Privacy Policy mb88

1Introduction & Scope of This Policy

This Privacy Policy is published by mb88 ("we", "Platform") and applies to all users who access or use mb88 platform services through the website, mobile app, or any related digital channel. This document explains in detail how mb88 collects, stores, processes, uses, and protects your personal data.

Mb88 is committed to keeping your privacy protected at all times. We understand that your trust is the most valuable asset in our care. All personal data handling is therefore conducted with full transparency and accountability, in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA).

This policy applies to all information we collect when you register an account, make a deposit or withdrawal, contact customer support, use platform features, or browse the mb88 website. By continuing to use our platform after reading this policy, you consent to the privacy practices described herein.

2Personal Data We Collect

Mb88 only collects personal data that is strictly necessary to provide platform services to you safely and efficiently. We do not collect information that is excessive or irrelevant to the purposes of the services provided.

Data collection sources:

• Directly from you – Through registration forms, profile updates, KYC forms, and communications with our support team.
• Automatically – Through cookies, tracking pixels, and server log technologies when you browse or use the mb88 platform.
• Trusted third parties – From identity verification providers, registered payment providers, and regulatory partners for legal compliance purposes.

3How mb88 Uses Your Data

Every piece of data we collect has a specific and legitimate purpose. mb88 does not use your data for purposes unrelated to the provision of platform services without first obtaining your consent.

The primary purposes for which your data is used are as follows:

• Account management: Creating, maintaining and protecting your user account, including login verification and access control.
• Transaction processing: Processing deposits, withdrawals and all financial transactions accurately and securely.
• Legal compliance (KYC/AML): Fulfilling legal obligations related to identity verification and anti-money laundering.
• Platform security: Detecting and preventing fraud, hacking, unauthorized access and other suspicious activities that could compromise your account.
• Customer support: Providing effective technical support and troubleshooting whenever you need assistance.
• Personalize your experience: Personalizing content, promotions and game recommendations based on your habits and preferences on the platform.
• Marketing communications: Sending promotional information, bonus offers and platform updates – only to users who have consented to receive such communications.
• Continuous improvement: Analyzing usage patterns in aggregate (not individually) to improve the performance, reliability and overall experience of the mb88 platform.
• Responsible gaming: Monitoring play habits to identify signs of problem gambling and taking appropriate preventive action.

4Sharing Data with Third Parties

Mb88 does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We value the trust you place in us and uphold this principle without exception.

However, there are certain situations where mb88 needs to share your data with the following parties, solely to enable the platform to operate and deliver services to you:

• Contracted service providers: Technology companies, cloud service providers, payment solution providers (DuitNow, FPX, Touch 'n Go, GrabPay, Boost), and gaming software providers bound by strict confidentiality agreements with mb88.
• Regulatory bodies and law enforcement: When mb88 is required by law, court order, or direction from a lawful authority to disclose certain information.
• KYC provider partners: Third-party identity verification companies that help mb88 meet its KYC and AML obligations as required by law.
• Parties involved in corporate transactions: If mb88 is involved in a merger, acquisition, or asset sale, user data may be transferred as part of that transaction, subject to equivalent privacy protections.

5Data Security & Protection Measures

Mb88 continuously invests in the latest security infrastructure to keep your personal data safe from cyber threats, unauthorised access, and data breaches. Our security systems are designed in multiple layers to deliver maximum protection.

Technical security measures used by mb88:

• 256-bit SSL/TLS encryption: All communications between your device and mb88's servers are encrypted using banking-grade SSL/TLS protocols.
• Data-at-rest encryption: Sensitive data stored in the mb88 database is encrypted using industry-standard encryption algorithms.
• Two-Factor Authentication (2FA): An extra layer of protection available to all user accounts to prevent unauthorized access even if your password is compromised.
• 24/7 continuous monitoring: An automated monitoring system active around the clock to detect and respond to any security threats in real time.
• Role-based access control: Only mb88 staff who require access to specific data to perform their duties are authorised to access that data.
• Regular security audits: Penetration testing and security audits are conducted periodically by independent security experts to identify and address any system vulnerabilities.
• Secure data backup: Your data is regularly backed up to a secure, encrypted location to ensure service continuity in the event of a system failure.

