MB8MY Privacy Policy – Personal Data Protection for Malaysian Members

This Privacy Policy is issued by MB8MY ("we", "platform") and applies to all users and registered members who access or use MB8MY's services through mb8my.click and all related platforms operated by us.

As an online betting platform operating in Malaysia and serving Malaysian users, mb8my understands how important data privacy is to you. The trust you place in us when you register an account and use our services is a responsibility we take seriously every day — not just on paper.

This document clearly and transparently sets out: what personal data we collect from you, why we need it, how we use it, who we share it with (if anyone), how long we retain it, and what rights you have over that data. We encourage you to read this document carefully and to contact us if any part is unclear.

This Privacy Policy forms part of the overall agreement between you and MB8MY, and should be read together with Terms & Conditions our platform.

Mb8my collects various types of personal data from you through a number of channels. Below is a full breakdown of the types of data we collect and how they are collected:

2.1 Data You Provide Directly

This is information you personally enter into the MB8MY platform:

2.2 Automatically Collected Data

When you use the MB8MY platform, our systems automatically record certain technical information:

• IP address and approximate location (country/state only, not precise address)
• Device type, operating system and web browser version used
• Pages visited, time spent on each page and navigation patterns within the platform
• Time and date of each login session
• Cookie information and device identifiers (discussed in Section 7)
• Technical logs related to platform usage for debugging purposes

2.3 Betting Activity Data

Mb8my records all betting activity on the platform for the purposes of bet settlement, dispute resolution, and regulatory compliance:

• Complete history of all bets placed, including stakes, odds and outcomes
• Deposit and withdrawal history, including payment methods used (Touch 'n Go eWallet, GrabPay, DuitNow, FPX, Boost, ShopeePay)
• Records of all bonuses claimed and their wagering requirement status
• Deposit limit settings and history of responsible gambling setting changes

Mb8my uses your personal data for the following legitimate and specific purposes:

3.1 Account Management & Platform Operations

• Creating, verifying and managing your MB8MY member account
• Verifying your identity and age during registration and the KYC process
• Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow and FPX, as well as withdrawals to your Malaysian bank account
• Settling bets, calculating winnings and managing account balances
• Sending important account notifications such as deposit confirmations, withdrawal updates, and security alerts

3.2 Security & Fraud Prevention

• Detecting and preventing fraudulent activity, money laundering and platform abuse
• Verifying that each member holds only one active account
• Monitoring suspicious betting patterns to protect market integrity
• Verifying identity before processing withdrawals that exceed a specified threshold

3.3 Legal & Regulatory Compliance

• Meeting compliance requirements under Malaysia's Personal Data Protection Act 2010 (PDPA)
• Maintaining financial transaction records as required under anti-money laundering legislation
• Comply with any lawful instructions or requests from Malaysian authorities

3.4 Service Improvement & Marketing

• Analysing platform usage patterns to identify areas for improvement
• Personalising your platform experience based on your preferences and habits — for example, displaying the football leagues or esports markets you browse most frequently
• Sending marketing communications about promotions, bonuses and new offers (only where you have given consent, and you may opt out at any time)
• Conducting customer satisfaction surveys to help us improve

MB8MY understands that your trust depends on how we handle data sharing. We do not sell, rent, or disclose your personal data for third-party marketing purposes. The following are the specific scenarios in which MB8MY may share your data:

4.1 Approved Service Providers

MB8MY works with a select group of trusted service providers to help us operate the platform. These include:

• Payment Providers: Malaysian payment gateway providers that process transactions for Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX. They receive only the data required to process each specific transaction.
• Identity Verification Services: Third-party KYC service providers that assist us in securely verifying member identities and documents.
• Technical Infrastructure: Cloud computing and hosting service providers that store platform data in secure, controlled environments.
• Platform Analytics: Analytics tools that help us understand how users interact with the platform — data shared is typically in aggregated form and does not include personal identifiers.

All third-party service providers working with mb8my are bound by strict confidentiality and data protection agreements. They are only permitted to use your data for the purposes we specify, and nothing beyond that.

4.2 Legally Required Disclosures

MB8MY may be required to disclose your personal data to the relevant authorities if mandated by Malaysian law, a valid court order, or in cases involving fraud investigations or financial crime. In such circumstances, MB8MY will endeavour to notify you in advance unless doing so is prohibited by the applicable law or court order.

MB8MY continually invests in security infrastructure to ensure your personal data is always protected to the highest industry standards available.

