Privacy Policy MB123 – Your Personal Data Protection

1 Introduction

Welcome to the mb123 Privacy Policy page. We understand how important the privacy and security of your personal information is in today's digital age. As a trusted online betting platform in Malaysia, mb123 takes every aspect of our members' data protection seriously.

This Privacy Policy transparently explains how MB123 — operating under the official domain mb123.pro — collecting, processing, storing, and protecting your personal information when you use our platform, whether through our website, mobile app, or any other digital channel we provide.

By registering an account, logging in, or otherwise using MB123 services, you acknowledge that you have read, understood, and agreed to this Privacy Policy. If you do not agree with any part of this policy, we advise you not to use the MB123 platform.

This policy is drafted in accordance with Malaysia Personal Data Protection Act 2010 (PDPA) and internationally recognised data protection standards. We continuously update this policy whenever there are changes in law, technology, or the way we operate.

2 Information Collected

Mb123 collects various types of information depending on how you interact with our platform. The following are the categories of information we collect:

A. Information You Provide Directly:

• Full name as it appears on your official identification document.
• National identification number (MyKad) or passport for identity verification (KYC) purposes.
• An active email address and a Malaysian mobile number.
• Date of birth to verify that you are 18 years of age or older.
• Bank account or e-wallet information (such as account number and account holder name) for deposit and withdrawal purposes.
• Your chosen username and password.

B. Information Collected Automatically:

• Your IP address, device type, operating system, and web browser information.
• General location data based on IP address for regulatory compliance purposes.
• Activity log records including the date, time, and type of action performed on the account.
• Cookie and related tracking technology information — see Section 6 for further details.
• Betting history, deposits, withdrawals, and gaming activity on the platform.

C. Information from Third Parties:

• Identity verification from our trusted KYC service providers.
• Transaction information from payment service providers such as FPX, Maybank2u, CIMB Clicks, Touch 'n Go eWallet, and GrabPay.
• Blacklist records from recognised fraud prevention and anti-money laundering agencies.

3 How We Use Your Data

Mb123 uses your personal information only for legitimate purposes directly related to providing our services. We never use your data for any purpose not stated in this Privacy Policy without your prior consent.

• Account Registration & Management: To create, verify, and maintain your member account on the mb123 platform.
• Transaction Processing: To process deposits, withdrawals, and any financial transactions you carry out on the platform.
• Identity Verification (KYC): To comply with legal requirements relating to identity verification and anti-money laundering prevention.
• Security and Fraud Prevention: To detect and investigate any suspicious activity, fraud, or security breaches that may affect your account.
• Customer Support: To assist you in resolving any issues, queries, or complaints submitted through our support channels.
• Service Communications: To send important notifications regarding your account, transactions, security updates, and changes to the terms of service.
• Platform Enhancements: To analyse usage patterns for product development and overall user experience improvement.
• Legal Compliance: To fulfil obligations under Malaysian law, regulatory directives, or applicable court orders.
• Targeted Marketing: To keep you informed about the latest promotions, bonuses, and offers — only with your consent, and you may withdraw that consent at any time.

4 Sharing Information with Third Parties

Mb123 does not sell, rent, or disclose your personal information to any third party for their own marketing purposes. However, there are specific situations where we may need to share your data with trusted parties:

• Payment Service Providers: Transaction information is shared with FPX, Maybank2u, CIMB Clicks, Hong Leong Connect, Touch 'n Go eWallet, and GrabPay solely to securely process your deposits and withdrawals.
• KYC & Identity Verification Providers: Your identification documents are shared with accredited KYC partners for verification purposes only. They are bound by strict confidentiality agreements.
• Game Providers: Minimal technical data required is shared with third-party game providers integrated with the MB123 platform to ensure a seamless gaming experience.
• Regulatory Authorities & Law Enforcement: mb123 will disclose the required information to authorities when mandated by Malaysian law or by a valid court order.
• Technology Partners: Our cloud services, cybersecurity, and technical infrastructure providers may have limited access to your data solely within the scope of their technical duties.

All third parties working with mb123 are bound by strict data protection agreements and are required to handle your information in accordance with security standards equal to or higher than our own.

5 Data Security

Your data security is mb123's highest priority. We continuously invest in the latest security technologies and procedures to ensure your personal information is always protected against unauthorized access, disclosure, alteration, or destruction.

