Privacy Policy — mnbig33

Introduction

mnbig33 ("we", "us", "our", "the Platform") is committed to protecting the privacy and personal data of every individual who accesses or uses our online casino, sports betting, and gaming services available at mnbig33.cam. This Privacy Policy ("Policy") sets out how mnbig33 collects, uses, stores, shares, and protects your personal information in connection with your use of the Platform.

This Policy applies to all registered users ("Users", "Players", "you") of the mnbig33 platform, including prospective registrants who have provided personal information during a registration attempt, and visitors to the website who have not completed registration.

By registering an account, depositing funds, placing a wager, or otherwise using the mnbig33 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you should discontinue use of the Platform and request account closure through our support team.

Definitions

For the purposes of this Privacy Policy, the following terms have the meanings set out below:

• "Personal Data" means any information that identifies or could reasonably be used to identify a natural person, directly or indirectly, including name, identification number, contact information, location data, online identifiers, or factors specific to the physical, economic, cultural, or social identity of that person.
• "Processing" means any operation or set of operations performed on Personal Data, whether or not by automated means — including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" means mnbig33, the entity that determines the purposes and means of the processing of Personal Data collected through the Platform.
• "Data Processor" means any third party that processes Personal Data on behalf of mnbig33 under a written data processing agreement (for example, payment processors, cloud hosting providers, or KYC verification services).
• "KYC Data" means identity verification documents and information submitted by Users in satisfaction of Know Your Customer obligations, including copies of national identity documents (e.g., MyKad), proof of address, and selfie verification images.
• "Sensitive Personal Data" means a category of Personal Data warranting heightened protection, including financial account details, biometric data used for identification, and government-issued identification numbers.
• "Cookies" means small text files placed on your device when you access the Platform, used to remember your preferences, maintain session state, and support analytics and security functions.

Data We Collect

mnbig33 collects only the categories of Personal Data that are necessary for the operation of its services, compliance with applicable legal obligations, and the delivery of a secure and personalised user experience. The categories of data we collect include:

We do not collect or store full payment card numbers (PANs). All payment card transactions are tokenised through our payment service partners and are never stored on mnbig33's systems in unencrypted form.

How We Collect Your Data

4.1 Directly From You

We collect Personal Data directly from you when you: register an account on the Platform; submit KYC verification documents; make a deposit or withdrawal using Malaysian payment methods (Maybank2u, CIMB Clicks, DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Public Bank, Hong Leong Connect, or cryptocurrency channels); contact our support team via live chat or email; participate in promotions or loyalty programmes; or exercise any of your data rights under this Policy.

4.2 Automatically During Your Use of the Platform

When you access and interact with the mnbig33 platform, certain technical and usage data is collected automatically through cookies, web server logs, and similar tracking technologies. This includes your IP address, device identifiers, session data, and browsing behaviour within the Platform. This data is used to maintain platform security, optimise performance, prevent fraud, and deliver a personalised user experience.

4.3 From Third Parties

In limited circumstances, we may receive Personal Data from authorised third-party service providers, including: KYC verification agencies that supplement our identity verification process; payment processors that confirm transaction completion; fraud detection partners that flag suspicious access patterns; and regulatory authorities in the context of compliance investigations.

Legal Basis for Processing

mnbig33 processes your Personal Data under one or more of the following legal bases, depending on the nature of the processing activity:

1. Performance of a Contract: Processing is necessary to fulfil our obligations under the Terms & Conditions — including account creation, processing deposits and withdrawals, settling bets, and administering bonus programmes.
2. Legal Obligation: Processing is required to comply with applicable law, including anti-money laundering (AML) regulations, counter-terrorism financing (CTF) obligations, KYC requirements, and mandated reporting to regulatory authorities.
3. Legitimate Interests: Processing is carried out for purposes that serve our legitimate business interests, including fraud prevention, platform security, responsible gambling monitoring, internal analytics, and customer service quality assurance — provided such interests are not overridden by your fundamental rights.
4. Consent: For specific processing activities where no other legal basis applies — primarily direct marketing communications — we will seek and record your express consent. You may withdraw your consent at any time without affecting the lawfulness of any processing carried out prior to withdrawal.

