Privacy Policy MB8 Casino – Our Commitment to Protecting Your Data

1. Introduction and Scope of This Policy

1.1 mb8 casino deeply values the trust you place in us when you register and use this platform. We understand that privacy is more than a technical obligation — it is the foundation of the trusting relationship we build with every player.

1.2 This Privacy Policy applies to all personal information collected through the MB8 Casino website, Android and iOS mobile apps, and all related services we provide to players in Malaysia.

1.3 This policy is drawn up in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practices in data protection. We regularly review and update this policy to ensure it remains aligned with the latest legal and technological developments.

1.4 If you are under 18 years of age, you are not eligible to use this platform and we do not intentionally collect data from minors. Should we discover that such data has been collected inadvertently, it will be deleted immediately.

2. Types of Personal Data We Collect

2.1 Account Registration Information: When you register a new account at mb8 casino, we collect basic information such as your full name, date of birth, identity card number (NRIC), mobile phone number, and email address. This information is required to create a valid account and verify your identity.

2.2 Identity Verification Document (KYC): As part of our compliance procedures, you may be asked to submit a copy of your identification documents such as a Malaysian Identity Card, passport, or other relevant documents. These documents are used solely for identity verification purposes.

2.3 Financial Information: To process deposits and withdrawals, we collect bank account details (bank name, account number), e-wallet details (Touch 'n Go eWallet, GrabPay), and transaction records. We do not store credit or debit card numbers directly in our systems.

2.4 Platform Usage Data: We automatically record technical data including IP address, device type, operating system, web browser, pages visited, session time and duration, and activity patterns within the platform. This data helps us detect suspicious activity and improve the user experience.

2.5 Communication Records: When you contact our customer support team via live chat, email, or other channels, we retain records of those communications for quality control and historical reference purposes.

3. How We Use Your Data

3.1 mb8 casino uses your personal data solely for legitimate purposes directly related to the provision of platform services. We do not use your data for purposes you would not expect or that conflict with your interests.

3.2 The primary purposes for which your data is used are as follows:

• Account management: Creating, verifying, and maintaining your player account, including the login process and password recovery.
• Payment processing: Process all deposit and withdrawal transactions securely and accurately.
• Fraud prevention: Detecting and investigating any suspicious or unauthorized activity on the platform.
• Legal compliance: Meet KYC obligations, anti-money laundering (AML) requirements, and reporting requirements set by the relevant authorities.
• Customer support: Enables our team to provide accurate and personalised assistance to you.
• Platform improvements: Analyse usage patterns to improve platform performance, interface, and overall experience.
• Promotional communications: Sending relevant promotional information and offers (subject to your preferences).

4. Data Sharing with Third Parties

4.1 mb8 casino does not sell, rent, or disclose your personal data to any third party for their own commercial purposes. This is a core commitment that is non-negotiable.

4.2 However, there are limited situations where we may need to share your data with certain parties:

• Payment processors: Authorised payment partners such as FPX, Touch 'n Go, and GrabPay processors to facilitate secure financial transactions.
• Technology providers: Companies that provide the technical infrastructure, cloud services, or security software used by our platform, and are bound by strict confidentiality agreements.
• Legal authorities: Where required by a court order, applicable law, or a legitimate request from a law enforcement agency.
• Audit and compliance: Independent auditors conducting compliance reviews related to fair gaming, financial security, or regulatory compliance.

4.3 All third parties receiving your data are contractually bound to handle that information in accordance with security standards equal to or higher than those we have established.

5. Data Security Measures

5.1 The security of your personal data is an absolute priority for mb8 casino. We continuously invest in the latest security technologies and procedures to ensure your data is always protected.

5.2 Technical security measures we implement include:

• 256-bit SSL/TLS encryption for all communications between your device and our servers.
• Encryption at rest for all sensitive data stored in our databases.
• Two-factor authentication (2FA) is available for all player accounts as an added layer of protection.
• Round-the-clock, 24/7 real-time security monitoring by our cybersecurity team.
• Regular penetration testing conducted by independent security experts.
• Strict access controls using the principle of least privilege — only staff who need it may access specific data.

6. Cookies and Tracking Technologies

6.1 mb8 casino uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions correctly. Cookies are small text files stored on your device when you visit our website.

6.2 Types of cookies we use:

• Essential Cookies: Required for core platform functions such as login session authentication. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collecting anonymous data on how you use the platform to help us improve its design and functionality.
• Functionality Cookies: Saving your preferences such as language and display settings so you don't need to reconfigure them on every visit.
• Analytics Cookies: Helps us understand platform traffic and usage patterns in an aggregated and anonymised manner.

6.3 You can manage or disable cookies through your web browser settings. However, disabling certain cookies may affect the functionality or user experience of the platform.

7. Your Rights Regarding Personal Data

7.1 Under Malaysia's Personal Data Protection Act 2010 (PDPA) and our own policy, you have the following rights regarding your personal data:

7.2 To exercise any of the rights above, please contact our privacy team at [email protected] stating the type of request. We will process your request within 14 working days and inform you of the action taken.

7.3 We will not charge any fee to process requests related to your rights. However, if a request is repetitive or unreasonable, we reserve the right to charge a reasonable administrative fee.

8. Data Retention Period

8.1 mb8 casino retains your personal data only for as long as necessary to fulfil the purpose for which it was collected or to comply with applicable legal requirements.

8.2 The general guidelines for data retention periods are as follows:

• Active account data: Retained for the duration of your active account and for 7 years after account closure, in line with PDPA requirements and financial compliance obligations.
• Financial transaction records: Retained for a minimum of 7 years for audit and anti-money laundering (AML) compliance purposes.
• KYC documents: Retained for the duration of the active account period plus 5 years after account closure.
• Support communication logs: Retained for 3 years from the date of last interaction.
• Technical data and logs: Retained for 12 months for security and fraud detection purposes.

8.3 Once the retention period expires, data will be securely deleted or anonymised using industry-standard methods. Anonymised data is no longer linked to your identity and may be used for aggregate analytics purposes.

9. International Data Transfers

9.1 In the course of its operations, MB8 Casino may need to transfer your personal data to servers or processors located outside Malaysia. Such transfers are only carried out when necessary and with adequate safeguards in place.

9.2 When data is transferred outside Malaysia, we ensure that:

• The recipient country has data protection laws that are equivalent to or stricter than ours.
• A legally binding data transfer agreement has been signed with the data recipient.
• Appropriate technical safeguards are applied throughout the transfer process.

10. Updates and Amendments to the Privacy Policy

10.1 mb8 casino reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments.

10.2 For material or significant amendments, we will notify you via your registered email or in-platform notification at least 7 days before the changes take effect. For minor amendments or editorial corrections, we will update the "Last Updated" date at the top of this document.

10.3 Your continued use of the mb8 casino platform after the effective date of any amendments constitutes your acceptance of the updated Privacy Policy. It is your responsibility to review this policy periodically.

11. Contact Us for Privacy Inquiries

11.1 If you have any questions, concerns, or complaints regarding how mb8 casino handles your personal data, we encourage you to contact us directly. We are committed to resolving every enquiry thoroughly and professionally.

11.2 You may contact our privacy team by email at [email protected]. Please include "Privacy Inquiry" in the subject line along with details of your request. We aim to respond within 24 hours on working days.

11.3 If you are not satisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection, Malaysia's Ministry of Communications and Digital, or the relevant authority.