mbb8 Privacy Policy

1. Introduction and Scope

mbb8 ("mbb8", "we", "us", "our") operates the online gaming platform accessible at mbb8.net. This Privacy Policy applies to all personal data collected from users ("you", "User", "Player") who register an account, access the mbb8 platform, use any of our services — including live casino, sports betting, slots, lottery, and esports wagering — or otherwise interact with mbb8 through any channel.

By registering an mbb8 account or otherwise using our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to the terms of this Privacy Policy, you must not register or continue to use the mbb8 platform.

This Policy is intended to comply with applicable data protection legislation and reflects the standards expected under international gaming authority regulations to which mbb8 is subject.

2. Data Controller Identity

For the purposes of applicable data protection law, mbb8 is the data controller responsible for your personal data. The platform is operated by the mbb8 licensed entity, operating under international gaming authority licensing. For any data protection enquiries, you may contact us using the contact details set out in Section 14 of this Policy.

3. Personal Data We Collect

mbb8 collects the following categories of personal data from its users:

mbb8 does not collect sensitive personal data (such as racial origin, religious beliefs, or health data) unless specifically required by law or for the fulfilment of responsible gaming obligations.

4. How We Collect Your Data

mbb8 collects personal data through the following means:

• Direct interactions: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or updating your account profile;
• Automated technologies: Technical data collected automatically when you access the mbb8 platform, including cookies, server logs, and session tracking tools;
• Third-party sources: Identity and financial verification data obtained from KYC/AML service providers, payment processors (including Touch 'n Go eWallet, Boost, DuitNow, FPX, Maybank, CIMB, and Public Bank), and fraud prevention agencies;
• Publicly available sources: Sanction lists, politically exposed persons (PEP) databases, and adverse media screening tools used for compliance purposes.

5. Purpose and Legal Basis for Processing

mbb8 processes your personal data only where a valid legal basis exists. The primary purposes for which we process your data are set out below:

• Contract performance: To create and manage your mbb8 account, process transactions in Malaysian Ringgit, operate gaming services, and fulfil our obligations to you as a registered user;
• Legal compliance: To meet obligations under anti-money laundering (AML) legislation, gaming licensing requirements, age verification regulations (strictly 21+), sanctions screening, and tax reporting;
• Legitimate interests: To protect the platform from fraud, detect and prevent cheating or multi-accounting, improve platform functionality and user experience, and carry out responsible gaming monitoring;
• Consent: To send you marketing communications where you have opted in. You may withdraw consent at any time via your account settings or by contacting support.

6. Disclosure of Personal Data to Third Parties

mbb8 does not sell your personal data to third parties for commercial marketing purposes. We may share your data with the following categories of recipients only to the extent necessary:

• Payment service providers: Including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX-connected banks (Maybank, CIMB, Public Bank, Hong Leong), and other processing partners — solely to execute your financial transactions;
• KYC and AML providers: Third-party identity verification and compliance screening services engaged to verify your identity and comply with gaming licensing obligations;
• Game studios and technology providers: Licensed game providers who operate live casino tables, slot engines, and betting platforms integrated into mbb8, where technical data is necessary for game delivery;
• Regulatory and law enforcement authorities: Where required by applicable law, court order, or gaming regulatory directive, mbb8 will disclose data to the relevant authority;
• Fraud prevention agencies: Where fraudulent conduct, money laundering, or match-fixing activity is suspected, information may be shared with appropriate industry bodies.

All third-party data processors engaged by mbb8 are contractually required to maintain data confidentiality and implement appropriate security measures consistent with their processing role.

7. International Data Transfers

In the course of operating the mbb8 platform and fulfilling our service obligations, your personal data may be transferred to and processed in countries outside Malaysia. Where such transfers occur, mbb8 ensures that adequate safeguards are in place — including standard contractual clauses, data processing agreements, or transfers to jurisdictions with recognised adequacy status — to protect your data to a standard equivalent to applicable Malaysian and international data protection requirements.

