Privacy Policy MB8 — Malaysia Player Data Protection

MB8 takes the privacy rights of every Malaysian player seriously. This Privacy Policy clearly explains how we collect, use, store, and protect your personal data — as well as your rights as an individual using the MB8 platform. Last updated: 1 June 2026.

Updated: 1 June 2026 256-bit SSL Encrypted Applicable to Malaysian Players Bahasa Melayu (ms-MY)
Privacy Policy
Version 3.1 — June 2026

MB8's Six Data Protection Principles

The MB8 Privacy Policy is built on six core principles that ensure the personal data of Malaysian players is handled responsibly, securely, and transparently at all times.

Minimal Data Collection
MB8 only collects personal data that is strictly necessary to provide platform services to you — nothing more, nothing less. We do not collect data that is irrelevant or that serves no clear purpose within MB8's platform operations.
No Sale of Data to Third Parties
MB8 does not sell, rent, or share players' personal data with any third party for marketing or commercial purposes. Your data is only shared in situations explicitly stated in this Privacy Policy and only when necessary.
256-Bit SSL Encryption
All data transmitted between your device and MB8's servers is encrypted using 256-bit SSL technology — the highest security standard in the industry. Sensitive data such as payment information and personal details is fully protected both in transit and at rest.
Full Control by the Player
You have the right to access, correct, request a copy of, or request the deletion of your personal data held by MB8 at any time. Such requests can be submitted to the MB8 support team and will be processed within a reasonable timeframe.
Limited Retention Period
MB8 retains your personal data only for as long as necessary for the stated purpose or as required by applicable law. Once the retention purpose has been fulfilled, the data is securely deleted or anonymised in accordance with MB8's standard procedures.
Transparency in Every Aspect
MB8 is committed to being fully transparent about what we do with your data. Any changes to the Privacy Policy will be communicated to all registered players with sufficient notice before the changes take effect.
Have a Question?

The MB8 team is available to clarify any aspect of this Privacy Policy in Bahasa Melayu, 24 hours a day.

Contact Support
SSL 256-bit
Licensed
No Sharing
PDPA

Important Note: This Privacy Policy describes the data management practices of MB8 (mb8.in) and applies to all players using the MB8 platform, including the website, mobile application, and all related services. By registering for or using MB8's services, you agree to the terms of this Privacy Policy. Please read this document carefully in its entirety.

Introduction — MB8 and Our Privacy Commitment

MB8 (operating at mb8.in) is an online betting platform serving Malaysian players, covering Sports Betting such as EPL football and the Malaysia Super League, badminton, cricket, e-sports, Live Casino, and jackpot slots. In providing these services, MB8 necessarily processes a certain amount of players' personal data to ensure the platform operates correctly, securely, and in compliance with all applicable legal requirements.

MB8 recognises that privacy is a fundamental right of every individual, and we take this responsibility very seriously. This Privacy Policy is written in clear, plain language — not confusing legal jargon — so that every Malaysian player can understand exactly how their data is managed by MB8.

The MB8 Privacy Policy is designed in accordance with the principles of Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practices in data protection. We are committed to maintaining full compliance with all data protection legal requirements applicable to MB8's operations in Malaysia.

If you have any questions about how MB8 handles your personal data, or wish to exercise any of the rights set out in this Privacy Policy, please contact MB8's privacy team by email at support@mb8.in or via the platform's 24-hour live chat.

Personal Data MB8 Collects

MB8 collects various types of personal data depending on how you interact with our platform. Below is a full breakdown of the data types we collect and the purpose behind each:

Data Type Specific Examples How It Is Collected
Identity Data Full name, MyKad/passport number, date of birth, gender Registration form, KYC process
Contact Data Malaysian phone number, email address, mailing address Account registration, profile updates
Financial Data Payment method details (TNG, DuitNow, GrabPay, FPX), deposit and withdrawal history in MYR Deposit and withdrawal transactions
Technical Data IP address, device type, operating system, web browser, cookie data Automatically during platform use
Usage Data Betting history, games played, session duration, usage patterns Automatically while playing on MB8
Communication Data Customer support conversation records, emails, complaint information Interactions with the MB8 support team

Sensitive Data: MB8 does not collect sensitive data such as medical information, religious beliefs, or political views. Financial data collected is limited strictly to what is necessary for processing transactions and complying with AML/KYC legal requirements.

