Privacy Policy MB8MYS — Our Commitment to Protecting Your Personal Data

This Privacy Policy is published by mb8mys ("we", "Platform" or "mb8mys") and describes our privacy practices regarding the collection, use, disclosure, and protection of personal information you provide to us when using the mb8mys online gaming platform at mb8mys.org.

We understand that your trust is the foundation of the relationship between mb8mys and its members. That is why we are committed to managing your personal data in a transparent, responsible manner that complies with data protection laws applicable in Malaysia, in particular the Personal Data Protection Act 2010 (PDPA).

By registering and using the mb8mys platform, you consent to the collection and use of your personal information as described in this Privacy Policy. If you disagree with any aspect of this policy, please discontinue use of the platform and contact us for further options.

Mb8mys only collects data that is strictly necessary to provide platform services to you. We do not collect excessive or irrelevant data beyond what is required for platform operations.

Some information is collected directly from you during registration and platform use. Technical information such as IP addresses and device data is collected automatically via cookies and web tracking technologies described further in Section 6.

Mb8mys uses collected personal information for legitimate, clearly stated purposes. We do not use your data for any purpose unrelated to platform operations without your consent.

• Account Management: Creating, maintaining and securing your mb8mys account, including identity verification through the KYC process.
• Transaction Processing: Processing deposits, withdrawals, and all financial transactions securely and efficiently.
• Customer Support: Enabling our support team to help you resolve any issues or enquiries effectively.
• Platform Security: Detecting and preventing fraud, money laundering and any activity that violates our terms of use.
• Responsible Gaming: Monitoring gameplay patterns to identify members who may need responsible gaming support.
• Platform Improvement: Analyzing usage patterns to improve the user experience, platform performance and development of new features.
• Marketing Communications: Sending information about promotions, bonuses and platform updates — only if you have consented to receive them.

Mb8mys does not sell, rent or share your personal data with third parties for their own marketing purposes. However, there are limited situations where we need to share certain information with trusted parties:

• Payment Service Provider: Required transaction information is shared with approved payment processors to complete your deposits and withdrawals.
• Identity Verification Provider: Required KYC information is shared with registered and approved identity verification service providers.
• Statutory Authorities: mb8mys will disclose information to government authorities or law enforcement if required by law or court order.
• Technology Provider: Our technical infrastructure providers may have limited access to data in the course of delivering their services, and they are bound by strict confidentiality agreements.

All third parties we work with are required to meet data protection standards equivalent to or higher than those of mb8mys itself. We conduct thorough due diligence before engaging any new service provider.

Mb8mys continually invests in security infrastructure to protect your personal data from unauthorized access, loss, misuse or accidental disclosure.

Key technical security measures we employ include:

• Data encryption in transit using TLS 1.3 protocol and 256-bit SSL certificates.
• Data encryption at rest using AES-256 standard.
• Layered access control based on the principle of least privilege — each staff member can only access the data required to perform their role.
• Real-time security monitoring and intrusion detection system (IDS/IPS).
• Regular security audits conducted by independent third parties.
• Two-factor authentication (2FA) for all platform administrative access.

The mb8mys platform uses cookies and similar tracking technologies to enhance user experience, maintain session security and analyze platform performance. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

• Essential Cookies: Required for core platform functions such as login, game sessions, and security. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collecting information on how you use the platform to help us improve it. All data is treated anonymously.
• Functional Cookies: Saving your preferences such as language, display settings and other preferences for a more personalized experience.

You can manage cookie settings through your web browser. However, disabling essential cookies may affect the functionality of the mb8mys platform.

As an mb8mys member and data subject under Malaysia's PDPA, you have the following rights regarding your personal information:

Mb8mys retains your personal data for as long as your account is active or as long as necessary to provide services to you. Once an account is closed, we will delete or anonymize your data within a reasonable period, except:

• Laws or regulations require us to retain that data for a longer period (for example, financial records for tax and audit purposes).
• Data is required to resolve pending disputes or ongoing investigations.
• Data is required to fulfil contractual obligations that remain active.

Generally, financial transaction records are retained for 7 years in accordance with Malaysian legal requirements. Customer support communication records are retained for 3 years. Technical and security logs are retained for 12 months.

The mb8mys platform is strictly for individuals aged 18 and above. We do not knowingly collect or process personal data of anyone under the age of 18.

If we discover that personal information has been collected from individuals under the age of 18, we will immediately take steps to delete that information and close the relevant account. Parents or guardians who believe their child has registered on the mb8mys platform are urged to contact us without delay.

Mb8mys reserves the right to update this Privacy Policy from time to time to reflect changes in our privacy practices, legal requirements or technology developments. The latest version will always be available on this page with a clear update date.

For material changes — meaning changes that significantly affect your rights or how your data is processed — we will notify you via registered email or a prominent notice on the platform at least 14 days before the changes take effect.

Continued use of the mb8mys platform after the effective date of any amendment constitutes your acceptance of the updated policy. You are encouraged to review this page periodically.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how mb8mys handles your personal data, our team is ready to assist you 24 hours a day, 7 days a week.

We take every privacy enquiry seriously and are committed to providing a clear and satisfactory response in a timely manner. For matters involving data access or deletion requests, our standard response period is 30 working days.

If you are dissatisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection (JPDP) Malaysia or the relevant regulatory authority in your jurisdiction.