Personal Data Protection

Mby77 Privacy Policy – Your Data Is Safe With Us

Your privacy is more than a legal obligation to mby77 – it is a genuine commitment. This Privacy Policy document transparently explains how we collect, store, use, and protect your personal information as an mby77 member in Malaysia. Please take a moment to read it.

Updated: 1 January 2026  |  Version 3.1  |  PDPA 2010 Compliant

Mby77's Privacy Commitment to You

Six ways we protect Malaysian members' personal data

256-bit SSL encryption

All data transmitted between your device and mby77's servers is protected by industry-standard 256-bit SSL encryption. Your login credentials, payment details, and personal data remain inaccessible to third parties during transmission.

Secure Data Storage

Your personal data is stored on servers protected by multi-layered firewalls and intrusion detection systems. Access to member personal data is restricted to authorised personnel only and is fully logged.

No Data Sales

Mby77 has never and will never sell, rent, or trade your personal information to third parties for marketing purposes. Your data belongs to you, and we uphold this right fully without exception.

PDPA 2010 Compliance

Mby77's Privacy Policy is designed to fully comply with Malaysia's Personal Data Protection Act (PDPA) 2010. We respect your right to access, correct, and delete your personal data in accordance with the provisions of this law.

Full Privacy Control

You have full control over your personal data. Through your mby77 account settings, you can update your personal information, manage your marketing communication preferences, and request account deletion along with all associated data.

Data Breach Notification

In the event of a data breach affecting your personal information, mby77 is committed to notifying you within 72 hours via your registered email, in line with global data protection industry best practices.

Quick Summary: mby77 collects your personal data solely for legitimate purposes – managing your account, processing payments, and improving your experience. We do not sell your data. You may request access to, correction of, or deletion of your data at any time. This Privacy Policy complies with Malaysia's Personal Data Protection Act (PDPA) 2010.

1. Introduction

Mby77 ("we", "platform", or "mby77.com") values the privacy of every member who uses our services. This Privacy Policy transparently outlines our practices regarding the collection, use, storage, and protection of your personal data as a user of the mby77 online entertainment platform in Malaysia.

By registering an account and using mby77's services, you agree to the practices described in this Privacy Policy. This Policy forms part of the Terms & Conditions mby77 and should be read together. In the event of any conflict between these two documents on matters relating to privacy, this Privacy Policy shall take precedence.

We reserve the right to update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. You will be notified of any significant changes via your registered email or an in-platform notification.

2. Types of Personal Data We Collect

Mby77 only collects personal data that is necessary to deliver our services effectively and to meet legal requirements. The following are the categories of data we collect:

2.1 Identity Information

  • Full name as stated on your Malaysian identity card (MyKad)
  • National identity card (IC) number or passport number
  • Date of birth and gender
  • Facial image (for the KYC – Know Your Customer process)

2.2 Contact Information

  • Active email address
  • Malaysian mobile phone number
  • Current residential address

2.3 Financial Information

  • Payment account details (Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, FPX)
  • Records of deposit and withdrawal transactions in MYR
  • Financial activity history within your mby77 account

2.4 Technical & Usage Data

  • IP address and geographic location (state in Malaysia)
  • Device type, operating system, and web browser
  • Log data: login time, gaming activity, session duration
  • Cookies and similar tracking technology data
Data Category Example Required?
Identity Name, IC number, date of birth Yes
Relationship Email, phone Yes
Finance Payment method, transaction records Yes (for deposits/withdrawals)
Technical IP, device, cookies Automatic
Preferences Promotional preferences, language No

3. How We Collect Your Personal Data

Your personal data is collected through the following methods:

  1. Account Registration: Information you provide when completing the mby77 registration form, including your name, email, phone number, and date of birth.
  2. KYC Process: The identity documents you uploaded during the identity verification process, including copies of your MyKad or passport.
  3. Financial Transactions: Information shared during the deposit or withdrawal process via Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, or FPX.
  4. Platform Usage: Technical data collected automatically when you use the mby77 website, including IP address, device type, and gaming activity.
  5. Communications with Us: Information you share when contacting the mby77 support team via live chat, email, or WhatsApp.
  6. Cookies & Tracking Technologies: Data collected automatically via cookies and similar technologies as you browse the mby77 platform.

mby77 does not collect personal data from third-party sources without your knowledge, except where required by law, such as anti-money laundering (AML) checks.

