transactions. These providers are bound by strict confidentiality agreements.
• Game Providers: Limited game session data may be shared with licensed game providers such as Evolution Gaming, Pragmatic Play, and Ezugi to ensure games function correctly. These providers do not receive your full identity details.
• Technical Service Providers: Technology infrastructure providers — such as cloud computing services, SMS verification providers, and customer support systems — may process certain data as part of their operations, but only to the extent necessary and under strict confidentiality agreements.
• Regulatory Authorities: mba66 is legally required to disclose certain information to the relevant Malaysian authorities when required by a valid court order, legal investigation, or regulatory compliance obligation.

In all of the data-sharing situations described above, mba66 ensures that the receiving party maintains data protection standards equivalent to or higher than our own. Legally binding data processing agreements are signed with all third-party vendors that process personal data belonging to mba66 members.

The security of members' personal data is mba66's top priority. We invest significantly in our security infrastructure and update our security measures on a regular basis to stay ahead of evolving threats.

The technical and organisational security measures we implement include:

• Data Encryption in Transit: All communications between your browser or app and mba66's servers are encrypted using TLS 1.3 protocol with 256-bit SSL certificates that renew automatically.
• Stored Data Encryption: Sensitive data such as passwords (hashed using the bcrypt algorithm), financial information, and KYC documents are encrypted at rest in our database.
• Layered Access Controls: Only authorised mba66 staff with a legitimate operational need may access member data, and only to the extent required for their specific duties. All access is logged and audited on a regular basis.
• Two-Factor Authentication: Two-factor authentication (2FA) is available for all member accounts and is mandatory for all staff accounts with access to user data.
• Regular Security Audits: Independent security audits are conducted by qualified third parties at least once a year to identify and address any vulnerabilities in our systems.
• Certified Data Centre: mba66 member data is stored in data centres that meet high physical and technical security standards, equipped with biometric access controls, redundant cooling systems, and protection against natural disasters.

Mba66 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or longer if required by applicable Malaysian law. Our general principles are as follows:

• Active Account Data: For as long as your mba66 account remains active, all relevant data is retained to allow you to access our services seamlessly and review your transaction and game history.
• Financial Transaction Data: Financial transaction records are retained for a minimum of 7 years from the date of the transaction in accordance with Malaysian financial and tax legislation, even after an account has been closed.
• KYC Documents: Identity verification documents are retained for a minimum of 5 years from the date of verification or account closure, in accordance with Malaysia's anti-money laundering legal requirements.
• After Account Closure: When an account is closed at a member's request, personal data no longer required for legal purposes will be deleted or anonymised within 90 days of the closure date.
• Communication Records: Customer support chat records are retained for 2 years for quality assurance purposes and future reference in the event of a dispute.

Once a retention period has expired and there is no legal requirement to keep the data longer, mba66 will securely delete or anonymise that data using methods that ensure it cannot be recovered.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you as a data subject have certain rights regarding the personal information mba66 holds about you. We fully respect these rights and provide straightforward channels for you to exercise them:

• Right of Access: You have the right to request a copy of the personal information we hold about you. Such requests will be processed within 30 days.
• Right to Rectification: If you find that personal information held about you in mba66's systems is inaccurate or out of date, you have the right to request a correction. Many details can also be updated directly through your account settings.
• Right to Erasure: You may request that we delete your personal data in certain circumstances — for example, when the data is no longer needed for its original purpose or when you withdraw your consent. This right is subject to any applicable legal retention obligations.
• Right to Restrict Processing: In certain circumstances, you have the right to request that we restrict or stop processing your data — for example, while you are disputing the accuracy of that data.
• Right to Withdraw Consent: Where data processing is based on your consent (such as marketing communications), you may withdraw that consent at any time without affecting the lawfulness of any processing carried out prior to withdrawal.
• Right to Lodge a Complaint: If you believe mba66 has violated your privacy rights, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia or the relevant regulatory authority.

To exercise any of the above rights, please contact the mba66 privacy team by email at support@mba66.best with the subject line "Privacy Rights Request – [Request Type]". Include your account number and a copy of your identification document for identity verification. We will respond within 30 days of receiving a complete request.

Mba66 uses cookies and similar tracking technologies to ensure the platform operates properly and to understand how players use our services. Cookies are small text files stored on your device when you visit our website.

You can manage your cookie settings through your web browser settings. Please note that disabling essential cookies may affect the functionality of the mba66 platform. Analytics cookies can be disabled separately without impacting your gaming experience.

Mba66 does not use third-party cookies for advertising or data-selling purposes. Every cookie we use exists solely to support the operational needs of the platform.

Mba66 takes child protection very seriously. Our platform is strictly for individuals aged 18 and above, and we do not knowingly collect or process personal information of anyone under the age of 18.

Should we discover that personal information of a child (an individual under 18 years of age) has been collected without our knowledge, we will take immediate steps to:

• Immediately freezing and closing the account in question.
• Permanently deleting all personal information relating to that individual from our systems.
• Refunding any deposits made (subject to investigation and compliance with applicable laws).

If you become aware that a child has registered or is using the mba66 platform, please contact us immediately at support@mba66.best so we can take the necessary action promptly.

The mba66 platform may contain links to third-party websites or services – for example, game provider pages or payment method information. This Privacy Policy applies solely to the mba66 platform and does not cover the privacy practices of those third-party websites or services.

Mba66 is not responsible for the privacy practices, content, or security of any third-party websites. We encourage you to read the privacy policy of any such site before providing them with personal information. Links to third-party sites are provided for informational convenience only and do not constitute an endorsement or verification by mba66.

Mba66 reserves the right to amend, update, or replace any part of this Privacy Policy from time to time to reflect changes in our data processing practices, legal requirements, or improvements to how we protect your privacy.

For significant amendments that materially affect how we use your data, we will notify you via:

• In-platform notifications on mba66 that will appear upon your next login.
• An email will be sent to the registered address on your account at least 14 days before any amendments take effect.

Your continued use of the mba66 platform after the effective date of any amendment will be considered your acceptance of the updated Privacy Policy. The "Updated" date at the top of this page reflects when the most recent changes to this document were made.

If you have any questions, concerns, or requests relating to mba66's Privacy Policy or how we handle your personal data, please contact our privacy team through the following channels:

• Privacy Email: support@mba66.best – use the subject line "Privacy Enquiry" to ensure your email is directed to the right team. Responses are provided within 72 hours.
• Live Chat: Available on the mba66 platform 24 hours a day, 7 days a week. For privacy rights requests that require formal action, please use the email process to obtain a valid written record.
• WhatsApp: Number available upon logging in to your account for quick privacy-related enquiries.

For formal requests relating to your rights (access, correction, erasure), please use the email channel and include your mba66 account number along with a copy of your identification document for identity verification. All requests will be processed within 30 business days of receiving a complete and valid submission.

Mba66 is committed to handling all privacy-related enquiries seriously, transparently, and within the stipulated timeframe. Your trust in us is something we do not take lightly.