Privacy Policy – mb888

1. Introduction

mb888 ("we", "us", "our") is committed to protecting the privacy of all individuals who interact with our online casino and sports betting platform accessible at mb888.vu ("Platform"). This Privacy Policy ("Policy") describes in detail how mb888 collects, uses, stores, discloses, and safeguards personal data in connection with the provision of our Services.

This Policy applies to all Members registered on the mb888 Platform, including persons accessing the Platform from Malaysia and other permitted jurisdictions. By creating an Account and using our Services, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

This Policy should be read in conjunction with the mb888 Terms & Conditions and any other platform-specific policies published on the mb888 website from time to time.

2. Data Controller

mb888 is the data controller responsible for personal data collected through the Platform. As data controller, mb888 determines the purposes and means of processing your personal data and is accountable for ensuring that processing is conducted lawfully, fairly, and transparently.

For all data-related enquiries, please contact our Data Protection team via the support channels available on the mb888 Platform. We aim to respond to all data-related requests within 30 calendar days of receipt.

3. Personal Data We Collect

3.1 Registration & Identity Data

When you create a mb888 Account, we collect: full legal name, date of birth, nationality, residential address, email address, and mobile telephone number. This information is required to create and manage your Account, verify your identity, and comply with our Know Your Customer ("KYC") obligations under applicable anti-money laundering regulations.

3.2 Identity Verification Documents

As part of mandatory KYC verification, mb888 may request copies of government-issued identity documents (such as a Malaysian MyKad, passport, or driving licence), proof of address (such as a utility bill or bank statement), and proof of payment method ownership. These documents are processed securely by mb888 and its authorised KYC service providers.

3.3 Financial Data

mb888 collects transaction data relating to deposits and withdrawals, including payment method identifiers (e-wallet account references, bank account details), transaction amounts, dates, and statuses. We do not store full credit or debit card numbers on our systems. Payment processing is handled by certified third-party payment processors.

3.4 Gameplay & Betting Data

We record all gaming activity conducted through your mb888 Account, including game sessions, bet amounts, win/loss outcomes, and bonus usage. This data is used to operate the Platform, resolve disputes, detect problem gambling indicators, and fulfil regulatory reporting requirements.

3.5 Technical & Device Data

When you access the mb888 Platform, we automatically collect technical information including your IP address, browser type and version, operating system, device identifiers, time zone setting, session duration, and pages visited. This data is used for security monitoring, fraud detection, and platform optimisation.

3.6 Communications Data

We retain records of communications between you and mb888, including live chat transcripts, email correspondence, and support ticket history. These records are retained for quality assurance, dispute resolution, and training purposes.

4. How We Collect Your Data

mb888 collects personal data through the following means:

• Direct collection: Information you provide during registration, Account updates, KYC verification, or when contacting support;
• Automated collection: Technical data collected automatically when you access the Platform via cookies, log files, and similar tracking technologies;
• Third parties: Identity verification data from KYC providers, fraud screening data from anti-fraud partners, and payment confirmation data from payment processors.

5. Legal Basis for Processing

mb888 processes your personal data on the following legal grounds under applicable data protection law:

• Contractual necessity: Processing required to perform our obligations under the mb888 Terms & Conditions, including account management, payment processing, and delivery of Services;
• Legal obligation: Processing required to comply with anti-money laundering legislation, responsible gaming obligations, licensing requirements, and regulatory reporting duties;
• Legitimate interests: Processing for fraud prevention, security monitoring, platform improvement, and business analytics where your interests do not override our legitimate business interests;
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6. How We Use Your Personal Data

mb888 uses your personal data for the following purposes:

• To create, manage, and maintain your mb888 Account;
• To process deposits, withdrawals, and bonus transactions;
• To verify your identity and age in compliance with KYC and anti-money laundering obligations;
• To provide customer support and resolve disputes;
• To detect and prevent fraud, money laundering, cheating, and other prohibited conduct;
• To monitor for and respond to problem gambling indicators, and to enforce responsible gaming tools;
• To send transactional communications (account confirmations, deposit receipts, withdrawal notifications);
• To send promotional and marketing communications where you have consented to receive them;
• To improve the mb888 Platform through usage analytics and A/B testing;
• To comply with applicable laws and respond to lawful requests from regulatory and law enforcement authorities.

