Reference

How mbigaming Handles Your Personal Information

This Privacy Policy sets out exactly what data we collect when you use your mbigaming account, how we use it, and what rights you hold over it.

Account data protectionPayment channel privacyCookie controlsYour right to access dataData retention clarity
mbigaming How mbigaming Handles Your Personal Information
PRIVACY CONTACT PATHS

How to Reach Us About Your Data

Have a question about your personal data or want to make a formal request? We have three contact paths available. Each one connects you directly to the team that handles account and data matters — not a generic helpdesk. Response times vary by channel, but every data request is logged and tracked from the moment you send it.

Live Chat Start a live chat session from your account dashboard. This is the quickest route for account-specific data questions, including access requests and correction queries.
Email Support Send a written data request to our support email address. Use this channel for formal deletion requests or detailed data-handling queries that need a documented response trail.
Account Settings Some data preferences — such as marketing communication opt-outs and cookie settings — can be managed directly inside your account settings without contacting support at all.
DATA HANDLING STANDARDS

How We Protect and Manage Your Account Data

Data handling at mbigaming is built around four practical areas: how we secure payment data, how cookies work on your device, how long we retain your records, and how you can request changes. These are not abstract commitments — each area has a specific process behind it that the sections below describe clearly.

Payment Data Security Transaction references from Touch 'n Go eWallet, Boost, and GrabPay are stored with encryption. We never retain full card numbers and do not log your e-wallet PIN at any point.
Cookie Controls We use session cookies to keep you logged in and analytics cookies to understand how the platform is used. You can adjust cookie preferences via the consent banner on first visit or inside your browser settings.
Data Retention Period Active account data is retained while your account is open. After account closure, we keep records only as long as required by applicable law, then remove or anonymise them on a rolling schedule.
Requesting Changes or Deletion You can request access to your stored data, ask us to correct inaccuracies, or apply for deletion via live chat or email. We acknowledge every request within a reasonable period and update you on its status.

Common Questions About Your Privacy Rights

These are the data and privacy questions we hear most often from account holders. Each answer reflects the actual process we follow — not a generic policy summary.

We collect your name, email address, contact number, and the payment reference details linked to the wallet or bank channel you use — for example, a Touch 'n Go eWallet transaction ID or a DuitNow reference.

We share data only with payment processors needed to complete your deposit or withdrawal, and with any authority that legally requires it. We do not sell your data to advertisers or unrelated third parties.

Send a data access request through live chat or to our support email. We will verify your identity against your registered account, then provide a summary of the personal data we hold on file.

Yes. Submit a deletion request via email or live chat. We will process it after confirming your identity. Some records may need to be retained for a period required by law before full deletion can occur.

We store only the transaction reference and amount — not your wallet credentials or PIN. Boost and GrabPay payments are processed through encrypted channels, and those references are retained only for the legally required period.

After closure, your data moves into a retention hold for the period required by applicable law. Once that period ends, your records are removed or anonymised. You will not receive marketing from us after closure.
Reference

Privacy Policy

Service availability depends on eligible regions and local law. Users should check local rules before opening an account.

Access may be available only where local law permits.