Official Data Protection Policy

MBA66 Privacy Policy – Personal Data Protection for Malaysian Users

MBA66 values the privacy of every user. This policy transparently explains how we collect, use, store, and protect your personal information — in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).

Last updated: 1 January 2026 PDPA 2010 Compliant 256-bit SSL

MBA66's Six Data Protection Principles

Privacy is more than a document. At MBA66, it is a daily practice embedded in every system and process we build to protect our users in Malaysia.

Bank-Grade Encryption
All data transmitted between your device and MBA66's servers is protected by 256-bit SSL encryption — the same technology used by Malaysia's major banking institutions such as Maybank and CIMB. Your data is secure in transit, without exception.
256-bit SSL active on all pages
No Sale of Data to Third Parties
MBA66 has never and will never sell, rent, or transfer your personal data to advertisers, data brokers, or any third party for commercial purposes. Your data is used solely for the purposes to which you have given explicit consent.
No data sale guarantee
Malaysia PDPA 2010 Compliance
MBA66's Privacy Policy is designed and regularly updated to ensure full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). This means your rights as a data subject are protected under a robust legal framework.
Malaysia PDPA 2010
Strict Internal Access Controls
Not all MBA66 staff have access to users' personal data. Access is governed by the principle of least privilege — only personnel who require specific data to perform their assigned duties are granted access, and every instance of access is automatically logged.
Multi-layered access control
Right to Data Erasure
You have the right to request the deletion of your personal data from MBA66's systems at any time, subject to record retention requirements prescribed by law. Data deletion requests will be processed within 30 days of identity verification.
Right to Erasure
Data Breach Notification
In the event of any data security breach that may affect your personal information, MBA66 is committed to notifying you within 72 hours of detecting the breach — exceeding standard industry requirements.
Notification within 72 hours
Section 01

Introduction & Scope of Privacy Policy

This Privacy Policy ("Policy") describes how MBA66 ("we," "the platform," or "MBA66") collects, uses, discloses, stores, and protects the personal information you provide to us or that we collect automatically when you use our platform.

This policy applies to all users of the MBA66 platform — including visitors without an account, registered members, and anyone who interacts with our services via the website, mobile app, or other communication channels such as email, live chat, WhatsApp, and Telegram.

Important Note: By registering an MBA66 account or using any of our services, you confirm that you have read and understood this Privacy Policy and agree to the data collection and usage practices described herein. If you do not agree, please discontinue use of the platform.

MBA66 is committed to complying with Malaysia's Personal Data Protection Act 2010 (PDPA) and all applicable related legislation. We review and update this Policy regularly to reflect changes in our privacy practices or new legal requirements.

Section 02

Types of Personal Data We Collect

MBA66 collects various categories of information depending on how you interact with our platform. The table below provides a full breakdown of the data types we collect, along with their purposes and status:

Data Category Example Information How It's Collected Status
Identity Data Full name, date of birth, MyKad/passport number Registration form & KYC Mandatory
Contact Data Malaysian phone number, email address, residential address Account registration Mandatory
Financial Data Bank account number, account holder name, e-wallet name (Touch 'n Go, DuitNow, GrabPay). Deposits & withdrawals Mandatory
Transaction Data Deposit, withdrawal, betting, winnings, and losses records. Automatically during transactions Automatic
Technical Data IP address, device type, operating system, web browser, screen resolution Automatically upon access Automatic
Usage Data Games played, session duration, pages visited, features used Platform logs & analytics Automatic
Communication Data Records of live chat, email, complaints, and feedback you submit to us Customer support interactions Voluntary
Preference Data Preferred language, favourite games, account settings, notification subscription preferences. User settings Voluntary
MBA66 does not directly collect credit card or debit card information. All payments are processed through registered third-party payment gateways that comply with PCI DSS standards — meaning MBA66 never sees or stores your full card number.
Section 03

Purposes for Using Personal Data

MBA66 uses the personal data collected solely for legitimate purposes to which you have consented, or as necessary to fulfil our service agreement with you. The primary purposes for using your data include:

  • Account management: Creates, verifies, and maintains your MBA66 account; processes password reset requests; and manages your account security settings.
  • Transaction processing: Processing deposits via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, and FPX; verifying and executing withdrawal requests to your registered bank account
  • Identity verification (KYC): Verifies your age and identity to meet legal requirements and protect the platform from misuse.
  • Service provision: Grants access to all MBA66 games and services, including slots, live casino, Sports Betting for Malaysia Super League and badminton, and e-sports.
  • Customer Support: Responding to enquiries, resolving complaints, and providing technical support via live chat, WhatsApp, Telegram, and email
  • Security & fraud prevention: Detecting and preventing fraudulent activity, money laundering, or misuse of the platform
  • Direct marketing (with your consent): Sending you information about relevant MBA66 promotions, bonuses, and special offers — you may withdraw this consent at any time
  • Platform improvements: Analyses usage patterns to improve platform design, performance, and overall user experience.
  • Legal compliance: Fulfils obligations required under applicable Malaysian law.
MBA66 will not use your personal data for any purpose beyond those stated above without first obtaining your consent through a clear in-platform notification.
Section 04

Data Sharing with Third Parties

MBA66 does not sell or rent your personal data to any third party. However, there are limited situations where we need to share your data with specific parties in order to deliver our services effectively:

  • Technical service providers: Cloud computing providers, infrastructure providers, and cybersecurity service providers that assist us in operating the platform — all bound by strict confidentiality agreements
  • Payment providers: Payment gateways and financial service providers that process your deposit and withdrawal transactions (e.g., DuitNow network operators, FPX, Touch 'n Go) — only the minimum data necessary to complete the transaction is shared.
  • Game providers: Third-party game providers such as Pragmatic Play, Evolution Gaming, and PG Soft may receive session IDs and the minimum technical data required to deliver games to your device — your personal identity information is not shared
  • Relevant authorities: Law enforcement agencies, regulatory bodies, or courts where we are required to do so under applicable Malaysian law, or where necessary to protect our security and rights or those of other users

All third parties that receive data from MBA66 are required to use that data solely for the specified purposes and to comply with data security standards equivalent to or exceeding those we uphold.

Any data sharing not listed above requires your explicit consent. MBA66 will not share your data with advertisers or marketing companies without your clear and revocable permission.
Section 05

Data Security Measures

MBA66 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These measures include:

  • Encryption in transit: All communications between your device and MBA66's servers are encrypted using TLS 1.3 with a 256-bit SSL certificate
  • Data-at-rest encryption: Sensitive data stored in our databases — including financial information and identity verification documents — is kept in encrypted form.
  • Two-factor authentication (2FA): Additional verification is required for logins from a new device or unrecognised IP address
  • 24/7 security monitoring: An automated threat detection system continuously monitors account activity and transactions.
  • Internal access controls: Staff access to user data is restricted on a need-to-know basis and protected by a multi-layered authentication system
  • Regular security audits: MBA66 conducts regular penetration testing and security reviews to identify and address potential vulnerabilities.
While we implement all reasonable security measures, no security system can be guaranteed to be 100% safe from every threat. You also play an important role in keeping your account secure — use a strong password, do not share your login credentials, and contact us immediately if you suspect any suspicious activity on your account.
Section 06

Cookies, Tracking & Analytics

MBA66 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device by your web browser. The following are the types of cookies we use:

  • Session cookies (mandatory): Required to keep you logged in during an active session. This cookie is automatically deleted when you close your browser. The MBA66 platform cannot function without it.
  • Preference cookies: Remembers your preferences such as language, game choices, and interface settings so you don't have to reconfigure them every time you log in.
  • Analytics cookies: Collecting anonymised information about how users interact with our platform — which pages are visited most frequently, how long sessions last, and where users encounter issues. This data is used to improve the platform.
  • Security cookies: Helps identify suspicious activity, CSRF attacks, and unauthorised login attempts to keep your account secure.