How We Use Your Personal Data

mnbig33 uses the Personal Data it collects for the following specific purposes:

• Account administration: Creating, maintaining, and securing your user account; processing login requests; resetting credentials.
• Identity verification: Conducting KYC and age verification to confirm you are aged 21 or above and entitled to use the Services.
• Transaction processing: Receiving and processing deposits from Malaysian payment channels; executing withdrawal requests; maintaining transaction records.
• Gaming services delivery: Facilitating your participation in live casino games, slot games, sports betting markets (including EPL, Liga Super Malaysia, UFC, and other events), and promotional activities.
• Fraud prevention and platform security: Detecting, investigating, and preventing fraudulent activity, money laundering, multi-accounting, and other prohibited conduct.
• Responsible gambling monitoring: Identifying at-risk gambling patterns; administering self-exclusion, deposit limit, and session limit tools; complying with responsible gambling obligations.
• Customer support: Responding to enquiries, resolving disputes, and providing technical assistance via live chat and email.
• Legal compliance: Satisfying AML, CTF, tax reporting, and regulatory obligations applicable to our operations.
• Service improvement: Analysing usage patterns and player feedback to enhance platform features, game selection, and user experience.
• Marketing communications (with consent): Sending you personalised promotions, bonus offers, and platform updates via email or in-platform notifications where you have opted in to receive such communications.

Data Sharing & Disclosure

mnbig33 does not sell, rent, or trade your Personal Data to any third party for their own commercial or marketing purposes. We may share your Personal Data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:

7.1 Service Providers and Data Processors

We engage third-party service providers to support Platform operations under strict data processing agreements. These include payment processors handling transactions via DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Connect, and cryptocurrency networks; KYC and identity verification providers; cloud infrastructure and hosting providers; fraud detection and cybersecurity services; and customer communication platforms. All processors are contractually obligated to process your data only on our instructions and to maintain appropriate security measures.

7.2 Legal and Regulatory Authorities

Where required by applicable law, court order, or regulatory direction, mnbig33 may be required to disclose Personal Data to law enforcement agencies, financial intelligence units, tax authorities, or other competent governmental bodies. We will notify you of any such disclosure to the extent permitted by law.

7.3 Game Providers

Certain technical identifiers and anonymised gaming activity data may be shared with licensed game providers to support the delivery of games and to enable responsible gambling safeguards. No directly identifying Personal Data (such as your name or contact details) is shared with game providers without your knowledge.

7.4 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all assets of mnbig33, your Personal Data may be transferred to the acquiring entity as part of the transaction, subject to that entity assuming the data protection obligations set out in this Policy. You will be notified of any such transfer by email prior to its completion.

Cookies & Tracking Technologies

The mnbig33 Platform uses cookies and similar tracking technologies to operate effectively and securely, and to provide you with a personalised experience. The following categories of cookies are used:

• Strictly necessary cookies: Essential for the Platform to function. These include session authentication tokens, security cookies, and load-balancing identifiers. These cannot be disabled without impairing your ability to use the Platform.
• Functional cookies: Remember your preferences such as language settings, preferred game lobby view, and responsible gambling limits you have set. These improve your experience but are not essential.
• Performance and analytics cookies: Collect anonymised information about how Users interact with the Platform — which pages are visited most frequently, session durations, and error rates — to help us improve overall performance.
• Security cookies: Used to detect and prevent fraudulent access attempts, bot activity, and multi-account circumvention.

You may manage cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. mnbig33 does not use cookies to serve third-party advertising on the Platform.

Data Retention

mnbig33 retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal or regulatory obligations. The following indicative retention periods apply:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with AML record-keeping requirements.
• Transaction records: Financial transaction data is retained for a minimum of seven (7) years to satisfy financial reporting and audit obligations.
• KYC documents: Retained for a minimum of five (5) years after account closure or the last transaction date, whichever is later.
• Gaming activity logs: Retained for a minimum of three (3) years for dispute resolution, responsible gambling monitoring, and regulatory compliance purposes.
• Support and communications records: Retained for three (3) years from the date of last contact.
• Marketing consent records: Retained for the duration of consent plus three (3) years to demonstrate compliance.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in accordance with our data destruction procedures.

