1. Introduction
This Privacy Policy explains how MBISLOT Online Casino (referred to as “MBISLOT,” “we,” “our,” or “us”) intends to handle personal information in connection with its website and related services.
Privacy is an important consideration when using online platforms. Visitors should understand what information may be collected, how it may be used, who may receive it, and what choices may be available regarding its processing.
This document is a general website policy draft. Before publication, the actual operator must confirm its legal identity, data-processing practices, service providers, retention periods, and applicable privacy obligations. This policy must not be presented as proof of compliance until those matters have been verified.
2. Scope of This Policy
This policy applies to personal information processed through the MBISLOT website and any related services that expressly adopt this policy. Different rules may apply to third-party websites, external payment providers, advertising services, or independent software providers.
When a visitor follows an external link, that third party may process information under its own privacy policy. Visitors should review the relevant third-party terms before providing personal information.
Where applicable, the operator should identify the legal entity responsible for processing information and provide its official contact details.
3. Information We May Collect
The categories of information collected depend on the features actually offered by the website.
Information Provided Directly
If account registration or contact forms are available, the operator may collect information such as a name, email address, telephone number, username, or other details required for the stated purpose.
Users should be informed whether each item is mandatory or optional and what may happen if required information is not provided.
Account and Transaction Information
If the service provides account or payment functions, relevant records may include account identifiers, transaction references, account activity, verification status, and transaction history.
Payment-card numbers, banking credentials, and other financial details should be handled only by appropriately authorized systems and providers where required. The website should not collect more financial information than necessary for its legitimate purposes.
Identity and Eligibility Information
Where lawful and necessary, the operator may request information to verify identity, age, account ownership, or eligibility. The purpose, required documents, handling arrangements, access controls, and retention period should be explained before sensitive documents are submitted.
Technical Information
When a visitor accesses a website, technical systems may record information such as an IP address, browser type, device characteristics, approximate location derived from technical data, page requests, and error logs.
The actual information collected depends on the website’s configuration and the services it uses.
4. How Information May Be Used
Subject to applicable law and the purposes communicated to users, personal information may be processed to:
- Operate and maintain the website.
- Respond to enquiries and support requests.
- Manage accounts where account services are provided.
- Verify identity, age, and eligibility where legally required.
- Process and reconcile authorized transactions.
- Protect systems against fraud, unauthorized access, and security incidents.
- Investigate technical problems and improve website performance.
- Meet applicable legal, regulatory, accounting, or recordkeeping obligations.
- Enforce published terms and address disputes.
Information should not be used for unrelated purposes without an appropriate legal basis or any additional notice or consent required by law.
5. Legal Basis and Consent
The legal basis for processing personal information depends on the applicable jurisdiction and the circumstances of the processing. Depending on the relevant law, processing may rely on consent, contractual necessity, legal obligations, legitimate interests, or another permitted basis.
Where consent is required, it should be obtained in a clear and meaningful manner. Users should be informed about the purpose of processing and how they can withdraw consent where applicable.
Withdrawing consent does not necessarily make earlier lawful processing invalid, and certain records may need to be retained to meet legal obligations.
6. Cookies and Similar Technologies
The website may use cookies or similar technologies to support essential functionality, remember preferences, understand website performance, or measure engagement.
Essential cookies may be needed for functions such as session management or security. Analytics and advertising technologies, if used, should be described accurately in a cookie notice or related policy.
Where required by law, visitors should receive appropriate information and a meaningful choice before non-essential cookies are placed on their devices. Browser settings may also allow users to block or delete cookies, although doing so can affect website functionality.
The operator should list the actual cookies and third-party technologies used rather than assuming that all categories are active.
7. Sharing of Personal Information
Personal information may be shared with authorized service providers when necessary to deliver the website’s actual services. These providers might include hosting companies, security vendors, customer support systems, analytics providers, or payment processors.
Information may also be disclosed when required by law, in response to valid legal requests, or where necessary to protect rights, safety, and security within the limits of applicable law.
If a business restructuring, merger, or transfer occurs, the operator must handle any transfer of personal information in accordance with applicable requirements.
The operator should not sell personal information or disclose it for unrelated commercial purposes without an appropriate legal basis and any notices or consent required by law.
8. International Data Transfers
Some service providers may process information outside Malaysia or another country where a visitor resides. International transfers can involve different legal requirements and safeguards.
Where cross-border processing occurs, the operator should identify relevant arrangements and implement the safeguards required by applicable law. Users should consult the published privacy contact for questions about international transfers.
9. Data Security
Reasonable technical and organizational safeguards should be used to protect personal information against unauthorized access, alteration, disclosure, loss, or destruction.
Possible safeguards include access controls, encryption where appropriate, secure transmission, staff training, system monitoring, and procedures for managing security incidents.
No online system can be guaranteed completely secure. Users should protect their credentials, avoid shared-device sessions where possible, and report suspected account compromise through verified contact channels.
If a personal data breach occurs, the operator should follow applicable notification and response requirements.
10. Data Retention
Personal information should be retained only for as long as reasonably necessary for the purposes for which it was collected, subject to legal, regulatory, security, and dispute-resolution requirements.
Retention periods should reflect the type of information and the purpose of processing. When information is no longer required, it should be securely deleted, anonymized, or otherwise handled in accordance with applicable law.
The actual retention schedule should be confirmed and documented by the operator.
11. Your Privacy Rights
Depending on applicable law, individuals may have rights to request access to personal information, correct inaccurate information, withdraw consent, request deletion, object to certain processing, or raise concerns with a relevant authority.
These rights are not identical in every jurisdiction and may be subject to legal exceptions.
Requests should be submitted through the verified privacy contact. The operator may need to confirm identity before responding and should explain any applicable limitations or fees where permitted by law.
12. Children’s Privacy
The website is not intended to facilitate unlawful gambling by minors. Any age restrictions and eligibility requirements must be stated clearly and enforced in accordance with applicable law.
The operator should not knowingly collect children’s personal information in violation of applicable privacy requirements. If such information is discovered, it should be handled promptly and appropriately under the relevant legal framework.
13. Third-Party Websites
Links to external websites may be provided for convenience or reference. MBISLOT cannot automatically control the privacy practices of independent third parties.
Visitors should review third-party privacy notices before providing information. The operator should accurately describe any third-party services embedded in its website.
14. Changes to This Policy
This Privacy Policy may be updated to reflect changes in website features, service providers, legal requirements, or information-handling practices.
Material changes should be communicated through an appropriate notice where required. The publication date and latest revision date should be displayed, and users should be encouraged to review the policy periodically.
15. Contact and Complaints
For privacy enquiries, access requests, or concerns about information handling, use the verified privacy contact published on the official MBISLOT website.
The final published policy should identify the responsible operator, its contact address, and any relevant complaint or escalation procedure. Visitors may also have rights to contact an appropriate data protection authority under applicable law.
By providing information to a website, users should first review the applicable notices and understand how their information will be processed. Transparency, appropriate safeguards, and respect for individual rights should guide all personal data handling.