Privacy Policy mbislot — Your Information Is Safe With Us

1. Introduction & Scope of This Policy

This Privacy Policy ("Policy") describes how mbislot ("we", "Platform") collects, processes, uses, stores and protects your personal information ("Personal Data") when you use our platform, website and mobile applications.

This document is guided by Malaysia's Personal Data Protection Act 2010 (PDPA) and global data protection best practices. By using mbislot services, you agree to the collection and use of data as described in this Policy.

2. Types of Personal Data We Collect

Mbislot collects personal information only when necessary to operate our services safely and effectively. Below are the categories of data we collect and the purposes for which they are collected:

3. How We Use Your Data

Collected data is used exclusively for legitimate purposes related to mbislot platform operations. We do not use your data for purposes outside the scope stated here without obtaining your prior consent.

• Account management — register, verify your identity, process logins, and manage your account settings.
• Financial transaction processing — verify deposits, process withdrawals, and maintain accurate transaction records.
• Platform security — detect and prevent fraud, money laundering, and other suspicious activities.
• Responsible gambling — monitors wagering patterns to identify signs of problem gambling and take appropriate preventive action.
• Service communications — send transaction notifications, security updates, and important account information.
• Platform improvement — analyses usage data (in aggregate, not individual form) to improve the overall user experience.

4. Data Sharing & Disclosure

Mbislot does not sell, rent, or share your personal data with any third party for marketing purposes. However, there are specific situations where data may be shared with selected parties:

• Licensed payment providers — to process deposits and withdrawals. These providers are bound by strict confidentiality agreements.
• KYC service providers — for identity verification purposes as required by financial regulations.
• Relevant authorities — when required by law, court order, or directive from a legitimate regulatory authority.
• Technology partners — cloud and security service providers that help operate the platform, subject to data protection agreements.

5. Cookies, Tracking & Related Technologies

Mbislot uses cookies and similar tracking technologies to ensure the platform functions correctly, enhance session security and understand how players use our platform.

• Session Cookies — required to maintain your login session and ensure the security of your activity on the platform. These cookies are deleted when you close your browser.
• Preference Cookies — saves your preferences such as language and display settings so they do not need to be reconfigured each time you log in.
• Analytics cookies — collects usage data in aggregate form (not individually) to help us understand which parts of the platform are most frequently used.
• Security cookies — used to detect suspicious login attempts and protect your account from unauthorised access.

You can configure your browser to reject cookies, though this may affect certain platform functions. Cookies required for session security cannot be disabled without impacting your ability to log in.

6. Data Retention Period & Deletion

Mbislot retains your personal data for as long as your account remains active and for a defined period after account closure, in accordance with applicable legal and financial regulatory requirements.

• Active account data — retained for as long as your account is active on the mbislot platform.
• Financial transaction records — retained for a minimum of 7 years after a transaction occurs, in accordance with Malaysia's financial regulatory requirements.
• Security Log — retained for 2 years for fraud investigation and security purposes.
• After account closure — personal data no longer required for legal compliance will be deleted or anonymised within 90 days.

7. Your Rights Under This Privacy Policy

As an mbislot player, you have the following rights regarding your personal data. These rights can be exercised at any time by contacting our support team:

8. Data Security Measures

Mbislot continuously invests in security infrastructure to ensure your personal data is protected against unauthorised access, disclosure, alteration or deletion.

• 256-bit SSL Encryption — all data transmitted between your device and our servers is encrypted using the highest industry standards.
• Internal access controls — access to player data is restricted based on the principle of least privilege. Only staff who require access to perform their duties are authorised.
• Continuous Monitoring — automated monitoring systems run around the clock to detect unusual activity and potential security threats.
• Regular penetration testing — independent security experts conduct regular penetration testing to identify and address vulnerabilities before they can be exploited.
• Secure data backup — data is regularly backed up to a separate, secure location to ensure recovery is possible in the event of an emergency.

9. Children's Privacy & Age Restrictions

Mbislot strictly prohibits the use of the platform by individuals under the age of 18. We do not knowingly collect or process personal data of children.

Should we find that a child's personal data has been collected without proper age verification, we will take immediate steps to delete that data and close the account in question. Any known use of the platform by a child should be reported to our support team by the parent or guardian without delay.

10. Contact Us Regarding Privacy

If you have any questions, concerns or requests regarding this Privacy Policy or the handling of your personal data by mbislot, you may reach our dedicated data protection team through the following channels:

• Live chat — the fastest way to get a response. Available 24/7 in the mbislot app and website.
• Privacy email — [email protected] for enquiries related to personal data and privacy rights.

Our team will endeavour to respond to all privacy enquiries within 3 business days. For more complex requests such as data access or data deletion requests, please refer to the response timeframes stated in section 7 above.