Privacy Policy mbislot – Personal Data Protection

Mbislot values the privacy of every user who trusts our platform. We understand that when you register and play at mbislot, you are entrusting us with valuable personal information — a responsibility we take very seriously.

This Privacy Policy is drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international data protection standards. It clearly explains the types of data we collect, the purpose of collection, how we protect it, and the rights you hold over your personal data.

Mbislot acts as the data controller for all personal information collected through our platform. If you have any questions regarding this policy or how we handle your data, our Data Protection Officer team is ready to assist.

Mbislot collects various types of personal data to enable us to provide you with a secure, seamless and personalized service. Below are the categories of data we collect and the purposes for doing so:

We only collect data that is strictly necessary for the stated purposes. The principle of data minimisation guides every data collection decision we make.

The personal data we collect is used solely for legitimate, clearly stated purposes. mbislot will not use your data for any other purpose without obtaining your consent first.

• Verifies your identity during registration and the KYC process to ensure account security.
• Processes deposits, withdrawals and all financial transactions accurately and securely.
• Sends important notifications related to your account, transactions and security updates via email or SMS.
• Monitor account activity to detect and prevent fraud, money laundering, and platform abuse.
• Comply with legal and regulatory obligations, including reporting requirements to the relevant authorities.
• Personalizes your gaming experience based on your preferences and play habits on the platform.
• Improves platform performance and usability based on aggregated usage analytics.
• Manages promotions, bonuses and VIP loyalty offers you are eligible for.
• Fulfills responsible gaming obligations, including monitoring the self-limits you have set.

Mbislot does not sell or rent your personal data to any third party. However, in certain situations we may need to share your data with the following parties for legitimate reasons:

• Payment Service Provider – Required transaction information is shared with registered payment processors such as FPX, DuitNow, and digital wallet providers to process your transactions.
• KYC Service Provider – Identity data is shared with accredited KYC partners for identity verification purposes as required by law.
• Statutory Authority – mbislot will disclose user data to relevant authorities when required by law, court order, or official investigation.
• Technology Service Provider – Technical partners who assist us in operating the platform are bound by strict confidentiality agreements and may only process data according to our instructions.
• Game Provider – Minimal game session information is shared with third-party game providers integrated into the platform to ensure games function correctly.

All third parties we work with are bound by strict data protection agreements. They may only use your data for purposes we specify and are not permitted to use it for any other purpose.

Mbislot invests seriously in cybersecurity infrastructure to ensure your personal data is always protected against unauthorized access, disclosure, alteration or destruction.

• 256-bit SSL encryption protects all data transmitted between your device and mbislot servers.
• Account passwords are stored using a one-way hashing algorithm that cannot be reversed – no one, including mbislot staff, can view your password.
• Mbislot data servers are protected by multi-layered firewalls and an intrusion detection system active 24/7.
• Staff access to user data is restricted to those who genuinely need it, based on the principle of least privilege.
• Security audits and penetration testing are conducted regularly by independent security experts.
• Data backups are performed automatically and periodically to secure locations to ensure service continuity.

Mbislot uses cookies and similar tracking technologies to enhance the user experience, maintain login session security and understand how users interact with our platform.

• Essential Cookies – Required for core platform functions such as login session verification and security. These cookies cannot be disabled.
• Performance Cookies – Collects aggregated and anonymized information about how you use the platform to help us improve our services.
• Functional Cookies – Saves your preferences such as language, time zone, and display settings to deliver a more personalized experience.
• Analytics Cookies – Helps us understand overall platform usage patterns without identifying individual users.

You can manage your cookie settings through your web browser at any time. Please note that disabling certain cookies may affect the functionality and user experience of the mbislot platform.

As a registered mbislot user in Malaysia, you have certain rights regarding your personal data under the Personal Data Protection Act 2010. mbislot fully respects and facilitates the exercise of these rights.

To submit any request relating to the rights above, please contact our Data Protection Officer team via the support email listed in the Contact Us section. We will process your request within 21 business days.

Mbislot retains your personal data for as long as your account is active or as long as necessary to provide services to you. Retention periods are also determined by applicable legal obligations.

• Identity data and KYC records are retained for a minimum of 7 years after account closure, in line with Malaysia's anti-money laundering legal requirements.
• Financial transaction records are retained for 7 years for audit and tax compliance purposes.
• Activity logs and game data are retained for 2 years from the date of the relevant activity.
• Marketing data and communication preferences are deleted within 30 days after you withdraw your consent.
• Technical data such as server logs is automatically deleted after 90 days.

Once the retention period expires, your personal data will be securely deleted or anonymized so it can no longer be linked to you. The deletion process follows industry security standards to ensure data is unrecoverable.

The mbislot platform may contain links to or be integrated with third-party services such as game providers and payment processors. Please note that this privacy policy applies solely to the mbislot platform.

When you use third-party services integrated with our platform, the respective provider's privacy policy applies to data shared with them. mbislot is not responsible for the privacy practices of those third parties, although we select partners who uphold high data protection standards.

If you have any questions, concerns or complaints regarding this Privacy Policy or how we handle your personal data, please contact the mbislot Data Protection Officer through the following channels:

• Email: [email protected] – The Data Protection Officer will respond within 3 business days.
• Through the live support section within the mbislot platform, available 24 hours a day, 7 days a week.
• All privacy-related complaints will be handled in strict confidence and resolved within 21 business days.

If you are not satisfied with our response, you have the right to lodge a complaint with the Malaysia Department of Personal Data Protection (JPDP) or the relevant regulatory body in your country.

Mbislot is committed to resolving every privacy complaint fairly, transparently and within a reasonable timeframe. Your trust is the foundation of our relationship, and we take every concern you raise seriously.