8. Data Retention

mbb8 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including legal, accounting, and regulatory reporting requirements. Specific retention periods include:

• Account and identity data: retained for a minimum of 5 years following account closure, in accordance with AML and gaming licensing requirements;
• Financial transaction records: retained for a minimum of 7 years for audit and tax reporting purposes;
• Gaming activity logs: retained for 3 years following the relevant gaming session;
• Customer support communications: retained for 3 years from the date of the last interaction.

Following the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction.

9. Cookies and Tracking Technologies

The mbb8 platform uses cookies and similar tracking technologies to provide, maintain, and improve our services. Cookies are small text files stored on your device when you access mbb8.net. We use the following categories of cookies:

• Essential cookies: Required for the platform to function — including session authentication, login persistence (when the Remember Me option is selected), and security tokens. These cannot be disabled without impairing core platform functionality;
• Analytics cookies: Used to understand how players navigate and interact with the mbb8 platform, enabling us to improve usability and detect technical issues;
• Preference cookies: Store your chosen settings, such as language preference and responsible gaming limit configurations.

You may manage non-essential cookie preferences through your browser settings. Note that disabling certain cookies may limit your ability to use some features of the mbb8 platform.

10. Your Rights as a Data Subject

Subject to applicable data protection law, you have the following rights in relation to your personal data held by mbb8:

• Right of access: Request a copy of the personal data mbb8 holds about you;
• Right to rectification: Request correction of inaccurate or incomplete personal data;
• Right to erasure: Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations;
• Right to restriction: Request that we restrict processing of your data in certain circumstances;
• Right to data portability: Receive your data in a structured, machine-readable format where processing is based on consent or contract;
• Right to object: Object to processing based on legitimate interests, including direct marketing;
• Right to withdraw consent: Withdraw consent to processing at any time where processing is consent-based, without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact the mbb8 Data Protection team using the contact details in Section 14. We will respond within 30 days of receipt of a valid request. Identity verification may be required before we action any request.

11. Data Security

mbb8 implements a multi-layered security framework to protect your personal data against unauthorised access, loss, alteration, or disclosure. Security measures include:

• 256-bit SSL/TLS encryption across all data transmissions between your device and mbb8 servers;
• Encrypted storage of sensitive data at rest, including identity documents and financial records;
• Role-based access controls restricting internal staff access to personal data on a strict need-to-know basis;
• Regular penetration testing and vulnerability assessments of platform infrastructure;
• Incident response procedures to identify, contain, and report data breaches within required regulatory timeframes.

While mbb8 takes reasonable and appropriate technical precautions, no platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your mbb8 login credentials and for ensuring that unauthorised persons do not access your account.

12. Children's Privacy

The mbb8 platform is strictly intended for adults aged 21 years and above. mbb8 does not knowingly collect or process personal data belonging to individuals under the age of 21. All registration attempts are subject to age verification, and accounts found to belong to minors will be closed immediately with any deposited funds (excluding bonus amounts) returned to the payment source.

If you believe that a minor has registered an account on mbb8, please contact us immediately using the details in Section 14 so that appropriate action can be taken without delay.

13. Changes to This Privacy Policy

mbb8 reserves the right to update this Privacy Policy at any time to reflect changes in law, regulatory requirements, or platform operations. Material changes will be communicated to registered users via the email address on file prior to the effective date of the revised Policy. The "Last updated" date at the top of this document will always reflect the most recent revision. Continued use of the mbb8 platform after the effective date of any amendment constitutes acceptance of the revised Privacy Policy.

14. Contact and Complaints

For any privacy-related enquiries, data subject rights requests, or complaints regarding the handling of your personal data by mbb8, please contact our Data Protection team through the following channels. All contact details are provided as plain text and are not clickable links:

• Email: [email protected] (subject line: Privacy Enquiry)
• Live Chat: Available 24/7 via the mbb8 platform
• Response time: Within 30 days for formal data subject rights requests; within 4 hours for general support enquiries (8 AM – 12 AM MYT)

If you are unsatisfied with our response to a privacy complaint, you have the right to escalate the matter to the relevant data protection supervisory authority in your jurisdiction or to the gaming regulatory body overseeing mbb8's licence.