Privacy Policy

This Privacy Policy ("Policy") is issued by MBO99 ("MBO99", "we", "us", "our"), the operator of the online gaming platform accessible at https://mbo99.asia ("Platform"). This Policy governs the collection, use, storage, disclosure, and protection of personal data provided by or collected from individuals ("you", "Member", "User") who access or use the MBO99 Platform.

MBO99 is committed to handling personal data responsibly, lawfully, and transparently. We recognise that Malaysian players who use our Platform — whether from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, or any other part of the country — entrust us with sensitive information, and we take that responsibility seriously.

By accessing the MBO99 Platform or registering an Account, you acknowledge that you have read, understood, and consent to the data practices described in this Policy. If you do not agree to this Policy, you must cease use of the Platform immediately.

The following terms used in this Policy shall have the meanings ascribed below:

• "Personal Data" means any information that identifies or can be used to identify a natural person, directly or indirectly, including but not limited to name, identification number, email address, phone number, and financial information.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, alteration, retrieval, disclosure, transmission, or deletion.
• "Data Controller" means MBO99, being the entity that determines the purposes and means of Processing Personal Data.
• "Data Processor" means any third party that processes Personal Data on behalf of MBO99 pursuant to a written agreement.
• "Cookies" means small text files placed on your device by the Platform to store preference and session information.
• "KYC" means Know Your Customer — the identity and address verification process required to open and maintain an Account.
• "Retention Period" means the duration for which MBO99 retains Personal Data after the purpose for collection has been fulfilled or after Account closure.

MBO99 collects the following categories of Personal Data:

MBO99 collects Personal Data through the following channels:

• Account registration forms — name, contact details, date of birth.
• KYC submission — identity documents and proof of address uploaded by you.
• Payment transactions — details provided when making deposits or requesting withdrawals via Touch 'n Go eWallet, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, Visa, Mastercard, USDT, or other supported channels.
• Support interactions — information you provide when contacting our live chat or email support team.
• Responsible gambling tool usage — deposit limit settings, self-exclusion applications.

• Cookies and similar tracking technologies (see Section 9).
• Server logs — IP address, device identifiers, session data collected automatically when you access the Platform.
• Behavioural analytics tools — aggregated usage patterns to improve Platform performance and user experience.

• Identity verification providers used for KYC processing.
• Payment processors and financial institutions for transaction verification and fraud prevention.
• Fraud detection and anti-money laundering screening services.

MBO99 processes your Personal Data for the following purposes:

• Account Administration: Creating, maintaining, and managing your MBO99 Account, including processing deposits and withdrawals.
• Identity Verification: Conducting KYC checks to confirm your identity, age (21+ requirement), and eligibility to use the Platform.
• Service Delivery: Providing access to games, sports betting, live casino, and other Platform features.
• Promotions & Loyalty: Administering bonus programmes, VIP rewards, and personalised promotional offers where you have consented to receive them.
• Fraud Prevention & Security: Detecting and preventing fraudulent activity, money laundering, and unauthorised Account access.
• Responsible Gambling: Monitoring gameplay patterns to identify signs of problem gambling and applying protective measures where appropriate.
• Legal & Regulatory Compliance: Meeting obligations under applicable anti-money laundering, counter-terrorism financing, and data protection laws.
• Platform Improvement: Analysing usage data to improve Platform performance, fix technical issues, and develop new features.
• Customer Support: Responding to enquiries, resolving disputes, and managing complaints.

MBO99 processes Personal Data on the following legal bases:

• Contractual Necessity: Processing required to perform the contract between MBO99 and you, including Account management and payment processing.
• Legal Obligation: Processing required to comply with applicable laws, including KYC, AML/CFT regulations, and regulatory reporting requirements.
• Legitimate Interests: Processing necessary for MBO99's legitimate business interests, including fraud prevention, Platform security, and responsible gambling monitoring, where these interests are not overridden by your rights.
• Consent: Where required, processing based on your freely given, specific, informed, and unambiguous consent — for example, marketing communications. You may withdraw consent at any time without affecting prior processing.

MBO99 does not sell, rent, or trade your Personal Data to third-party marketers. We may share your data with the following categories of recipients strictly as necessary:

• Payment Processors: To facilitate deposits and withdrawals via Touch 'n Go eWallet, DuitNow, FPX, Maybank, CIMB, and other supported channels.
• KYC / Identity Verification Providers: To verify your identity and age in accordance with our legal obligations.
• Fraud Detection & AML Screening Services: To detect, investigate, and prevent fraudulent activity and financial crime.
• Game Providers & Technology Partners: Solely to the extent necessary to provide game access and Platform functionality; they do not receive more data than is operationally required.
• Regulatory Authorities & Law Enforcement: Where required by applicable law, court order, or regulatory direction.
• Professional Advisers: Including lawyers, auditors, and accountants, on a confidential basis as required.

