Data Protection & Privacy
At 123mbi, protecting your personal information is a core operational responsibility — not an afterthought. This Privacy Policy explains what personal data we collect, why we collect it, how we use and store it, and what rights you have over it. We encourage all 123mbi users, particularly those in Malaysia, to read this document carefully before creating an account or making use of our platform.
All data transmissions between you and 123mbi are protected by industry-standard SSL/TLS encryption.
Your personal information is never sold to third parties. Period.
Our data practices are aligned with international data protection standards applicable to Malaysian users.
We document every category of data we collect and the specific purpose each category serves.
Access, correct, or request deletion of your data at any time by contacting our support team.
We retain data only as long as operationally or legally necessary, then securely dispose of it.
This Privacy Policy ("Policy") is issued by 123mbi ("Company", "we", "us", "our"), the operator of the online gaming and sports betting platform accessible at https://123mbi.cam. It applies to all personal data collected from users ("User", "Player", "you") who access, register on, or interact with the 123mbi Platform in any capacity.
123mbi serves primarily the Malaysian market. Our platform operates in Malaysian Ringgit (MYR), integrates with Malaysian payment providers including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and major Malaysian banks (Maybank, CIMB, Public Bank, Hong Leong Bank), and is tailored to the preferences and regulatory context of Malaysian users. As such, the data practices described in this Policy reflect both our international licensing obligations and our particular responsibilities toward our Malaysian user base.
Important: By accessing the 123mbi Platform, registering an account, or submitting any personal information to us, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, processing, and use of your personal data as described herein. If you do not agree with any part of this Policy, you should cease using the Platform immediately.
This Policy should be read alongside our Terms & Conditions and our Responsible Gambling Policy, each of which forms part of the overall agreement governing your use of 123mbi.
The following terms carry the meanings set out below throughout this Privacy Policy:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information that identifies or can reasonably be used to identify a living individual, including name, identification number, contact details, financial information, and device identifiers. |
| "Processing" | Any operation performed on Personal Data — including collection, storage, use, disclosure, transfer, amendment, or deletion — whether by automated means or otherwise. |
| "Data Controller" | 123mbi, as the entity that determines the purposes and means of processing Personal Data collected through the Platform. |
| "Data Processor" | A third-party service provider that processes Personal Data on behalf of 123mbi under a contractual data processing arrangement. |
| "KYC Data" | Identity and address verification documents submitted by a Player in fulfilment of Know Your Customer obligations, including government-issued ID and proof of address. |
| "Cookies" | Small text files placed on a User's device by the Platform to facilitate functionality, session management, analytics, and personalisation. |
| "Platform" | The 123mbi website at https://123mbi.cam and all associated features, services, and digital interfaces. |
123mbi collects personal data across several categories. The specific data collected depends on how you interact with the Platform.
When you create a 123mbi account, we collect:
To comply with our anti-money laundering (AML) obligations and to verify that all players meet the 21+ age requirement, we collect:
For every deposit and withdrawal processed through the Platform, we record:
123mbi collects personal data through the following channels:
We process your personal data for the following clearly defined purposes:
| Purpose | Data Categories Used |
|---|---|
| Account creation & management | Registration data, device data, communications data |
| Age verification (21+ requirement) | Date of birth, KYC identity documents |
| Identity & AML compliance (KYC) | KYC data, financial transaction data, gaming activity data |
| Processing deposits & withdrawals | Financial transaction data, registration data, KYC data |
| Delivering gaming services | Gaming activity data, device data, registration data |
| Fraud prevention & security | Device data, financial transaction data, gaming activity data, KYC data |
| Responsible gambling monitoring | Gaming activity data, communications data, registration data |
| Customer support & dispute resolution | Communications data, gaming activity data, financial transaction data |
| Marketing & promotional communications | Registration data, communications data, gaming activity data (opt-in only) |
| Platform improvement & analytics | Device data, gaming activity data (aggregated, anonymised where possible) |
| Legal & regulatory obligations | All categories, as required by applicable law or licensing authority |
123mbi processes your personal data on the following legal grounds, each applicable to the specific purposes described in Section 5:
The majority of data processing activities are necessary to perform the contract between you and 123mbi — namely, the provision of online gaming and betting services as described in our Terms & Conditions. This includes account creation, processing financial transactions, and delivering gameplay services.