You can manage cookie settings through your web browser. However, disabling mandatory cookies may significantly impact the functionality of the MBA66 platform or prevent you from using certain services. For optional cookies, you may opt out via the cookie settings page accessible from the platform's footer.

MBA66 does not use third-party cookies for targeted advertising based on cross-site behavioural tracking. The analytics data we collect is not linked to your personal identity and is used solely for internal platform improvement purposes.
Section 07

Data Retention & Deletion

MBA66 does not retain your personal data longer than necessary for the stated purposes or as required by law. Our data retention policy is as follows:

  • Active account data: Retained for the duration of the active account period plus 7 years after account closure, in line with Malaysia's financial record retention requirements
  • Financial transaction records: Retained for 7 years from the transaction date in accordance with Malaysia's Anti-Money Laundering Act 2001 (AMLA).
  • KYC documents: Retained for 5 years after the business relationship ends, or longer if required by the authorities
  • Customer support communication logs: Retained for 2 years from the date of last interaction
  • Anonymised analytics data: May be retained for longer as it contains no personally identifiable information
  • Marketing data (if you have consented): Retained until you withdraw consent — you may unsubscribe at any time via your account settings or the unsubscribe link in any email

Once the retention period expires, data is securely deleted using methods that ensure it cannot be recovered. For data held in physical format (where applicable), secure disposal procedures are followed in full.

Section 08

Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by MBA66:

Right of Access
You have the right to request a copy of the personal data we hold about you. We will provide a full report within 30 days of your request.
Right to Rectification
If the data we hold about you is inaccurate or out of date, you have the right to request a correction. Contact customer support or update it yourself via your account profile settings.
Right to Erasure
You may request the deletion of your personal data, subject to record retention requirements under applicable law. Requests are processed within 30 days of identity verification.
Right to Object
You have the right to object to the processing of your data for direct marketing purposes at any time. Your objection will be actioned immediately, without question.
Data Portability Right
You may request your data in a machine-readable format (JSON or CSV) for transfer to another platform. Such requests are processed within 30 days.
Right to Restrict Processing
In certain circumstances, you may request that we restrict how we process your data — for example, while you dispute the accuracy of your data or are awaiting the outcome of an objection.

To exercise any of the above rights, please contact the MBA66 Data Protection Officer (DPO) by email at privacy@mba66.site or via live chat within the platform. Please include your full name, account number, and a description of your request. Identity verification may be required before your request can be processed.

MBA66 will not charge a fee for the first data access request made within any 12-month period. Repeated or manifestly unreasonable requests may be subject to a reasonable administrative fee, or refused with written reasons provided.
Section 09

Protection of Children's Data

The MBA66 platform is a service designed exclusively for adults aged 18 and above. We do not knowingly collect or process the personal data of individuals under the age of 18.

If you are a parent or guardian and believe your minor child has provided personal information to MBA66 without your consent, please contact us immediately at privacy@mba66.site. We will take immediate steps to investigate and remove that information from our systems.

Registering an MBA66 account for or on behalf of a minor is a serious violation of our Terms and Conditions and may constitute a breach of Malaysian law. Any such account will be closed immediately and the relevant authorities notified where necessary.
Section 10

Amendments to the Privacy Policy

MBA66 reserves the right to amend, update, or replace this Privacy Policy at any time. Changes may arise from shifts in our privacy practices, new legal requirements, or technological developments that call for a different approach to data protection.

When we make material changes to this Policy — meaning changes that significantly affect how we use or disclose your personal data — we will:

  • Displaying a prominent notice on the MBA66 platform homepage for at least 14 days before the changes take effect.
  • Sending email notifications to all registered members with a verified email address
  • Updating the "Last Updated" date at the top of this document.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of the MBA66 platform following any changes to this policy will be considered as your acceptance of those changes.

Section 11

Contact Our Data Protection Officer

If you have any questions, concerns, or complaints regarding this Privacy Policy or how MBA66 handles your personal data, you may reach us through the following channels:

  • Privacy Email: privacy@mba66.site (for enquiries specific to personal data)
  • General Support Email: support@mba66.site
  • Live Chat: Available 24 hours a day, 7 days a week within the MBA66 platform (login required).
  • WhatsApp & Telegram: The number and link are available in your account profile after logging in

We are committed to responding to all privacy-related enquiries within 5 business days. For formal requests exercising PDPA rights (such as access, correction, or deletion of data), the full process will be completed within 30 days.

