mba66 Privacy Policy

1. Introduction

mba66 ("mba66", "we", "us", "our") operates the online casino and sports betting information platform accessible at https://mba66.cam (the "Platform"). We are committed to protecting the privacy and personal data of all users ("you", "your") who access and use our Platform.

This Privacy Policy ("Policy") describes how mba66 collects, processes, stores, shares and protects personal information connection with your use of the Platform. It also sets out the rights available to you regarding your personal data.

By registering an account or continuing to use the Platform, you acknowledge that you have read and understood this Policy. If you do not agree with any part of it, please discontinue use of the Platform and contact us to close your account.

This Policy applies to all mba66 users regardless of their location, and specifically addresses the needs and expectations of Malaysian users accessing the Platform from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam and other locations across Malaysia.

2. Definitions

• "Personal Data" means any information that identifies or can reasonably identify a living individual, directly or in combination with other data.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, restriction or deletion.
• "Data Controller" means mba66, which determines the purposes and means of processing Personal Data.
• "Data Processor" means a third party that processes Personal Data on behalf of mba66 under a data processing agreement.
• "KYC Documents" means identity and address verification materials submitted by Users as part of the Know Your Customer process, including MyKad copies, passport scans, utility bills and selfie photographs.
• "Cookies" means small data files placed on a User's device to support platform functionality, session management and analytics.

3. Data We Collect

mba66 collects personal data through the following channels: account registration, account activity KYC submissions, payment transactions, customer support communications, and automated technical means including cookies and server logs.

The categories of data we collect include:

4. Legal Basis for Processing

mba66 processes Personal Data on the following legal bases:

• Contractual necessity: Processing required to operate your account, execute deposits and withdrawals, and deliver the Services you have requested.
• Legal obligation: Processing required to comply with anti-money-laundering (AML) obligations, age verification mandates, fraud prevention requirements and applicable licensing conditions.
• Legitimate interests: Processing necessary to maintain platform security, prevent fraud, improve user experience and operate our business — where such interests are not overridden by your fundamental rights.
• Consent: Where we rely on consent — for example, for optional marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

5. How We Use Your Data

mba66 uses collected Personal Data for the following specific purposes:

• Creating, managing and maintaining your mba66 Account;
• Verifying your identity and age (21+) through KYC processes;
• Processing MYR deposits and withdrawals via your selected payment method — including Touch'n Go eWallet, DuitNow, FPX, Maybank, CIMB, Public Bank and Hong Leong;
• Administering bonus claims, wagering requirement tracking and promotional eligibility;
• Monitoring for suspicious activity, fraud, money laundering and breach of platform terms;
• Providing customer support in English, Bahasa Melayu and Chinese;
• Improving platform stability, performance and user experience;
• Complying with applicable laws, regulatory orders and legal obligations;
• Sending account-related operational communications (e.g., verification emails, withdrawal confirmations, security alerts).

6. Data Sharing and Disclosure

mba66 does not sell, rent or otherwise trade Personal Data with third parties for commercial purposes. We may share Personal Data only in the following defined circumstances:

• Payment processors and eWallet providers: To execute financial transactions requested by you (e.g., Touch 'n Go eWallet, FPX, DuitNow). These providers are bound by their own data processing obligations.
• KYC and identity verification services: Third-party verification tools used to authenticate identity documents and check against sanctions lists, as required by compliance obligations.
• Game content providers: Generic international game studios that supply casino, live dealer and sports betting content may receive session-level data necessary to render games correctly. No identifying personal data is shared with game providers beyond what is technically required.
• IT infrastructure and hosting providers: Cloud hosting and data centre providers that store and process data on our behalf under documented data processing agreements.
• Legal and regulatory authorities: Where mba66 is required by a valid legal order, court judgment or regulatory instruction to disclose User data, we will comply with that obligation and, where permitted by law, notify affected Users.

In all cases, third-party processors are required to maintain adequate security standards and process Personal Data only for purposes authorised by mba66.

7. KYC and Payment Data

KYC documents — including MyKad images, passport scans, proof-of-address documents and selfie photographs — are treated as a special category of sensitive personal data within the mba66 data processing framework.

The following controls apply specifically to KYC and payment data:

• KYC documents are transmitted exclusively through the HTTPS-secured mba66 verification portal. Do not submit documents via email, social media or third-party messaging applications.
• Access to stored KYC documents is restricted to authorised compliance personnel on a strict need-to-know basis.
• Payment method details (e.g., Maybank or CIMB account names, eWallet identifiers) are used solely to process authorised transactions and confirm account ownership. Full card numbers are not stored on mba66 infrastructure.
• Cryptocurrency deposit and withdrawal wallet addresses are recorded for compliance and audit purposes and are subject to the same access controls as other financial data.

8. Cookies and Tracking Technologies

mba66 uses cookies and similar tracking technologies to operate the Platform effectively. The categories of cookies we use are as follows:

• Strictly necessary cookies: Essential for platform functionality, including login session management, account security tokens and load-balancing. These cannot be disabled without breaking core platform features.
• Functional cookies: Remember user preferences such as language selection and display settings to improve your experience across sessions.
• Analytics cookies: Collect anonymised or pseudonymous data about how users navigate the Platform. This data helps us identify performance issues and improve navigation. Analytics data is not linked to personally identifiable information without separate consent.

