🔒 mbb8 Privacy Policy

This Privacy Policy ("Policy") is published by mbb8 ("mbb8", "Platform", "we", "us", "our") and applies to all personal data processed in connection with your use of the mbb8 website at mbb8.com, the mbb8 mobile interface, and all associated gaming, betting, and account management services (collectively, the "Platform").

This Policy applies to all registered users, prospective users who browse the Platform without registering, and any individual whose personal data is submitted to mbb8 in the context of customer support, KYC verification, or responsible gaming procedures.

By registering an account or continuing to use the mbb8 Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should discontinue use of the Platform and contact support to arrange account closure.

This Policy should be read in conjunction with the mbb8 Terms & Conditions, which govern the contractual relationship between you and mbb8.

mbb8 is the data controller responsible for the personal data collected through the Platform. mbb8 operates under international online gaming licensing and processes personal data in compliance with applicable data protection legislation within its licensing jurisdiction.

If you have any queries regarding the processing of your personal data or wish to exercise any of your data rights described in Section 10 of this Policy, you may contact the mbb8 Data Protection team via the support email displayed on the Platform (plain text, not a clickable link): [email protected]

mbb8 collects personal data in three principal categories: data you provide directly, data we generate in the course of providing services to you, and data collected automatically through your use of the Platform.

(a) Data You Provide Directly: Full legal name; date of birth; residential address (including city, state, postcode, and country — relevant for players across Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, and all Malaysian states); email address; mobile telephone number; preferred payment method details; government-issued identification document details (MyKad number, passport number) submitted for KYC verification; and any information submitted through correspondence with mbb8 customer support.

(b) Data Generated Through Service Provision: Account transaction history including all deposits, withdrawals, and balance adjustments; complete betting and gaming history including game selections, wager amounts, outcomes, and timestamps; bonus and promotion claim history; responsible gaming setting selections and session data; account login history including timestamps, IP addresses, and device identifiers.

(c) Data Collected Automatically: Device type, operating system, and browser version; IP address; geographic location data derived from IP address; session duration and navigation patterns within the Platform; cookie data as described in Section 7 of this Policy.

mbb8 processes your personal data for the following purposes:

Account Administration: To register and maintain your mbb8 account, authenticate your identity at login, process deposits and withdrawals in Malaysian Ringgit via your elected payment methods (Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, USDT), and communicate account-related information to you.

Regulatory Compliance & AML: To fulfil Know Your Customer (KYC) obligations, verify age eligibility (minimum 21 years), conduct anti-money laundering screening, and comply with reporting requirements imposed by mbb8's licensing authority. Transaction monitoring is conducted on all accounts as part of mbb8's anti-financial crime programme.

Platform Improvement & Analytics: To analyse user behaviour patterns across the Platform, identify technical faults, improve game loading performance, and develop new features that better serve Malaysian players.

Marketing Communications: To send you promotional offers, bonus notifications, and newsletters relating to mbb8 products, where you have consented to receive such communications. You may withdraw this consent at any time via your account settings or by contacting support.

Responsible Gaming: To monitor gaming behaviour for indicators of problematic gambling, enforce self-exclusion requests, and administer deposit limits and cooling-off periods selected by you or applied by mbb8 under its responsible gaming obligations.

Fraud Prevention & Security: To detect, investigate, and prevent fraudulent account activity, unauthorised access, collusion, and other forms of Platform abuse.

mbb8 processes your personal data on the following legal grounds, depending on the specific processing activity:

Contractual Necessity: Processing required to perform the mbb8 Terms & Conditions contract with you, including account management, payment processing, game provision, and customer support.

Legal Obligation: Processing required to comply with applicable KYC, AML, age verification, and regulatory reporting obligations under mbb8's licensing requirements.

Legitimate Interests: Processing for fraud prevention, Platform security, and analytics, where such processing does not override your data protection rights.

Consent: Processing for direct marketing communications, where your opt-in consent has been obtained. You may withdraw consent at any time without affecting the lawfulness of processing conducted prior to withdrawal.

mbb8 does not sell your personal data to third parties. mbb8 may share your personal data with carefully selected third-party processors and partners in the following limited circumstances:

Payment Processors: Your payment details are shared with the relevant payment service provider (e.g., Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, USDT processing partner) solely to the extent necessary to process your deposit or withdrawal transaction.

KYC Verification Services: Your government-issued identity documents are processed by a certified third-party identity verification service operating under data processing agreements with mbb8. Documents are not retained beyond the period required for verification completion.

