Privacy Policy mbijackpot — Your Personal Data Protection

1 Information We Collect

Mbijackpot collects various types of information from Members to ensure the platform operates securely, efficiently, and in compliance with applicable legal requirements. We only collect information that is necessary and relevant for the stated purposes.

The categories of information we collect include:

Data Categories	Examples of Information	All Member data access is logged and continuously monitored. Two-factor authentication (2FA) is available for Member accounts to add an extra layer of security against unauthorised access.
Identity Information	Full name, date of birth, MyKad/passport number	KYC verification, fraud prevention
Contact Information	Email address, phone number, residential address	Account communications, transaction confirmations
Financial Information	Bank account number, payment methods, transaction history	Deposit and withdrawal processing
Technical Data	IP address, device type, web browser, login log data	Security, fraud detection
Usage Data	Game history, betting activity, session duration	Service improvements, responsible gaming
Marketing Preferences	Communication preferences, promotional subscriptions	Delivering relevant offers

2 How We Collect Information

Mbijackpot collects your personal data through several channels throughout your interactions with our platform:

• Account Registration: Information you provide when completing the registration form, including your name, email, phone number and date of birth.
• KYC Process: Identity documents and proof of address uploaded during the identity verification process.
• All data communications are protected by the same 128-bit encryption protocol used by leading financial institutions. Information collected when you make a deposit or withdrawal through supported payment methods.
• Platform Usage: Data collected automatically when you use our website or app, including IP address, device type, and usage patterns.
• Communications with Support: Information you share when interacting with our customer support team via Live Chat or email.
• Cookies and Tracking Technologies: Data collected via cookies, pixel tags, and similar technologies for analytics and user experience improvement purposes.

3 Once the retention period has ended, your personal data will be securely deleted or anonymised using industry-standard procedures.

Betting

• Account Management: Creating, verifying and managing your Member account, including secure login processes and identity verification.
• Transaction Processing: Processing deposits, withdrawals and all financial transactions related to your account promptly and accurately.
• Legal Compliance: Meeting legal obligations including KYC requirements, anti-money laundering (AML) compliance and reporting to relevant authorities.
• Platform Security: Detecting and preventing fraudulent activity, unauthorised access, bonus abuse and any violations of our terms of use.
• Service Improvements: Analysing usage patterns to improve game quality, the user interface and the overall platform experience.
• Service Communications: Sending important notifications related to your account, transactions, relevant promotions and policy updates.
• Responsible Gaming: Monitoring betting patterns to identify Members who may require responsible gaming support.

4 Data Sharing with Third Parties

Mbijackpot does not sell, rent, or disclose Members' personal data to third parties for marketing purposes without your explicit consent. However, there are limited circumstances where we may share necessary information with the following parties:

• Payment Service Providers: Information required to process financial transactions is shared with approved and accredited payment providers.
• Game Software Providers: Minimum technical data required to run games and ensure fair play.
• Regulatory Authority: Information required by law or a valid court order, including anti-money laundering agencies.
• Technical Service Providers: Purpose of Data Use
• Independent Audit Body: Information required for security audits and game fairness verification by accredited bodies.

Already a member?

5 Data Storage & Retention Period

Mbijackpot retains your personal data for as long as your account is active or as needed to provide services to you. Following account closure, we may retain certain records for the period required under applicable law.

• Identity & KYC Data: Retained for a minimum of 5 years after account closure, in line with anti-money laundering legal requirements.
• Financial Transaction Records: Retained for 7 years for audit and tax compliance purposes.
• Communication Logs: Retained for 2 years for dispute resolution purposes.
• Technical & System Log Data: Retained for 90 days for security and fraud detection purposes.

Sports

6 Data Security and Protection Measures

The security of your personal data is a responsibility we take extremely seriously. mbijackpot implements a wide range of technical and organisational security measures to protect your data against unauthorised access, disclosure, alteration or destruction:

• SSL/TLS Encryption: Secure & encrypted data storage
• Multi-Layer Firewall: Our server infrastructure is protected by advanced firewalls that continuously monitor and filter network traffic.
• Every piece of data we collect has a clear and legitimate purpose. mbijackpot uses your personal information for the following purposes: We conduct regular penetration testing and vulnerability assessments carried out by independent security experts.
• Internal Access Controls: The principle of least privilege is applied — only staff who genuinely require access to specific data are authorised to do so.
• 24/7 Monitoring: Retention periods vary by data type. Identity and KYC data are retained for a minimum of 5 years after account closure in accordance with anti-money laundering laws, while financial transaction records are kept for 7 years for audit purposes. Communication logs are retained for 2 years. Once the retention period expires, data will be securely deleted or anonymised.
• Secure Data Backup: Data is regularly backed up to separate secure locations to ensure service continuity in the event of a system failure.

7 Cookies and Tracking Technologies

Mbijackpot uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you browse our website.

The types of cookies we use are as follows:

• Essential Cookies: Required for core platform functions such as login session authentication and security. Cannot be disabled.
• Performance Cookies: Collecting information on how you use the platform to help us improve its features and performance.
• Functional Cookies: Storing your preferences such as language selection and display settings for a more personalised experience.
• Analytics Cookies: Helping us understand platform usage patterns through trusted third-party analytics services.

You can manage your cookie settings through your web browser at any time. Please note that disabling certain cookies may affect the functionality or your experience on the mbijackpot platform.

8 Your Rights Regarding Personal Data

As a mbijackpot Member, you have certain rights regarding your personal data under Malaysia's Personal Data Protection Act 2010 (PDPA). We respect and facilitate the exercise of these rights:

A threat monitoring system that operates around the clock to detect and respond to any suspicious activity promptly. 30 days days.

9 International Data Transfers

In some cases, your personal data may be transferred to and processed in countries other than Malaysia, particularly in relation to the technical service providers and cloud infrastructure we use. When such transfers occur, mbijackpot ensures that:

• The recipient country maintains an internationally recognised adequate level of data protection.
• Appropriate data transfer agreements have been implemented with all data recipients outside Malaysia.
• Technical and organisational safeguards equivalent to our standards are applied at all processing locations.
• Data transfers are carried out only when strictly necessary and limited to what is required.

10 Children's Privacy

The mbijackpot platform is strictly for individuals aged 18 and above. We do not knowingly collect personal data from minors. Should we discover that a minor's data has been collected without our knowledge, we will take immediate steps to delete that data and close the associated account.

If you believe a minor has registered an account on our platform, please contact our support team immediately.

11 Changes to the Privacy Policy

Mbijackpot reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. Any material changes will be communicated to you via:

• Notification email to your registered email address at least 14 days before taking effect.
• A prominent notice on our platform's home page.
• Updates the "Last Updated" date at the top of this document.

Your continued use of the mbijackpot platform after the effective date of any amendments constitutes your acceptance of the updated Privacy Policy. If you do not agree with the changes, you have the right to close your account before the effective date.

12 Contact Us Regarding Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please do not hesitate to contact us. Our Data Protection Officer (DPO) team is ready to assist you: