Privacy Policy

1. Who We Are

mb8i is an online gaming platform operated at mb8i.org, providing sports betting, live casino, slot games, fishing games, and lottery products to registered players. For the purposes of data protection, mb8i acts as the data controller in respect of personal data collected through the platform and its associated services. References in this policy to "mb8i", "we", "us", or "our" refer to the mb8i platform operator. References to "you" or "your" refer to any registered or prospective player of mb8i.

2. Data We Collect

2.1 Registration Data

When you create an mb8i account, we collect the information you provide during the registration process, including your full legal name, date of birth, email address, mobile phone number, and residential address. This information is required to create and maintain your account and to comply with identity verification obligations under applicable gaming regulations.

2.2 Verification Data

To comply with know-your-customer (KYC) requirements under international gaming authority regulations, mb8i may collect copies of government-issued identity documents (such as MyKad or passport), proof of address, and payment method ownership documentation. This data is handled with heightened care and is used exclusively for verification purposes.

2.3 Financial Data

We collect transaction records associated with your mb8i account, including deposit amounts, withdrawal requests, payment method details (account numbers, e-wallet identifiers), and transaction timestamps. Full payment card numbers are never stored on mb8i infrastructure — card processing is handled by certified third-party payment processors.

2.4 Usage & Technical Data

mb8i automatically collects technical information when you access the platform, including your IP address, browser type and version, device type and operating system, pages visited, session duration, and referring URLs. This data is used for platform security, fraud detection, and performance optimisation purposes.

2.5 Communications Data

When you contact mb8i support via live chat, email, or any other channel, we retain records of those communications to maintain service quality, resolve disputes, and fulfil our regulatory record-keeping obligations.

3. How We Use Your Data

mb8i uses the personal data we collect for the following purposes:

• Account operation: Creating and maintaining your mb8i account, authenticating your identity on login, processing deposits and withdrawals, and delivering the services you have contracted for.
• Regulatory compliance: Meeting our obligations under applicable gaming licence conditions, anti-money laundering legislation, and know-your-customer requirements, including reporting obligations to licensing authorities.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent transactions, unauthorised account access, and other security incidents using automated monitoring systems and manual review.
• Responsible gaming: Monitoring gameplay patterns to identify signs of problem gambling behaviour, enforcing responsible gaming tools you have activated, and fulfilling our duty-of-care obligations under applicable licensing requirements.
• Customer support: Responding to your enquiries, resolving disputes, and maintaining service quality.
• Marketing (where consented): Sending promotional communications about mb8i offers, new games, and platform updates — only where you have provided explicit consent or where we have a legitimate interest permitting this under applicable law. You may opt out at any time.
• Platform improvement: Analysing aggregated, anonymised usage data to improve platform performance, product offerings, and user experience.

4. Legal Basis for Processing

mb8i processes personal data on the following legal grounds:

• Contractual necessity: Processing required to perform the contract between mb8i and the Player — including account creation, transaction processing, and service delivery.
• Legal obligation: Processing required to comply with applicable laws and regulatory requirements, including gaming licence conditions, AML obligations, and KYC procedures mandated by international gaming authorities.
• Legitimate interests: Processing for fraud prevention, platform security, and responsible gaming monitoring, where these interests are not overridden by your rights and freedoms.
• Consent: Marketing communications and certain cookie deployments, where required by applicable law. Consent may be withdrawn at any time without affecting prior processing.

5. Cookies & Tracking Technologies

mb8i uses cookies and similar technologies to operate the platform, maintain your session, prevent fraud, and — where consented — analyse usage patterns. The categories of cookies used include:

• Strictly necessary cookies: Essential for platform operation — session management, login authentication, and security functions. These cannot be disabled without impairing platform functionality.
• Analytical cookies: Used to understand how players navigate mb8i, which pages load slowly, and where drop-offs occur. Data is aggregated and anonymised where possible.
• Preference cookies: Used to remember your language preferences and display settings across sessions.

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will affect platform functionality.

