mbi98 Privacy Policy: The Data Behind Your Account
A plain-language account of what mbi98 keeps about you, who inside the company can see it, and how to have it corrected or removed.
What mbi98 Records When You Open an Account
Everything starts with the registration form. You give us the name printed on your identity card, your date of birth, a mobile number and an email address. We add the IP address and the device your first session came from, because that pairing is how we spot a login that does not belong to you. Nothing beyond that is collected at sign-up.
| What we record | Why we need it | How it is handled |
|---|---|---|
| Name and IC number | Proving the account belongs to a real person in Malaysia | Confirmed once, then held against your profile |
| Mobile number | One-time passwords and withdrawal alerts | Used only for account messages |
| Bank or e-wallet account | Sending your withdrawals to the right place | Masked in the app once it is saved |
| Device and IP history | Fraud checks and session security | Pulled up when an account is flagged |
| Gameplay records | Settling bets and tracking bonus turnover | Kept for audit while the account exists |
We do not ask for salary details, employer letters or family information. If anyone claiming to be from mbi98 asks for those, stop the conversation and report it through live chat straight away.
Why We Ask for Your IC Before a Withdrawal
Registration is open, but your first payout is where identity is actually confirmed. mbi98 accepts a National ID Card (NID), a passport or a driving licence. Upload one clear photo in the app or hand it to an agent in live chat and our team reviews it, usually within 24 hours. The check is required before your first withdrawal, not before your first deposit.
What the reviewer looks for
The name has to match the account holder, the document has to be in date, and all four corners must be visible with no glare across the number. Blurred or cropped copies are sent back, which is the usual reason a review runs into a second round.
Copies sit inside the verification record rather than your everyday profile. Once a review closes, support staff can see the outcome of the check without opening the document again.
Payments, Wallets and What the Provider Sees
Money moves through Touch ’n Go eWallet, DuitNow, FPX Online Banking and Bank Transfer. mbi98 never sees your banking password or your e-wallet PIN. What comes back to us is a transaction reference, an amount and a status. That reference is what the payments team pulls up when you ask why a deposit has not landed.
The minimum deposit is RM15, and a withdrawal normally clears in about 29 minutes once approved. The bank or wallet on the other side keeps its own records under its own policy, and we cannot read or change those.
Small Files That Keep Your Session Alive
Three kinds of cookie are used here. A session cookie keeps you logged in while you move between games. A preferences cookie remembers your language and view settings. A measurement cookie tells us which pages load slowly on mobile data so we can fix them.
There is no advertising cookie on this site and no profile built for other companies to bid on. Clearing cookies in your browser logs you out but does not close your account. Blocking them entirely will break login, because the session cookie is how mbi98 knows who you are between page loads.
Where Your Data Travels Inside mbi98
Access is limited by role. Support agents see your contact details and recent chat tickets. The payments team sees deposit and withdrawal records. The fraud team can see the full picture, including device history. Game providers receive a session token and a bet amount, never your name, IC number or bank details.
mbi98 does not sell player data, and we do not pass it to advertising networks. Records go to a regulator or a licensed auditor only when a lawful written request arrives, and each one is logged with the reason it was granted.
How We Protect the Records We Hold
Traffic to mbi98 runs over an encrypted connection, and stored records are encrypted at rest. Staff access needs a named account with two-factor login; shared logins are not permitted anywhere in the company. Permissions are reviewed every quarter so that someone who changes role loses the access they no longer need.
No system is perfect. If a breach ever exposes personal data, mbi98 will notify affected players and the relevant authority within the timeframe the law sets, and we will say plainly what was taken and what to watch for afterwards.
Your Rights Over Your Own Data
You can ask mbi98 for a copy of what we hold, ask us to correct a wrong number or address, withdraw consent for marketing messages, or close the account entirely. Requests go through live chat, which runs 24/7, so there is a written trail for both sides.
- Access: a summary of the records tied to your account.
- Correction: fix a mistyped name, an old phone number or an expired document.
- Marketing opt-out: stop promotional SMS and push notices; account alerts still arrive.
- Closure: end the account and begin the deletion steps described below.
Closing an account does not cancel a pending withdrawal. Settle the balance first, then ask for closure, or the payment can end up stranded against a closed profile.
When We Erase a Record
Gameplay and payment records stay after closure for as long as the licence requires, because they are the evidence behind settled bets. Identity documents are removed once the account is closed and no dispute is open. Marketing preferences and cookie data go much sooner, usually the moment you opt out.
If you want something removed earlier than the retention rule allows, tell us why in writing through live chat. The team will either action it or explain which obligation blocks it.
Changes You Will Be Told About
When this policy changes, the new version appears on this page with a fresh date at the top. Material changes, such as a new category of data or a new recipient, are also announced inside your account so you see them without hunting for the page.
Continuing to use mbi98 after a change means you accept the updated policy. If you disagree with it, close the account before the change takes effect.
Privacy Questions We Get Asked
Does mbi98 ask for my IC at registration?
No. You register with your name, date of birth, mobile number and email. A National ID Card, passport or driving licence is only needed before your first withdrawal.
Can I play without giving a mobile number?
No. The mobile number carries the one-time password used at login and the alerts sent when a withdrawal is processed, so it is part of the account itself.
Do game providers see my personal details?
They receive a session token and the size of your bet so the round can settle. Your name, IC number and bank details stay inside mbi98.
How do I stop promotional messages?
Ask live chat to switch marketing off, or use the toggle in account settings. Deposit, withdrawal and security notices still reach you, because those are not promotional.
What happens to my data if I close my account?
Betting and payment records stay for the period the licence requires; documents and marketing data are removed. You can still request a copy of whatever remains on file.
Where to Raise a Privacy Question
If something here does not match what you expected, raise it with the team before acting on it. The help centre covers account, payment and verification questions, and live chat runs 24/7 for anything those articles do not answer. Give the agent your username and the section of this page you are asking about, and the query reaches the right team faster.
Still deciding whether to open an account? Read how mbi98 registration works, or head back to the mbi98 home page for the full picture.