Privacy Policy mb9 – Data Protection & Your Personal Information

Mb9 (mb9.wine) is an online entertainment and gaming platform operating for players in Malaysia. We understand that privacy is more than a legal requirement — it is a fundamental right of every user that we are committed to respecting and protecting fully.

This Privacy Policy explains in detail how mb9 collects, processes, stores, discloses, and protects your personal information when you use our platform, whether via our website, mobile app, or any other service channel we provide.

By registering or using mb9 services, you agree to the privacy practices described in this document. We encourage you to read this document carefully in its entirety. If you do not agree with any part of this policy, please discontinue use of our platform and contact us for further steps.

This Privacy Policy is drawn up in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable international data protection standards for licensed online gaming platforms.

Mb9 only collects data that is strictly necessary to provide quality services, ensure platform security, and fulfil legal obligations. The following are the categories of data we collect:

We may also collect additional information when you complete a KYC form, participate in promotions, or contact our support team. All data collection is carried out transparently and with your consent.

Every piece of data we collect has a clear and legitimate purpose. mb9 will not use your data for any purpose unrelated to the provision of our services. Here are the primary ways we use your information:

• Account Management: To create, verify, and securely maintain your mb9 account.
• Transaction processing: To process deposits and withdrawals promptly and accurately through your chosen payment channels.
• Identity verification (KYC): To fulfil legal requirements related to age verification and anti-money laundering (AML).
• Platform Security: To detect and prevent fraudulent activity, unauthorised access, or platform abuse.
• Service Communications: To send important notifications related to your account, transactions, or policy changes.
• Continuous improvement: To analyse usage patterns and improve the user experience on our platform.
• Legal compliance: To comply with legal obligations, court orders, or directives from relevant authorities.
• Responsible gaming: To monitor gaming patterns and support players who may need assistance.

Mb9 will not use your data to make automated decisions that materially affect your rights without appropriate human review.

Mb9 does not sell, rent, or disclose your personal data to third parties for marketing or commercial purposes. Data sharing only occurs in the following limited circumstances:

• Trusted service providers: We share required data with payment providers, licensed gaming platforms, and identity verification services that are bound by strict confidentiality agreements with mb9.
• Legal Requirements: When required by Malaysian law or a valid court order, we are obligated to disclose information to the relevant authorities.
• Fraud prevention: We may share information with international fraud prevention networks to protect our platform and players from illicit activity.
• Business transfers: In the event of a merger, acquisition, or sale of mb9 assets, user data may be transferred — and you will be notified in advance.

Protecting your personal data from unauthorised access, loss, or misuse is mb9's highest priority. We consistently invest in the latest security infrastructure to keep your data safe at all times.

• 256-bit SSL Encryption: All data transmitted between your device and mb9 servers is protected with industry-grade encryption.
• Encrypted data storage: Personal data stored on our servers is protected with an additional layer of AES-256 encryption.
• Two-factor authentication (2FA): Our system supports 2FA for all member accounts as an added layer of security.
• 24/7 threat monitoring: Our cybersecurity team continuously monitors systems to detect any suspicious activity.
• Regular penetration testing: The mb9 platform undergoes regular independent security testing to identify and address any vulnerabilities.
• Internal Access Controls: mb9 staff may only access data necessary to perform their respective duties, with strict audit logs in place.

While no security system is entirely perfect, we are committed to employing the best available measures to minimise any risk. In the event of a data breach affecting your information, we will notify you within 72 hours.

Mb9 uses cookies and similar tracking technologies to enhance your browsing experience, maintain session security, and understand usage patterns on our platform. Cookies are small text files stored on your device.

• Essential Cookies: Required for core platform functions such as login session management and security. Cannot be disabled.
• Functional Cookies: Stores your preferences such as language, display settings, and login details for your convenience.
• Analytics Cookies: Helps us understand how players use the platform, which pages are visited most frequently, and where improvements are needed.
• Security Cookies: Used to detect and prevent unauthorised access, fraud, and bot activity.

As a valued mb9 member, you have clear rights regarding your personal data. We respect these rights and provide easy channels for you to exercise them:

To exercise any of the above rights, please contact our privacy team via Live Chat or email. We will process your request within 30 working days.

Mb9 retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy or as required by applicable law. Retention periods vary by data type:

• Active account data: Retained for the duration your account is active and up to 5 years after account closure for AML compliance purposes.
• Financial transaction records: Retained for 7 years in accordance with Malaysian legal requirements for financial records.
• KYC Documents: Retained for the period specified by the relevant regulatory authority, typically 5–7 years.
• Support Communication Logs: Retained for 2 years for reference and service improvement purposes.
• Technical data and access logs: Retained for 90 days for security and threat detection purposes.

Once the designated retention period expires, your data will be securely deleted or anonymised using methods that ensure it cannot be recovered.

The mb9 platform is exclusively for adult users aged 18 and above. We do not intentionally collect or process personal data of individuals under the age of 18.

If we detect that an underage user has registered an account by providing false information, we will immediately close the account and delete all associated data without delay.

The mb9 platform may contain links to third-party websites or services in certain contexts. mb9's Privacy Policy does not apply to any such third-party websites or services. We encourage you to read the privacy policy of any third party before providing them with your personal information.

Mb9 is not responsible for the privacy practices or content of any third-party websites that may be accessed via links on our platform.

Mb9 reserves the right to update or modify this Privacy Policy at any time to reflect changes in law, industry practices, or the way we operate. You will be notified of any material amendments via:

• In-platform notification on mb9 at least 7 days before the changes take effect.
• Email to the address registered on your account.
• Update the "Last Updated" date at the top of this document.

Continued use of the mb9 platform after the effective date of any changes constitutes your acceptance of the updated policy. If you do not agree with any amendments, you have the right to close your account.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact our Data Protection Officer (DPO):

We take every privacy-related complaint seriously and will investigate and respond to all enquiries within the stipulated timeframe. For more information about our other policies, visit the page Terms and Conditions or FAQ us.