Official mbi23 Documents
Updated: January 2026

Privacy Policy mbi23 – Malaysian Member Personal Data Protection

Mbi23 takes the privacy of every member seriously. This policy clearly explains how we collect, use, store and protect your personal data — all in accordance with the highest security standards for players in Malaysia.

SSL
256-bit Encryption
All data protected to banking-grade standards
0
Data Sold to Third Parties
We never sell member data
24/7
Security Monitoring
Active threat monitoring system operating around the clock
PDPA
Local Compliance
Compliant with the Personal Data Protection Act

Mbi23's Privacy Commitment to Malaysian Members

Six core principles that guide how mbi23 manages your personal data

Bank-Grade Data Encryption

All personal data and financial transactions transmitted to and from the mbi23 platform are protected with 256-bit SSL encryption — the same standard used by leading Malaysian banking institutions such as Maybank and CIMB. Your data is never transmitted unprotected.

No Sale of Data to Third Parties

Mbi23 has never and will never sell, rent, or transfer member personal data to any third party for marketing or commercial purposes. Your data belongs to you, and we retain it solely for legitimate platform operations.

Full Control in Members' Hands

Every mbi23 member has the full right to access, amend, download and delete their personal data at any time. Data rights requests can be submitted through account settings or by contacting our customer support team directly.

Secure Data Storage

Mbi23 members' personal data is stored on servers equipped with multi-layered firewalls, strict access controls and encrypted backup systems. Access to member data is restricted solely to mbi23 staff who require it to perform their duties.

Data Breach Notification

In the event of any data security breach involving members' personal information, mbi23 is committed to notifying affected members within the timeframe required by law and industry standards, along with details of the remedial steps taken.

Malaysian Legal Compliance

Mbi23's Privacy Policy is built in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). We continuously monitor developments in Malaysian data protection law and update our policy as needed to ensure ongoing compliance.

Your Privacy is mbi23's Number One Priority

Your personal data is not a source of revenue for us — it is a responsibility we protect to the best of our ability.

Note: This Privacy Policy forms part of Terms & Conditions mbi23. By registering for or using the mbi23 platform, you agree to this policy in full. If you have any questions, contact us at support@mbi23.best.

1

Introduction & Scope of the Privacy Policy

This Privacy Policy describes the personal data collection, use, storage and protection practices carried out by mbi23 ("we", "the mbi23 platform") through the website mbi23.best. This Policy applies to all users of the mbi23 platform, including unregistered visitors, registered members and former members whose accounts have been closed.

Mbi23 operates as a digital entertainment platform offering Sports Betting, live casino games, online poker and virtual sports for players in Malaysia. In providing these services, we collect certain personal data necessary to keep the platform running safely, efficiently and in accordance with applicable legal requirements.

We are fully committed to protecting your privacy and complying with all applicable data protection laws in Malaysia, including the Personal Data Protection Act 2010 (PDPA). Please read this policy carefully to understand your rights and how we handle your personal data.

Summary: This policy explains what data we collect, why we collect it and how we protect it. Your privacy is a responsibility we take seriously at mbi23.
2

Types of Personal Data Collected

Mbi23 only collects personal data that is strictly necessary to provide the platform's services. The categories of data we collect are as follows:

Data Category Specific Examples Collection Methods
Identity Data Full name, MyKad/passport number, date of birth, gender Registration form & KYC process
Contact Data Malaysian phone number, email address, residential address Registration form & account settings
Financial Data E-wallet details (TNG, GrabPay, DuitNow), deposit/withdrawal records Financial transactions on the platform
Activity Data Betting records, selected sports, games played, session duration Automatic platform usage
Technical Data IP address, device type, operating system, web browser, access logs The platform system automatically
Communication Data Live chat records, support emails, feedback submitted Interactions with the support team

We do not collect sensitive data such as medical information, religious beliefs or political affiliations. All data is collected lawfully through voluntary member registration or automatically through platform usage.

