mb8app Privacy Policy for Malaysian Users

1Who Is Responsible for Your Data

mb8app is responsible for determining how and why personal information collected through this website is processed, except where an independent payment, banking, identity verification or technical provider acts under its own legal responsibilities.

Questions concerning this Privacy Policy may be directed to the mb8app privacy contact using the plain-text website email shown in the Contact Us section. Users should never send passwords, one-time passcodes, complete card numbers or private wallet keys in an email or support message.

2Personal Information We May Collect

Depending on the service and verification stage, mb8app may collect information directly from you, automatically from your device or from authorised service providers. Categories may include:

• Identity data: name, date of birth, nationality and identification details used for age or identity verification.
• Contact data: email address, mobile number, residential area and communication preferences.
• Account data: username, encrypted credentials, settings, account status and safer-play controls.
• Financial data: deposit and withdrawal records, payment method type, transaction references and limited verification information.
• Activity data: pages viewed, login history, sports or casino preferences, promotional interactions and responsible gambling actions.
• Technical data: IP address, browser type, device information, operating system, timestamps and security logs.
• Support data: messages, complaint details, submitted screenshots and records of how an enquiry was resolved.

mb8app does not need your online banking password for Maybank, CIMB, Public Bank or Hong Leong. E-wallet PINs for Touch 'n Go eWallet, Boost and GrabPay should remain confidential and should only be entered within the relevant provider's secure interface.

3Purposes of Data Processing

mb8app processes personal information only where there is an appropriate operational or legal reason. The exact basis can depend on the service, location and nature of the information.

mb8app may also use aggregated data to understand general interest in topics such as EPL football, Liga Super Malaysia, casino guides or local payment instructions. Aggregated reports should not identify an individual user.

4Payment and Transaction Information

When users select an eligible payment method, transaction information may be exchanged with banks, e-wallet operators, payment processors or compliance providers. Common Malaysian channels may include Maybank, CIMB, Public Bank, Hong Leong, DuitNow, FPX, Touch 'n Go eWallet, Boost and GrabPay.

mb8app may receive a payment status, amount, currency, reference number, timestamp and limited account-holder details. mb8app does not control the independent privacy practices of a bank or payment provider merely because its public brand name appears as an available method.

Transaction records may be retained to reconcile MYR payments, investigate fraud, resolve disputes and satisfy applicable record-keeping obligations. Users must ensure that information supplied during a payment review is accurate and belongs to them or is lawfully provided.

5Cookies and Similar Technologies

mb8app may use cookies, browser storage and comparable technologies to remember settings, maintain sessions, measure website performance and protect account security. Some technologies are necessary for the website to function, while others may support analytics or user preferences.

• Essential cookies support navigation, session continuity and security.
• Preference cookies remember selected language, display or consent choices.
• Analytics technologies help mb8app understand page performance and general usage patterns.
• Security technologies identify unusual login activity, automated traffic or attempted abuse.

Browser controls may allow users to delete or block cookies. Disabling essential storage can affect login, preferences or other mb8app functionality.

6When Information May Be Shared

mb8app does not sell personal information as a standalone commercial product. Information may be disclosed only where reasonably necessary and subject to suitable safeguards. Recipients may include hosting providers, security vendors, payment processors, identity verification providers, professional advisers and authorised support partners.

Information may also be disclosed where required by a valid legal process, to protect users or platform security, to investigate fraud, or in connection with a legitimate corporate restructuring. mb8app will seek to limit disclosure to information relevant to the stated purpose.

Service providers acting for mb8app are expected to process information under documented instructions and appropriate confidentiality requirements. Independent providers may publish their own privacy terms for processing they control.

7International Data Transfers

Because mb8app operates in an international digital environment, personal information may be stored or processed outside Malaysia. The privacy and data protection rules in another country may differ from Malaysian requirements.

Where an international transfer occurs, mb8app seeks to use reasonable contractual, organisational and technical safeguards appropriate to the information and destination. These measures may include access restrictions, confidentiality commitments, encryption and due-diligence review of service providers.

8Data Security

mb8app applies layered controls designed to protect personal information from accidental loss, unauthorised disclosure, alteration and misuse. Measures may include encrypted network connections, access controls, monitoring, credential protection, backups and staff confidentiality procedures.

No internet transmission or storage system is completely secure. Users can reduce risk by choosing a unique password, protecting their phone, signing out on shared devices and never disclosing security codes. Users should contact mb8app promptly if they suspect account compromise.

Where a personal data incident creates a legally recognised notification obligation, mb8app will assess the circumstances and take appropriate steps in accordance with applicable requirements.

9Data Retention

Personal information is retained for no longer than reasonably necessary for the purpose for which it was collected, unless a longer period is required for legal, financial, fraud prevention, dispute resolution or responsible gambling reasons.

Retention periods vary. Routine technical logs may be kept for a shorter period than account verification or transaction records. Self-exclusion information may need to remain available after account closure so that mb8app can continue applying the requested restriction and prevent circumvention.

At the end of an applicable retention period, information may be securely deleted, anonymised or isolated from routine use where immediate deletion is not technically feasible.

10Your Privacy Rights and Choices

Subject to applicable law, identity verification and relevant exceptions, a user may request access to personal information, correction of inaccurate details, deletion, restriction, objection or a portable copy of certain data.

A request should identify the account and clearly describe the action sought. mb8app may ask for reasonable proof of identity before releasing or changing information. This protects users from fraudulent requests made by another person.

A request may be limited or refused where information must be retained to comply with law, establish legal claims, investigate fraud, protect other users or enforce a self-exclusion. mb8app will explain the applicable reason where it is appropriate and lawful to do so.

11Communications and Preferences

mb8app may send operational messages concerning security, account status, policy updates, payment issues or responsible gambling controls. These messages are distinct from optional promotional communications because they may be necessary to administer the service.

Where promotional messages are offered, users may be able to adjust their preferences or request that optional marketing stop. A marketing opt-out does not prevent essential service or security notices.

12Age Restriction and Vulnerable Users

mb8app is for adults aged 21 and above only. mb8app does not knowingly seek personal information from children or permit underage gambling activity. Age verification measures may be applied before access to restricted functions.

If mb8app reasonably believes that information belongs to a person under 21, access may be suspended while the matter is reviewed. Information may be deleted or retained only where necessary for safeguarding, fraud prevention, legal compliance or enforcement of the age restriction.

13Changes to This Privacy Policy

mb8app may revise this Privacy Policy to reflect changes in services, technology, security controls or legal requirements. The effective date at the top of the page will be updated when a revised version is published.

Users are encouraged to review this page periodically. Where appropriate, mb8app may provide an additional notice of a material change through the website or an account communication.

14Contact Us

Privacy questions and requests may be directed to the mb8app privacy team. Website email: [email protected]. The email address is displayed as plain text and is not a clickable link.

Include a clear description of your request and enough information to locate the relevant record. Do not send passwords, one-time codes, full payment card details or cryptocurrency private keys. mb8app may request additional evidence to verify identity before responding to a data rights request.