Mby77 Privacy Policy – Data Protection Transparent Malaysian Users

Mby77 ("we", "Platform", or "mby77.org") takes user privacy seriously. As an online gaming platform serving Malaysian players, we understand how important trust is in our relationship with every member.

This Privacy Policy details the types of personal information we collect when you use the mby77 platform, how that information is used, who it is shared with, and the steps we take to protect it. We also outline your rights as a user and how to exercise them.

This policy is built in compliance with Malaysia Personal Data Protection Act 2010 (PDPA) and international data protection best practices. If you disagree with any aspect of this policy, please stop using the platform and contact us to close your account.

We only collect information that is strictly necessary to provide a safe and quality service. The following are the categories of data we collect:

We do not collect sensitive information such as medical data, political views, or religious beliefs unless directly relevant to specific regulatory compliance.

The data we collect is used exclusively for purposes related to the provision, improvement, and security of mby77 services. The following are the primary purposes for which data is used:

• Account management: Creating and maintaining your account, processing registration, and ensuring login security.
• Transaction processing: Verifying and securely processing deposits and withdrawals through integrated payment channels.
• Legal compliance: Fulfilling obligations under the PDPA, anti-money laundering (AML) laws, and other regulatory requirements.
• Fraud prevention: Detecting and preventing fraudulent activity, collusion, and platform abuse using real-time monitoring systems.
• Personalize experience: Personalizing content, offers, and game recommendations based on your preferences.
• Service communications: Sending account-related notifications, security updates, and promotional information you have opted to receive.
• Analytics and improvement: Analyzing how users interact with the platform to improve the overall experience.

Mby77 does not use your data to make automated decisions that significantly affect you without human intervention, except in cases of clear fraud detection that require immediate action.

Mby77 does not sell, rent, or trade your personal data to any third party for marketing purposes. However, there are limited situations where we may need to share your information:

• Payment service providers: Transaction information is shared with trusted payment processors such as FPX, DuitNow, and eWallet operators to process your transactions.
• Game software providers: Minimum required game data is shared with third-party game providers to enable smooth game functionality.
• Regulatory authorities and agencies: We are required to disclose information to law enforcement authorities or regulatory bodies when mandated by law or court order.
• Technical service partners: Cloud infrastructure providers and technical support service providers bound by strict confidentiality agreements.

Your data security is our technical priority. mby77 implements multiple layers of security to protect your information from unauthorized access, loss, or leakage:

• Data-in-transit encryption: All communications between your device and our servers use TLS 1.3 protocol with 256-bit SSL encryption.
• Data-at-rest encryption: Sensitive data stored in our databases is encrypted using AES-256 standard.
• Tiered access controls: Only authorized personnel with a specific business need may access user data, and all access is logged for audit purposes.
• Real-time threat monitoring: Our intrusion detection system (IDS) operates 24 hours a day to detect and respond to security threats.
• Regular security testing: Independent security audits and penetration testing are conducted regularly by third-party security experts.
• Two-factor authentication (2FA): Users are encouraged and staff are required to use 2FA for all access to platform systems.

While we work hard to protect your data, no system can be guaranteed 100% secure. We encourage you to also take your own protective measures, such as using a strong password and not sharing your login credentials.

Mby77 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by Malaysian law.

• Active account data: Retained for the duration your account remains active and used to provide ongoing services.
• Financial transaction data: Retained for a minimum of 7 years after the transaction date in accordance with Malaysian financial legal requirements.
• KYC Data: Retained for a minimum of 5 years after account termination in accordance with AML requirements.
• Technical logs: System and security log data is retained for 12 months and then securely deleted.
• Inactive account: Account data that has been inactive for more than 3 years will be reviewed and may be deleted after the user has been notified.

When data is no longer needed, we ensure it is securely deleted using industry-standard data disposal methods, including de-identification or physical destruction of storage media where applicable.

Under the Malaysia PDPA and our internal policies, you have the following rights regarding your personal data:

Mby77 uses cookies and similar tracking technologies to enhance the user experience and understand how our platform is used. The following are the types of cookies we use:

• Essential cookies: Required for essential platform functions such as login session verification and security. These cookies cannot be disabled.
• Performance cookies: Collecting anonymous information about how users interact with the platform to help us identify and resolve technical issues.
• Functional cookies: Saving your preferences such as language, display settings, and login details for ease of repeat use.
• Analytics cookies: Used to analyze platform usage patterns in aggregate. This data is not used to identify you personally.

You can manage or disable cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of some platform features.

The mby77 platform is exclusively for individuals aged 18 years and above. We do not intentionally collect or process personal data from minors. If you are a parent or guardian and believe your child has registered an account on our platform, please contact our support team immediately.

We will take appropriate steps to verify, deactivate the account in question, and delete all associated data as soon as possible once the report has been confirmed.

Mby77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, legal requirements, or platform improvements. When significant changes are made, we will:

• Updating the "Last Updated" date at the top of this page.
• Sending email notifications to all registered users.
• Displaying a clear notice on the platform's home page for a minimum period of 7 days.

Continued use of the mby77 platform after the effective date of any amendments constitutes your acceptance of the updated Privacy Policy. We encourage you to review this page periodically.

If you have any questions, concerns, or complaints regarding how we handle your personal data, or if you wish to exercise any of your privacy rights, please contact us through the following channels:

• Live Chat: Available 24/7 via the chat icon at the bottom corner of the platform.
• Privacy Email: [email protected]
• FAQ: Visit page FAQ us for more information.

We aim to respond to all privacy-related enquiries within 5 business days. For more complex complaints requiring in-depth investigation, we will keep you informed of the progress within 14 business days.

If you are not satisfied with how we handle your privacy complaint, you have the right to lodge a complaint with Malaysia Department of Personal Data Protection or the relevant regulatory body.