How MB8 Uses Your Personal Data

MB8 uses the personal data collected for a range of legitimate and necessary purposes. Below is a full list of how we use your data and the legal basis for each use.

  • Account Management and Identity Verification: Your identity data is used to create and maintain your MB8 account, verify your identity at login, and carry out KYC (Know Your Customer) procedures where required by law. This is a fundamental requirement to keep your account secure and accessible only to you.
  • Financial Transaction Processing: Your payment data is used to process deposits via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, and FPX, as well as to process your winning withdrawals within 15 minutes to your preferred payment method. MB8 does not store your full bank account or card details — this information is processed directly by the respective payment providers.
  • Provision of Betting Services: Your usage data and betting history are used to deliver a personalised experience within the MB8 platform — including surfacing relevant betting markets for your favourite sports such as the EPL, Malaysia Super League, or MLBB e-sports.
  • Fraud Prevention and Security: Technical and usage data are analysed by MB8's security systems to identify and prevent fraudulent activity, money laundering, multi-account usage, and any other security threats to the platform or other players.
  • Legal Compliance: MB8 uses personal data to comply with all applicable legal obligations, including reporting to authorities when required by law, adhering to Anti-Money Laundering (AML) requirements, and maintaining transaction records as prescribed by relevant legislation.
  • Service Communications: Your phone number and email address are used to send you important account notifications — such as deposit confirmations, successful withdrawal alerts, security notices, and policy updates. These are not marketing communications — they are essential service updates that you need to receive as an MB8 user.
  • Platform Improvements: Anonymised and aggregated usage data is used by MB8's technical team to understand platform usage patterns and make improvements that enhance the experience for all players. This analysis never identifies you as an individual.

MB8 will not use your personal data for any purpose beyond those stated above without first obtaining your explicit consent. Should we need to use your data for a new purpose not covered in this Privacy Policy, we will notify you and obtain the appropriate consent before doing so.

Sharing Data with Third Parties

MB8 does not sell, rent, or disclose players' personal data to third parties for marketing purposes. However, in the course of operating the platform, MB8 may need to share certain data with selected third parties in the following situations:

  • Payment Service Providers: When you make a deposit or withdrawal using Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, or FPX, the necessary transaction information will be shared with the respective payment provider to process your transaction. These providers have their own privacy policies and are subject to Malaysian data protection law.
  • Game Providers: To provide Live Casino games (via Evolution Gaming, SA Gaming, and others) and jackpot slots, the required game session data is shared with the relevant game providers. This is limited strictly to the data needed to run the games and calculate winnings.
  • Legal Authorities: MB8 will disclose personal data to law enforcement authorities, regulatory bodies, or courts when required to do so by Malaysian law or a valid court order. MB8 has no discretion in such situations and will comply with all lawful requests from the relevant authorities.
  • Technology Service Providers: MB8 uses selected third-party services for the platform's technical infrastructure, including cloud services, security analytics, and fraud detection. All such providers are bound by strict confidentiality agreements and are only permitted to use data for purposes specified by MB8.

MB8 ensures that all third parties receiving player data are bound by data protection obligations that are equal to or higher than the standards MB8 itself upholds. We do not share data with third parties that cannot demonstrate adequate protection guarantees.