All third-party Data Processors engaged by MBO99 are bound by data processing agreements that require them to protect Personal Data to standards no less stringent than those described in this Policy.

MBO99 retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account Data: Retained for the duration of the active Account plus a minimum of five (5) years following Account closure, to meet AML/CFT recordkeeping obligations.
• Transaction Records: Retained for a minimum of five (5) years from the date of the transaction.
• KYC Documents: Retained for a minimum of five (5) years from Account closure or the last transaction date, whichever is later.
• Support Communications: Retained for three (3) years from the date of interaction.
• Technical / Log Data: Retained for up to twelve (12) months, unless required for longer in connection with an ongoing investigation.
• Marketing Consent Records: Retained for the period of consent plus three (3) years as evidence of consent.

Upon expiry of the applicable retention period, Personal Data will be securely deleted or anonymised such that it can no longer be attributed to an identifiable individual.

MBO99 uses cookies and similar technologies to enhance your Platform experience and collect usage data. The categories of cookies used are as follows:

• Strictly Necessary Cookies: Required for the Platform to function correctly, including session management and security features. These cannot be disabled without significantly impairing Platform functionality.
• Functional Cookies: Enable the Platform to remember your preferences and settings, such as language selection and display options.
• Analytics Cookies: Collect anonymised data about how visitors interact with the Platform to help us understand usage patterns and improve performance.
• Security Cookies: Support fraud detection mechanisms and account security monitoring.

You may manage cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality or performance of the MBO99 Platform.

MBO99 implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• 256-bit TLS encryption for all data transmitted between your device and MBO99 servers.
• Encrypted storage of sensitive data at rest, including identity documents and financial information.
• Role-based access controls limiting data access to authorised personnel on a strict need-to-know basis.
• Multi-factor authentication required for administrative Platform access.
• Regular security audits and penetration testing conducted by independent specialists.
• Incident response procedures to detect, report, and address Personal Data breaches in a timely manner.

Notwithstanding the above, no method of electronic transmission or storage is completely secure. Members are reminded to maintain the confidentiality of their Account credentials and to contact MBO99 support immediately if they suspect unauthorised Account activity.

Subject to applicable law, you have the following rights in relation to your Personal Data held by MBO99. To exercise any of these rights, please contact our support team via live chat or at [email protected]. We will respond within thirty (30) calendar days.

• Right of Access: You may request a copy of the Personal Data MBO99 holds about you, including information on how it is processed.
• Right to Rectification: You may request correction of any inaccurate or incomplete Personal Data held by MBO99.
• Right to Erasure: You may request deletion of your Personal Data where it is no longer necessary for the purposes collected, subject to our legal retention obligations.
• Right to Restrict Processing: You may request that MBO99 limit the processing of your Personal Data in certain circumstances.
• Right to Data Portability: Where processing is based on your consent or contractual necessity, you may request a structured, commonly used, machine-readable copy of your data.
• Right to Object: You may object to processing based on MBO99's legitimate interests, including direct marketing.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

The MBO99 Platform is strictly intended for persons aged 21 and above. MBO99 does not knowingly collect Personal Data from individuals under the age of 21. If MBO99 becomes aware that Personal Data has been collected from a person under 21 without appropriate parental or guardian consent, we will take prompt steps to delete that data and close the relevant Account.

If you believe that a minor may have accessed the MBO99 Platform or provided their Personal Data without your knowledge, please contact our support team immediately via live chat. For guidance on parental controls and online safety, please refer to our Responsible Gambling page.

In the course of providing its services, MBO99 may transfer your Personal Data to third-party service providers located outside Malaysia. Where such transfers occur, MBO99 takes appropriate safeguards to ensure that your Personal Data is protected to a standard equivalent to that required under applicable Malaysian data protection law. These safeguards may include contractual clauses in agreements with Data Processors and assessments of the adequacy of data protection in the recipient country or territory.

MBO99 reserves the right to update or revise this Privacy Policy at any time. The date of the most recent revision will always be displayed at the top of this page. Where changes are material — for example, a new purpose of processing, a new category of data sharing, or a change to your rights — MBO99 will notify registered Members by email or via a prominent notice on the Platform at least fourteen (14) days before the change takes effect. Your continued use of the Platform after the effective date of any changes constitutes your acceptance of the revised Policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or MBO99's data practices, please contact our team through the following channels:

• Live Chat: Available 24/7 via the MBO99 Platform. Average response time under 2 minutes.
• Email: [email protected] (plain text — not a clickable link). Formal data rights requests should be submitted in writing with your Account username and a brief description of your request. Responses within 30 calendar days.
• Languages: Support is available in English and Bahasa Malaysia.