Privacy Policy mbijackpot – Your Personal Data Protection

This Privacy Policy is published by mbijackpot ("we", "Platform" or "mbijackpot") and applies to all users who access the mbijackpot website, mobile app, and all services we offer ("Services").

As an online gaming platform operating in Malaysia, we are bound by the Personal Data Protection Act 2010 (PDPA) and relevant privacy laws. We take these obligations seriously and ensure every aspect of your personal data handling complies with the legal provisions set out therein.

By using the mbijackpot platform, you agree to the data collection and usage practices described in this Privacy Policy. If you do not agree with any part of this policy, you may choose not to use our platform. If you have any questions, our team is always ready to assist you.

Mbijackpot only collects data that is strictly necessary to operate our services safely and effectively. The following are the categories of data we collect:

How this data is collected:

• Directly from you — when you register an account, complete your profile, make a deposit or contact customer support.
• Automatically — through cookies, server log files and standard tracking technologies when you use our platform.
• From trusted third parties — such as payment providers to verify transactions, or identity verification agencies for KYC purposes.

Every piece of data we collect has a clear and lawful purpose. mbijackpot does not use your data for any purpose not stated in this policy without first obtaining your consent.

• Account management — enabling you to register, log in, manage your profile and securely access all platform features.
• Transaction processing — processing your deposits and withdrawals accurately and securely through payment providers integrated with our platform.
• Identity verification (KYC) — verifying that all members are real individuals who meet the age and eligibility requirements to use the online gaming platform.
• Security and fraud prevention — detecting and preventing unauthorised access, fraudulent activity, money laundering and violations of the terms of service.
• Customer Support — addressing enquiries, resolving complaints and providing the technical assistance you need.
• Platform improvements — analysing usage patterns to improve the gaming experience, user interface and overall platform performance.
• Service communications — sending important notifications related to your account, security, policy updates and transaction information.
• Legal compliance — fulfilling the reporting and record-keeping obligations prescribed by applicable Malaysian law.

Mbijackpot does not sell, rent or trade your personal data to any third party for their own marketing purposes. However, we may share your information in the following limited circumstances:

• Trusted service providers — companies we engage to help operate the platform, including payment processing (FPX, DuitNow, Touch 'n Go), server hosting, analytics and customer support. All such third parties are bound by strict confidentiality agreements and are only permitted to use your data for the purposes we specify.
• Legal requirements — when required by law, court order or directive from a competent authority such as Bank Negara Malaysia or the Royal Malaysia Police.
• Fraud prevention — sharing information with fraud prevention agencies or financial institutions where there is reasonable suspicion of illegal activity involving your account.
• Business transfer — in the event of a merger, acquisition or sale of platform assets, user data may be transferred as part of the business transaction. You will be notified in advance should this occur.
• With your consent — in any other circumstance, we will obtain your explicit consent before sharing your personal data.

We continuously invest in security infrastructure to keep your personal data protected at all times. Our security measures include:

• 256-bit SSL Encryption — all communications between your browser and mbijackpot's servers are protected with industry-leading encryption, the same standard used by major Malaysian banks.
• Two-factor authentication (2FA) — an additional security layer that ensures only you can access your account, even if your password has been compromised.
• 24/7 Monitoring — an automated threat detection system that monitors for suspicious activity around the clock and takes immediate action when required.
• Restricted access — only authorised mbijackpot staff with a legitimate business need may access users' personal data, and all access is logged for audit purposes.
• Secure storage — sensitive data such as financial information is stored in encrypted databases that are isolated from public-facing systems.
• Regular security testing — we conduct regular penetration tests and security audits to identify and address any vulnerabilities.

Mbijackpot uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions correctly. The following are the types of cookies we use:

• Essential Cookies — required for core platform functions such as maintaining your login session and ensuring security. These cookies cannot be disabled without affecting platform functionality.
• Preference Cookies — remembering your preferences such as language, display settings and gaming preferences to deliver a more personalised experience.
• Analytics Cookies — helping us understand how users interact with the platform, which pages are most popular and where users encounter difficulties. This information is used in aggregate and anonymised form to improve the platform.
• Security Cookies — detecting suspicious activity, preventing fraud and protecting the integrity of user sessions.

You can manage your cookie settings through your web browser. However, disabling certain cookies may affect the functionality of some parts of the mbijackpot platform. For more detailed cookie management, please refer to your web browser's help section.

Under Malaysia's PDPA and our commitment to user privacy, you have the following rights regarding the personal data we hold:

To exercise any of the rights listed above, please contact our data protection team via email at the address provided in the Contact Us section. We will process your request within 14 business days.

Mbijackpot retains your personal data only for as long as necessary to fulfil the purposes stated in this policy, or as required by Malaysian law.

• Active account data — retained for as long as your account remains active on the mbijackpot platform.
• KYC and identity verification data — retained for a minimum of 5 years following account closure, in line with anti-money laundering compliance requirements.
• Financial transaction records — retained for 7 years following each transaction in accordance with Malaysian accounting and tax record-keeping requirements.
• Customer support communication logs — retained for 2 years for quality control and dispute resolution purposes.
• Technical log data — retained for 90 days for security and fraud detection purposes.

Once the retention period expires, your data will be securely deleted or anonymised so that it can no longer be personally linked to you.

The mbijackpot platform is strictly for adult users aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18.

Should we discover that a child's personal data has been collected without our knowledge, we will take immediate action to delete that data and close the associated account. If you become aware that your child has registered an account on our platform, please contact us immediately so we can take the appropriate steps.

Mbijackpot reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements or service improvements. Any material changes will be communicated to you through:

• In-platform notification the next time you log in
• Notification email to your registered address
• Updates the "Last Updated" date at the top of this page

We encourage you to review this Privacy Policy periodically. Continued use of the mbijackpot platform after changes are published indicates your acceptance of the updated policy.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact our Data Protection Officer: