Privacy Policy mbi8 — Protection of Your Personal Data

1 Information We Collect

Mbi8 collects your personal information solely for the purpose of providing a secure, seamless, and high-quality service. We only collect information that is necessary and do not gather excessive or irrelevant data beyond what our services require.

1.1 Information You Provide Directly

When you register and use the mbi8 platform, we collect the following information:

• Full name as stated in official identification documents
• Date of birth for age verification purposes (18 years and above)
• Email address and mobile number for communication and verification
• Residential address for identity verification (KYC) purposes
• Copies of identification documents such as MyKad or passport
• Payment method details including bank account or digital wallet information

1.2 Information Collected Automatically

While you are using the mbi8 platform, our systems automatically record certain technical information for security and service improvement purposes:

• IP address and general location information of your device
• Device type, operating system, and browser version used
• Login and logout session records including date and time
• Gaming activity history and financial transaction records within the platform
• Platform feature usage data for internal analytics purposes

1.3 Information from Third-Party Sources

In certain cases, mbi8 may receive information about you from trusted third-party sources, such as identity verification service providers or legitimate fraud prevention agencies. This information is used solely to verify your identity and ensure the security of your account.

2 How We Use Your Data

Every piece of information we collect has a clear and specific purpose. mbi8 does not use your personal data for purposes unrelated to the services provided.

2.1 Primary Purposes of Data Use

2.2 Service Improvement

Mbi8 analyses platform usage patterns on an aggregated and anonymised basis to better understand member needs, improve existing features, and develop more relevant new products. This analysis does not involve the identification of any individual.

2.3 Member Communications

We use your contact information to send you the following:

• Important security notifications such as login from a new device
• Update the status of deposit and withdrawal transactions
• Information about promotions and exclusive offers (with your consent)
• Notifications regarding changes to the Privacy Policy or Terms and Conditions
• Responses to enquiries and complaints you have submitted

3 Data Storage & Security

3.1 Data Storage Location

Mbi8 member personal data is stored on servers located in data centres with internationally recognised security certifications. All data centres we use comply with the ISO 27001 standard for information security management, ensuring comprehensive physical and digital protection.

3.2 Technical Security Measures

• Data Encryption in Transit — All communications are protected with TLS 1.3 and 256-bit SSL.
• Data Encryption at Rest — Sensitive data is stored in encrypted format using AES-256.
• Two-Factor Authentication — An additional layer of security for account access and system administration.
• Continuous Monitoring — 24/7 monitoring systems to detect and respond to security threats.
• Periodic Penetration Testing — Security audits and penetration testing are conducted periodically by independent third parties.

3.3 Data Retention Period

Mbi8 retains your personal data for as long as your account is active or as needed to provide our services. Once an account is closed, data will be retained for the period prescribed by applicable law, after which it will be securely deleted. Financial records and transaction data are kept for a minimum of 7 years in compliance with legal requirements.

4 Information Sharing

Mbi8 takes a highly cautious approach to data sharing. We do not sell or disclose members' personal information to third parties for profit. Information sharing only occurs in limited, controlled situations as follows:

4.1 Trusted Service Providers

Mbi8 works with selected third-party service providers to support platform operations, including payment gateway providers such as DuitNow, FPX, Touch 'n Go, Boost, and GrabPay, as well as identity verification service providers and customer support platforms. All such providers are bound by strict confidentiality agreements and are only permitted to use your data for the specified service purposes.

4.2 Legal Requirements and Authorities

Mbi8 will disclose personal information to the relevant authorities when required to do so by law, court order, or in cases of criminal investigation including financial fraud and money laundering. In such situations, we will endeavour to notify you of the disclosure to the extent permitted by law.

4.3 Transfers Within the Corporate Group

Your personal data may be shared within the mbi8 group of companies for internal administrative purposes and the provision of integrated services. All entities within this group are held to the same data protection standards as set out in this Privacy Policy.

5 Cookies & Tracking Technology

5.1 What Are Cookies?

Cookies are small text files stored on your device when you browse the mbi8 platform. They help us recognise you on future visits and personalise your experience on the platform. Cookies do not contain sensitive personal information and cannot be used to access your device.

5.2 Types of Cookies We Use

• Essential Cookies — Required for core platform functionality such as login session authentication and security. These cookies cannot be disabled.
• Preference Cookies — Stores your preferences such as language, display settings, and recent activity history for your convenience.
• Analytics Cookies — Helps us understand how members use the platform for service improvement purposes. This data is aggregated and does not identify individuals.
• Functional Cookies — Enables additional features such as customer support live chat to function smoothly.

5.3 Managing Cookies

You can manage or delete cookies through your browser settings at any time. Please note, however, that disabling essential cookies may affect the functionality of the mbi8 platform and prevent you from accessing certain features. Refer to your browser's documentation for detailed cookie management guidance.

6 Your Rights as a User

As an mbi8 member, you have certain rights regarding your personal data protected under Malaysia's Personal Data Protection Act 2010 (PDPA). mbi8 fully respects these rights and provides straightforward mechanisms for you to exercise them.

6.1 List of Your Rights

• Right of Access — You have the right to know what personal data we hold about you and to request a copy of it.
• Right to Rectification — You may request the correction of any inaccurate or incomplete data in our records.
• Right to Erasure — Under certain circumstances, you may request the deletion of your personal data, subject to legal retention requirements.
• Right to Withdraw Consent — You may withdraw consent for marketing communications at any time without affecting your use of core services.
• Right to Object to Processing — You may object to the processing of your data for specific purposes if you have legitimate grounds to do so.

7 Child Protection

The mbi8 platform is strictly for users aged 18 and above. We do not intentionally collect or process personal data from individuals under the age of 18. Our registration process includes rigorous age verification, including identity document verification during the KYC process.

Should mbi8 discover that personal data of an underage individual has been collected inadvertently, we will take immediate action to delete that data and close the account in question. Parents or guardians who suspect their underage child has registered with mbi8 are encouraged to contact our support team immediately.

8 Privacy Policy Amendment

Mbi8 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, evolving legal requirements, or new platform features. Any material amendments will be communicated to members via their registered email or in-platform notification at least 7 days before taking effect.

The "Last Updated" date at the top of this page reflects the date of the most recent revision. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of the mbi8 platform after any amendments take effect will be considered your acceptance of the updated terms.