If you are not satisfied with MBA66's response to your privacy enquiry or complaint, you have the right to lodge a complaint with the Department of Personal Data Protection (JPDP) Malaysia, the regulatory body under the Ministry of Digital Malaysia.

Your Data, Our Responsibility — MBA66's Approach to Privacy

In the online entertainment industry, trust is everything. When you register an account with MBA66, you are not only entrusting us with your money — you are also entrusting us with your personal information. Your name, phone number, bank account details, and transaction records are highly sensitive data, and we at MBA66 take this responsibility very seriously.

One of the most common questions Malaysian players ask us is: "Is my information safe?" Our answer is always the same — yes, and not just as a matter of words. MBA66's security infrastructure is built with multiple layers of defence: SSL encryption on all traffic, encrypted databases, strict internal access controls, and real-time threat monitoring 24/7. These are not "nice to have" features — they are fundamental requirements we treat as a minimum standard, not a luxury.

Why We Need Your KYC Data

We understand that the identity verification (KYC) process can feel like unnecessary red tape — especially when you just want to play slots or catch a Malaysia Super League match while placing a bet. But there are important reasons behind this requirement. First, it is a legal obligation under Malaysia's Anti-Money Laundering Act 2001 — financial and gambling platforms are required to verify the identity of their customers. Second, and more importantly from your perspective as a user — it protects you. Identity verification ensures that no one else can use your name to open an account, make deposits, or withdraw funds from an account that is rightfully yours.

At MBA66, we have designed our KYC process to be as straightforward as possible. There is no printing required, no office visits, and no weeks-long wait. The entire process can be completed within the platform using your phone's camera, and a decision is typically given within 24 business hours. The documents requested are minimal — in most cases, a selfie with your MyKad is all that is needed.

Payments & Financial Data Privacy

When you make a deposit via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, or FPX on MBA66, your transaction is processed through a payment gateway certified to PCI DSS (Payment Card Industry Data Security Standard). This means MBA66 itself never directly sees, stores, or processes your bank card number or online banking password — all of that is handled entirely by payment providers with dedicated security systems built for this purpose.

The only information MBA66 retains is what is necessary to ensure withdrawals are processed correctly — specifically, your bank account or e-wallet name (not your full account number) to confirm that the withdrawal is being made to an account registered in your own name. This is a security measure to protect you, not an attempt to collect unnecessary financial data.

Your Rights — We Take Them Seriously

The Malaysian PDPA grants you important rights as a data subject, and MBA66 is committed to respecting and facilitating the exercise of those rights. If at any point you want to know what data we hold about you, correct inaccurate information, or delete your account entirely — the process is straightforward and we will not make it difficult. Send an email to privacy@mba66.site, state what you need, and our team will handle your request within the prescribed timeframe.

Ultimately, privacy is not something MBA66 treats as a mere compliance obligation. It is a core part of our commitment to being a responsible, transparent, and trustworthy platform for Malaysian players. Your trust is our most valuable asset, and we will continue to ensure that trust is backed by real action — not just words on paper.

Your Data is Safe — Register & Enjoy the Best Experience

You now know exactly how MBA66 protects your privacy — with 256-bit SSL encryption, no sale of data to third parties, and full compliance with Malaysia's PDPA. Register a free account today and experience a platform built not just for entertainment, but for the security and trust of Malaysian users.

  • Secure registration — your data is encrypted from the moment you fill in the form.
  • Deposits via Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay & FPX
  • 100% welcome bonus up to RM 500 + 50 Free Spins
  • Malay-language customer support available 24/7 via live chat & WhatsApp
  • Withdrawals processed in 15–30 minutes — no hidden fees

For users aged 18 and above only. Please gamble responsibly. Responsible Gaming · Terms & Conditions.

Bahasa Melayu