6. Data Sharing & Disclosure

mb8i does not sell, rent, or trade your personal data to third parties for marketing purposes. We may share your data in the following circumstances:

• Service providers: Third-party processors engaged to support mb8i operations, including payment processors (for FPX, Touch n Go eWallet, Boost, Maybank, CIMB, and Public Bank transactions), identity verification providers, fraud screening services, and cloud infrastructure providers. All such processors are contractually bound to handle your data securely and only as instructed by mb8i.
• Game content providers: Where mb8i integrates third-party game content (such as live casino or slot products), limited technical data (e.g. session identifiers) may be shared with the relevant provider to operate the game. No sensitive personal data is shared beyond what is technically necessary.
• Regulatory authorities: mb8i may disclose personal data to our gaming licensing authority, law enforcement agencies, or other regulatory bodies where required by applicable law or regulatory instruction — including in connection with AML investigations.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of the mb8i business, Player data may form part of the transferred assets. Affected Players will be notified in accordance with applicable data protection requirements.

7. International Data Transfers

mb8i operates internationally and may transfer personal data to servers and processors located outside Malaysia. Where such transfers occur, mb8i ensures that appropriate safeguards are in place — including contractual data protection clauses consistent with internationally recognised data protection standards. By using mb8i, you acknowledge that your personal data may be processed outside Malaysia in accordance with this policy.

8. Data Retention

mb8i retains personal data for as long as your account remains active and for a period thereafter as required by our gaming licence conditions and applicable legal obligations. In general:

• Account and transaction records are retained for a minimum of five (5) years following account closure, in accordance with AML regulatory requirements.
• KYC and identity verification documents are retained for a period of not less than five (5) years from the date of verification.
• Support communications are typically retained for two (2) years unless required for longer by an open dispute or regulatory investigation.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in accordance with mb8i's data disposal procedures.

9. Your Rights

Subject to applicable law, you may have the following rights in relation to your personal data held by mb8i:

• Right of access: You may request a copy of the personal data mb8i holds about you.
• Right to rectification: You may request that inaccurate or incomplete personal data be corrected. For basic profile information, you may update details directly within your mb8i account settings.
• Right to erasure: You may request deletion of your personal data in certain circumstances, subject to our legal retention obligations described above.
• Right to restriction: You may request that mb8i restrict processing of your data in certain circumstances, for example while a dispute is being investigated.
• Right to data portability: You may request a structured, machine-readable copy of personal data you have provided to mb8i.
• Right to object: You may object to processing based on legitimate interests, including direct marketing. Marketing opt-outs can be actioned immediately via account settings or by contacting support.
• Right to withdraw consent: Where processing is based on consent, you may withdraw consent at any time without affecting prior processing.

To exercise any of these rights, please contact mb8i support at [email protected]. mb8i will respond to verifiable requests within a reasonable timeframe in accordance with applicable data protection obligations.

10. Security Measures

mb8i implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These include 256-bit TLS/SSL encryption for all data in transit, encrypted storage for sensitive data at rest, access controls limiting personnel access to personal data on a need-to-know basis, real-time fraud monitoring and anomaly detection, and regular security assessments. While we maintain high security standards, no internet-based service can guarantee absolute security. You are encouraged to use a strong, unique password for your mb8i account and to enable two-factor authentication where available.

11. Children's Privacy

mb8i services are strictly restricted to individuals aged 21 years and above. mb8i does not knowingly collect personal data from individuals under this age. Any account found to belong to an individual under 21 will be closed immediately, and any associated personal data will be deleted in accordance with our data disposal procedures, except where retention is required by applicable law.

12. Third-Party Services

The mb8i platform may integrate content or services provided by third parties, including game content providers and payment processors. These third parties operate under their own privacy policies, which mb8i does not control. mb8i is not responsible for the privacy practices of third-party providers. We encourage you to review the privacy policies of any third-party service you interact with through the mb8i platform.

13. Changes to This Policy

mb8i reserves the right to update this Privacy Policy at any time. Material changes will be communicated to registered Players via email or in-platform notification prior to taking effect. The "last updated" date at the top of this page reflects the most recent revision. Continued use of mb8i services following publication of a revised Privacy Policy constitutes acceptance of the updated terms. If you do not accept any changes, you should discontinue use of mb8i and close your account.

14. Contact & Complaints

For any questions, access requests, or complaints regarding the handling of your personal data by mb8i, please contact our support team:

[email protected]

Our support team is available 24/7 via live chat within your mb8i account dashboard, and responds in English and Bahasa Malaysia. All data-related requests will be acknowledged promptly and handled in accordance with applicable data protection obligations. If you remain unsatisfied with mb8i's response to a privacy complaint, you may escalate the matter to the relevant regulatory authority in accordance with applicable law.