Official Documents

Privacy Policy MB8 Million – Your Personal Data Protection

Mb8 million respects the privacy of every member and is fully committed to protecting your personal data. This policy explains what information we collect, how we use it, and your rights as a data owner in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).

PDPA
Malaysia Act 2010
256
SSL Encryption Bits
24/7
Privacy Support
2026
Updated
Effective Date: 1 January 2026
Bahasa Malaysia Version (Official)
Complying with Malaysia's PDPA 2010
Data Protected with Full Encryption

Commitment Privacy We

Six core principles that shape mb8 million's approach to protecting members' personal data

End-to-End Data Encryption

All personal data transmitted between your device and mb8 million's servers is protected by 256-bit SSL encryption technology. Sensitive information such as payment details and passwords is never stored in plain text.

Minimum Data Collection

Mb8 million only collects data that is strictly necessary for service delivery, KYC verification, and legal compliance. We do not collect excessive or irrelevant information beyond what is needed for your use of the platform.

Your Data, Your Control

As an mb8 million member, you have full rights to access, correct and request deletion of your personal data. We make this process easy through our responsive and user-friendly support team.

No Data Sales to Third Parties

Mb8 million never sells, rents, or transfers members' personal data to third parties for marketing purposes. Your data belongs to you — we only use it to improve your experience on the platform.

Clear Data Retention Period

We retain your personal data only for as long as necessary to fulfil the original purpose of collection or as required by law. Data that is no longer needed will be securely deleted or anonymised.

Immediate Breach Notification

In the event of any data breach affecting members' personal information, mb8 million will notify affected members within the timeframe required under Malaysia's PDPA.

This Privacy Policy last updated on 1 January 2026. Any material amendments will be notified to members via the platform or their registered email address prior to the effective date.

01 Personal Information We Collect

Mb8 million collects various types of personal information in the course of providing platform services to members. This collection is done directly from you during registration, platform use, and through automated technology when you browse our website.

Information You Provide Directly

When you register as an mb8 million member or use our services, you provide us with the following information:

  • Identity information: Full name, national identity card number (MyKad or passport), date of birth, and gender.
  • Contact information: Email address, mobile number, and residential address.
  • Financial information: Bank account details, bank name, and account number for deposit and withdrawal purposes.
  • KYC verification documents: A valid copy of your MyKad, passport or driving licence for identity verification purposes.
  • Communication information: Any messages, complaints or feedback you send to the mb8 million support team.

Automatically Collected Information

When you use the mb8 million platform, our systems automatically record certain technical information for security, analytics, and service improvement purposes:

Data Type Description Purpose
IP Address Your device's internet address at the time of login Security & fraud detection
Device Data Browser type, operating system, device model User experience optimisation
Activity Log Game records, deposits, withdrawals, login history Regulatory compliance & internal audit
Location Data General location based on IP (country/region) Local legal compliance
Cookie Data Session cookies and user preferences Platform functions & analytics
mb8 million does not collect credit card numbers directly. All payment transactions are processed through registered payment processors that comply with PCI-DSS standards.

02 Purpose of Data Collection and Use

Mb8 million uses members' personal data responsibly and only for legitimate purposes. The following are the primary purposes for which we use the data we collect:

  • Member account management: Processing registration, verifying identity, managing login, and maintaining the security of your account.
  • Financial transaction processing: Verifying and processing deposits and fund withdrawals securely and accurately.
  • KYC and AML compliance: Meeting Know Your Customer (KYC) requirements and Anti-Money Laundering (AML) laws applicable in Malaysia.
  • Customer support service provision: Handling member enquiries, complaints, and support requests efficiently.
  • Platform improvement: Analysing usage patterns to improve functionality, performance, and the overall user experience.
  • Service communications: Sending important notifications related to your account, security, promotions (with your consent), and policy updates.
  • Fraud prevention: Identifying and preventing fraudulent activity, money laundering, and platform abuse.
  • Legal compliance: Fulfilling reporting obligations to the relevant authorities when required by law.
mb8 million does not use your personal data to make automated decisions that materially affect your rights without human review. Any significant decisions, such as account suspension, will go through a manual review process by our team.

03 Legal Basis for Personal Data Processing

Under the Personal Data Protection Act 2010 (PDPA) of Malaysia, mb8 million processes your personal data on a valid legal basis. Our data processing relies on one or more of the following bases:

  • Your consent (Consent): For marketing communications, non-essential cookies and certain data processing not required under your membership agreement — we require your explicit consent. You may withdraw this consent at any time.
  • Contract performance: Processing required to fulfil the membership agreement between you and mb8 million, such as processing deposits and withdrawals, verifying identity and providing access to games.
  • Legal obligations: Processing required to comply with applicable Malaysian laws, including KYC requirements, AML reporting and directives from authorised enforcement agencies.
  • Legitimate interests: Processing for platform security, fraud prevention and service improvement purposes, where our interests do not override your fundamental privacy rights.

04 Personal Information Sharing

Mb8 million does not sell members' personal data to anyone. However, in certain circumstances, we share information with selected trusted parties to enable our services to function properly:

Third-Party Service Providers

Mb8 million works with trusted service providers for platform operations, including licensed payment processors, registered game software providers, ISO 27001-certified cloud service providers, and data analytics platforms. All providers are bound by strict data protection agreements and are only permitted to process your data under mb8 million's instructions.

Authorities and Regulatory Bodies

Mb8 million will disclose personal information to the relevant authorities when required by law, court order, or a lawful directive from a regulatory body. Such disclosures will follow proper legal procedures, and members will be notified wherever possible unless prohibited by law.

mb8 million does not share members' personal data with advertising companies, data brokers, or social media platforms for advertising purposes without your explicit consent.

05 Data Security & Protection

Mb8 million continuously invests in robust security infrastructure to protect members' personal data from unauthorised access, disclosure, alteration, or destruction.

Technical Security Measures

  • 256-bit SSL encryption: All data transmitted between your browser or app and mb8 million's servers is encrypted using the latest TLS protocol.
  • Encrypted database: Sensitive data such as financial information and KYC documents are stored in encrypted format within protected databases.
  • Two-factor authentication (2FA): mb8 million supports two-factor authentication for an added layer of security during login.
  • 24/7 security monitoring: Our security team continuously monitors the system to detect any threats or suspicious activity.
  • Regular penetration testing: The mb8 million platform infrastructure undergoes regular security testing by independent security experts.

Organisational Measures

Access to members' personal data is restricted to mb8 million staff who genuinely require it to perform their duties. All staff undergo regular data protection training and are bound by strict confidentiality agreements. Any breach of the privacy policy by staff will result in disciplinary action.

06 Cookies & Tracking Technologies

Mb8 million uses cookies and similar tracking technologies to enhance platform functionality, analyse usage patterns, and deliver a better experience for you.

Cookie Type Used

  • Essential cookies: Required for core platform functions such as login sessions and security. These cookies cannot be disabled as the platform will not function without them.
  • Analytics cookies: Helps us understand how members use the platform — frequently visited pages, time spent, and navigation paths. This data is used to improve the platform.
  • Preference cookies: Storing your preferences such as language, display theme, and platform settings for a smoother repeat experience.
  • Security cookies: Used to detect suspicious logins, unauthorised access attempts, and fraudulent activity.

You can manage cookie settings through your internet browser. However, disabling essential cookies may affect the functionality of the mb8 million platform. For more information on managing cookies, please refer to your browser's help documentation.

mb8 million does not use cross-site tracking cookies to monitor your activity outside of our platform.

07 Your Rights as a Data Subject

Under Malaysia's PDPA and sound data protection principles, you as an mb8 million member have the following rights regarding your personal data:

Right of Access

You have the right to obtain a copy of the personal data we hold about you, including how it is being used.