While mb88 takes all reasonable steps to protect your data, no digital security system can be guaranteed 100% secure. You also play an important role in keeping your account safe by using a strong password, enabling 2FA, and not sharing your login details with anyone.

6Cookies, Pixels & Tracking Technologies

Mb88 uses cookies and similar tracking technologies to enhance your experience on our platform, understand how you use our services, and ensure the security of your account.

Types of cookies used by mb88:

• Essential Cookies: Required for core platform functions such as login, session verification, and security. These cookies cannot be disabled without affecting the platform's primary functionality.
• Performance Cookies: Helping us understand how users interact with the platform by collecting anonymized usage data for analytics and improvement purposes.
• Functional Cookies: Saving your preferences such as language settings, location and display options to deliver a more personalized experience.
• Marketing Cookies: Used to display more relevant ads and promotions based on your interests and behaviour. You may opt out of these cookies.

You can manage your cookie settings through your web browser at any time. Please note that disabling essential cookies may affect the functionality and security of your mb88 account. For detailed guidance on managing cookies, refer to your web browser's help documentation.

7Your Rights as a Data Owner

As a mb88 platform user, you have certain rights regarding your personal data under Malaysia's PDPA. mb88 fully respects and facilitates the exercise of these rights.

• Right to Access: You have the right to request and receive a copy of the personal data we hold about you. Requests will be processed within 21 business days.
• Right to Rectification: If any of your personal data is inaccurate or outdated, you have the right to request that we update or correct it without undue delay.
• Right to Erasure: You have the right to request the deletion of your personal data in certain circumstances, subject to our data retention obligations under applicable law.
• Right to Withdraw Consent: You may withdraw your consent for us to process your data at any time, particularly for marketing purposes. Withdrawal does not affect the validity of any processing carried out prior to that point.
• Right to Object: You have the right to object to the processing of your data for specific purposes, such as direct marketing.
• Right to Data Portability: You have the right to receive your personal data in a machine-readable format for transfer to another service provider.

To exercise any of the rights stated above, please contact the mb88 Data Protection team via email at [email protected] or via the in-platform live chat. Your request will first be verified for security purposes before being processed.

8Data Retention Period

Mb88 retains your personal data only for as long as necessary to fulfil the purposes stated in this policy, or as required by applicable laws in Malaysia.

• Active account data: Retained for the duration your account remains active on the mb88 platform and continuously updated as required.
• KYC and financial data: Retained for a minimum of 7 years after account closure in accordance with Malaysia's anti-money laundering (AML) legal requirements.
• Support communication records: Retained for 3 years for complaint resolution and service improvement purposes.
• Technical log data: Retained for 12 months for security purposes and technical incident investigations.
• Marketing data: Retained until you withdraw consent or request unsubscription from mb88 marketing communications.

Once the designated retention period expires, your data will be securely deleted or anonymised so it can no longer be linked to your identity. The deletion process is carried out under strict security procedures to ensure data cannot be recovered.

9Children's Privacy

The mb88 platform is strictly for individuals aged 18 and above. mb88 does not intentionally collect, store, or process any personal data from individuals under the age of 18.

If we determine that personal data of a minor has been collected without the knowledge or consent of a parent or guardian, we will take immediate action to delete that data and close the relevant account.

If you are a parent or guardian and believe that your minor child has registered or used the mb88 platform, please contact us immediately at [email protected] so that we can take the appropriate action without any delay.

10Changes to This Privacy Policy

Mb88 reserves the right to modify or update this Privacy Policy at any time to reflect changes in our privacy practices, new legal requirements, or platform improvements. Each new version will display the latest update date at the top of this document.

For material changes that may significantly affect your privacy rights, mb88 will provide clear notice via email to your registered address and/or through a prominent notice on our platform at least 14 days before the changes take effect.

Your continued use of the mb88 platform after any changes take effect is considered acceptance of the updated privacy policy. If you disagree with the changes, you have the right to close your account before they take effect.

11Contact Our Data Protection Officer

If you have any questions, concerns, or complaints regarding how mb88 handles your personal data, or wish to exercise any of your rights under the PDPA, please contact our Data Protection Officer (DPO):

• Email: [email protected]
• Live Chat: Available on the mb88 platform, 24 hours a day, 7 days a week.
• Response Time: Privacy-related requests will be responded to within 3 business days; formal requests under PDPA within 21 business days.