Data Minimisation Principle: mbi23 only collects data that is strictly necessary for the stated purposes. We do not collect excessive or irrelevant data beyond what is required for platform operations.
3

Purposes for Collecting Personal Data

Mbi23 collects and processes your personal data for the following legitimate purposes:

  • Account Management: To register, verify and manage your member account on the mbi23 platform.
  • Service Delivery: To allow you to access all platform features, including Sports Betting, Live Casino games, poker, and virtual sports.
  • Payment Processing: To process deposits via DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay and FPX, as well as withdrawals of winnings to your account.
  • Identity Verification (KYC): To comply with anti-money laundering (AML) requirements and to verify that members meet the age and residency eligibility criteria.
  • Security & Fraud Prevention: To detect and prevent fraudulent activity, money laundering and platform abuse.
  • Customer Support: To provide accurate and personalised assistance when you contact the mbi23 support team.
  • Service Communications: To send important account-related notifications, transaction updates, terms amendments, and security information.
  • Responsible Gaming: To monitor gaming patterns and identify members who may benefit from responsible gambling support.
  • Platform Enhancements: To analyse platform usage for the purpose of improving features and the overall user experience.
  • Legal Compliance: To fulfil legal obligations, regulations and directives issued by the relevant authorities.
4

Data Use & Processing

Mbi23 processes your personal data on the following lawful bases:

  • Consent: For marketing communications and other optional purposes that require your express consent.
  • Contract Performance: To fulfil our obligations to you as an mbi23 member under the agreed Terms & Conditions.
  • Legal Obligations: To comply with Malaysian legal requirements applicable to our operations.
  • Legitimate Interest: For platform security, fraud prevention and service improvements that benefit all members.

Mbi23 does not make automated decisions that have a significant impact on members without appropriate human oversight. All major decisions relating to a member's account involve review by authorised mbi23 staff.

Marketing Communications: mbi23 only sends marketing communications about promotions, bonuses and new features to members who have opted in to receive them. You can unsubscribe at any time through your account settings or by clicking the unsubscribe link in our emails.
5

Data Sharing with Third Parties

Mbi23 does not sell, rent or transfer members' personal data to third parties for their own marketing purposes under any circumstances. Your personal data may be shared with a limited number of third parties only in the following situations:

  • Technology Service Providers: Companies that help us operate the platform, including cloud service providers, payment systems and security software providers. All such providers are bound by strict confidentiality agreements and are only permitted to process data for the purposes we direct.
  • Payment Processors: Entities that process your financial transactions include the DuitNow payment gateway, e-wallet platforms Touch 'n Go, GrabPay, Boost, and ShopeePay, as well as FPX for Maybank2u and CIMB Clicks. Data shared is limited to the minimum required to process each transaction.
  • Legal Compliance: Where required by law, court order, or a lawful authority in Malaysia to disclose specific information in the context of a legally permitted investigation.
  • Protection of Vital Interests: In emergency situations involving a threat to an individual's physical safety.

In all permitted data-sharing situations, mbi23 ensures that only the minimum necessary data is shared, and that all data recipients are bound by appropriate data protection obligations.

6

Data Security Measures

Mbi23 continually invests in security technologies and procedures to protect member personal data from unauthorised access, disclosure, alteration, or destruction. The key security measures we have implemented are:

  • 256-Bit SSL Encryption: All communications between your browser and the mbi23 platform are encrypted using 256-bit SSL standards — the same security standard used by Maybank, CIMB, and other leading Malaysian banking institutions.
  • Stored Data Encryption: Sensitive personal data stored in the mbi23 database is encrypted at rest using industry-standard encryption.
  • Multi-Layer Firewall: mbi23's IT infrastructure is protected by a multi-layered firewall system that automatically monitors and blocks malicious traffic.
  • Strict Access Controls: Access to members' personal data is strictly limited to mbi23 staff who require it to carry out their legitimate duties, based on the principle of least privilege.
  • Two-Factor Authentication: mbi23's internal systems containing member data require two-factor authentication for staff access, adding an additional layer of protection.
  • Regular Security Audits: mbi23 conducts regular security audits by independent third parties to identify and address any vulnerabilities in our systems.
  • 24/7 Monitoring: A cybersecurity threat monitoring system operates around the clock to detect and respond to any suspicious activity in real time.
Shared Responsibility: While mbi23 takes all reasonable steps to protect your data, account security is also your responsibility. Please use a strong password, do not share your login credentials, and contact us immediately if you suspect any unauthorised activity on your mbi23 account.
7

