mb8i Privacy
Policy

This Privacy Policy ("Policy") describes the practices of mb8i ("we", "us", "our") in relation to the collection, use, storage, disclosure, and protection of personal data submitted by or collected from users ("you", "Player", "User") of the mb8i platform available at https://mb8i.cam and all associated services.

mb8i operates as a licensed online gaming and sports betting platform serving users primarily in Malaysia. This Policy has been prepared in accordance with applicable data protection obligations arising from mb8i's international gaming licence and the data protection standards applicable in the jurisdictions in which we operate.

By registering an Account, making a deposit, or continuing to use the mb8i platform, you acknowledge that you have read and understood this Policy and consent to the data practices described herein. If you do not agree to any part of this Policy, you should discontinue use of the Platform immediately and contact our support team to request account closure.

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

mb8i collects Personal Data across several categories, described below. We apply a principle of data minimisation — we collect only what is necessary for the stated purpose.

3.1 Account Registration Data

• Full legal name;
• Email address;
• Malaysian mobile phone number;
• Date of birth;
• Username and encrypted password hash;
• Preferred language setting.

3.2 Identity Verification (KYC) Data

• Copy of government-issued identification (MyKad, passport, or equivalent);
• Proof of address document (utility bill, bank statement, or equivalent) where required;
• Selfie photograph for liveness verification where required by compliance procedures.

3.3 Financial Data

• Payment method identifiers (e.g., last four digits of a bank account, e-wallet account reference — not full account numbers);
• Deposit and withdrawal transaction records including amounts, timestamps, and payment method used;
• Account balance history.

3.4 Gameplay and Betting Data

• Bet history, game session records, and wagering activity;
• Live casino table participation records;
• Sports betting market selections and settlement outcomes.

3.5 Technical and Device Data

• IP address and approximate geolocation derived from IP;
• Device type, operating system, and browser version;
• Session timestamps, login history, and duration of Platform use;
• Cookie and tracking data as described in Section 8.

3.6 Communications Data

• Records of support interactions via live chat, email, and WhatsApp;
• Content of any complaints, feedback, or correspondence submitted to mb8i.

mb8i collects Personal Data through the following mechanisms:

• Directly from you — when you register an Account, complete KYC verification, make a deposit or withdrawal request, contact support, or interact with any feature of the Platform that requires you to provide information;
• Automatically — through cookies, server logs, and similar tracking technologies as you browse and use the Platform;
• From payment providers — transaction confirmation data returned by Malaysian payment processors (including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, and Hong Leong Bank) upon completion of a deposit or withdrawal;
• From identity verification providers — where we engage third-party KYC and AML screening services, these providers may return verification results and risk scores to mb8i;
• From fraud detection services — device fingerprint and behavioural analytics data used to detect prohibited activity.

mb8i processes your Personal Data for the following purposes:

mb8i processes Personal Data on the following legal bases:

• Contractual necessity — Processing required to perform the contract with you, including account management, payment processing, game delivery, and customer support;
• Legal obligation — Processing required to comply with legal and regulatory obligations, including AML/KYC requirements, gaming licence conditions, and tax reporting obligations;
• Legitimate interests — Processing for fraud prevention, platform security, responsible gambling monitoring, and anonymised analytics, where such interests are not overridden by your rights and interests;
• Consent — Processing for marketing communications and non-essential cookies, where you have provided explicit opt-in consent. You may withdraw consent at any time by contacting our support team or using the Platform's preference settings.

mb8i does not sell, rent, or trade your Personal Data to third parties for their own marketing purposes. We may share Personal Data with third parties only in the following limited circumstances:

• Payment processors: Transaction data shared with Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank, DuitNow, FPX, and cryptocurrency network processors solely to facilitate deposit and withdrawal processing;
• KYC and AML screening providers: Identity documents and verification data shared with licensed third-party KYC service providers under contractual data processing agreements;
• Game content providers: Gameplay session data shared with licensed game studios for the purposes of game delivery, technical troubleshooting, and dispute resolution;
• Regulatory and law enforcement bodies: Where mb8i is required by law, court order, or regulatory direction to disclose data — we will notify you where legally permissible to do so;
• Fraud prevention networks: Device and behavioural data shared with industry fraud prevention services to protect the Platform and its users;
• Professional advisors: Legal, accounting, and audit firms under strict confidentiality obligations.

