Privacy Policy MB8 Million

1. Introduction & Our Commitment

Mb8 million ("we", "Platform") takes our responsibility to protect the privacy and personal data of all platform users seriously. We understand that your trust is the foundation of the relationship we build with every member in Malaysia.

This Privacy Policy is drafted in compliance with the requirements of the Personal Data Protection Act 2010 (PDPA) Malaysia, which governs how organisations collect, process, and store individuals' personal data. We are committed to ensuring every aspect of your data handling complies with current legislation and international industry best practices.

As an online gaming platform serving hundreds of thousands of members across Malaysia, we recognise that the information you entrust to us is sensitive and valuable. We therefore continuously invest in the latest security technologies, rigorous internal procedures, and comprehensive staff training to ensure your data remains protected at all times.

This policy applies to all information collected through the mb8 million website, mobile app, and all our official communication channels including live support, email, and our official social media platforms.

2. Types of Personal Data We Collect

Depending on how you interact with the mb8 million platform, we may collect various categories of personal data. Below is a detailed summary of the data we collect:

2.1 Data We Do Not Collect

Mb8 million never collects or requests your full credit or debit card number, online banking account passwords, or any information irrelevant to the services we offer. Our team will never ask for your mb8 million account password through any communication channel.

3. How We Collect Data

Mb8 million collects personal data through several transparent and responsible methods:

3.1 Information You Provide Directly

• Account registration – when you fill in the registration form and complete the KYC process.
• Identity verification – documents you upload for account verification purposes.
• Financial transactions – details you enter when making a deposit or withdrawal.
• Support communications – messages and information you share when contacting our support team.
• Feedback and surveys – feedback you voluntarily provide to help us improve our services.

3.2 Automatically Collected Data

When you use the mb8 million platform, our systems automatically record certain technical information for security and user experience improvement purposes:

• IP address and network information for fraud detection and account protection.
• Game activity data to ensure fairness and resolve any disputes.
• Session logs including login time, logout time, and activity during active sessions.
• App performance data to quickly identify and resolve technical issues.

3.3 Data from Third-Party Sources

In certain cases, we may receive additional information about you from payment service providers such as DuitNow, FPX, and digital wallets for the purpose of verifying financial transactions. This information is used solely to ensure the security and validity of your transactions.

4. Purpose of Personal Data Use

Mb8 million uses the personal data collected for the following purposes, all aimed at delivering the best experience to you as a valued member:

4.1 Account Management & Services

• Creating, managing, and maintaining your member account.
• Processing deposits and withdrawals securely and accurately.
• Providing responsive and effective customer support.
• Sending important account notifications, including transaction confirmations and security alerts.

4.2 Security & Legal Compliance

• Verifying member identities through a rigorous KYC process to prevent fraud.
• Meeting anti-money laundering (AML) obligations in accordance with Malaysian law.
• Detecting and investigating any suspicious or unauthorized activity on the platform.
• Complying with directives from authorities and law enforcement agencies when required.

4.3 Product Improvement & Marketing Communications

• Analysing usage patterns to improve the interface and gaming experience.
• Personalising content, promotions, and game recommendations based on your interests.
• Sending promotional information and special offers (subject to your communication preferences).
• Conducting internal research to better understand member needs.

5. Sharing Data with Third Parties

Mb8 million does not sell, rent, or trade your personal data to any third party for their own commercial purposes. However, in certain situations, we may share your information with the following parties:

5.1 Trusted Service Providers

We work with selected third-party service providers who help us operate the platform. These include:

• Payment processors – DuitNow, FPX, and approved digital wallet providers to process your financial transactions.
• Gaming technology providers – licensed game software companies that supply gaming content on our platform.
• Analytics services – tools that help us understand how the platform is used for improvement purposes.
• Cybersecurity services – providers that help protect the platform against external threats and attacks.

All third-party service providers are bound by strict confidentiality agreements and are only permitted to use your data for specified purposes.

5.2 Legal Requirements & Authorities

Mb8 million will disclose your personal information to authorities where required by Malaysian law, including to the Royal Malaysia Police (PDRM), Bank Negara Malaysia, or any competent enforcement agency, under the following circumstances:

• Upon a valid court order or warrant.
• To comply with reporting obligations under the Anti-Money Laundering Act 2001.
• To protect the safety and rights of other users or the general public.

6. Data Storage & Security Measures

Protecting the integrity and confidentiality of your data is mb8 million's primary technical priority. We implement multiple layers of security defences to keep your information safe at all times.

6.1 Encryption Technology

• All data transmitted between your device and mb8 million servers is protected with 256-bit SSL/TLS encryption — the industry standard for online financial transactions.
• Sensitive data stored in our database is protected with additional encryption at the application level.
• Member passwords are never stored in plain text — we use a secure one-way hashing algorithm.

6.2 Access Controls

• Access to members' personal data is restricted solely to mb8 million staff who require it to perform their duties.
• All staff with access to sensitive data undergo comprehensive background checks and privacy training.
• An audit log system is used to monitor and record all access to member data.

6.3 Data Retention Period

Mb8 million retains your personal data for as long as your account is active or as long as necessary for legitimate business purposes. Following account closure:

• Financial transaction records are retained for 7 years in accordance with Malaysian legal requirements.
• KYC documents are retained for 5 years after account closure or last transaction.
• Customer support communication data is retained for 2 years for reference and dispute resolution.
• Once the retention period expires, your data will be securely deleted or anonymised.

7. Cookie Usage Policy

The mb8 million platform uses cookies and similar tracking technologies to enhance your experience and ensure the platform runs smoothly. The following are the types of cookies we use:

You can manage your cookie settings through your web browser. However, disabling essential cookies may affect platform functionality and your gaming experience.

8. Your Rights as a Member

Under Malaysia's Personal Data Protection Act 2010, you have several important rights regarding your personal data held by mb8 million. We fully respect and uphold these rights:

To exercise any of the above rights, contact our data protection team by email at [email protected] or via live chat within the platform. We will respond within 14 working days from the date the request is received.

9. Children's Privacy

The mb8 million platform is intended exclusively for individuals aged 18 years and above. We do not knowingly collect or process personal data from children or minors.

If you believe we may have collected information from someone under the age of 18, please contact us immediately at [email protected]. We will take immediate action to delete such information and close the account in question.

10. Links to Other Platforms

The mb8 million platform may contain links to third-party websites or services, particularly gaming providers and payment partners. This Privacy Policy applies solely to the mb8 million platform.

We are not responsible for the privacy practices or content of those third-party platforms. We encourage you to read the privacy policy of any third-party website or service before providing them with any personal information.

11. Amendments to the Privacy Policy

Mb8 million reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. The "Last Updated" date at the top of this document will be revised whenever any changes are made.

For significant changes, we will notify you via:

• In-platform notification during your next login session.
• Notification email sent to the address registered on your account.
• A prominent notice on our website homepage for at least 14 days.

Continued use of the platform after the effective date of any changes constitutes acceptance of the revised policy. If you do not agree with the changes, you have the right to close your account before they take effect.

12. Contact Our Data Protection Officer

Mb8 million has appointed a Data Protection Officer (DPO) responsible for ensuring compliance with this Privacy Policy and applicable data protection laws. If you have any questions, concerns, or complaints regarding your privacy or the handling of your personal data, you may contact us via:

We are committed to addressing every inquiry and complaint seriously and within the stipulated timeframe. If you are not satisfied with our response, you have the right to file a complaint with Malaysia's Personal Data Protection Department under the Ministry of Communications and Digital.