You can manage cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the Platform. mba66 does not use third-party advertising or cross-site tracking cookies.

9. Data Retention

mba66 retains Personal Data for as long as is necessary to fulfil the purposes described in this Policy, including the following minimum retention periods:

• Account data: Retained for the duration of the account relationship and for a minimum of five (5) years following account closure, to satisfy anti-money-laundering and audit obligations.
• KYC documents: Retained for a minimum of five (5) years from the date of submission or account closure, whichever is later, in accordance with AML compliance requirements.
• Transaction records: Retained for a minimum of five (5) years from the transaction date.
• Support communications: Retained for two (2) years from the date of the interaction, unless the content is relevant to an ongoing dispute or legal matter.
• Technical and server logs: Retained for up to twelve (12) months for security monitoring purposes, then deleted or anonymised.

When data is no longer required for any of the above purposes, it is permanently deleted or irreversibly anonymised in accordance with our internal data disposal procedures.

10. Security Measures

mba66 employs a range of technical and organisational security measures to protect Personal Data against unauthorised access, loss, destruction or disclosure:

• All platform traffic is encrypted using HTTPS with current TLS standards;
• Sensitive data at rest is encrypted using industry-standard encryption algorithms;
• Access to personal data systems is restricted by role-based access controls and requires multi-factor authentication for administrative functions;
• Security monitoring and intrusion detection systems operate on a continuous basis;
• Staff with access to personal data receive periodic data protection and security awareness training;
• Third-party service providers are assessed for security standards prior to onboarding.

While mba66 takes reasonable and proportionate security precautions, no online platform can guarantee absolute security. We encourage Users to choose strong, unique passwords, enable all available account security features, and report any suspected unauthorised access to our support team promptly.

11. Your Rights

Subject to applicable law and certain exceptions relating to AML and legal obligations, you hold the following rights in respect of your Personal Data held by mba66:

• Right of Access: You may request confirmation of whether mba66 holds Personal Data about you and, if so, a copy of that data and information about how it is processed.
• Right to Rectification: You may request correction of inaccurate or incomplete Personal Data without undue delay.
• Right to Erasure: You may request deletion of Personal Data where it is no longer necessary for the purposes for which it was collected, subject to overiding legal retention obligations.
• Right to Restriction: You may request that mba66 restrict processing of your data in certain circumstances, such as while dispute is under review.
• Right to Data Portability: Where processing is based on consent or contract and is carried out by automated means, you may request your data in a structured, machine-readable format.
• Right to Object: You may object to processing based on legitimate interests or carried out for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

To exercise any of these rights, submit a written request to the mba66 support team using the website email address listed in Section 16. We will acknowledge your request within a reasonable period and respond substantively within the timeframe required by applicable data protection law.

12. Protection of Minors

The mba66 Platform is strictly restricted to users aged 21 and above. We do not knowingly collect Personal Data from individuals below the age of 21. Age verification is a mandatory step in the account registration and KYC process.

If mba66 discovers that Personal Data has been collected from a person below the age of 21, the relevant account will be suspended, and the associated data will be deleted in accordance with applicable law. If you have reason to believe that a minor has submitted data through the Platform, please notify us immediately using the contact details in Section 16.

13. Third-Party Links and Services

The mba66 Platform may contain references to payment service providers, game studios and other third-party service operators. While mba66 takes reasonable steps to work with reputable providers, we are not responsible for the privacy practices or data-handling policies of external parties.

We recommend that Users review the privacy policies of any third-party service they interact with, particularly payment processors such as Touch 'n Go eWallet, Boost, GrabPay and bank providers including Maybank, CIMB and Public Bank.

14. International Data Transfers

mba66 operates under an international licensing framework, and some of our Data Processors may be located in jurisdictions outside Malaysia. Where Personal Data is transferred internationally, mba66 takes reasonable steps to ensure that the recipient jurisdiction provides adequate data protection, or that appropriate contractual safeguards — such as standard data processing clauses — are in place.

If you have questions about the safeguards applicable to a specific international data transfer, please contact us using the details in Section 16.

15. Amendments to This Policy

mba66 may update this Privacy Policy at any time. The effective date displayed at the top of this document reflects the most recent revision. We will make reasonable efforts to notify registered Users of material changes through in-platform messaging or the email address associated with their Account.

Continued use of the Platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. We recommend reviewing this Policy periodically to remain informed of how we handle your data.

16. Contact Us

For all privacy-related enquiries, data rights requests or concerns regarding the handling of your Personal Data, please contact the mba66 data protection team:

Website email: [email protected]

Our support team is available 24/7 in English, Bahasa Melayu and Chinese. We aim to acknowledge privacy requests within two business days and provide a full response within the applicable legal timeframe.

Please include "Privacy Request" in your message subject line, along with the nature of your enquiry and the Account email address to which your request relates.