Updated: 1 January 2026

Privacy Policy MB66 – Protecting Your Personal Data Is Our Priority

MB66 takes the privacy and personal data protection of every member seriously. This document clearly sets out how we collect, store, use, and protect your information in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA 2010).

PDPA 2010 Compliance SSL 256-bit No Data Sales Full Access Rights

Commitment MB66 Privacy To You

MB66's six core commitments to protecting the personal data of every Malaysian member

Bank-Grade Encryption

All data you transmit to MB66's servers is protected by 256-bit SSL encryption — the same standard used by Maybank2u and CIMB Clicks. Your personal and financial information cannot be intercepted by third parties.

No Direct Data Sales

MB66 has never sold, and will never sell, member personal data to advertisers, marketing companies, or any third party unrelated to our platform operations. Your data belongs to you — it is not our commodity.

Malaysia PDPA Compliance

MB66 fully complies with Malaysia's Personal Data Protection Act 2010 (PDPA 2010). We ensure that all our data collection, storage, and processing practices are lawful and transparent in accordance with Malaysian law.

Full Control in Your Hands

As an MB66 member, you have the right to access, update, correct, or request the deletion of your personal data at any time. We respect and uphold these rights, no questions asked.

Restricted Internal Access

Only MB66 staff who genuinely require access to your data in the course of their authorised duties are permitted to do so. Access is logged, monitored, and regularly audited to ensure there is no misuse.

Data Breach Notification

In the event of any security incident affecting your data, MB66 is committed to notifying affected members within 72 hours, as required by international data protection best practices.

Important: This Privacy Policy forms part of your agreement with MB66. By using the MB66 platform, you agree to the way we process your personal data as described in this document. Please read it carefully and contact us if you have any questions.

§1

Introduction & Scope of This Privacy Policy

This Privacy Policy is issued by MB66 ("we", "us", "the platform" or "MB66") and applies to all individuals who register, use, or simply browse the MB66 platform at mb66-vip.net. This document has been drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA 2010) and international industry best practices.

We understand that your personal data is sensitive information that deserves serious protection. As an online gaming platform serving over 500,000 Malaysian members — from Kuala Lumpur, Penang, Johor Bahru, Ipoh, Kota Kinabalu to Kuching — we take on a significant responsibility to ensure that every one of your details is stored securely and used only for legitimate purposes.

This Privacy Policy covers:

  • What personal data MB66 collects from you
  • Why and how we use that data
  • Who your data may be shared with under certain circumstances
  • The security measures we take to protect your data
  • Your rights as a data subject under PDPA 2010
  • How you can reach us for any privacy-related enquiries or requests
Age Note: MB66 only accepts members aged 18 and above. We do not knowingly collect personal data from minors. Should we discover that a minor's data has been collected inadvertently, it will be deleted immediately.

§2

Personal Data We Collect

MB66 collects various types of data depending on how you interact with our platform. Below is a detailed explanation of the data we collect and how it is collected.

Data CategoryType of InformationHow It Is Collected
Identity Full name, date of birth, gender, MyKad/passport number Registration form, KYC process
Contact Malaysian phone number, email address, mailing address Registration, profile updates
Finance Payment methods (Touch 'n Go, GrabPay, etc.), deposit/withdrawal history in MYR In-platform transactions
Technical IP address, device type, operating system, web browser, access logs Automatic during browsing
Activity Betting history (slots, live casino, football, badminton), game preferences, bonus records MB66 platform usage
Communications Live chat records, support emails, feedback, complaints Interactions with our team

Data We Do Not Collect:

  • Full credit or debit card numbers — only secure payment tokens are stored
  • Passwords in plain text — all passwords are stored in an irreversible hash format
  • Biometric information unless required by law for verification purposes
  • Sensitive data such as religious beliefs, political affiliations, or health records

§3

Purpose of Data Collection & Processing

MB66 collects and processes your personal data only for purposes that are lawful, necessary, and directly related to the provision of our gaming platform services. We do not process your data beyond the purposes stated below.

