This Privacy Policy explains how mbi7 collects, uses, stores, shares, and protects the personal data of players and visitors using the mbi7 platform at mbi7.win. Your privacy matters to us and we are committed to handling your data responsibly.
Last updated: June 2026These cards summarise our key data practices. Please read the full Policy below for complete details.
mbi7 collects registration details, identity documents for KYC, payment information, gameplay records, device and browser data, and communications with our support team. We collect only what is necessary to operate the platform lawfully and securely.
Your data is used to operate your account, process MYR transactions, verify your identity, personalise your experience, prevent fraud, comply with legal obligations, and improve the mbi7 platform. We do not sell your personal data to third parties.
mbi7 shares data only with trusted service providers (KYC processors, payment gateways, game studios) and where required by law. We do not disclose your personal data to unaffiliated third parties for their own marketing purposes.
All data in transit is protected by 256-bit SSL/TLS encryption. Data at rest is stored on secured servers with access controls, encryption, and regular security audits. mbi7 maintains incident response procedures for any suspected data breach.
You have the right to access, correct, or request deletion of your personal data. You may also withdraw consent for certain processing activities. Submit requests to [email protected]. We aim to respond within 30 days.
mbi7 uses essential, functional, and analytics cookies to operate the platform and improve user experience. You can manage cookie preferences in your browser settings. Disabling certain cookies may affect platform functionality.
This Privacy Policy forms part of the binding agreement between you and mbi7. By registering an account with mbi7 or using mbi7.win, you acknowledge that you have read, understood, and agreed to the collection and processing of your personal data as described in this Policy.
1.1 mbi7 ("mbi7", "the Company", "we", "us", "our") operates the online gaming platform accessible at mbi7.win and associated subdomains and services. We are committed to protecting the privacy and personal data of our players and website visitors in accordance with applicable data protection law and international best practices.
1.2 This Privacy Policy explains what personal data we collect from you, why we collect it, how we use it, who we share it with, how long we keep it, and what rights you have in relation to your data. It applies to all personal data collected through the mbi7 platform, including registration, account activity, customer support interactions, and website browsing.
1.3 This Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, which together form the complete framework governing your relationship with mbi7.
2.1 For the purposes of applicable data protection law, mbi7 is the data controller responsible for the personal data you provide when using the mbi7 platform. As data controller, mbi7 determines the purposes and means of processing your personal data.
2.2 If you have questions about how mbi7 processes your personal data, or wish to exercise any of your data rights, you may contact our designated data privacy contact at [email protected].
When you create an mbi7 account, we collect the personal information you provide, including your full name, date of birth, email address, chosen username, and residential address. This information is necessary to establish and administer your account.
As required by our licensing obligations and anti-money laundering ("AML") procedures, mbi7 collects identity documents when verifying your account. This may include a copy of your Malaysian IC (MyKad), passport, proof of residential address (such as a utility bill or bank statement), and source of funds documentation in certain circumstances. KYC documents are handled with the highest level of confidentiality.
mbi7 collects information about financial transactions conducted through your account, including deposit amounts, withdrawal requests, payment method details (such as FPX reference numbers or e-wallet identifiers), and transaction histories. Full payment card numbers are never stored by mbi7 — these are processed by PCI-DSS compliant payment processors.
We record your gaming activity on the mbi7 platform, including game sessions, bet amounts, game outcomes, and account balance movements. This data is used to operate the platform, resolve disputes, and support responsible gaming monitoring.
When you access mbi7, we automatically collect technical data including your IP address, browser type and version, operating system, device identifiers, time zone, and pages visited. This data assists with fraud prevention, platform optimisation, and security monitoring.
If you contact mbi7 customer support via live chat or email, we retain records of those communications. This allows us to provide consistent service and to resolve ongoing issues effectively.
mbi7 uses the personal data it collects for the following purposes:
mbi7 does not use your personal data for automated decision-making that produces significant legal effects, except as required by AML and fraud prevention systems, where human review is available upon request.
5.1 Contractual Necessity. The majority of personal data processing by mbi7 is necessary for the performance of the contract between you and mbi7 (i.e., the Terms & Conditions). This includes account creation, transaction processing, and customer support.