Certain processing activities — particularly KYC verification, AML transaction monitoring, and regulatory reporting — are required by 123mbi's international gaming licence obligations and applicable financial crime prevention frameworks. We have no discretion to waive these requirements.
We process limited categories of data on the basis of our legitimate business interests, including fraud detection, platform security monitoring, responsible gambling risk identification, and platform performance analytics. In each case, we conduct a balancing assessment to ensure that our legitimate interests do not override your privacy rights.
Where processing is not covered by the above grounds — in particular, marketing communications beyond transactional service messages — we will request your explicit consent. You may withdraw marketing consent at any time by contacting support at [email protected] or using the unsubscribe mechanism in any marketing email.
123mbi does not sell your personal data. We share personal data only in the following circumstances and with the following categories of recipients:
Financial transaction data is necessarily shared with our payment processing partners — including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX banking networks, and cryptocurrency processing infrastructure — to complete deposit and withdrawal requests. Each payment partner operates under its own privacy policy and applicable financial services regulation.
KYC documentation may be processed by contracted third-party identity verification service providers who assist 123mbi in fulfilling its mandatory verification obligations. These providers are contractually bound to process data solely for verification purposes and under equivalent data protection standards.
Certain gameplay data — including session identifiers and game round outcomes — is shared with licensed game providers who supply the gaming content available on the 123mbi Platform. This sharing is limited to what is technically necessary to deliver and audit the gaming service.
To protect the integrity of the Platform and its users, limited personal data may be shared with fraud detection and risk scoring service providers. These providers operate under strict confidentiality and data processing agreements.
123mbi may disclose personal data to regulatory authorities, law enforcement agencies, or courts of competent jurisdiction where disclosure is required by applicable law, a valid court order, a regulatory authority instruction, or is necessary to protect the rights and safety of 123mbi or third parties. We will notify affected users of such disclosure where legally permitted to do so.
In the event of a merger, acquisition, or sale of all or a substantial part of 123mbi's assets, personal data held by the Company may be transferred to the acquiring entity as part of the transaction. Users will be notified of any such transfer and the privacy terms applicable to their data following completion.
No Sale of Personal Data: Under no circumstances does 123mbi sell, rent, lease, or otherwise trade your personal data to third-party marketers, data brokers, or any unaffiliated commercial entities for their independent use.
123mbi operates on an international platform infrastructure. As a result, your personal data may be stored or processed in jurisdictions outside Malaysia, including the jurisdiction where our licensing authority is based and wherever our contracted data processors operate their infrastructure.
When transferring personal data internationally, 123mbi takes appropriate safeguards to ensure that the receiving jurisdiction provides adequate data protection standards, or implements contractual protections (such as standard contractual clauses or equivalent binding mechanisms) with recipient parties to ensure your data is handled with appropriate care.
Your Acknowledgement: By using the 123mbi Platform, you acknowledge that your personal data may be transferred to and stored in jurisdictions other than Malaysia. We will always handle such transfers in accordance with applicable data protection standards and the commitments set out in this Policy.
123mbi retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or licensing obligations. The following indicative retention periods apply:
| Data Category | Retention Period |
|---|---|
| Account registration data | Duration of active account, plus 5 years following account closure. |
| KYC & identity documents | Duration of active account, plus a minimum of 5 years post-closure to satisfy AML regulatory requirements. |
| Financial transaction records | Minimum 7 years from the date of transaction, in line with standard financial record-keeping requirements. |
| Gaming activity logs | Duration of active account, plus 3 years following account closure. |
| Support & communications data | 3 years from the date of the last communication or dispute resolution. |
| Marketing preference records | Until withdrawal of consent, or 3 years from last interaction, whichever is sooner. |
| Technical & device logs | Up to 12 months, unless retention is required for fraud investigation or legal proceedings. |
Upon expiry of applicable retention periods, personal data is securely deleted or anonymised such that it can no longer be used to identify any individual.
123mbi implements a layered security framework to protect personal data from unauthorised access, accidental loss, disclosure, alteration, or destruction. Our security measures include:
Notwithstanding these measures, no online system can guarantee absolute security. In the event of a data breach that poses a significant risk to your rights and freedoms, 123mbi will notify affected users and relevant authorities as required under applicable data breach notification obligations, without undue delay.