MB8 Data Security Measures

The security of player personal data is MB8's top priority. We implement a comprehensive range of technical and organisational measures to protect your data from unauthorised access, disclosure, alteration, or loss:

  • 256-bit SSL Encryption: All data communications between your device and MB8's servers are encrypted using 256-bit TLS/SSL protocol — the same security standard used by leading banking institutions worldwide. This means data transmitted when you register, deposit, play, or withdraw winnings is fully protected against interception by unauthorised parties.
  • Encrypted Data Storage: Personal data stored in MB8's databases is encrypted using robust encryption methods. Even if someone were to somehow gain physical access to MB8's servers, they would be unable to read any player personal data without the appropriate decryption key.
  • Layered Access Controls: Access to players' personal data within MB8's internal systems is strictly limited to staff who require it to perform their duties. All access is logged and continuously monitored by MB8's security team.
  • Two-Factor Authentication (2FA): MB8 encourages all players to enable two-factor authentication on their accounts. This feature adds an extra layer of security, ensuring that even if your password is compromised, your MB8 account remains inaccessible to others without the verification code sent to your registered phone number.
  • 24-Hour Security Monitoring: MB8's cybersecurity team monitors the platform continuously 24 hours a day to detect any intrusion attempts, suspicious activity, or other security threats. Any identified security incidents are addressed promptly in accordance with established incident response procedures.
  • Regular Penetration Testing: MB8 conducts regular security assessments, including penetration testing by independent security experts, to identify and address vulnerabilities before they can be exploited by malicious parties.

While MB8 implements all reasonable security measures, no security system can be guaranteed 100% foolproof. We encourage you to take your own precautions as well — use a strong and unique password, enable two-factor authentication, and avoid accessing your MB8 account on untrusted devices or public WiFi connections.

Cookies, Tracking Technologies & Analytics

The MB8 platform uses cookies and similar tracking technologies to enhance your experience and ensure the platform functions correctly. Below is an explanation of the types of cookies we use and their purposes:

  • Essential Cookies: These cookies are required for the MB8 platform to function properly. They store your login session information, language preferences, security settings, and other essential details that allow you to use the platform without having to log in again every time you navigate to a new page. Essential cookies cannot be disabled without affecting the platform's core functionality.
  • Performance Cookies: These cookies collect information about how you use the MB8 platform — pages you visit, buttons you click, and time spent in each section. This data is used in aggregated, non-identifiable form to help MB8 understand how players use the platform and make relevant improvements.
  • Functional Cookies: These cookies allow the MB8 platform to remember your preferences — such as your preferred payment method, default betting limits, and display settings. This ensures that each time you log in to MB8, the platform is already configured to your preferences without needing to reset them.

You can manage your cookie settings through your web browser at any time. However, disabling certain cookies may affect the functionality and your overall experience on the MB8 platform. For guidance on managing cookies in your browser, please refer to your browser's help section.

A Note on Analytics: MB8 uses internal analytics tools to understand platform usage patterns. All analytics data is anonymised and aggregated — we do not use third-party analytics tools that could combine your MB8 data with data from other websites to build a marketing profile.

Your Rights as an MB8 Player

As an MB8 player and Malaysian individual, you have specific rights regarding your personal data under Malaysia's Personal Data Protection Act 2010 (PDPA) and MB8's privacy policy. Below are those rights and how to exercise them:

Right to Access

You have the right to request a copy of the personal data MB8 holds about you. MB8 will provide this information in a readily readable format within 30 days of your request.

Right to Rectification

If the personal data MB8 holds about you is inaccurate or incomplete, you have the right to request a correction. Updates can be made directly in your profile settings or through MB8 support.

Right to Erasure

In certain circumstances, you have the right to request the deletion of your personal data. This right is subject to the record-keeping obligations imposed by laws applicable to MB8.

Right to Object

You have the right to object to the processing of your personal data for certain purposes. Contact MB8's privacy team to find out more about the circumstances in which this right applies.

Right to Data Portability

You have the right to receive the personal data you have provided to MB8 in a structured, machine-readable format, and to transfer it to another data controller of your choosing.

Right to Restrict Processing

In certain circumstances — such as during a dispute investigation into the accuracy of your data — you have the right to request that MB8 temporarily restrict the processing of your personal data.

To exercise any of the rights above, contact the MB8 privacy team by email at support@mb8.in, stating the right you wish to exercise along with any relevant information. MB8 will respond to your request within 30 calendar days and may request identity verification before processing your request to ensure the security of your data.

Children's Data Protection

The MB8 platform is strictly for individuals aged 18 and above. MB8 does not knowingly collect or process personal data from individuals under the age of 18. The MB8 registration process requires Malaysian phone number verification, which helps ensure that users are eligible adults.

Should MB8 discover that personal data belonging to an individual under the age of 18 has been collected without our knowledge, we will take immediate steps to delete that data and close the associated account. Parents or guardians who suspect their child may have registered an MB8 account should contact us promptly at support@mb8.in for appropriate action.

If you are a parent or guardian and become aware that a minor in your care has registered an MB8 account, please contact us immediately at support@mb8.in. We will treat this as a matter of the highest priority and act as quickly as possible.

Cross-Border Data Transfers

In the course of operating the platform, MB8 may need to transfer players' personal data to servers or service providers located outside Malaysia. This applies primarily in the context of cloud infrastructure services and international game providers that work with MB8.

Where cross-border data transfers are required, MB8 ensures that the receiving country or entity provides a level of data protection equivalent to or higher than the standards set under Malaysian law. We apply appropriate safeguards such as standard contractual clauses and data processing agreements to ensure that Malaysian players' data remains protected even when processed outside of Malaysia.

MB8 does not transfer personal data to countries without an adequate data protection framework unless appropriate additional safeguards are in place and the necessary approvals have been obtained from the relevant authorities.

Data Retention Period

MB8 does not retain your personal data for longer than necessary. Below are the general guidelines on how long we keep the various types of data we collect:

  • Active Account Data: For as long as your account remains active, MB8 will retain all personal data necessary to maintain and provide services to you. This data is updated whenever you make changes to your profile.
  • Financial Transaction Records: MB8 retains records of all deposit and withdrawal transactions for a minimum of seven (7) years from the date of each transaction, as required under applicable Malaysian financial and tax laws. This includes transaction records made via TNG eWallet, DuitNow, GrabPay, Boost, ShopeePay, and FPX.
  • Betting History: Betting records are retained for five (5) years for dispute resolution, legal compliance, and responsible gaming analysis. After this period, the data is aggregated and anonymised.
  • Communication Records: Customer support chat records and emails are retained for three (3) years for reference, dispute resolution, and service improvement purposes.
  • Closed Account Data: When your MB8 account is closed, whether voluntarily or otherwise, MB8 will retain the minimum data required to meet legal obligations and prevent unauthorised re-registration. All other data not needed for these purposes will be deleted within 90 days of account closure.

Right to Erasure: While certain minimum retention periods are mandated by law, you may request the deletion of personal data that is not subject to those mandatory retention requirements. Contact support@mb8.in for further inquiries regarding the deletion of your personal data.

How to Contact MB8 Regarding Privacy

If you have any questions, concerns, or complaints regarding how MB8 handles your personal data, or wish to exercise any of the privacy rights set out in this Privacy Policy, here is how you can reach the MB8 privacy team:

  • Privacy Email: support@mb8.in — include "Privacy Enquiry" or "Data Request" in your email subject line to ensure it is directed to the right team.
  • 24-Hour Live Chat: MB8's support team is available 24 hours a day via in-platform live chat and can handle basic privacy inquiries, as well as direct you to the privacy team for more complex issues.
  • Official Complaint: For formal privacy complaints, send an email to support@mb8.in with "Formal Privacy Complaint" in the subject line. MB8 is committed to providing an initial response within 5 business days and resolving complaints within 30 calendar days.

MB8 takes all privacy-related enquiries and complaints seriously. If you are not satisfied with MB8's response to your privacy complaint, you have the right to refer the matter to the Personal Data Protection Commissioner of Malaysia or the relevant regulatory authority under applicable Malaysian law.