Game Content Providers: Limited technical data (account session token, currency, and balance data) is shared with mbb8's game studio partners (such as Evolution Gaming, Pragmatic Play, and Play'n GO) solely for the purpose of enabling gameplay within the mbb8 Platform environment.

Regulatory Authorities: mbb8 may be legally required to disclose your personal data to its licensing authority, financial intelligence units, law enforcement agencies, or other regulatory bodies in response to lawful requests, court orders, or legal process.

All third-party processors engaged by mbb8 are bound by data processing agreements that impose data protection obligations consistent with applicable privacy law.

The mbb8 Platform uses cookies and similar tracking technologies to deliver and improve the Platform experience. Cookies are small text files stored on your device by your browser when you visit mbb8.com. The following categories of cookies are used:

You can manage or disable non-essential cookies through your browser settings. Disabling essential cookies will affect your ability to log in and use the mbb8 Platform.

mbb8 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, including satisfying regulatory, legal, accounting, and reporting requirements.

Account data and transaction records are retained for a minimum of five (5) years from the date of account closure, in compliance with anti-money laundering record-keeping requirements applicable under mbb8's licensing obligations. KYC identity documents are deleted within 90 days of verification completion, unless a longer retention period is required by law.

Where your account is suspended or terminated due to breach of the mbb8 Terms & Conditions, relevant records may be retained for longer periods to support any legal proceedings, regulatory investigations, or dispute resolution processes that arise from the circumstances of suspension or termination.

Marketing preference data is retained until you withdraw consent or request deletion, whichever is earlier. Following consent withdrawal, your contact details are retained on a suppression list to prevent future unsolicited marketing contact.

mbb8 applies technical and organisational security measures proportionate to the sensitivity of the personal data it processes. These measures include:

(a) TLS 1.3 encryption with 256-bit AES for all data transmitted between your device and mbb8 servers — the same encryption standard used by major Malaysian financial institutions including Maybank and CIMB for online banking.

(b) Encrypted storage of passwords using bcrypt hashing. mbb8 personnel do not have access to your plaintext password and will never ask you for it.

(c) Access controls restricting access to personal data to authorised mbb8 personnel on a need-to-know basis, enforced through role-based access management.

(d) Regular security assessments and penetration testing of the Platform infrastructure.

(e) Login anomaly detection systems that flag and block access attempts from unrecognised devices or unusual geographic locations.

Notwithstanding these measures, no internet-based platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your mbb8 account credentials and for notifying mbb8 immediately if you suspect unauthorised account access.

Subject to applicable law and any overriding legal obligations, you have the following rights in respect of your personal data held by mbb8:

Right of Access: You may request a copy of the personal data mbb8 holds about you. mbb8 will respond to verified access requests within 30 days.

Right to Rectification: You may request correction of inaccurate or incomplete personal data. Minor account details (email, phone number) can be updated directly in your account settings.

Right to Erasure: You may request deletion of your personal data. mbb8 will fulfil erasure requests where no overriding legal obligation requires continued retention. Note that AML and licensing record-keeping obligations require mbb8 to retain transaction and account records for a minimum period following account closure.

Right to Restriction: You may request that mbb8 restrict processing of your personal data in certain circumstances, such as where you contest the accuracy of the data.

Right to Data Portability: Where processing is based on your consent or on a contract with you, and processing is conducted by automated means, you may request a copy of your personal data in a structured, machine-readable format.

Right to Object: You may object to processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, subject to mbb8's overriding legitimate grounds.

To exercise any of the above rights, contact mbb8 customer support via Live Chat or submit a written request to the support email address displayed in plain text on the Platform. mbb8 may request identity verification before fulfilling data rights requests.

The mbb8 Platform is strictly for individuals aged 21 and above. mbb8 does not knowingly collect personal data from any person under the age of 21. Age verification is applied during the account registration process and may be supplemented by document-based KYC verification at any time.

If mbb8 becomes aware that personal data has been collected from an individual under the age of 21, the relevant account will be immediately suspended, all balances will be held pending regulatory review, and the personal data will be deleted to the extent permitted by applicable law. Parents or guardians who believe that a minor has registered an account on mbb8 should contact support immediately.

mbb8 reserves the right to update this Privacy Policy at any time. Material changes will be communicated to registered users via email to their registered address and via a notice on the Platform, at least 14 days prior to the revised Policy taking effect (except where a shorter notice period is required by law).

The "Last Updated" date at the top of this Policy will be revised each time the Policy is amended. Your continued use of the mbb8 Platform following the effective date of any revision constitutes your acceptance of the updated Policy. If you do not accept a revised Policy, you should cease using the Platform and contact support to arrange account closure.