Data Retention Period

Mbi23 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected or to comply with applicable legal requirements. Our general data retention guidelines are as follows:

  • Active Account Data: For as long as your account remains active on mbi23, your complete account data is retained to ensure uninterrupted use of the platform.
  • Closed Account Data: Following account closure, core member data is retained for seven years for AML legal compliance purposes and financial record-keeping requirements as prescribed by Malaysian law.
  • Transaction Records: All financial transaction records are retained for seven years in accordance with the requirements of the Companies Act and applicable tax legislation.
  • Communication Logs: Customer support communication records are retained for two years for service quality and dispute resolution purposes.
  • Technical Logs: System access logs and technical data are retained for 90 days for security and technical troubleshooting purposes.

Once the applicable retention period expires, personal data will be securely deleted or anonymised using procedures that ensure the data can no longer be linked back to the individual concerned.

8

Member Rights Regarding Personal Data

As an mbi23 member, you have the following rights regarding your personal data, in accordance with the Malaysian Personal Data Protection Act 2010 (PDPA):

Right of Access

You have the right to obtain a copy of the personal data we hold about you. Access requests can be submitted via your account settings or by emailing support@mbi23.best, and we will process your request within 14 business days.

Right to Rectification

If the personal data we hold about you is inaccurate or out of date, you have the right to request a correction. Most personal information can be updated directly through your mbi23 account settings without needing to contact support.

Right to Erasure

You may request the deletion of your personal data under certain circumstances, such as when the data is no longer required for the purpose for which it was originally collected. Please note that this right is subject to legal retention obligations that may override a deletion request.

Right to Data Portability

You have the right to receive the personal data you have provided to mbi23 in a structured, machine-readable format. Data portability requests are processed within 30 business days and delivered to your registered email address.

Right to Object

You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on our legitimate interests in certain circumstances, and mbi23 will give your objection full and serious consideration.

Right to Restrict Processing

In certain circumstances, such as when you are disputing the accuracy of your data or contesting the deletion of data you may need for legal purposes, you may request a temporary restriction on the processing of your data while the matter is resolved.

To exercise any of the above rights, contact the mbi23 privacy team by email at support@mbi23.best, clearly stating your request. We will respond within three business days to acknowledge receipt and provide an estimated resolution timeline.

9

Cookies, Analytics & Tracking Technologies

Mbi23 uses cookies and similar tracking technologies to enhance your experience on our platform. The types of cookies we use are:

  • Essential Cookies: Required for core platform functions such as login session management and security. These cookies cannot be disabled as they are essential for the platform to operate.
  • Preference Cookies: Stores your preferences such as language selection and display settings to improve your experience in subsequent sessions.
  • Analytics Cookies: Collects usage data in aggregated, anonymised form to help us understand how the mbi23 platform is used and identify areas for improvement.
  • Security Cookies: Helps our systems identify legitimate sessions and detect unauthorised access attempts on member accounts.

You can manage your cookie settings through your web browser settings. However, disabling essential cookies may affect the overall functionality of the mbi23 platform. Analytics and preference cookies can be disabled without impacting core platform functionality.

Analytics Data: All data collected through analytics cookies on mbi23 is aggregated and cannot be used to identify you as a specific individual. This data is used solely for platform improvement purposes.
10

Protection of Children's Data

Mbi23 is a digital entertainment platform intended solely for individuals aged 18 and above. We do not knowingly collect or process personal data from anyone under the age of 18.

If we discover that we have collected data from individuals under the age of 18 without appropriate parental consent verification, we will take immediate steps to delete that data and close the account in question. Parents or guardians who believe their child has registered on mbi23 without permission should contact us immediately at support@mbi23.best so that prompt action can be taken.