Right to Rectification

You may request that we correct any inaccurate or incomplete personal data in your account.

Right to Erasure

Under certain circumstances, you may request the deletion of your personal data, subject to our legal obligations.

Right to Object

You may object to the processing of your data for direct marketing purposes at any time without providing a reason.

Right to Data Portability

You may request a copy of your data in a machine-readable format for transfer to another service provider.

Right to Restrict Processing

You may request that we restrict the processing of your data in certain circumstances while an investigation or dispute is being resolved.

To submit any request relating to your privacy rights, please contact the mb8 million support team. We will process your request within 21 working days. Some requests may require additional identity verification for your security.

08 International Data Transfers

In the operation of the mb8 million platform, some members' personal data may be processed or stored on servers located outside Malaysia, particularly in the context of cloud services and registered international gaming software providers.

When such data transfers occur, mb8 million ensures that:

  • The recipient country or region has a level of data protection equivalent to or higher than Malaysia.
  • Legally binding data transfer agreements have been entered into with the relevant service providers.
  • All international service providers involved comply with recognised international data security standards, such as ISO 27001 and SOC 2.
  • Data transfers are carried out solely for the purposes stated in this Privacy Policy.
By using the mb8 million platform, you consent to the transfer of your personal data outside Malaysia under the circumstances described above, provided that adequate protections are always maintained.

09 Children's Privacy

The mb8 million platform is intended for individuals aged 18 and above only only. mb8 million does not intentionally collect, process, or store any personal data from individuals under the age of 18.

If you believe that a child or individual under the age of 18 has registered an account on the mb8 million platform or has provided us with their personal data, please contact our support team immediately. mb8 million will take action to:

  • Promptly verifying the relevant account details.
  • Closing the account and deleting all related data if verification confirms the member is underage.
  • Implementing additional measures to prevent similar incidents in the future.
Parents or guardians concerned about their dependants' use of online gambling platforms may use parental control software and report any concerns to mb8 million or the relevant authorities.

10 Amendments to the Privacy Policy

Mb8 million reserves the right to amend or update this Privacy Policy at any time to reflect changes in our privacy practices, applicable legal requirements, or platform service improvements.

When material changes are made to this Privacy Policy, mb8 million will provide members with adequate notice via:

  • In-platform notification on mb8 million upon your next login.
  • Email to the registered address in the member's account.
  • A prominent notice on the platform's homepage at least 14 days before the effective date.

The "last updated" date at the top of this Privacy Policy will always reflect the latest version in effect. Your continued use of the mb8 million platform after the amendment's effective date constitutes your acceptance of the updated policy.

We recommend reviewing this page periodically to stay informed on how mb8 million protects your personal data.

11 Contact Us About Privacy

If you have any questions, concerns or complaints regarding this Privacy Policy or how mb8 million handles your personal data, we welcome you to reach us through the following channels:

Privacy Email

Send your privacy-related enquiries to our team at [email protected] with the subject line "Privacy Inquiry" for faster processing.

Live Chat

Use the live chat function on the mb8 million platform for immediate privacy-related assistance from our support agents, available 24/7.

Data Request Form

For formal data rights requests such as access, correction or deletion, contact our support team and clearly state the type of request you are making.

Response Time

The mb8 million privacy team will respond to all enquiries within 3 working days and resolve formal requests within 21 working days.

Trusted Platform

Join mb8 million — Safe & Transparent for Malaysian Members

With PDPA-standard data protection, 256-bit SSL encryption, and a clear privacy policy, you can enjoy your gaming experience on mb8 million with complete peace of mind. Your privacy is our top priority at all times.

Encrypted Data
256-bit SSL active
KYC Verified
Verified Identity
Secure Payments
FPX, TnG, Boost
24/7 Support
Here to help you
Bahasa Melayu