Privacy Policy MB8Win —
Personal Data Protection for Malaysian Players

Welcome to MB8Win's Privacy Policy. This document is published by MB8Win ("we", "the platform") and applies to all users who access or use the mb8win platform through our official website, Android and iOS mobile apps, or any of our official communication channels.

We understand that entrusting a platform with your personal information is not a decision taken lightly. That is why mb8win is committed to managing your data with full responsibility, transparency, and the highest level of security — in keeping with the trust you have placed in us.

This policy explains the types of data we collect, why we need it, how we use it, who we share it with (where applicable), and what your rights are as an mb8win user. By using the mb8win platform, you acknowledge that you have read and understood this Privacy Policy.

MB8Win collects various types of data depending on your interaction with our platform. Below is a comprehensive overview of the data we collect and the reasons for collecting it:

A. Registration and Identity Data

• Full name as shown on identification documents
• MyKad identification number or passport number
• Date of birth
• Email address
• Mobile phone number
• Residential address

B. Financial and Transaction Data

• Bank name and bank account number (for withdrawal processing)
• Deposit and withdrawal history
• Betting history and game records
• Account balance and fund movements

C. Usage and Technical Data

• IP address and device information
• Browser type and operating system
• Platform usage patterns and pages visited
• Session time and duration
• Error logs and app performance data

MB8Win uses collected data solely for legitimate and necessary purposes. We do not use your data beyond what is required for the stated purposes:

• Account management: Create and manage your mb8win account, process registration, and verify your identity (KYC)
• Transaction processing: Handle all deposits, withdrawals, and financial activity on the mb8win platform
• Platform security: Detect and prevent fraud, money laundering, duplicate accounts, and suspicious activity
• Service improvement: Analyse usage patterns to improve the mb8win platform's interface, speed, and usability
• Communications: Send important notifications regarding your account, transactions, Terms changes, or relevant promotions
• Legal compliance: Meet reporting obligations to relevant authorities where required by law
• Customer support: Help you resolve issues, answer enquiries, and provide technical assistance
• Responsible gaming: Monitoring gameplay patterns to identify signs of problem gambling and provide the necessary support

MB8Win will not use your data for third-party advertising, commercial profiling without your consent, or any other purpose not stated in this Privacy Policy.

MB8Win puts your privacy first. We do not sell, rent, or disclose your personal data to third parties for commercial purposes. However, there are limited situations where data sharing is necessary to operate our services:

Authorised Service Providers

MB8Win partners with carefully selected service providers to handle specific technical aspects — such as payment processing via FPX and DuitNow, certified cloud computing services, and game providers that comply with licensing standards. All third parties are bound by strict confidentiality agreements and are only permitted to use your data for the purposes specified.

Legal Obligations

MB8Win may disclose your personal data to relevant authorities if required by Malaysian law, court orders, or anti-money laundering (AML) compliance obligations. In such situations, we will endeavour to notify you in advance unless such notification is prohibited by law.

Your data security is an operational priority at mb8win. We continuously invest in robust security infrastructure to ensure your personal and financial information remains protected at all times:

• 256-bit SSL Encryption: All data communications between your app or browser and mb8win's servers are transmitted in fully encrypted form — no one can read this data in transit.
• Two-factor authentication (2FA): An additional security layer that requires verification via SMS or an authenticator app for every new login from an unrecognised device
• Layered access controls: Only mb8win staff with legitimate business needs and granted authorisation may access user data — and all such access is logged and monitored.
• Regular security audits: The mb8win security team conducts regular audits and penetration testing to identify and address any potential vulnerabilities
• Secure data storage: Passwords are stored in an unreadable format (hashed and salted), not as plain text — meaning even if data is copied, your password cannot be recovered
• 24/7 Monitoring: mb8win's automated monitoring system operates around the clock to detect any unauthorised access attempts or suspicious activity in real time.

While no digital security system is 100% impenetrable, mb8win takes all reasonable and up-to-date measures to minimise risk and protect your data. In the event of any material security breach, we will notify affected users within the timeframe required by law.

Mb8win uses cookies and similar tracking technologies to enhance your experience, maintain your login session, and understand how the platform is used. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functionality — including session verification, security, and basic preferences. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collect information about how you use mb8win — pages visited, time spent, and errors encountered — to help us improve the platform
• Preference Cookies: Save your personal settings such as preferred language, interface theme, and display preferences to deliver a more personalised experience

You can manage cookie settings through your browser preferences. However, disabling essential cookies may affect the functionality of the mb8win platform. The mb8win mobile App uses local storage as an alternative to cookies for similar purposes.

As a mb8win member and subject to Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data:

To exercise any of the above rights, contact the mb8win data protection team via email at [email protected] or via our 24/7 customer support live chat. We will respond to all valid requests within 14 business days.

MB8Win retains your personal data only for as long as it is needed for the purposes stated in this Privacy Policy or as required by law. Below are the retention period guidelines for key data categories:

• Active account data: Retained for the duration your account is active and for a reasonable period following account closure
• Financial transaction data: Retained for a minimum of 7 years to comply with financial compliance requirements and anti-money laundering legislation
• KYC and identity verification data: Retained for at least 5 years after account closure or as required by applicable law
• Customer support communication logs: Retained for 3 years for reference and service improvement purposes
• Usage data and technical logs: Retained for 12–24 months for analytics and security purposes

Once the retention period expires, data is securely deleted or anonymised in accordance with established procedures. Anonymised data is no longer linked to your identity and may be retained for aggregate analytics purposes.

The mb8win platform is strictly intended for individuals aged 21 years and above only. We do not knowingly process the personal data of any individual under the age of 21.

If we discover that we have inadvertently collected personal data from underage users, we will take immediate steps to delete that data and close the associated account. Parents or guardians who believe their underage child may have registered on the mb8win platform are encouraged to contact us immediately.

MB8Win reserves the right to update or amend this Privacy Policy at any time in line with changes in law, industry practices, or platform operational requirements. Any material amendments will be communicated to members via:

• A prominent notice on the mb8win platform's home page
• Push notifications via the mb8win mobile app
• Email to your registered address for changes deemed significant

The "Last Updated" date at the top of this Privacy Policy will be updated whenever changes are made. You are encouraged to review this Privacy Policy periodically. Continued use of the mb8win platform after any amendment takes effect will be considered acceptance of the updated Privacy Policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or mb8win's management of your personal data, you can reach us through the following channels:

• Data Protection Email: [email protected]
• 24/7 Live Chat: Available directly on the mb8win platform and mobile app
• Customer Support: [email protected]

For formal privacy rights requests (access, correction, or deletion of data), please include your full name, mb8win account number, and the type of request in your email to help expedite processing. The mb8win data protection team will respond within 14 business days of receiving a complete request.