Age Verification: mbi23 applies age verification during registration and as part of the KYC process to ensure all members meet the minimum age requirement of 18 years. Child protection is our absolute priority.
11

Amendments to the Privacy Policy

Mbi23 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or technological developments that affect how we handle personal data.

When we make significant changes to this Privacy Policy, we will:

  • Updating the "Last Updated" date at the top of this page.
  • Sending a notification to your registered email address at least seven days before the changes take effect.
  • Displaying a prominent notice on the main mbi23 platform page regarding upcoming changes.
  • In cases of particularly significant changes, we may request your renewed consent before those changes take effect.

We encourage you to review this page periodically and to ensure the email address registered with mbi23 remains active so you do not miss any important privacy-related notifications.

12

Contact Us About Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or how mbi23 handles your personal data, we encourage you to reach out to us through the following channels:

  • Privacy Email: support@mbi23.best — Include "Privacy Inquiry" in your subject line for faster processing.
  • Live Chat: Available 24/7 on the mbi23 platform in Bahasa Melayu — for privacy enquiries that require an immediate response.

Our team is committed to responding to all privacy-related enquiries within three business days. For more complex data rights requests, such as full data access or data deletion requests, processing may take up to 14 business days.

If you are not satisfied with our response to any privacy concern, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia in accordance with the procedures set out under the Personal Data Protection Act 2010.

Effective Date: This Privacy Policy takes effect from January 2026 and supersedes all previous versions in their entirety.
256-bit SSL Encryption
No Data Sales
PDPA Compliance
24/7 BM Support
Control Is in Your Hands

FAQ – mbi23 Privacy Policy

Answers to the most frequently asked questions about how mbi23 protects members' personal data

No. mbi23 never shares your sensitive financial information with any third party for purposes unrelated to processing your own transactions. When you make a deposit via Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay or FPX, the required information is transmitted directly to the relevant payment processor using secure encryption, and mbi23 does not store your full account number or e-wallet password. All transaction data we retain is kept as internal records solely for support and legal compliance purposes.

To submit a Subject Access Request, send an email to support@mbi23.best with the subject line "Personal Data Access Request". Include your full name and registered phone number for identity verification. We will verify your identity before processing the request to ensure the security of your data. Once verification is complete, we will process your request within 14 business days and send a data report in a readable format to your registered email address. There is no charge for this data access request.

After you close your mbi23 account, certain personal data must be retained for a specified period in compliance with Malaysian legal requirements — in particular, financial transaction records must be kept for seven years under AML legislation and financial audit requirements. Data not subject to legal retention requirements will be deleted or anonymised within 90 days of account closure. For details on the specific data that will be retained, please contact our privacy team at support@mbi23.best.

mbi23 only sends marketing communications to members who have given express consent to receive them during registration or via account settings. We do not send spam. Every marketing email we send includes a clearly visible unsubscribe link, and you can opt out of marketing communications at any time within two minutes using that link or through the notification settings in your mbi23 account. Please note that important transactional emails such as deposit confirmations, withdrawal notifications and account security information cannot be unsubscribed from, as they form part of the core service you have signed up for.

In the event of a data security breach involving mbi23 members' personal data, we will respond promptly in accordance with our incident response protocol. Immediate steps include isolating and addressing the source of the breach, assessing its scope and impact, notifying affected members via their registered email within the timeframe required by law, and reporting to the relevant authorities where necessary. We will provide clear information about what happened, what data was involved, the steps taken, and what you can do to protect yourself. mbi23 will also conduct a thorough investigation and implement preventive measures to ensure a similar incident does not occur again.

Documents & Related Pages

Also read the policies and other information related to the use of the mbi23 platform

Play at mbi23 with Complete Peace of Mind

Your personal data is protected to the highest security standards at mbi23. Register for free today and enjoy Sports Betting, Live Casino & Poker in a safe, transparent and responsible environment. A welcome bonus of up to RM 500 awaits new members.

Bahasa Melayu