MBISLOT respects the importance of personal information and aims to explain how information may be collected, used, stored, and disclosed when visitors access our website.

This Privacy Policy applies to personal information processed through the MBISLOT website and any associated services that are genuinely operated by the same website owner. Different services may have separate privacy notices, and visitors should review those notices where applicable.

This document is a general template. The website owner must adapt it to actual data practices, identify the responsible legal entity, and verify compliance with applicable Malaysian privacy legislation and other relevant requirements before publication.

2. Information We May Collect

The categories of information collected depend on the website features that are actually available.

Information Provided by Visitors

If visitors submit a contact form or send an email, we may receive information such as their name, email address, enquiry details, and any other information they voluntarily include.

Visitors should avoid sending passwords, banking credentials, payment card security codes, or unnecessary identity documents through ordinary contact channels.

Technical Information

When visitors access a website, certain technical information may be processed automatically. Depending on the hosting environment and configuration, this may include an IP address, browser type, device information, operating system, pages visited, access times, and diagnostic records.

This information may help with website operation, troubleshooting, performance monitoring, and security.

Cookies and Similar Technologies

The website may use cookies or similar technologies if these are configured. Such technologies may support essential website functions, remember preferences, measure website traffic, or provide other disclosed functions.

The actual cookies used should be identified in an appropriate cookie notice or settings interface. Non-essential cookies should be handled according to applicable consent and privacy requirements.

3. How We Use Information

Where lawful and appropriate, information may be used to respond to enquiries, maintain website functionality, troubleshoot technical issues, protect against fraud, monitor security, improve website content, and meet applicable legal obligations.

We should not use personal information for unrelated purposes without an appropriate lawful basis or required consent. If information is used for marketing, the website owner should explain that use and provide any opt-out mechanism required by applicable law.

4. Legal Basis and Consent

The lawful basis for processing depends on the information, the purpose, and the relevant jurisdiction. Depending on applicable law, processing may rely on consent, contractual necessity, legal obligations, or another recognised basis.

Where consent is required, it should be obtained appropriately. Visitors should receive clear information about what they are agreeing to and how consent may be withdrawn where applicable.

5. Disclosure to Third Parties

Personal information may be shared with service providers when necessary for legitimate website operations. Examples may include hosting providers, technical support companies, security providers, or communication services.

Any disclosure should be limited to what is necessary and governed by appropriate safeguards. Information may also be disclosed when required by law or when a lawful request from a competent authority must be fulfilled.

The website owner should identify relevant third-party services where required and must not claim that information is never shared unless that statement accurately reflects actual practice.

6. International Data Transfers

Some service providers may process information in countries outside Malaysia. Where international transfers occur, the website owner should assess the applicable legal requirements and implement the necessary safeguards.

Visitors should be informed of relevant transfer practices when required by law. The location of hosting systems and third-party processing services should be verified before this section is finalised.

7. Data Retention

Personal information should be retained only for as long as necessary for the disclosed purpose, subject to applicable legal obligations and legitimate recordkeeping requirements.

Retention periods may vary depending on the type of information. Contact enquiries, technical logs, and legal records may require different retention periods.

When information is no longer needed, it should be securely deleted, anonymised, or otherwise handled in accordance with applicable requirements.

8. Data Security

We aim to support appropriate security practices for personal information processed through the website. Depending on the actual environment, safeguards may include access controls, secure connections, software updates, backups, and monitoring for suspicious activity.

No online system can be guaranteed to be completely secure. Visitors should use caution when sharing information online and should not reuse passwords across important accounts.

Security measures must be accurately described. The website owner should not claim to use a particular certification or technology unless it has been verified.

9. Visitors’ Privacy Rights

Depending on applicable law, individuals may have rights relating to access, correction, withdrawal of consent, deletion, or other aspects of their personal information.

Requests should be sent through the verified privacy contact published on the website. The operator may need to confirm the requester’s identity and assess any applicable legal exceptions before responding.

Contact details for privacy requests should be added before publication.

10. Children’s Privacy

The website is not intended to encourage underage participation in gambling. Visitors must comply with applicable age restrictions and local law.

The website owner should not knowingly collect children’s personal information unlawfully. If information is found to have been collected inappropriately, it should be handled according to applicable legal requirements.

11. Third-Party Websites

MBISLOT may contain links to external websites if the operator chooses to include them. External websites operate under their own policies and practices.

Visitors should review the privacy notice of an external website before providing information. MBISLOT cannot automatically guarantee the accuracy, security, or privacy practices of third-party services.

12. Changes to This Policy

This Privacy Policy may be updated when website features, data practices, or legal requirements change. The revised version should display an updated effective date.

Material changes should be communicated in an appropriate way when required by applicable law.

13. Contact Information

For privacy-related enquiries, contact the website operator using the verified privacy email address published on the website.

The operator should insert its legal name and relevant contact details before this policy is published.

14. Malaysian Legal Considerations

The website owner should assess the application of Malaysia’s Personal Data Protection Act 2010, including amendments and requirements in force at the relevant time, as well as any other applicable laws.

This policy is intended as a general information template and does not constitute legal advice. Actual processing practices and legal obligations should be reviewed by a qualified professional before publication.