Privacy Policy mbb8 – Our Commitment to Protecting Your Data

01Introduction

Mbb8 ("Platform", "We", "mbb8.click") respects the privacy of every individual who uses our services. This Privacy Policy transparently explains how we collect, use, store, protect, and in certain circumstances disclose your personal information when you use the website, app, and all services provided under the mbb8 platform.

This policy is formulated in accordance with Malaysia Personal Data Protection Act 2010 (PDPA) and internationally recognised data protection principles. As a platform that operates for and alongside Malaysians, we take our data protection responsibilities very seriously.

This Privacy Policy applies to all users of the mbb8 platform, including registered members, website visitors without an account, and any individual who interacts with us through official communication channels including live chat, email, and phone.

02Personal Data We Collect

Mbb8 collects your personal data through several channels – directly from you during registration and use of the platform, automatically via tracking technologies, and in certain cases from legitimate third parties. The categories of data we collect are as follows:

Data you provide directly:

• Full name as shown on your Malaysian identity card or passport.
• National identity card number (MyKad) or passport number.
• Date of birth and gender.
• Email address and Malaysian mobile phone number.
• Residential address in Malaysia.
• Bank account or e-wallet details (Maybank, CIMB, Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay, and others) for payment purposes.
• Account password (stored in encrypted hash form – we do not store passwords in plain text).
• Any other information you voluntarily provide to our support team.

Automatically collected data:

• IP address and network information.
• Device type, operating system, and web browser used.
• Gaming session data including games played, time spent, total bets placed, and winnings.
• Deposit and withdrawal transaction history.
• Cookie data and website tracking technologies.
• General geolocation data (country/city) based on IP address.
• Account activity logs including logins, logouts, and settings changes.

Data from third parties:

• Identity verification information from a KYC (Know Your Customer) service provider licensed in Malaysia.
• Transaction verification data from payment providers such as relevant Malaysian financial institutions.
• Risk information from approved fraud prevention service providers.

03Purpose of Data Use

Mbb8 uses your personal data solely for legitimate and transparent purposes. We will not use your data for any other purpose not stated in this Privacy Policy without obtaining fresh consent from you.

If you have given consent to receive marketing communications from mbb8, you may withdraw that consent at any time by updating your communication preferences in your account settings or by contacting our support team.

04Data Sharing with Third Parties

Mbb8 does not sell, rent, or disclose your personal data to third parties for marketing purposes without your explicit consent. However, in the course of operating the platform, there are certain situations where data may need to be shared with specific parties:

Parties that may receive your data:

• Licensed game providers (such as Evolution Gaming, Pragmatic Play) – to deliver the gaming experience you have requested.
• Malaysian payment providers (financial institutions, e-wallet operators such as Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay) – to process your MYR deposit and withdrawal transactions.
• KYC and AML service providers – to fulfil identity verification and anti-money laundering obligations.
• Technology infrastructure providers – including cloud computing, cybersecurity, and fraud detection services involved in platform operations.
• Malaysian authorities – where required by law, court order, or investigation by a competent authority.

All third parties who receive your data are bound by strict confidentiality agreements and are required to protect your data to a standard at least equivalent to mbb8's own data protection standards.

05Data Security

Mbb8 continuously invests in robust data security infrastructure to protect your personal information from unauthorised access, disclosure, alteration, or destruction. Key security measures we employ include:

• Data encryption in transit: All data transmitted between your browser or app and mbb8's servers is protected by TLS 1.3 protocol with AES-256 encryption.
• Data encryption at rest: Sensitive data such as financial information and identity documents is stored in encrypted form on our servers.
• Two-factor authentication (2FA): Available and strongly encouraged for all mbb8 accounts to add a significant layer of security.
• Role-based access control: Only mbb8 staff with a legitimate business need are permitted to access member data, and all such access is logged and monitored.
• Regular security testing: mbb8 conducts regular penetration testing and vulnerability assessments carried out by independent cybersecurity firms.
• Real-time threat detection system: Our platform is equipped with a 24/7 monitoring system that detects and responds to any suspicious activity.
• Secure data backup: Data is automatically mirrored and backed up to multiple secure locations to ensure service continuity.