Primary Purposes of Data Processing:

  • Account Management: Allows you to register, log in, manage your profile, and access all MB66 platform features including slots, live casino, Malaysia Super League football betting, badminton, and e-sports
  • Transaction Processing: Processing deposits and withdrawals in Malaysian Ringgit (RM) via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX Maybank2u, CIMB Clicks, and other Malaysian payment methods
  • Security & Verification: Verifying member identity, preventing fraud, money laundering, and unauthorised access
  • Customer Support: Handling complaints, enquiries, and providing technical assistance in Bahasa Malaysia, 24/7
  • Legal Compliance: Fulfilling Malaysian legal obligations including KYC (Know Your Customer) and AML (Anti-Money Laundering) requirements
  • Platform Improvement: Analysing aggregated usage patterns (not individual behaviour) to improve user experience, system stability, and game quality
  • Service Communications: Sending important notifications regarding your account, transactions, terms changes, and security information
  • Marketing (with consent): Sending information about MB66 promotions, new bonuses, and offers only where you have given consent to receive such communications
⚠️ Legal Basis: MB66 only processes your personal data on valid legal grounds — being (1) the performance of a contract between you and MB66, (2) compliance with a legal obligation, (3) MB66's legitimate interests that do not override your fundamental rights, or (4) explicit consent provided by you.

§4

Data Sharing With Third Parties

MB66 does not sell your personal data to third parties. However, in the course of operating the platform, there are certain situations where your data may be shared with selected and trusted third parties.

Third Parties That May Receive Your Data:

  • Malaysian Payment Providers: Companies such as Touch 'n Go, GrabPay, Boost, ShopeePay, and Malaysian banks (for processing transactions in MYR only) receive the information necessary to complete financial transactions
  • Game Providers: Internationally licensed gaming companies that provide slots, live casino, and other games on the MB66 platform may receive session information necessary to deliver their services
  • Technical Service Providers: Companies that assist MB66 in managing technical infrastructure, hosting, and cybersecurity — all bound by strict confidentiality agreements
  • Regulatory & Enforcement Bodies: When required by Malaysian law, a court, or the relevant law enforcement authority

In All Data Sharing Cases:

  • Only data required for a specific purpose is shared — the "need to know" principle
  • Third parties are required to sign a data protection agreement before receiving any information
  • MB66 ensures that third parties maintain an equivalent or higher level of data protection
  • Data is not shared across Malaysian borders except with additional safeguards in place
Our Commitment: MB66 does not share your data with advertisers, data brokers, or marketing companies that are not directly related to our service operations. Your data is used to ensure you enjoy the best gaming experience at MB66 — not for any other commercial purpose.

§5

MB66 Data Security Measures

Safeguarding your personal data is MB66's core responsibility. We continuously invest in the latest security technologies and staff training to ensure your data is protected at all times.

Technical Security Infrastructure:

  • 256-bit SSL/TLS encryption for all data transmission between your device and MB66 servers
  • Data stored in a secure server environment with strict physical and digital access controls
  • Intrusion detection (IDS) and intrusion prevention (IPS) systems active 24/7
  • Passwords are stored using the bcrypt hashing algorithm — they cannot be recovered by anyone, including MB66 staff
  • Regular data backups with full encryption to ensure recovery in the event of an incident
  • Regular vulnerability scanning and penetration testing by independent security experts

Internal Access Controls:

  • Least privilege principle — staff are only granted access to the data necessary for their role
  • Multi-factor authentication (MFA) is mandatory for all staff accessing sensitive systems
  • All access to member data is logged and regularly audited
  • Cybersecurity awareness training for all MB66 staff
MB66's Core Security Technologies
SSL 256-bit PDPA 2010 Compliant Encrypted Storage KYC Verified 2FA Available Hash Passwords Secure Backup 24/7 Monitoring

Data Retention Period:

  • Active account data: retained for as long as the account is active and for any period required by law following closure
  • Financial transaction records: retained for a minimum of 7 years as required by Malaysian law
  • Customer support communication logs: 3 years
  • Technical log data: 90 days
  • Marketing data (if you have consented): until you withdraw your consent

§6

Your Rights Under PDPA 2010

Malaysia's Personal Data Protection Act 2010 (PDPA 2010) grants you certain rights regarding your personal data held by MB66. We respect and facilitate the exercise of these rights.

Right of Access

You have the right to request a copy of your personal data that we hold. MB66 will provide this information within 21 business days.