The 123mbi Platform uses cookies and similar tracking technologies to enable core functionality, improve user experience, and support security and analytics operations.
| Cookie Type | Purpose |
|---|---|
| Strictly Necessary | Required for core Platform functions — session management, login state maintenance, and security token validation. Cannot be disabled without impairing Platform functionality. |
| Functional | Remember user preferences such as language settings, game filters, and display options to provide a personalised experience across sessions. |
| Analytics | Aggregate data on how users navigate the Platform — pages visited, session duration, feature usage — to inform platform improvements. Data is anonymised where possible. |
| Security | Detect fraudulent login attempts, unusual account activity, and cross-site request forgery (CSRF) attacks. These cookies are integral to Platform security. |
You may configure your browser to block or delete cookies at any time. However, please be aware that disabling strictly necessary cookies will impair your ability to use core Platform features, including account login and financial transactions. Analytics and functional cookies can be disabled without affecting core access. Browser-specific cookie management instructions are available in your browser's help documentation.
Subject to applicable data protection law and legitimate limitations (such as AML retention obligations), you hold the following rights in respect of your personal data held by 123mbi:
Request a copy of the personal data we hold about you, along with information on how it is being used.
Request correction of any inaccurate or incomplete personal data held in your account or our records.
Request deletion of your personal data where it is no longer necessary, subject to overriding legal retention obligations (e.g., AML record-keeping requirements).
Request that we limit how we use your data in certain circumstances — for example, while a correction request is pending.
Request your personal data in a structured, machine-readable format for transfer to another controller where technically feasible.
Object to processing based on legitimate interests, including direct marketing. Marketing objections are honoured immediately upon receipt.
To exercise any of the above rights, please contact our Data Protection team at [email protected] with the subject line "Data Rights Request". We will acknowledge your request within forty-eight (48) hours and provide a substantive response within thirty (30) calendar days. Complex requests may require up to sixty (60) days; we will inform you if an extension is necessary.
Identity Verification: To protect your privacy, we may require you to verify your identity before processing a data rights request. This typically involves confirming your registered email address and one additional piece of identifying information.
The 123mbi Platform is strictly for individuals aged twenty-one (21) years and above. We do not knowingly collect personal data from persons under the age of 21. All registration attempts are subject to date-of-birth verification, and KYC documentation confirming age is mandatory before withdrawal facilities are activated.
If 123mbi becomes aware that personal data has been collected from an individual who is below the minimum age requirement, that data will be deleted without delay, the associated account will be suspended, and any deposits will be returned to the originating payment method following appropriate verification.
If you believe a minor may have accessed the Platform using false information, please contact us immediately at [email protected].
The 123mbi Platform does not include outbound links to third-party websites for promotional or commercial purposes. Any third-party services integrated into the Platform — such as payment gateways (Touch 'n Go, Boost, GrabPay, DuitNow, FPX bank portals) and game provider interfaces — operate under their own privacy policies.
When you interact with a third-party payment interface (for example, the Maybank or CIMB online banking portal accessed via FPX), your data submission to that interface is governed by that provider's privacy policy, not this one. 123mbi is not responsible for the data practices of third-party providers. We recommend reviewing the privacy policy of any third-party service you access in connection with your 123mbi account.
123mbi reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in our data practices, applicable law, regulatory requirements, or platform functionality. The date of the most recent revision is displayed at the top of this page.
Where amendments are material — for example, changes to the categories of data collected, new sharing arrangements with third parties, or changes to your rights — we will provide advance notice to registered users via email or an in-platform notification, typically at least fourteen (14) days before the changes take effect.
Your continued use of the 123mbi Platform following the effective date of any amended Policy constitutes your acceptance of those changes. We encourage you to review this page periodically to remain informed of our current data practices. The current version is always available at https://123mbi.cam/privacy-policy.
For all privacy-related queries, data rights requests, concerns regarding our data practices, or to report a suspected data security incident, please contact the 123mbi Data Protection team using the details below:
Response Time
Acknowledgement within 48 hours
Full response within 30 calendar days
Support Hours
24 hours a day, 7 days a week
Including Malaysian public holidays
For general account support queries not related to privacy or data protection, please visit our FAQ page. For information on self-exclusion, deposit limits, or responsible gambling support, please visit our Responsible Gambling page.
Our team is available 24/7 to address any privacy concerns, process data rights requests, or simply clarify how 123mbi handles your personal information.
For players aged 21 and above only. Please play responsibly. 🔞