Technical Security Measures We Implement:

• 256-bit SSL Encryption: All data transmitted between your device and mb123's servers is protected by industry-standard 256-bit SSL encryption — the same technology used by leading banking institutions.
• Data-at-Rest Encryption: Sensitive data such as financial information and KYC documents are encrypted using AES-256 at rest in our database.
• Two-Factor Authentication (2FA): MB123 members are encouraged to enable 2FA for an additional layer of protection against unauthorised access to their accounts.
• 24/7 Security Monitoring: Our cybersecurity team continuously monitors the platform to detect and respond to any threats or suspicious activity.
• Regular Security Testing: We conduct regular penetration testing and security audits carried out by qualified independent third parties.
• Internal Access Controls: Only designated staff with a legitimate business need are granted access to members' personal data, and such access is strictly audited.

6 Cookies and Tracking Technologies

Mb123 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

Types of Cookies We Use:

• Essential Cookies: Required for core platform functions such as login, session management, and security. These cookies cannot be disabled as the platform cannot function without them.
• Preference Cookies: Saves your preferences such as language, display theme, and other personal settings for a more convenient return experience.
• Analytics Cookies: Helps us understand how members use our platform so we can continuously improve the overall user experience. Data collected is aggregated and anonymized.
• Security Cookies: Used to detect suspicious activity, prevent fraud, and ensure the integrity of your login sessions.

You can manage cookie settings through your web browser settings. However, disabling essential cookies may affect the functionality of the MB123 platform. We recommend keeping essential cookies enabled for the best experience.

7 Your Rights Regarding Personal Data

Under the Malaysia Personal Data Protection Act 2010 (PDPA) and MB123's policy, you have the following rights regarding your personal data:

• Right of Access: You have the right to request a copy of the personal data we hold about you. Such requests will be processed within 21 business days.
• Right to Rectification: If your personal data is inaccurate or incomplete, you have the right to request a correction. You may update basic information directly through your account settings.
• Right to Withdraw Consent: You may withdraw consent for data processing for specific purposes such as marketing communications at any time, without affecting the validity of processing carried out prior to withdrawal.
• Right to Erasure: You may request the deletion of your personal data, subject to legal obligations and regulatory requirements that require us to retain certain records for specified periods.
• Right to Object: You have the right to object to the processing of your personal data for specific purposes, including direct marketing.
• Right to Data Portability: You may request your personal data in a structured, machine-readable format for transfer to another service provider, where technically feasible.

To exercise any of the above rights, please contact the mb123 Privacy team via the platform's live chat or our support email. We are committed to processing every request promptly and transparently.

8 Data Retention Period

Mb123 retains your personal data for as long as your account is active or as long as necessary to provide services to you. After account closure, we retain certain records in accordance with applicable legal requirements:

• Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysia's tax and anti-money laundering legal requirements.
• KYC Documents: Retained for 5 years after the business relationship ends in accordance with AMLA (Anti-Money Laundering Act) requirements.
• Account Activity Log: Retained for 3 years for security and investigation purposes if required.
• Customer Support Communications: Retained for 2 years for reference and service improvement purposes.
• Marketing Data: Deleted immediately upon withdrawal of consent for marketing communications.

Once the designated retention period has expired, your personal data will be securely deleted using industry-standard data disposal methods, ensuring no possibility of recovery by unauthorised parties.

9 Changes to the Privacy Policy

Mb123 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, legal requirements, or how we operate. All changes take effect immediately upon the latest version being published on our official website.

When material changes occur, we will notify you via in-platform notifications or your registered email. The "Updated" date at the top of this page indicates when the latest version of this Privacy Policy took effect.

It is your responsibility to review this Privacy Policy periodically. Continued use of the MB123 platform after any changes are posted will be considered your acceptance of the updated policy.

10 Contact Us Regarding Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or how mb123 handles your personal data, we encourage you to reach out to us through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week via the chat icon at the bottom corner of the mb123 platform.
• Privacy Email: Send your enquiry to [email protected] with the subject line "Privacy Enquiry".

We are committed to responding to every privacy-related inquiry within 3 business days. For more complex issues, we will contact you for additional information to process your request accurately.