Privacy Policy mb8 million —
Your Data Security Is Our Priority

This Privacy Policy ("Policy") describes mb8 million's ("we", "Platform") commitment to managing and protecting the personal information of all users and members ("you") who use our platform, including the mb8 million website and mobile app.

Your privacy is not merely a legal obligation for us — it is a core value that forms the foundation of trust between mb8 million and every one of its members. Since day one, we have built a data management system with security and transparency as its two main pillars.

This Policy complies with Malaysia's Personal Data Protection Act 2010 (PDPA). By using mb8 million's services, you agree to the practices outlined in this Privacy Policy. If you do not agree, please discontinue use of the platform.

Mb8 million only collects data that is genuinely necessary to provide a secure, seamless, and high-quality service. The data we collect falls into three main categories:

A. Data You Provide Directly:

• Full name as stated on your identification document.
• Date of birth for age verification purposes.
• Email address and mobile phone number.
• Current residential address.
• Bank account details or registered payment methods.
• Copies of identity documents (MyKad or passport) and bank statements for the KYC verification process.

B. Data Collected Automatically:

• IP address and device information (device type, operating system, phone model).
• Type and version of web browser used.
• Session data and activity logs within the platform.
• Transaction records, including deposits, withdrawals, and wagering.
• Date and time of access and pages visited.

C. Data From Authorised Third Parties:

• Identity verification information from registered KYC service providers.
• Payment verification data from the payment processors used.
• Information required to comply with legal and regulatory requirements.

The personal data we collect is used exclusively for the following purposes:

If we wish to use your data for any purpose not listed above, we will request your separate consent beforehand.

Mb8 million does not sell, rent, or disclose your personal data to third parties without your consent, except in the following circumstances:

• Payment Processors: Data required to process your financial transactions is shared with authorised payment service providers, including banks and e-wallet processors registered in Malaysia.
• KYC Service Providers: Your identity verification documents are shared with licensed KYC partners to fulfil verification requirements.
• Legal Authorities: We will disclose the required information when ordered by a court, law enforcement agency, or relevant regulatory body.
• Selected Business Partners: In limited situations, anonymised data may be shared with analytics partners for service improvement purposes.

All third parties who receive your data are required to comply with data protection standards at least equivalent to those applied by mb8 million itself.

We take data security extremely seriously. mb8 million implements multiple layers of technical and organisational protection to keep your data safe at all times:

• 256-bit SSL Encryption: All communications between your browser and our servers are encrypted using the latest TLS protocol, ensuring data cannot be intercepted while in transit.
• Secure Password Storage: Your password is never stored in plain text. We use a one-way, irreversible hashing algorithm to protect it.
• Two-Factor Authentication (2FA): Members can enable two-factor authentication for an added layer of security during Login.
• 24/7 Monitoring: An automated monitoring system operates around the clock to detect and respond to any suspicious activity.
• Periodic Penetration Testing: Our security infrastructure is regularly tested by independent security experts to identify and address any vulnerabilities.
• Internal Access Controls: Staff access to member data is restricted based on the least privilege principle and is fully logged for audit purposes.

While we take all reasonable steps to protect your data, no security system can be guaranteed 100% foolproof. In the event of a data breach that affects you, we will notify you within the timeframe required by the PDPA.

Mb8 million uses cookies and similar technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

Types of Cookies We Use:

• Essential Cookies: Required for core platform functions such as Login session verification and security. These cookies cannot be disabled.
• Performance Cookies: Collects information on how you use the platform to help us improve the user experience. All data collected is anonymised.
• Functional Cookies: Saves your preferences such as language and display settings so you do not need to reconfigure them each time.
• Analytics Cookies: Helps us understand overall platform usage patterns for continuous improvement.

You can manage or delete cookies through your web browser settings. However, disabling certain cookies may affect platform functionality.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by mb8 million:

Mb8 million retains your personal data only for as long as necessary to fulfil the purpose of collection or as required by applicable law.

• Active Account Data: Retained throughout the period your account is active and up to 7 years after account closure for legal compliance purposes.
• Transaction Records: Retained for a minimum of 7 years in accordance with Malaysia's financial and tax legal requirements.
• KYC Documents: Retained for the period stipulated by applicable anti-money laundering regulations in force.
• Communication Logs: Retained for 3 years for customer service and dispute resolution purposes.
• Analytics Data: Anonymised data is retained for 2 years for trend analysis and platform improvement purposes.

Once the specified retention period has expired, your data will be securely deleted or permanently anonymised.

In some cases, your personal data may be transferred to or processed in other countries with different data protection regulations than Malaysia. Where such transfers occur, mb8 million ensures that:

• Data transfers are only carried out to countries with an adequate or equivalent level of data protection.
• Appropriate data transfer agreements, including standard contractual clauses, are in place to protect your data during transfer.
• Overseas data recipients are required to comply with the same security standards applied by mb8 million.

By using mb8 million's services, you understand and agree to such data transfers as required for the provision of our services.

The mb8 million platform may contain links or integrations with third-party services, such as payment processors and game providers. This Privacy Policy applies solely to the mb8 million platform.

Mb8 million is not responsible for the privacy practices or content of any third-party websites or services. We encourage you to read the privacy policy of each third-party service you use.

Mb8 million services are strictly for individuals aged 18 and above. We do not knowingly collect personal data from minors or underage individuals.

If we discover that personal data of a minor has been collected without our knowledge, the data will be deleted immediately and the associated account will be closed. Parents or guardians who become aware that their child has registered on our platform should contact us immediately via [email protected].

If you have any questions, concerns, or complaints regarding this Privacy Policy or how mb8 million handles your personal data, please contact us through the following channels:

• Privacy Email: [email protected]
• Live Chat: Available 24/7 via the chat icon at the bottom corner of the platform.
• Response Time: We are committed to responding to all privacy-related inquiries within 5 business days.

We will also notify you via your registered email address of any material changes to this Privacy Policy. Please ensure your email address in your account is always kept up to date.