Privacy Policy

1. Introduction

This Privacy Policy ("Policy") is issued by mb8my ("mb8my", "the Company", "we", "us", "our"), the operator of the online gaming platform accessible at mb8my.asia ("the Platform"). This Policy describes how mb8my collects, processes, stores, shares, and protects personal data submitted by users ("Player", "you", "your") in connection with your use of the Platform.

mb8my is committed to handling your personal data in a lawful, transparent, and fair manner, in accordance with applicable data protection laws and the requirements of our international gaming authority licence. By registering an account or using the mb8my Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

2. Personal Data We Collect

mb8my collects personal data through several channels, including account registration, Platform usage, financial transactions, and customer support interactions. The categories of personal data we collect include:

• Identity Data: Full legal name, date of birth, nationality, gender, and government-issued identification document details (e.g., MyKad number or passport number for Malaysian players);
• Contact Data: Email address, mobile phone number, and residential address (including city, postcode, and state);
• Account Data: mb8my username, account creation date, account preferences, communication preferences, and responsible gaming settings;
• Financial Data: Deposit and withdrawal records, payment method details (bank account numbers, e-wallet identifiers such as Touch 'n Go eWallet or Boost), transaction history, and wallet balance history;
• Gaming Activity Data: Betting history, game session records, wagering patterns, win/loss records, and promotional bonus participation history;
• Technical Data: IP address, device identifiers, browser type and version, operating system, time zone, and referring URLs collected automatically when you access the Platform;
• KYC Documentation: Copies of identity documents, proof of address documents, and payment method ownership documentation submitted during the verification process;
• Communications Data: Records of Live Chat, email, and other correspondence with mb8my support staff.

mb8my collects only the minimum personal data necessary to provide the Platform services and comply with our legal and regulatory obligations. You are not required to provide optional data, but failure to provide mandatory data may prevent us from processing your registration or transactions.

3. How We Use Your Personal Data

mb8my processes your personal data for the following purposes:

• Account Administration: To create, maintain, and manage your mb8my account, including processing your mb8my login, verifying your identity, and managing your account settings;
• Service Delivery: To provide access to the Platform's gaming services, process deposits and withdrawals, credit bonuses, and deliver customer support;
• Legal & Regulatory Compliance: To fulfil our obligations under our gaming authority licence, including age verification (21+ compliance), Anti-Money Laundering (AML) checks, Know Your Customer (KYC) procedures, and mandatory reporting requirements;
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, multiple account creation, bonus abuse, and other prohibited conduct described in the mb8my Terms & Conditions;
• Responsible Gaming: To monitor gaming activity for signs of problem gambling and to administer player-requested responsible gaming tools including deposit limits, self-exclusion, and account restrictions;
• Communications: To send transactional communications (deposit confirmations, withdrawal notifications, security alerts) and, where you have provided consent, promotional communications about mb8my offers and events;
• Platform Improvement: To analyse aggregate usage patterns, diagnose technical issues, and improve the functionality and user experience of the Platform;
• Dispute Resolution: To investigate and resolve disputes, complaints, and legal claims.

mb8my will not use your personal data for any purpose incompatible with the purposes described in this Section without first obtaining your consent or establishing another lawful basis for processing.

4. Legal Basis for Processing

mb8my processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to fulfil the contract between you and mb8my (i.e., the Terms & Conditions), including account administration, payment processing, and service delivery;
• Legal Obligation: Processing required to comply with applicable laws and regulatory requirements, including AML obligations, KYC requirements, and gaming licence conditions;
• Legitimate Interests: Processing carried out for mb8my's legitimate business interests, including fraud prevention, platform security, and business analytics — where such interests are not overridden by your privacy rights;
• Consent: Processing of optional data categories or for optional purposes (such as marketing communications) where your explicit consent has been obtained. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

5. Data Sharing & Disclosure

mb8my does not sell or rent your personal data. We may share your personal data with the following categories of recipients for the purposes described in this Policy:

• Gaming Software & Platform Providers: Technology and software providers whose systems power the mb8my Platform, operating under strict data processing agreements;
• Payment Service Providers: Payment processors, banks, and e-wallet providers (including FPX, Maybank, CIMB, Touch 'n Go eWallet, and Boost) required to process your financial transactions;
• Identity Verification Services: Third-party KYC and AML compliance service providers used to verify player identity and conduct regulatory checks;
• Regulatory & Law Enforcement Authorities: Competent regulatory bodies, gaming authorities, financial intelligence units, and law enforcement agencies where disclosure is required by law, court order, or regulatory directive;
• Legal & Professional Advisors: Lawyers, auditors, and compliance consultants engaged to advise mb8my, subject to professional confidentiality obligations;
• Business Successors: In the event of a merger, acquisition, or business transfer, your data may be transferred to the relevant successor entity, subject to the same privacy protections described in this Policy.

