1 Introduction
mbi7 ("we", "us", "our", "the Platform") operates the online gaming and sports betting platform accessible at mbi7.cam. We take the privacy and security of your personal data seriously. This Privacy Policy ("Policy") sets out, in clear and accessible terms, the data practices we follow in connection with your use of the mbi7 Platform.
This Policy applies to all users of mbi7, including registered account holders and visitors to the Platform. It covers all personal data collected, processed, stored, and transferred by mbi7 in the course of providing its services.
By registering an account, using any mbi7 service, or otherwise accessing the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein. If you do not agree to this Policy, you must not use the Platform.
This Policy should be read alongside our Terms & Conditions, which govern your contractual relationship with mbi7. In the event of any conflict between this Policy and the Terms & Conditions on a privacy-related matter, this Policy shall prevail.
2 Definitions
The following definitions apply throughout this Privacy Policy:
| Term | Meaning |
|---|---|
| Personal Data | Any information that identifies or could reasonably be used to identify a living individual, including name, email address, identification number, IP address, and transaction history. |
| Data Controller | mbi7, the entity that determines the purposes and means of processing your personal data. |
| Data Processor | Any third party engaged by mbi7 to process personal data on its behalf, including payment processors and identity verification providers. |
| Processing | Any operation performed on personal data, including collection, recording, storage, retrieval, use, disclosure, transmission, and deletion. |
| Consent | A freely given, specific, informed, and unambiguous indication of your agreement to the processing of your personal data for a stated purpose. |
| KYC Data | Identity and address verification documents submitted as part of the Know Your Customer process, including MyKad, Passport, and utility bills. |
| Cookies | Small text files stored on your device by the Platform to support functionality, analytics, and personalisation. |
| User | Any individual who accesses, browses, or holds a registered account on the mbi7 Platform. |
3 Personal Data We Collect
mbi7 collects personal data that is necessary to provide our services, comply with legal obligations, and improve the user experience. We do not collect data beyond what is reasonably required for these purposes. The categories of personal data we collect include:
3.1 Identity & Contact Data
- Full legal name as it appears on your government-issued identification document
- Date of birth (used to verify the mandatory 21+ age requirement)
- Malaysian identification number (MyKad number) or Passport number for non-citizens
- Residential address, including postcode and city (e.g., Kuala Lumpur, Petaling Jaya, Johor Bahru, Penang, Shah Alam)
- Email address and mobile phone number
3.2 Financial & Transaction Data
- Deposit and withdrawal transaction records, including amounts in MYR and timestamps
- Payment method details (e.g., bank account name linked to Maybank2u, CIMB Clicks, Public Bank, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, or FPX)
- Cryptocurrency wallet addresses where USDT or BTC transactions are conducted
- Bonus and promotion redemption history
3.3 Gaming & Betting Activity Data
- Game session records, including stakes placed, game titles accessed, and session duration
- Sports bet history, including market selections, odds accepted, and settlement outcomes
- Win/loss records and cumulative wagering statistics
- Responsible gambling tool usage, including deposit limits set and self-exclusion history
3.4 Technical & Device Data
- IP address and approximate geographic location derived therefrom
- Device type, operating system, browser type, and screen resolution
- Session timestamps, login history, and Platform navigation data
- Error logs and performance data used for platform diagnostics
3.5 Communications Data
- Records of live chat, email, and support ticket correspondence with the mbi7 support team
- Survey responses, feedback, and complaint records
- Marketing preference records, including opt-in and opt-out status
What we do not collect: mbi7 does not collect full payment card numbers, CVV codes, or banking passwords. All financial authentication is handled directly by your payment provider using their own secure systems. We receive only transaction confirmation references.
4 How We Collect Your Data
mbi7 collects personal data through the following channels:
- Direct submission: Information you provide when registering an account, completing KYC verification, contacting support, or responding to surveys.
- Automated technical collection: Data collected automatically when you access the Platform, including IP addresses, device identifiers, and session activity logs collected via server logs and cookies.
- Transaction processing: Financial data received from payment processors and banking partners when you deposit or withdraw funds using methods such as DuitNow, FPX, Maybank2u, or Touch 'n Go eWallet.
- Identity verification providers: Where mbi7 engages a third-party KYC service to verify your identity against government databases or document authentication services.
- Fraud prevention and AML systems: Data received from third-party risk-scoring tools used to detect unusual account activity or potential financial crime.
5 Legal Basis for Processing
mbi7 processes your personal data on the following legal grounds, as appropriate to each processing activity:
| Legal Basis | Examples of Processing |
|---|---|
| Contractual Necessity | Processing required to perform the contract with you — account creation, deposit and withdrawal processing, bonus management, game session recording, and customer support. |
| Legal Obligation | KYC identity verification, age verification (21+ compliance), anti-money laundering checks, regulatory reporting, and transaction record-keeping required by applicable law. |
| Legitimate Interests | Fraud detection and prevention, platform security, improving the Platform based on usage analytics, and responsible gambling risk assessments — where these interests are not overridden by your rights. |
| Consent | Sending you promotional emails, SMS marketing, or personalised bonus offers. You may withdraw consent at any time without affecting other processing activities. |
6 How We Use Your Personal Data
mbi7 uses your personal data for the following purposes:
- Account Management: To create, maintain, and administer your mbi7 account, including processing login requests, account settings changes, and security alerts.