Right to Rectification

If your personal data is inaccurate or out of date, you have the right to request a correction. This can be done via your MB66 account settings or by contacting our support team.

Right to Erasure

You may request the deletion of certain personal data, subject to our legal obligations to retain specific records under PDPA 2010.

Right to Opt Out of Marketing

You may unsubscribe from MB66 marketing communications at any time via the "unsubscribe" link in our emails or through your account notification settings.

Right to Data Portability

You have the right to request your personal data in a machine-readable format for portability purposes, subject to applicable technical and legal limitations.

Right to Object to Processing

You may object to the processing of your data for specific purposes where MB66 relies on legitimate interests as the legal basis for processing.

How to Submit a Data Rights Request:

  • Email us at support@mb66-vip.net with the subject line "Personal Data Rights Request"
  • Contact MB66 customer support via live chat (24/7)
  • MB66 will verify your identity before processing any request
  • All requests will be processed within 21 business days

§7

Cookies, Tracking Technologies & Log Data

MB66 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small files stored on your device when you visit our website.

Types of Cookies We Use:

  • Essential Cookies: Required for core platform functions such as login sessions, account security, and language preferences. These cookies cannot be disabled.
  • Performance Cookies: Collects anonymous information on how visitors use our platform — pages visited, time spent on the platform, and errors encountered. Helps us improve MB66's performance.
  • Functional Cookies: Remembering your preferences such as username, preferred language, and display settings for a more personalised experience.
  • Analytics Cookies: Used to understand aggregated usage patterns for platform development purposes. All data is anonymised.

Managing Cookies:

  • You can manage cookies through your web browser settings (Chrome, Firefox, Safari, Edge)
  • Disabling certain cookies may affect the functionality of some MB66 platform features
  • Session cookies are automatically deleted when you close your browser
  • Persistent cookies expire after a set period or when you manually delete them
MB66 does not use cookies to track your activity outside our platform or to display third-party advertisements. All our cookies are solely for the purpose of enhancing your gaming experience on MB66.

§8

Contact Us About Your Privacy

If you have any questions, concerns, or complaints about how MB66 handles your personal data, we strongly encourage you to reach out to us directly. MB66's privacy team is ready to assist you.

Communication Channels:

  • Privacy Email: support@mb66-vip.net — For data-related requests, privacy complaints, or general enquiries about this Privacy Policy
  • Live Chat: Available 24 hours a day, 7 days a week in Bahasa Malaysia and English
  • Response Time: Privacy enquiries will be responded to within 3–5 business days; data rights requests within 21 business days

MB66 reserves the right to amend this Privacy Policy from time to time in line with changes to laws, technology, or platform operations. Any significant changes will be communicated to members via email or in-platform notification at least 7 days before taking effect. The "Updated" date at the top of this document reflects the currently applicable version.

Closing Note: This Privacy Policy is to be read together with MB66 Terms & Conditions and Responsible Gambling Policy us. Together, these three documents form the complete framework of your agreement with MB66.

FAQ – MB66 Privacy Policy

Absolutely not. MB66 does not sell, lease, or disclose your personal data to advertisers or data brokers. Your data is used solely to provide and improve MB66's services to you, and to fulfil our obligations under Malaysian law.

You may request a copy of your data by emailing support@mb66-vip.net with the subject line "Data Access Request". Please include your full name, MB66 account number, and registered phone number for identity verification. MB66 will process your request within 21 business days.

Upon account closure, MB66 will delete or anonymise most of your personal data within 30 days. However, financial transaction records in RM must be retained for a minimum of 7 years as required by Malaysian law, including the Anti-Money Laundering Act 2001. Data required for legal compliance cannot be deleted upon request.

Yes. MB66 uses payment tokenisation — meaning we do not directly store your Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, or FPX account details. Instead, we store a secure token issued by the payment provider. All transactions pass through encrypted channels, and we are unable to view your full e-wallet or internet banking account number.
🔒

Your Data Is Safe With MB66

Now you know just how seriously MB66 takes your privacy. Join over 500,000 Malaysian members who trust MB66 as a safe, fair, and transparent online gaming platform.

⚠️ Gaming is for ages 18 and above. Please play responsibly.

Bahasa Melayu