5.1 Technical Security Measures

• 256-bit SSL Encryption: All communications between your browser and MB8MY's servers are protected with the same industry-standard encryption used by leading financial institutions.
• Data-at-Rest Encryption: Sensitive data such as passwords and financial details are stored in encrypted form. Passwords are hashed and cannot be decrypted.
• Two-Factor Authentication (2FA): Members are encouraged to enable 2FA, which provides an additional layer of security beyond a password alone.
• 24/7 Monitoring: MB8MY's security system continuously monitors all platform activity to detect any unauthorised access attempts or suspicious patterns.
• Regular Security Audits: mb8my's infrastructure undergoes regular security assessments by independent cybersecurity experts to ensure our protections stay current with the latest threats.

5.2 Data Retention Period

MB8MY retains your personal data for as long as necessary to fulfil the purposes for which it was collected and to meet our legal obligations:

• Active account data: For the duration your account remains active and for the required period following account closure to meet legal obligations.
• Financial transaction records: Retained for a minimum of seven years in accordance with applicable Malaysian financial regulations.
• Technical and security logs: Retained for 12 months for security investigation purposes if required.
• Support communication records: Retained for two years after case resolution for reference and service quality purposes.

Once the retention period has ended and there is no legal requirement to retain the data further, your data will be securely deleted or anonymised in accordance with our standard procedures.

As an MB8MY member and data subject in Malaysia, you have several important rights regarding your personal data held by us. We encourage you to understand and exercise these rights:

To exercise any of the rights above, please contact the MB8MY support team by email at support@mb8my.click or via live chat within the platform. We will endeavour to process your request within 30 days. For more complex requests, additional time may be required, and we will keep you informed of the estimated timeframe.

MB8MY may need to verify your identity before processing data-related requests to ensure we do not disclose information to unauthorised parties.

MB8MY uses cookies and similar technologies to ensure the platform functions correctly and to enhance your experience. The following are the types of cookies we use:

You can manage or delete cookies through your web browser settings at any time. However, disabling essential cookies may affect the core functionality of the mb8my platform. For guidance on managing cookies in your browser, please refer to your browser's help documentation.

Mb8my does not use third-party tracking pixels for retargeting purposes involving personally identifiable data. Any third-party analytics we employ are configured to minimise personal data collection and prioritise user privacy.

MB8MY is an online betting platform that strictly prohibited for individuals under the age of 18. We do not knowingly collect or process any personal data from children or minors.

If we discover that personal data in our records belongs to an individual under the age of 18, we will take the following steps immediately:

• Closing the associated account without delay
• Deleting all personal data associated with the individual from our systems within a reasonable timeframe
• Processing the refund of any remaining balance in accordance with established procedures and applicable legal requirements

If you are a parent or guardian and believe that your child or underage dependent has registered an MB8MY account, please contact us immediately at support@mb8my.click so that we can take immediate action.

The MB8MY platform may contain links to external websites or services in certain contexts — for example, links to a payment provider during the deposit process. This Privacy Policy applies only to the MB8MY platform itself and does not cover the privacy practices of any third-party websites or services.

Mb8my is not responsible for the privacy policies or data security practices of any third-party websites that may be linked from our platform. We encourage you to read the privacy policy of each website you visit independently.

MB8MY reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, new legal requirements, or platform service improvements. Any significant changes will be communicated to members through the following:

• Notification via the email address registered with MB8MY
• A clear notice on the platform's main page
• Update the "Last Updated" date at the top of this document

Your continued use of the MB8MY platform after any amendments to this Privacy Policy are published constitutes your acceptance of the revised policy. If you do not agree with the changes, you have the right to close your account and withdraw any remaining balance. Please contact our support team for assistance with this process.

To review any changes that have been made, you may contact us to request a copy of a previous version of this Privacy Policy if needed.

Mb8my takes all privacy-related enquiries, concerns, and complaints seriously. If you wish to:

• Exercising any of the data rights described in Section 6
• Learn more about how we process your personal data
• Reporting privacy concerns or potential data breaches
• Withdrawing consent for marketing communications
• Lodge a formal complaint regarding the handling of your data

Please contact the MB8MY support team through the following channels:

• Privacy Email: support@mb8my.click — Please include "Data Privacy Enquiry" in the subject line of your email to help us process your request promptly.
• Live Chat: Available 24/7 within the MB8MY platform for immediate enquiries.

MB8MY is committed to responding to all privacy-related enquiries within a reasonable timeframe. For formal data rights requests, we aim to respond within 30 days of receiving a complete request.