5.2 Legal Obligation. mbi7 processes certain data (particularly KYC and AML-related data) to comply with applicable legal and regulatory obligations under our international gaming licence.
5.3 Legitimate Interests. mbi7 processes technical and device data for fraud prevention, security monitoring, and platform improvement, based on its legitimate interest in operating a secure and reliable platform.
5.4 Consent. Where mbi7 processes data on the basis of consent (such as for certain marketing communications), you have the right to withdraw that consent at any time by contacting [email protected].
mbi7 does not sell your personal data. We may share your data with the following categories of recipients:
All third-party service providers engaged by mbi7 are bound by data processing agreements that restrict their use of your data to the specific services they provide on our behalf.
7.1 Some of mbi7's service providers are located outside of Malaysia. Where personal data is transferred internationally, mbi7 ensures that appropriate safeguards are in place, including standard contractual clauses or equivalent protections under applicable law.
7.2 By registering with mbi7, you acknowledge that your data may be processed in jurisdictions outside Malaysia that may have different data protection standards. mbi7 takes reasonable steps to ensure your data remains protected regardless of where it is processed.
8.1 mbi7 retains your personal data for as long as your account is active and for a period thereafter as required by law. For most account and transaction records, retention is governed by AML regulations, which typically require retention for a minimum of five (5) years following the end of the customer relationship.
8.2 KYC documents are retained for the legally mandated period. Gaming activity records are retained for the duration of your account and up to five years thereafter.
8.3 If you request account closure, mbi7 will anonymise or delete your personal data beyond the legally required retention period. Data necessary for the investigation of fraud, disputes, or regulatory matters may be retained for longer where required.
9.1 mbi7 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These measures include 256-bit SSL/TLS encryption for all data in transit, server-side encryption for data at rest, access control policies, multi-factor authentication for administrative access, and regular security audits and penetration testing.
9.2 In the event of a personal data breach that poses a risk to your rights, mbi7 will notify affected individuals and relevant authorities in accordance with applicable law.
9.3 You are responsible for maintaining the confidentiality of your mbi7 login credentials. Do not share your username or password with anyone. If you suspect unauthorised access to your account, contact mbi7 support immediately at [email protected].
10.1 mbi7 uses cookies and similar tracking technologies on the mbi7.win platform. Cookies are small text files stored on your device that help us operate the platform, remember your preferences, and understand how the platform is used.
10.2 We use the following categories of cookies:
10.3 You can manage or delete cookies through your browser settings. Note that disabling essential or functional cookies may affect the performance or availability of certain mbi7 features.
Subject to applicable law, you have the following rights in relation to your personal data held by mbi7:
To exercise any of these rights, contact mbi7 at [email protected]. We will respond within 30 days. Identity verification may be required before processing your request.
12.1 The mbi7 platform is strictly intended for adults aged 21 years and above. mbi7 does not knowingly collect personal data from persons under 21 years of age. If mbi7 becomes aware that personal data has been collected from a person under 21, that account will be immediately closed and the associated data deleted or anonymised.
12.2 If you are a parent or guardian and believe your child has provided personal data to mbi7, please contact us immediately at [email protected].
13.1 The mbi7 platform is operated entirely on mbi7.win. mbi7 does not include external links to third-party websites in its core platform. Any third-party services integrated into the platform (such as game studios and payment processors) operate under their own privacy policies, which mbi7 does not control.
13.2 mbi7 is not responsible for the privacy practices of third-party service providers beyond the contractual obligations imposed through our data processing agreements.
14.1 mbi7 may update this Privacy Policy from time to time to reflect changes in law, platform features, or our data practices. The effective date of the current version is displayed at the top of this page.
14.2 Where changes are material, mbi7 will notify registered players by email or in-platform notification before the changes take effect. Continued use of the mbi7 platform following notification constitutes acceptance of the revised Privacy Policy.
If you have any questions, concerns, or requests regarding this Privacy Policy or mbi7's data practices, please contact us:
We take all privacy enquiries seriously and will respond to your request within 30 calendar days.
mbi7 handles your data the right way — secure, transparent, and in compliance with applicable law. Join 850,000+ Malaysian players today.
Create Your mbi7 Account21+ Must be 21 or older. Play responsibly.