7. Sharing Your Personal Data

mb888 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your data with the following categories of recipients:

• Payment processors: To facilitate deposits and withdrawals via Touch 'n Go eWallet, Boost, Maybank, CIMB, Public Bank, and other accepted methods;
• KYC and identity verification providers: To verify your identity and documents as required by our regulatory obligations;
• Fraud and anti-money laundering screening services: To detect and prevent financial crime;
• Game providers and platform technology partners: To deliver gaming services within the mb888 lobby;
• IT infrastructure and hosting providers: Under strict data processing agreements that prohibit independent use of your data;
• Regulatory authorities and law enforcement: Where we are legally required to disclose data in response to a lawful request, court order, or regulatory investigation.

All third-party service providers engaged by mb888 are required to process your personal data only in accordance with our instructions and applicable data protection law.

8. International Data Transfers

mb888 may transfer your personal data to countries outside of Malaysia in connection with our use of international service providers and hosting infrastructure. Where such transfers occur, mb888 ensures that appropriate safeguards are in place — such as standard contractual clauses or equivalent data transfer mechanisms — to protect your data to a standard equivalent to that required under applicable Malaysian data protection legislation.

9. Data Retention

mb888 retains your personal data for as long as necessary to fulfil the purposes for which it was collected and to comply with legal and regulatory obligations. Specifically:

• Account and KYC data is retained for a minimum of five (5) years following Account closure, in accordance with anti-money laundering record-keeping requirements;
• Transaction records are retained for a minimum of five (5) years following the transaction date;
• Support communications are retained for two (2) years following resolution of the relevant matter;
• Marketing preference records are retained until you withdraw consent or close your Account.

Upon expiry of the applicable retention period, mb888 will securely delete or anonymise your personal data unless further retention is required by law.

10. Cookies & Tracking Technologies

mb888 uses cookies and similar tracking technologies on the Platform. Cookies are small text files placed on your device that help us recognise returning users, maintain session state, and analyse platform usage.

Types of cookies we use:

• Essential cookies: Required for the Platform to function correctly. These cannot be disabled without affecting core functionality such as login sessions and account security.
• Functional cookies: Used to remember your preferences such as language settings and regional display options.
• Analytics cookies: Used to understand how Members interact with the Platform so we can improve navigation, performance, and content. Analytics data is aggregated and anonymised where possible.

You may control cookie settings through your browser preferences. Disabling essential cookies will impair your ability to use the mb888 Platform. Analytics cookies may be disabled without affecting core functionality.

11. Your Data Rights

Subject to applicable law, you have the following rights in relation to your personal data held by mb888:

• Right of access: To request a copy of the personal data mb888 holds about you;
• Right of rectification: To request correction of inaccurate or incomplete personal data;
• Right of erasure: To request deletion of your personal data, subject to our legal retention obligations;
• Right to restrict processing: To request that we limit how we use your data in certain circumstances;
• Right to data portability: To receive a structured, machine-readable copy of personal data you have provided to mb888;
• Right to object: To object to processing based on legitimate interests or for direct marketing purposes;
• Right to withdraw consent: To withdraw previously given marketing or cookie consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact mb888 support via live chat or email. We will respond within 30 days and may require verification of your identity before processing the request.

12. Children's Privacy

The mb888 Platform is strictly intended for individuals aged 21 years and above. mb888 does not knowingly collect personal data from anyone under the age of 21. If we become aware that a minor has registered an Account, we will immediately suspend the Account, delete all associated personal data, and return any deposits net of applicable processing costs. If you believe a minor has created an Account using your details, contact mb888 support immediately.

13. Security

mb888 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include 256-bit SSL/TLS encryption for all data in transit, encrypted storage for sensitive records at rest, role-based access controls limiting data access to authorised personnel, regular penetration testing and security audits, and multi-factor authentication for internal system access.

Notwithstanding the foregoing, no data transmission over the internet can be guaranteed to be completely secure. You are responsible for maintaining the security of your mb888 login credentials and must notify us immediately if you suspect any unauthorised access to your Account.

14. Changes to This Privacy Policy

mb888 reserves the right to update or amend this Privacy Policy at any time. Material changes will be communicated to Members via email notification to the registered address and/or a prominent notice on the Platform. The "Last Updated" date at the top of this Policy reflects the date of the most recent revision. Your continued use of the mb888 Platform following notification of an amendment constitutes acceptance of the revised Policy.

15. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by mb888, please contact us:

mb888 Data Protection
Email: [email protected] (plain text — not a clickable link)
Support: Available 24/7 via live chat on the mb888 Platform
Response time: Within 30 calendar days of receipt