4. How We Use Your Personal Data

Mby77 uses your personal data solely for legitimate, specified purposes. The following are the primary purposes for which your data is used:

4.1 Account Management

We use your identity and contact information to create and manage your mby77 account, process secure logins, and give you access to all available games and services — from slots, Live Casino, poker, and table games to Sports Betting on the Malaysia Super League and EPL.

4.2 Payment Processing

Your financial information is used to securely process deposits and withdrawals in MYR through your chosen payment method. This includes transaction verification and financial fraud prevention.

4.3 Identity Verification (KYC)

Your identity data is used to comply with legal requirements related to age verification (18 and above) and anti-money laundering (AML) obligations mandated in Malaysia.

4.4 Platform Security

Technical data such as IP addresses and activity logs are used to detect and prevent fraudulent activity, unauthorised access, multiple account usage, and any security threats to the mby77 platform and its members.

4.5 Service Communications

We use your contact information to send important account notifications, promotions, terms updates, and service announcements. You may opt out of marketing communications at any time through your account settings.

4.6 Platform Improvements

Anonymised usage data is used to analyse usage patterns, identify technical issues, and improve the overall user experience on the mby77 platform.

5. Disclosure of Data to Third Parties

Mby77 does not sell, rent, or disclose your personal data to third parties for marketing purposes. However, we may share your data in the following limited circumstances:

  • Payment Service Providers: Payment gateway providers such as Touch 'n Go, GrabPay, DuitNow, and FPX receive the data required to process your financial transactions.
  • Gaming Service Providers: Third-party game software providers that supply slots, Live Casino, and poker games on the mby77 platform may receive the session data needed to run those games.
  • Legal Authority: We may be required to disclose your information to Malaysian authorities if mandated by a court order, warrant, or applicable legal provision.
  • Identity Verification Services: Third-party KYC service providers who assist us in verifying member identities in accordance with legal requirements.
  • Auditors & Consultants: Professional consultants such as accountants, lawyers, and auditors who are bound by professional confidentiality obligations.

mby77 Guarantee: All third parties who receive your data are required to meet security and privacy standards equal to or exceeding those of mby77. We conduct due diligence reviews on all third-party partners before sharing any member personal data.

6. Personal Data Security

Mby77 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, loss, misuse, or inadvertent disclosure:

6.1 Technical Security

  • 256-bit SSL/TLS encryption for all data transmissions
  • Encryption of data at rest for sensitive information
  • Multi-layered firewalls and intrusion detection systems (IDS)
  • Periodic security vulnerability scanning by independent third parties
  • Two-factor authentication (2FA) is available for all member accounts

6.2 Organisational Security

  • Access to members' personal data is restricted to staff who require it to carry out their duties only
  • All staff undergo regular data security awareness training
  • Non-disclosure agreements (NDAs) are required for all staff and contractors
  • Internal security audits are conducted on a regular basis

While we take all reasonable steps to protect your data, no security system can be guaranteed 100% secure. You also play an important role in keeping your account safe by using a strong password and not sharing your login credentials.

7. Cookies & Tracking Technologies

Mby77 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you browse our website.

7.1 Types of Cookies We Use

  • Essential Cookies: Required for core platform functions such as login sessions and security. These cookies cannot be disabled.
  • Performance Cookies: Collecting information on how you use the mby77 platform to help us improve performance and usability.
  • Functional Cookies: Saves your preferences such as language and display settings to deliver a more personalised experience.
  • Analytics Cookies: Used to understand aggregated, anonymised platform usage patterns for improvement purposes.