Amendments to the MB8 Privacy Policy

MB8 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our privacy practices, applicable legal requirements, or the services we offer to Malaysian players.

When significant changes are made to this Privacy Policy, MB8 will:

  • Updating the "Last Updated" date at the top of this document
  • Sending email notifications to all registered players at least 14 days before changes take effect
  • Displaying clear notices within the MB8 platform about upcoming changes

For minor changes that do not affect players' fundamental rights — such as correcting grammatical errors or clarifying existing practices — MB8 may make updates without broad notice, though the revision date will always be updated accordingly.

Your continued use of the MB8 platform after any amended Privacy Policy takes effect will be considered acceptance of the updated version. We encourage you to review this page periodically to stay informed about how MB8 manages your personal data.

Current version: MB8 Privacy Policy version 3.1, effective 1 June 2026. For any enquiries regarding this Privacy Policy, please contact support@mb8.in.

Frequently Asked Questions About MB8's Privacy Policy

No, MB8 has never sold, rented, or shared your personal data with any advertiser or third party for marketing purposes, and we never will. Your data is only shared in the limited circumstances described in this Privacy Policy — namely with payment service providers (such as TNG eWallet or DuitNow) to process your transactions, with game providers to operate games, and with authorities when required by law. In all such cases, data sharing is strictly limited to the minimum information necessary for that specific purpose.

To request a copy of the personal data MB8 holds about you, send an email to support@mb8.in with the subject line "Data Access Request" and include your MB8 account number and registered phone number for identity verification. MB8 will first verify your identity, then provide a copy of your data in a readily readable format within 30 calendar days of receiving your request. No fee is charged for the first data access request within any 12-month period.

When you close your MB8 account, we will delete or anonymise any personal data that does not need to be retained within 90 days. However, certain records — such as financial transaction records — must be kept in accordance with Malaysian legal requirements: transaction records are retained for a minimum of seven years and betting records for five years. This data is held in a restricted state and may only be accessed for purposes specified by law. You can find out more about which data will be retained after account closure by contacting support@mb8.in before closing your account.

MB8 does not use your personal data to serve targeted advertisements on third-party websites or applications. All promotional communications from MB8 — such as notifications about new bonus offers or special promotions — are sent directly through MB8's own channels, such as email or in-platform notifications, based on your own usage history on the MB8 platform. You may opt out of these promotional communications at any time via the notification settings in your MB8 account or by clicking the unsubscribe link in any promotional email you receive.

MB8 does not store your full payment account details — your TNG eWallet account number, DuitNow ID, GrabPay details, or FPX information are processed directly by the respective payment providers over secure encrypted connections. MB8 only retains transaction reference information required to verify and resolve any payment disputes. All communications with payment providers use industry-standard security protocols, including 256-bit SSL encryption and mutual authentication, to ensure that no unauthorised party can intercept or alter your transaction data.

Your Data Belongs to You

MB8 believes your personal data belongs to you, not to us. We manage it only as a trust placed in our hands to deliver the best possible platform experience for you. Every decision about your data — from access and correction to deletion — is entirely your right, and MB8 respects that at all times.

Malaysia PDPA Compliance

The MB8 Privacy Policy is drafted in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). This means your rights as a Malaysian individual are protected not only by MB8's own commitments, but also by enforceable legal provisions. MB8 is committed to maintaining full compliance with all PDPA requirements and applicable privacy laws governing our operations.

Join MB8 with Confidence — Your Data Is Safe with Us

With a transparent Privacy Policy and a commitment to 256-bit SSL security, you can register and play at MB8 with complete confidence. Over 500,000 Malaysian players have trusted MB8 with their data and funds. Sign up today, claim your Welcome Bonus of up to RM 588, and experience the difference of a platform that genuinely puts your privacy first.

Bahasa Melayu