Official Policy Document

Privacy Policy mbi77 – Your Security & Data Protection

Your privacy is our priority. This document transparently explains how mbi77 collects, uses, stores, and protects your personal information as a member of Malaysia's leading online entertainment platform.

Updated: 1 January 2026  |  Malaysia
256-bit
SSL Encryption
100%
Data Not Sold
24/7
Security Monitoring
PDPA
Malaysian Act Compliance
Your data is protected by top-tier security infrastructure that complies with international standards.

Mbi77's Six Pillars of Data Protection

We don't just comply with the law – we build a privacy system that genuinely protects your interests as a member.

End-to-End Encryption

All data transmitted between your device and mbi77 servers is encrypted using 256-bit SSL/TLS protocols. This means your login credentials, banking details, and personal data cannot be read by any third party while in transit.

Secure Data Storage

All member information is stored in data centres equipped with multi-layered physical and digital protection. Our databases are encrypted at the storage level and are only accessible by authorised personnel with mandatory two-factor authentication.

Strict Access Control

The principle of least privilege is enforced across the entire mbi77 organisation. Each employee only has access to the data required for their specific role, and all access is logged and continuously monitored.

Data Not Sold

Mbi77 has never and will never sell, rent, or trade members' personal information to advertisers, data brokers, or any third party for commercial purposes. Your data is used solely to operate and improve the services you use.

Malaysia PDPA Compliance

The mbi77 privacy policy is built in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). We respect your right to access, correct, and request deletion of your personal data at any time through our official channels.

Data Breach Notification

In the event of any security incident affecting your data, mbi77 is committed to notifying affected members within 72 hours of the incident being identified, in line with international best practices in privacy incident management.

Section 1

Information We Collect

Mbi77 collects various types of information from members in order to operate the online entertainment platform safely, fairly, and in accordance with Malaysian legal and compliance requirements. All data collection is conducted transparently and solely for legitimate purposes.

1.1 Information You Provide Directly

When you register an account at mbi77, we collect basic information required to create a valid member profile. This information includes:

  • Identity information: Full name as shown on your Malaysian identity card or passport, date of birth, identity card or passport number.
  • Contact information: Active Malaysian mobile number, valid email address.
  • Financial information: Bank name, Malaysian bank account number and account holder name – required to process deposits and withdrawals.
  • KYC documents: A copy of your identity card or passport (front and back), the three most recent bank statements, and a proof-of-address document such as a utility bill when requested.
  • Account information: Your preferred username and other account settings information that you configure yourself.
1.2 Information Collected Automatically

When you use the mbi77 platform — whether via web browser or mobile app — our systems automatically record certain technical information needed to ensure the platform operates correctly and securely:

  • Device data: Device type, model, operating system, app version and unique device identifier.
  • Network data: IP address, internet service provider (ISP), and general geographic location (state/city) based on IP.
  • Session data: Login and logout times, session duration, in-platform navigation activity, games played and transaction records.
  • Cookie data: Session and persistent cookie files that help us recognise your device and personalise your experience. Refer to Section 4 for more information.
1.3 Information From Third Parties

In certain situations, mbi77 may receive information about you from trusted third-party sources for the purposes of identity verification and AML (anti-money laundering) compliance. These sources include licensed KYC service providers, payment processors registered in Malaysia, and identity verification agencies licensed by Bank Negara Malaysia. All information received from these third-party sources is subject to the same protections as information you provide directly to us.

