Personal Data Protection

Privacy Policy MB66
Malaysian Player Data Protection

MB66 is fully committed to protecting the privacy and personal data of every player. This document clearly explains what data we collect, why we need it, how we use it, and your rights as an MB66 player in Malaysia.

Updated: 1 January 2026  |  Malay Language Version
A+
Privacy Score
MB66 Protection Standards
256-bit SSL Encryption
No Third-Party Data Sales
Full Data Access Rights
Data Deletion on Request
Malaysia PDPA Compliance
1
Introduction & Scope of Privacy Policy
Who we are and who this policy applies to

MB66 ("we", "our platform") is a digital entertainment platform operating under the domain mb66-app.net. We understand that privacy is a fundamental right, and we take this responsibility seriously. This Privacy Policy explains our data handling practices in clear and thorough detail.

This policy applies to all individuals who interact with the MB66 platform, including website visitors, registered players, promotion participants, and anyone who contacts our support team. It covers all data collected through the MB66 website, mobile app, email communications, and any other interaction channels we provide.

MB66 complies with Malaysia's Personal Data Protection Act 2010 (PDPA), and we hereby uphold your rights under that Act in full, without any limitation.

Important Note: If you are under 18 years of age, you are not permitted to use the MB66 platform and no personal data relating to you should exist in our systems. If you believe that data belonging to a minor has been collected inadvertently, please contact us immediately.


2
Personal Data We Collect
Types of information collected by MB66

MB66 only collects data that is genuinely necessary to deliver our services effectively. We do not collect excessive or irrelevant data beyond what is needed to operate our platform. The following are the categories of data we may collect:

Identity Data
Full name, date of birth, identity card or passport number, gender. Collected during account registration and verification.
Contact Data
Email address, Malaysian phone number, and delivery address (where applicable for physical rewards).
Financial Data
E-wallet details (Touch 'n Go, GrabPay, DuitNow), deposit and withdrawal history in MYR, bank account number for verification purposes.
Gaming Data
Game history, game preferences, betting records, wins and losses, gaming session duration.
Technical Data
IP address, device type, operating system, web browser, access logs, and session data for security and technical troubleshooting purposes.
Communications Data
Records of conversations with our support team, emails sent, feedback provided, and reports submitted to MB66.

MB66's Guarantee: We never sell, rent, or commercialise player personal data to third parties for marketing or any other business purpose. Your data is used solely for the purposes stated in this policy.


3
Data Collection & Processing Purposes
Why MB66 needs your data

MB66 collects and processes your personal data only for legitimate and necessary purposes. Below is a complete table of data processing purposes and the legal bases supporting them:

Purpose of Processing Data Used Legal Basis
Registration & account managementIdentity, contactContract
Processing of MYR deposits & withdrawalsFinancial, identityContract
Identity verification (KYC)Identity, financialLegal
Fraud prevention & securityTechnical, identityLegitimate Interests
Customer supportRelationship, communicationContract
Platform improvementsTechnical, gamingLegitimate Interests
Responsible gamingGaming, financialLegitimate Interests
Marketing communications (with consent)ContactConsent
Legal ComplianceAll related categoriesLegal

We will not process your data for any purposes beyond those listed above without first obtaining your explicit consent. If you have previously consented to marketing communications, you may withdraw that consent at any time through your account settings or by contacting our team.


4
Legal Basis for Processing
The legal basis behind each processing activity

MB66 processes your personal data on the basis of one or more lawful grounds recognised under Malaysia's Personal Data Protection Act 2010 (PDPA):

  • Contract: Processing necessary to fulfil the contract between you and MB66 — including account management, payment processing via Touch 'n Go, GrabPay, DuitNow and other methods, and the provision of gaming services.
  • Legitimate Interests: Processing that is necessary for MB66's legitimate interests, such as fraud prevention, platform security, and service improvement — provided these interests do not override your fundamental rights.
  • Legal Obligations: Processing required to comply with applicable Malaysian laws, including KYC (Know Your Customer) requirements and financial reporting obligations.
  • Consent: For optional processing activities such as marketing communications, we rely on your explicit consent, which may be withdrawn at any time.