Data Security

mnbig33 implements a comprehensive, layered approach to data security, combining technical, administrative, and physical safeguards to protect your Personal Data against unauthorised access, disclosure, alteration, or destruction.

Our security measures include:

• AES-256 encryption for all Personal Data at rest within our systems;
• TLS 1.3 encryption for all data transmitted between your device and the Platform;
• Multi-factor authentication available on all User accounts and mandatory for all administrative access;
• Network segmentation and firewalls isolating sensitive data environments from public-facing infrastructure;
• Regular penetration testing and vulnerability assessments conducted by independent cybersecurity specialists;
• Role-based access controls ensuring that KYC documents and financial data are accessible only to authorised compliance and finance personnel;
• Incident response procedures including breach notification protocols in the event of a data security incident.

Your Rights Over Your Personal Data

You have the following rights with respect to your Personal Data held by mnbig33. To exercise any of these rights, please contact our Data Protection team at [email protected] with the subject line "Data Rights Request — [Your Username]". We will respond to all verified requests within 30 days.

• Right of Access: You have the right to request a copy of the Personal Data we hold about you, along with information about how it is used and with whom it is shared.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete Personal Data we hold about you.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to Restriction of Processing: You may request that we restrict the processing of your data in certain circumstances — for example, while you contest its accuracy or object to its use.
• Right to Data Portability: Where processing is based on your consent or contract performance, you may request a copy of your Personal Data in a structured, machine-readable format for transfer to another service provider.
• Right to Object: You have the right to object to processing based on legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your rights.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

Please note that certain rights may be limited where mnbig33 has mandatory legal obligations to retain data — for example, AML record-keeping requirements that prevent deletion of transaction records within statutory retention periods. We will always explain any limitations when responding to your request.

Children & Minors

The mnbig33 platform is strictly restricted to individuals who are 21 years of age or older. We do not knowingly collect or process Personal Data from persons under the age of 21. If we become aware that Personal Data has been collected from a minor, we will immediately close the associated account, delete all related Personal Data, and report the matter to the relevant authority where required.

If you believe that a minor may have accessed the mnbig33 platform or provided their Personal Data to us, please contact us immediately at [email protected]. We will take prompt and decisive action.

Third-Party Links & Services

The mnbig33 Platform may, from time to time, reference or interact with third-party services — including payment processors such as Maybank2u, CIMB Clicks, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Public Bank, Hong Leong Connect, and cryptocurrency networks — whose privacy practices are independent of this Policy.

While we engage only with reputable, security-assessed payment and service partners, mnbig33 is not responsible for the privacy practices or data security of third-party services accessed via those integrations. We encourage you to read the privacy policy of any third-party service provider you interact with in connection with your use of mnbig33.

Changes to This Privacy Policy

mnbig33 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made, we will publish an updated Policy on this page and update the "Last Updated" date.

Where changes significantly affect how your Personal Data is processed, we will notify registered Users by email at least 14 days prior to the changes taking effect. Your continued use of the Platform following the effective date of the revised Policy constitutes acceptance of the updated terms.

We recommend reviewing this Policy periodically — particularly before making deposits or engaging with any new platform feature that may involve data collection.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data by mnbig33, please contact us through the following channels:

• Data Rights Requests: Email [email protected] with subject "Data Rights Request — [Your Username]"
• Privacy Concerns: Email [email protected] with subject "Privacy Concern — [Your Username]"
• Live Chat: Available 24/7 through the support widget on the mnbig33 Platform — type "Privacy" to route your message to the appropriate team
• General Support: Our 24/7 customer support team handles all initial queries and will escalate data protection matters to our compliance team within one business day

We are committed to responding to all data-related requests within 30 calendar days. Complex requests may require additional time, in which case we will notify you of the extended timeline and reason for the delay.