Important Note: mbi77 does not collect credit or debit card numbers directly. All financial transactions are processed through integrated FPX and DuitNow systems connected to the Malaysian banking network — card data never passes through or is stored on mbi77 servers.
Section 2

How We Use Your Data

Every piece of data we collect has a clear and legitimate purpose. mbi77 does not use your data for any purpose unrelated to operating the platform or fulfilling legal obligations. Below is a detailed breakdown of how your data is used:

Purpose of Use Data Type Legal Basis
Creating & managing member accounts Name, email, phone number, password Contract performance
Deposit & withdrawal processing Bank details, transaction records Contract performance
Identity verification (KYC) IC/passport documents, bank statements Legal obligations
Fraud prevention & AML IP address, activity patterns, transaction records Legal obligations
Customer Support Communication History, Account Records Legitimate interests
Platform improvements Anonymised usage data Legitimate interests
Promotional communications Email, phone number Your Consent
2.1 Marketing & Promotional Communications

Mbi77 may send you information about promotions, new bonuses, special events, and platform updates via email or in-app notifications. You may opt out of marketing communications at any time by using the "unsubscribe" link in the relevant email or through the notification settings in your account. Please note that even if you opt out of marketing emails, you will continue to receive important transactional emails such as deposit confirmations, withdrawal notifications, and account security alerts.

mbi77 Guarantee: Your data will not be used to build advertising profiles sold to external advertisers, will not be used to set different prices for the same user, and will not be used to make automated decisions that affect your rights without human involvement.
Section 3

Information Sharing

Mbi77 takes a highly cautious approach to the sharing of member data. Our core principle is straightforward: we do not share your data unless it is strictly necessary to deliver the service you have requested, or when required by law.

3.1 Trusted Third-Party Service Providers

To operate the mbi77 platform effectively, we work with a select number of third-party service providers. All such providers are bound by strict data processing agreements and are only permitted to use your data for purposes we specify. These providers include:

  • Payment processors: To facilitate FPX, DuitNow, and interbank transfers between Malaysian banks.
  • KYC service provider: To verify the identity of new members in accordance with compliance requirements.
  • Cloud infrastructure provider: To securely store and process platform data in data centres that comply with international security standards.
  • Platform analytics provider: To understand platform usage patterns for improvement purposes, using anonymised data.
3.2 Mandatory Legal Disclosure

Mbi77 may be required to disclose member information to authorities when mandated by applicable Malaysian law. Such situations include complying with valid court orders or warrants, cooperating with official investigations into financial crime or fraud, and fulfilling reporting obligations under the Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001 (AMLA).

In all such cases, mbi77 will endeavour to disclose only the minimum information necessary and, where permitted by law, will notify you of such disclosure.

What We Do Not Do: mbi77 does not share, sell, or rent member data to third-party marketing companies, does not share data for targeted advertising on external platforms, and does not disclose members' financial details to any party other than those directly involved in processing your transactions.
Section 4

Cookies & Tracking Technologies

Like most modern online platforms, mbi77 uses cookies and similar tracking technologies to ensure the platform functions properly, enhance security, and personalise your experience.

4.1 Types of Cookies We Use
  • Session Cookies: Temporary cookies that are automatically deleted when you close your browser. They are used to maintain your login session during an active session and ensure account security.
  • Persistent Cookies: Cookies that remain on your device for a set period. They help us recognise your device when you return to the platform, and save your language preferences and display settings.
  • Security Cookies: Used exclusively to detect and prevent fraudulent activity such as suspicious login attempts and CSRF attacks.
  • Analytics Cookies: Collects anonymised usage data to help us understand how members use the platform for continuous improvement purposes.
4.2 Managing Your Cookies

You can manage or delete cookies at any time through your browser settings. Please note, however, that disabling certain cookies — particularly session and security cookies — may affect the functionality of the mbi77 platform and prevent you from logging in or using certain features. Analytics and preference cookies can be disabled without affecting core platform functionality.

Tip: The mbi77 mobile app uses session tracking mechanisms that differ from web browser cookies. You can manage tracking permissions through your device's privacy settings at any time.
Section 5

Data Security

Mbi77 invests seriously in security infrastructure to ensure your data is always protected. Our approach to data security is comprehensive — covering technical, procedural, and physical aspects.

5.1 Technical Security Measures
  • 256-bit SSL/TLS Encryption: All communications between your device and mbi77 servers are encrypted using industry-standard security protocols.
  • Database Encryption: Sensitive data in the database is stored in encrypted form using the AES-256 encryption algorithm.
  • Two-factor authentication (2FA): We support and encourage the use of 2FA on all member accounts to add an extra layer of protection.
  • Real-time threat monitoring: Our intrusion detection system (IDS) operates 24 hours a day, 7 days a week to identify and respond to potential security threats.
  • Regular Penetration Testing: Third-party security experts conduct regular penetration testing to identify and remediate vulnerabilities before they can be exploited.
5.2 Shared Responsibility

While mbi77 takes all reasonable steps to protect your data, the security of your account also depends on your own actions. We encourage you to always use a strong and unique password for your mbi77 account, enable two-factor authentication, ensure the registered email and phone number are your own, and never share your login credentials with anyone. If you suspect your account has been compromised, please contact the mbi77 support team immediately.

Section 6

Your Privacy Rights

As an mbi77 member, you hold several important rights regarding your personal information under Malaysia's Personal Data Protection Act 2010 (PDPA). mbi77 is committed to respecting and facilitating the exercise of these rights.

Right of Access

You have the right to request a copy of all personal information we hold about you in a readily readable format.

Right to Rectification

If your information is inaccurate or incomplete, you have the right to request that we correct it within a reasonable timeframe.

Right to Erasure

Under certain circumstances, you may request the deletion of your personal data, subject to legally mandated record-keeping obligations.

Right to Object

You have the right to object to the processing of your data for direct marketing purposes at any time, without needing to provide any reason.

Right to Data Portability

You may request your personal data in a structured, machine-readable format for transfer to another service provider.

Right to Restrict Processing

In certain situations, you may request that we restrict the processing of your data while a dispute or review is in progress.

To exercise any of the above rights, please contact the mbi77 support team via live chat within the platform or by email at [email protected]. We will process your request within 30 business days. Some requests may require additional identity verification before processing.
Section 7

Data Retention Period

Mbi77 does not retain your data longer than is necessary for the stated purposes or as required by law. Retention periods vary according to the type of data and applicable compliance requirements.

Data Category Retention Period Reason
Active account information For the Duration of the Active Account Service requirements
Financial Transaction Records 7 years after transaction AMLA & tax obligations
KYC Documents 5 years after account closure Compliance requirements
Support communication logs 3 years Service References
Security & IP logs 12 months Fraud prevention
Marketing data (with consent) Until Consent Is Withdrawn Consent-based
Anonymised analytics data 36 months Platform improvements

When the retention period expires, data will be securely deleted using information security-compliant data erasure methods, or converted into anonymised form that can no longer be associated with you. The deletion process is carried out automatically by our systems on a scheduled basis.

Section 8

Privacy Policy Changes

Mbi77 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or improvements to how we operate the platform. We are committed to being transparent about any changes made.

When we make material changes to this Privacy Policy, we will notify you via a prominent notice on the platform's main page or by email to your registered address at least 14 days before the changes take effect. The "Updated" date at the top of this document will always reflect the latest version.

Continued use of the mbi77 platform after any changes take effect will be considered acceptance of the updated Privacy Policy. If you do not agree with any changes, you have the right to close your account and request deletion of your data in accordance with the procedure set out in Section 6.

Recommendation: We encourage you to review this Privacy Policy periodically. You may bookmark this page for easy access at any time.
Section 9

Contact Us

If you have any questions, concerns or complaints regarding this Privacy Policy or how mbi77 handles your personal information, we encourage you to contact us directly. Our data privacy team is ready to assist you.

Live Chat
24/7 live support within the mbi77 platform
Fastest
Official Email
24-Hour Response
Telegram
Official mbi77 Support Channels
Active 24/7

We aim to respond to all privacy-related enquiries within 3 business days. For more complex complaints or formal data rights requests, processing may take up to 30 business days in accordance with Malaysia's PDPA requirements.

Safe & Trusted Platform

Join mbi77 with Complete Confidence

With a transparent privacy policy and top-tier security infrastructure, you can enjoy your online entertainment experience at mbi77 with complete peace of mind. Your data is always protected.

PDPA Compliance
256-bit SSL Encryption
Data Not Sold
24/7 Support
Bahasa Melayu