5
Sharing Data with Third Parties
When and with whom your data may be shared

MB66 does not sell or transfer your personal data to third parties for marketing or commercial purposes. However, there are limited situations where your data may need to be shared with certain parties:

  • Payment Service Providers: Required transaction information is shared with payment processors such as Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX partner banks to process your deposits and withdrawals.
  • Identity Verification Provider: Minimum identity data required is shared with approved KYC service providers for the purpose of age and identity verification.
  • Game Software Providers: Required game session information is shared with licensed game providers such as Microgaming, Evolution Gaming, and Pragmatic Play for technical purposes only.
  • Relevant Authorities: Data is shared with Malaysian authorities when required by law, court order, or in the course of financial crime investigations.
  • Professional Advisors: In certain circumstances, information may be shared with MB66's legal counsel or accountants, who are bound by strict professional confidentiality obligations.

All third parties that receive your data are bound by strict data processing agreements and are only permitted to use that data for the specific purposes agreed upon with MB66.


6
Data Security Measures
The technical and organisational standards that protect your data

MB66 implements a comprehensive range of technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction:

1
256-bit SSL Encryption

All communications between your browser and MB66's servers are encrypted using 256-bit SSL — the same standard used by Malaysia's leading financial institutions such as Maybank and CIMB.

2
Database Segregation

Financial, identity, and gaming data are stored in separate databases with distinct access controls to minimise risk in the event of a security incident.

3
Internal Access Controls

Only specifically authorised MB66 staff may access players' personal data — and only to the extent necessary to perform their duties. All access is logged and monitored.

4
24/7 Monitoring & Incident Response

MB66's security team monitors our systems around the clock. A clearly defined incident response protocol ensures that any security breach is identified and addressed promptly.

5
Regular Data Backups

Data is regularly backed up to a separate secure location to ensure service continuity and protection against data loss due to technical failure.

Data Breach: In the event of a data breach that affects your rights and freedoms, MB66 is committed to notifying you within 72 hours after we detect it, in line with international data protection best practices.


7
Data Retention Period
How long we retain your data

MB66 does not retain your personal data longer than necessary. Retention periods depend on the type of data and applicable legal requirements:

  • Active Account Data: Retained for as long as your MB66 account remains active, plus 7 years following account closure for legal compliance purposes.
  • Financial Transaction Records: Retained for 7 years in accordance with Malaysian financial regulations governing account and transaction records.
  • Support Communication Logs: Retained for 3 years from the date of communication for reference and service improvement purposes.
  • Technical Data (Access Logs): Retained for 12 months for security and technical troubleshooting purposes.
  • Marketing Data (where applicable): Retained until you withdraw consent or request deletion, plus a 30-day processing period.

When data is no longer required for any legitimate purpose, MB66 will securely delete or anonymise it in accordance with recognised data deletion procedures.


8
Cookie Policy
Use of cookies and tracking technologies on the MB66 platform

The MB66 platform uses cookies and similar technologies to enhance user experience, maintain session security, and understand how our platform is used. The following are the types of cookies we use:

You can manage your cookie settings through your web browser. However, disabling essential cookies may affect your ability to fully access and use the MB66 platform.


9
Your Rights as a Data Subject
Full control over your personal data, in your hands

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and international data protection best practices, you have the following rights regarding your personal data held by MB66:

You have the right to request a copy of all personal data we hold about you. Data access requests can be submitted via your account settings or by emailing our privacy team. MB66 will respond within 30 calendar days.

If your personal data is inaccurate or incomplete, you have the right to request a correction. Most profile information can be updated directly through your MB66 account settings. For changes to sensitive details such as your name or date of birth, supporting documentation may be required.

You have the right to request deletion of your personal data under certain circumstances — for example, when the data is no longer needed for its original purpose, or when you withdraw your consent. This right is subject to any legal data retention requirements that override such requests.

You have the right to object to the processing of your data where it is carried out on the basis of legitimate interests or for direct marketing purposes. Objections to direct marketing will be honoured immediately and without condition. Objections to other forms of processing will be assessed on a case-by-case basis.

You have the right to receive the personal data you have provided to MB66 in a structured, machine-readable format (JSON or CSV) for transfer to another service provider, where processing is based on consent or contract.

Under certain circumstances, you have the right to request that MB66 restrict the processing of your data — for example, while we are investigating the accuracy of your data or reviewing a processing objection you have raised.