7.2 Managing Cookies

You can control and manage cookies through your web browser settings. However, disabling certain cookies may affect the functionality and your experience on the mby77 platform. For more information on managing cookies, please refer to your web browser's help documentation.

8. Your Rights Under PDPA 2010

As a data subject under Malaysia's Personal Data Protection Act (PDPA) 2010, you have the following rights regarding your personal data held by mby77:

Right of Access

You have the right to request a copy of the personal data we hold about you. Requests will be processed within 21 business days.

Right to Rectification

You have the right to request correction of any inaccurate or incomplete personal data via your account settings or customer support.

Right to Erasure

You may request the deletion of your account and personal data, subject to any applicable legal retention obligations.

Right to Object

You have the right to object to the processing of your personal data for direct marketing purposes at any time, without penalty.

Data Portability Rights

You have the right to receive your personal data in a machine-readable format for transfer to another service provider.

Right to Withdraw Consent

Where processing is based on your consent, you may withdraw that consent at any time without affecting the validity of any processing carried out prior to withdrawal.

How to Submit a Request: To exercise any of the above rights, please contact our privacy team at support@mby77.com with the subject line "PDPA Rights Request". We will verify your identity before processing any request to safeguard your data security.

9. Data Retention Period

Mby77 retains your personal data for as long as necessary to fulfil the purposes for which it was collected and to comply with legal obligations. The following are our general data retention guidelines:

  • Active Account Data: Retained for as long as your account remains active on the mby77 platform.
  • Closed Account Data: Stored for a minimum of 7 years after account closure to comply with Malaysia's financial and audit regulatory requirements.
  • Financial Transaction Records: Stored for 7 years in accordance with the requirements of Malaysia's Anti-Money Laundering Act 2001.
  • Security Logs: Stored for 90 days and automatically deleted thereafter unless an active investigation is ongoing.
  • Support Communication Data: Stored for 2 years after the last interaction.

Once the applicable retention period has expired, your personal data will be securely deleted or anonymised in accordance with approved data disposal procedures.

10. Children's Privacy

The mby77 platform is strictly for individuals aged 18 years and above. We do not knowingly collect personal data from individuals under the age of 18. If you believe your minor child has registered an mby77 account, please contact us immediately at support@mby77.com and we will take prompt action to delete the account and any associated data.

Mby77 enforces a strict age verification process at registration and upon the first withdrawal request. We are committed to keeping our platform free from underage users in compliance with Malaysian law and responsible gaming principles.

11. Amendments to the Privacy Policy

Mby77 reserves the right to update or amend this Privacy Policy at any time. When we make significant changes, we will notify you via:

  • Email notification to the address registered with your account
  • A prominent notice on the mby77 platform homepage for a minimum of 30 days
  • A notification in your account upon your next login

The "Updated" date shown at the top of this page indicates when the last amendment was made. Your continued use of the mby77 platform after any amendments are published will be considered your acceptance of the updated Privacy Policy.

We recommend reviewing this Privacy Policy periodically to stay informed about how we protect your personal information. The latest version is always available on this page.

12. Contact Our Privacy Team

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact us through the following channels:

  • Privacy Email: support@mby77.com (Subject: "Data Privacy Enquiry")
  • Live Chat: Available 24/7 via the mby77 platform
  • Target Response Time: Within 3 business days for general enquiries; 21 business days for formal PDPA rights requests

For more information about your rights under Malaysian data protection law, you may refer to the Department of Personal Data Protection (JPDP) Malaysia. For other general enquiries, please visit our FAQ us or check Terms & Conditions page.

Your Data Is Safe. Ready to Play?

Register with mby77 – Malaysia's Trusted Entertainment Platform

Over 500,000 Malaysian members trust mby77. Minimum deposit of just RM10 via Touch 'n Go, GrabPay, or DuitNow. Winnings processed within 15–30 minutes.

For users aged 18 and above only. Please read Responsible Gaming page.

Bahasa Melayu