All third parties with whom mb8my shares personal data are required to handle such data in accordance with applicable data protection standards. mb8my requires contractual assurances from data processors regarding data security and confidentiality.

6. Cookies & Tracking Technologies

mb8my uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files placed on your device by your browser when you visit mb8my.asia. The types of cookies used by mb8my include:

• Strictly Necessary Cookies: Required for the Platform to function, including maintaining your mb8my login session and securing your account. These cannot be disabled without disrupting Platform functionality;
• Functional Cookies: Used to remember your Platform preferences such as language settings, display preferences, and responsible gaming configuration;
• Analytics Cookies: Used to collect aggregate information about how Players use the Platform, helping mb8my identify and fix issues and improve the user experience. These cookies do not identify individual users;
• Security Cookies: Used to detect and prevent fraudulent activity, including session hijacking and CSRF attacks.

You can manage cookie settings through your browser preferences. Note that disabling strictly necessary cookies will prevent you from logging in to the mb8my Platform. mb8my does not use cookies to serve third-party advertising.

7. Data Retention

mb8my retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, including to satisfy legal, regulatory, accounting, and reporting requirements. Specific retention periods include:

• Account data and gaming activity records are retained for a minimum of five (5) years following account closure, in accordance with AML regulatory requirements applicable under mb8my's gaming licence;
• Financial transaction records are retained for a minimum of seven (7) years to comply with financial record-keeping obligations;
• KYC documentation is retained for a minimum of five (5) years following the end of the customer relationship;
• Customer support communications are retained for a minimum of two (2) years from the date of the interaction.

Upon expiry of the applicable retention period, mb8my will securely delete or anonymise your personal data in a manner that prevents its reconstruction or re-identification.

8. Data Security

mb8my implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmission between your device and mb8my's servers;
• Encrypted storage of sensitive data including passwords (using industry-standard hashing algorithms) and financial records;
• Access controls restricting internal access to personal data on a strict need-to-know basis;
• Regular security audits and vulnerability assessments;
• Incident response procedures for the detection, reporting, and remediation of data security breaches.

While mb8my takes all reasonable precautions to protect your data, no internet transmission is completely secure. You are responsible for maintaining the security of your mb8my login credentials and for notifying mb8my promptly if you suspect unauthorised access to your account.

9. Your Data Rights

Subject to applicable law and the conditions of mb8my's gaming licence, you have the following rights in relation to your personal data:

• Right of Access: The right to request a copy of the personal data mb8my holds about you;
• Right of Rectification: The right to request correction of inaccurate or incomplete personal data;
• Right of Erasure: The right to request deletion of your personal data, subject to legal and regulatory retention obligations;
• Right to Restrict Processing: The right to request that mb8my restricts the processing of your personal data in certain circumstances;
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, machine-readable format where technically feasible;
• Right to Object: The right to object to processing based on legitimate interests or for direct marketing purposes;
• Right to Withdraw Consent: Where processing is based on consent, the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact mb8my support via Live Chat or email at [email protected]. mb8my will respond to verified requests within 30 days. Identity verification may be required before processing your request.

10. Minors

The mb8my Platform is strictly for use by persons aged 21 years and above. mb8my does not knowingly collect personal data from persons under the age of 21. If mb8my becomes aware that personal data has been collected from a minor, such data will be deleted immediately and the associated account closed.

If you believe a person under the age of 21 has created an account or provided personal data on the mb8my Platform, please contact us immediately at [email protected] or via Live Chat.

11. International Data Transfers

mb8my may transfer your personal data to servers or service providers located outside Malaysia in connection with the operation of the Platform. Where such transfers occur, mb8my ensures that appropriate safeguards are in place to protect your personal data at an equivalent standard to that required under applicable Malaysian data protection law, including through the use of contractual data transfer mechanisms and data processing agreements with all third-party processors.

12. Amendments to This Policy

mb8my reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, Platform features, or applicable legal requirements. Any changes will be published on this page with an updated effective date. Where changes are material, mb8my will endeavour to provide notice to registered Players via the Platform or by email.

Your continued use of the mb8my Platform following the publication of an updated Policy constitutes your acceptance of the revised terms. We recommend reviewing this Policy periodically.

13. Contact & Data Queries

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by mb8my, please contact our support team through the 24/7 Live Chat facility on mb8my.asia, or by email:

[email protected]

mb8my aims to acknowledge all written privacy enquiries within 2 business days and to provide a substantive response within 30 days. For Live Chat, the average response time is 3–5 minutes.