To exercise any of the above rights, submit a request to privacy@mb66-app.net by stating the right you wish to exercise and your account information. MB66 will respond within 30 days.


10
International Data Transfers
When your data may be processed outside Malaysia

In the course of our operations, your personal data may need to be processed or stored on servers located outside Malaysia — particularly in the context of international game software providers that MB66 works with. When such transfers occur, MB66 ensures that:

  • The recipient country provides a level of data protection equivalent to that of Malaysia, or
  • Appropriate data transfer agreements have been put in place between MB66 and the data recipients, incorporating sufficient protections for your data, or
  • Recognised exemptions under Malaysia's PDPA apply in the relevant circumstances.

MB66 does not transfer data to countries deemed to lack adequate data protection standards without appropriate contractual safeguards in place.


11
Child Protection
MB66's commitment to the safety of young users

MB66 is a platform exclusively for users aged 18 years and above. We do not knowingly collect, store, or process any personal data from individuals under the age of 18. All registration applicants are required to confirm that they meet this minimum age requirement.

Should we discover that a child's personal data has been collected inadvertently, we will promptly take the following steps:

  • Immediate suspension of the account in question.
  • Permanently delete all related personal data from our systems within 48 hours.
  • Reject all pending financial transactions and refund any deposited funds.
  • Report the incident to the relevant authorities where required.

If you discover that a minor in your care has accessed or registered on MB66, please contact us immediately at privacy@mb66-app.net so that we may take immediate action.


12
Privacy Policy Amendments
How MB66 manages changes to this policy

MB66 reserves the right to amend or update this Privacy Policy at any time to reflect changes in our data practices, updated legal requirements, or new technological developments. When any material changes occur:

  • The "Last Updated" date at the top of this page will be revised accordingly.
  • A notification will be sent to your registered email address at least 14 days before any material changes take effect.
  • A notification will be displayed within the MB66 platform when you log in.

Your continued use of the MB66 platform after any amendments take effect will be considered acceptance of the updated policy. We encourage you to review this page periodically.


13
Contact MB66's Privacy Officer
Official channels for privacy enquiries and complaints

If you have any questions or concerns, or wish to exercise any of your privacy rights, please contact MB66's Data Protection Officer through the following channels:

Official Privacy Email
privacy@mb66-app.net
Response within 30 business days
24/7 Customer Support
Live Chat within the MB66 platform
Response time < 2 minutes
General Support
support@mb66-app.net
General enquiries and technical support
Operating Hours
24 hours a day, 7 days a week
Including Malaysian public holidays

If you are dissatisfied with MB66's response to your privacy complaint, you have the right to contact Department of Personal Data Protection (JPDP) Malaysia as the relevant regulatory authority.

MB66's Privacy Commitment to Malaysian Players

Six pillars of data protection that form the foundation of player trust in MB66.

Bank-Grade Encryption

All data you submit to the MB66 platform is protected with 256-bit SSL encryption — the same standard used by Maybank, CIMB, and Malaysia's leading financial institutions. No third party can intercept your information.

No Data Sales

MB66 has never sold, rented, or commercialised player personal data to any third party for marketing purposes, and never will. Your data belongs to you — it is not a business commodity.

Full Data Control

You have full control over your data — access, edit, delete, or download your personal data at any time. These rights are protected under Malaysia's PDPA and we honour them in full.

Malaysia PDPA Compliance

MB66 operates in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). All our data collection and processing practices have been assessed to ensure full compliance with local legislation.

Simple Marketing Controls

You can opt out of all MB66 marketing communications at any time with a single click — no questions asked, no complicated process. Your preference will take effect within 48 hours.

72-Hour Incident Response

In the event of any security incident affecting your data, MB66 is committed to notifying you within 72 hours — well ahead of the minimum legal requirement.

Your Data Is Safe with MB66

Privacy Protected. Play with Peace of Mind.

MB66 has been building trust among Malaysian players since 2018 through an unwavering commitment to privacy, security, and transparency. Register today and play with full confidence that your data is always protected.

Touch 'n Go eWallet GrabPay DuitNow FPX / Maybank2u Boost ShopeePay
Bahasa Melayu