- Service Delivery: To enable you to access casino games, live dealer tables, and sports betting markets; to process your stakes and settle bets accurately.
- Payment Processing: To facilitate deposits and withdrawals via your chosen Malaysian payment method, to verify payment source ownership, and to maintain accurate transaction records in MYR.
- Identity & Age Verification: To confirm that you meet the mandatory 21+ age requirement and that your identity matches the payment method registered on your account.
- Fraud Prevention & Platform Security: To detect, investigate, and prevent fraudulent activity, multi-accounting, bonus abuse, and unauthorised access to player accounts.
- Legal & Regulatory Compliance: To fulfil our obligations under applicable anti-money laundering regulations, financial reporting requirements, and any lawful request from a regulatory authority.
- Responsible Gambling: To monitor gaming activity for signs of problem gambling behaviour; to apply deposit limits, session controls, and self-exclusion orders you request; and to contact you if our systems identify elevated risk indicators.
- Customer Support: To respond to your support requests, live chat enquiries, email correspondence, and formal complaints.
- Marketing Communications: Where you have consented, to send you promotional offers, bonus notifications, and relevant updates about the mbi7 Platform. You may opt out at any time.
- Platform Improvement: To analyse aggregated usage patterns, identify technical issues, and develop improvements to the platform experience for Malaysian users.
7 Data Sharing & Disclosure
mbi7 does not sell, rent, or trade your personal data to any third party for their independent marketing or commercial purposes. We may share your data only in the following circumstances:
7.1 Service Providers & Data Processors
We engage trusted third-party processors to assist in delivering our services. These include payment gateway operators (for processing DuitNow, FPX, and e-wallet transactions), KYC and identity verification providers, cloud hosting infrastructure providers, fraud detection services, and customer support platform operators. All processors are contractually bound to process data only on our documented instructions and to maintain appropriate security standards.
7.2 Legal & Regulatory Authorities
mbi7 will disclose personal data to law enforcement agencies, regulatory bodies, courts, or government authorities where required to do so by applicable law, court order, or regulatory directive. We will disclose only the minimum information required to satisfy the legal obligation.
7.3 Business Transfers
In the event of a merger, acquisition, restructuring, or sale of mbi7's business or assets, your personal data may be transferred to the acquiring entity as part of the transaction, provided that the acquiring entity assumes the obligations of this Privacy Policy with respect to your data. You will be notified of any such transfer.
7.4 With Your Consent
Where you have explicitly consented to a specific data-sharing arrangement not described above, mbi7 may share your data on that basis. You may withdraw such consent at any time.
No data sales: mbi7 has never sold and will never sell your personal data to data brokers, advertising networks, or any third party for commercial profiling purposes. This is a firm policy commitment and not subject to change by policy amendment.
8 Data Security
mbi7 implements a multi-layered security framework to protect your personal data against unauthorised access, loss, alteration, and disclosure. Our security measures include:
- Encryption in Transit: All data transmitted between your device and the mbi7 Platform is encrypted using 256-bit SSL/TLS encryption. This applies to all connections regardless of device type or browser.
- Encryption at Rest: Sensitive personal data stored in our databases — including identification numbers, KYC documents, and financial records — is encrypted at rest using AES-256 encryption.
- Access Controls: Access to personal data is restricted on a strict need-to-know basis. Staff access is governed by role-based permissions, multi-factor authentication requirements, and comprehensive access logging.
- Infrastructure Security: The mbi7 Platform is hosted on enterprise-grade cloud infrastructure with automated intrusion detection, DDoS mitigation, and regular penetration testing.
- Incident Response: mbi7 maintains a documented data breach response procedure. In the event of a confirmed breach affecting your personal data, you will be notified as required by applicable law.
Notwithstanding the above, no digital security system is entirely impenetrable. You are responsible for maintaining the security of your own mbi7 account credentials. We strongly recommend enabling two-factor authentication on your account.
9 Data Retention
mbi7 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. Our general retention principles are as follows:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account registration data | Duration of account + 5 years post-closure | Legal/regulatory obligation |
| KYC identity documents | Duration of account + 7 years post-closure | AML regulatory requirement |
| Financial transaction records | 7 years from transaction date | Financial reporting obligation |
| Gaming session records | 3 years from session date | Responsible gambling & dispute resolution |
| Support correspondence | 3 years from last interaction | Contractual & operational |
| Marketing consent records | 5 years from consent or last interaction | Evidence of consent |
| Technical/device logs | 12 months | Security and platform diagnostics |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be linked to any individual. Anonymised, aggregated data may be retained indefinitely for analytical purposes.
10 Cookies & Tracking Technologies
mbi7 uses cookies and similar tracking technologies to support platform functionality, analyse usage patterns, and deliver a personalised experience. The categories of cookies we use are described below:
10.1 Essential Cookies
These cookies are necessary for the Platform to function correctly. They maintain your login session, preserve your language and currency preferences, and support core security features such as CSRF token validation. These cookies cannot be disabled without impairing your ability to use the Platform.
10.2 Performance & Analytics Cookies
These cookies collect anonymised data about how users navigate the Platform — which pages are visited most, how long sessions last, and where users encounter errors. This data helps us improve Platform performance and user experience. Analytics data is aggregated and cannot be used to identify individual users.
10.3 Functional Cookies
Functional cookies remember your preferences — such as preferred game categories, table limit settings, and interface layout choices — so that your mbi7 experience is consistent across sessions.
10.4 Marketing Cookies
Where you have consented, marketing cookies may be used to track your interaction with promotional content and help us deliver relevant bonus offers. You may opt out of marketing cookies at any time by updating your cookie preferences in your account settings, without affecting essential functionality.
You can manage cookie settings through your web browser. Note that disabling essential cookies will prevent you from logging into your mbi7 account and using core platform features.
11 Your Data Rights
As a user of the mbi7 Platform, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days of receiving a verifiable request.
Right of Access
Request a copy of all personal data mbi7 holds about you, in a readable format.
Right to Rectification
Request correction of any inaccurate or incomplete personal data held in your account.
Right to Erasure
Request deletion of your personal data, subject to applicable legal retention obligations.
Right to Restrict Processing
Request that mbi7 restrict how it uses your data in specific circumstances.
Right to Data Portability
Receive your data in a structured, machine-readable format for transfer to another service provider.
Right to Object
Object to processing based on legitimate interests, including direct marketing and profiling.
Marketing Opt-Out
Unsubscribe from all promotional communications at any time via your account settings or by emailing us.
Withdraw Consent
Withdraw any consent you have given to specific processing activities without retroactive effect.
Please note that certain rights are subject to limitations where mbi7 is required to retain data for legal, regulatory, or contractual reasons (for example, AML transaction records cannot be deleted on request). We will clearly explain any limitation when responding to your rights request.
12 Minors & Age Protection
The mbi7 Platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect, process, or retain personal data from any person under the age of 21. Registration on the Platform requires explicit confirmation that the user meets the minimum age requirement.
mbi7 applies automated and manual age verification procedures at account registration. Where our KYC processes identify that a registered account holder is under 21 years of age, the account will be immediately suspended, all funds will be returned to the originating payment method, and the personal data of the minor will be securely deleted from our systems.
If you believe that a person under 21 has registered an account on the mbi7 Platform using false information, please notify us immediately at [email protected].
Parental Controls: If you are a parent or guardian concerned about a minor's access to online gambling platforms, we recommend enabling parental control software on shared devices. mbi7 supports responsible gambling and actively discourages access by anyone under 21.
13 International Data Transfers
mbi7 operates a platform primarily serving users in Malaysia, and our principal data processing activities are conducted within or in close proximity to the Malaysian market. However, certain third-party service providers engaged by mbi7 — including cloud infrastructure operators, KYC verification services, and fraud prevention systems — may process personal data in data centres located outside Malaysia.
Where personal data is transferred internationally, mbi7 ensures that appropriate safeguards are in place to protect that data to a standard equivalent to or exceeding Malaysian data protection requirements. Such safeguards may include contractual data processing agreements, standard contractual clauses, and adequacy assessments of the destination country's data protection framework.
By using the mbi7 Platform, you consent to the transfer of your personal data to processors located outside Malaysia where such transfer is necessary to provide the services described in this Policy.
14 Amendments to This Policy
mbi7 reserves the right to update or amend this Privacy Policy from time to time in response to changes in applicable law, regulatory guidance, or our operational practices. When a material change is made, we will notify registered users via email and/or a notice displayed prominently on the Platform at least fourteen (14) calendar days before the changes take effect.
The current version of this Privacy Policy is always accessible at mbi7.cam/privacy-policy. The "Last Updated" date at the top of this document indicates when the most recent revision was published. We encourage you to review this Policy periodically to stay informed of how mbi7 protects your data.
Your continued use of the Platform after the effective date of any amendment constitutes your acceptance of the updated Policy. If you do not agree to the revised Policy, you must cease using the Platform and may request account closure in accordance with the process described in our Terms & Conditions.
15 Contact Us
If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or need to report a privacy concern, please contact the mbi7 Data Protection team through any of the following channels. All privacy-related requests will be handled with priority and confidentiality.
Average response time:
under 3 minutes.
Available in English, BM & Chinese.