While mbb8 takes all reasonable steps to protect your data, no security system can be guaranteed 100% secure. You also play an important role in keeping your account safe – please use a strong and unique password, enable 2FA, and never share your login credentials with anyone.

06Data Retention Period

Mbb8 retains your personal data for as long as necessary to fulfil the purposes set out in this Privacy Policy, or as required by applicable Malaysian law.

• Active account data: Retained for the duration your account remains active and for 7 years following account closure, in accordance with Malaysian legal requirements on financial records.
• Financial transaction records: Retained for a minimum of 7 years in accordance with the Financial Services Act 2013 and Malaysia's AML regulations.
• Customer support communication logs: Retained for 3 years for reference and service improvement purposes.
• Cookie and tracking data: Session cookies expire automatically when you close your browser. Persistent cookies are stored for a set duration, typically between 30 days and 2 years depending on their type.
• Marketing data: Retained until you withdraw your marketing communication consent.

Once the applicable retention period has passed, your data will be securely deleted or anonymised so that it can no longer be associated with you as an individual.

07Your Rights Regarding Personal Data

In accordance with PDPA 2010, you as a data subject have certain rights regarding your personal data held by mbb8. We respect and facilitate the exercise of these rights:

To submit any request regarding your data rights, please contact us by email at support@mbb8.click with the subject line "Personal Data Request". We will process your request within 30 working days from the date of receipt. For complex cases, this period may be extended to 60 days, with notification provided to you.

08Cookies & Tracking Technologies

Mbb8 uses cookies and similar tracking technologies to enhance your experience on our platform, analyse website usage, and deliver relevant content. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login session authentication, security, and navigation. These cookies cannot be disabled and do not store any personally identifiable information.
• Analytics Cookies: Helps us understand how members interact with the platform – most visited pages, session duration, errors encountered – so we can continually improve the user experience.
• Functional Cookies: Remembering your preferences such as language, display settings, and login information (if you select "Remember Me") to provide a more personalised experience.
• Marketing Cookies: Used to serve ads and promotions relevant to your interests. You may opt out of these cookies without affecting the core functionality of the platform.

You can manage cookie settings through your web browser preferences. However, disabling certain cookies may affect the functionality of the mbb8 platform. Note: cookies used by third-party game providers within the mbb8 platform are subject to their respective privacy policies.

09Children's Data

The mbb8 platform is not suitable for and not intended for individuals under the age of 18. mbb8 does not knowingly collect personal data from individuals under the age of 18.

If you are a parent or guardian and believe that your child under the age of 18 has provided personal information to mbb8, please contact us immediately at support@mbb8.click. We will take the appropriate steps to delete that information and close any associated account without delay.

Mbb8 applies age verification procedures during registration and reserves the right to request official document verification at any time to ensure compliance with the minimum age requirement.

10Changes to the Privacy Policy

Mbb8 reserves the right to amend or update this Privacy Policy at any time to reflect changes in our data practices, new legal requirements, or changes to the services we offer.

When significant changes occur, mbb8 will notify you via:

• In-platform notification on your next login to mbb8.
• Email to your registered email address (for significant changes).
• Updates to the "Last updated" date at the top of this page.

Continued use of the mbb8 platform after changes to the Privacy Policy are published constitutes your acceptance of the updated policy. We encourage you to review this page periodically to stay informed about how we protect your data.

The latest amendment date of this Privacy Policy is 1 January 2026. Previous versions of the Privacy Policy are available upon request by contacting our support team.

11Contact Us About Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact the mbb8 privacy team through the following channels:

• Privacy Email: support@mbb8.click (with the subject line "Data Privacy Inquiry")
• Live Chat: Available 24/7 directly on the mbb8 platform
• Response time: Usually within 3–5 business days; data rights requests within 30 business days

If you are not satisfied with our response to your privacy concerns, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP) in accordance with the prescribed procedures.