All third-party Data Processors engaged by mb8i are bound by contractual obligations that require them to process your data only for the specified purpose, maintain appropriate security measures, and not disclose data to further parties without our authorisation.

mb8i uses cookies and similar tracking technologies to maintain session state, remember your preferences, and gather anonymised analytics to improve platform performance. The categories of cookies used are as follows:

You may manage cookie preferences through your browser settings at any time. Disabling strictly necessary cookies will affect Platform functionality. Disabling analytics or marketing cookies will not impact your ability to use core betting and gaming features.

mb8i retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply as a general guide:

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in a manner that prevents recovery. Where data must be retained beyond these periods due to ongoing legal proceedings or regulatory investigations, we will retain the minimum data necessary for that specific purpose.

mb8i implements technical and organisational security measures commensurate with the sensitivity of the data we process. Key measures include:

• Encryption in transit: All data transmitted between your browser and mb8i servers is protected by TLS 1.2 or higher (256-bit SSL);
• Encryption at rest: Sensitive data fields including identity documents and payment references are encrypted at rest using AES-256;
• Access controls: Access to Personal Data systems is restricted to authorised personnel on a need-to-know basis, with role-based permissions and multi-factor authentication required;
• Password security: User passwords are stored as salted cryptographic hashes — plaintext passwords are never stored or accessible;
• Penetration testing: The Platform undergoes regular third-party security assessments to identify and remediate vulnerabilities;
• Incident response: mb8i maintains a documented data breach response procedure. Where a breach is identified that poses a risk to your rights, we will notify affected users within a reasonable timeframe.

Subject to applicable law and the conditions described below, you have the following rights in relation to your Personal Data held by mb8i:

mb8i enforces a strict minimum age requirement of 21 years for all registered users. The Platform does not knowingly collect Personal Data from individuals under this age. Age verification is conducted as part of the KYC process prior to any real-money activity.

If mb8i becomes aware that Personal Data has been collected from an individual under the age of 21, the Account will be immediately suspended, all data held will be securely deleted or segregated pending investigation, and the matter will be escalated to our compliance team. Any funds held in such an Account will be handled in accordance with applicable regulatory requirements.

If you are a parent or guardian and believe your minor has registered on the mb8i Platform, please contact us immediately via our 24/7 live support channel.

mb8i may transfer Personal Data to third-party service providers located outside of Malaysia, including in jurisdictions where mb8i's gaming licence is held and where game content providers and KYC processing infrastructure are based.

Where such transfers occur, mb8i takes steps to ensure that appropriate safeguards are in place, including:

• Contractual data processing agreements requiring the recipient to maintain data protection standards equivalent to those described in this Policy;
• Transfer only to jurisdictions or service providers that maintain internationally recognised security certifications where applicable;
• Applying data minimisation principles — only the minimum data necessary for the specific processing task is transferred.

Your continued use of the Platform constitutes acknowledgement of these international transfers as necessary for the delivery of the services you have requested.

mb8i reserves the right to update or amend this Privacy Policy at any time. All changes will be published on this page with a revised "Last Updated" date. Where a change is material — such as a new category of data being collected or a change to how data is shared — we will notify registered users via the email address associated with their Account at least 7 days before the change takes effect.

Your continued use of the Platform following the effective date of any revised Policy constitutes acceptance of the updated terms. If you do not agree with the amended Policy, you must cease using the Platform and contact us to request Account closure and data deletion.

We recommend reviewing this Policy periodically. Previous versions of the Policy are available upon request from our support team.

For any questions, requests, or concerns relating to this Privacy Policy or the handling of your Personal Data by mb8i, please contact us through the following channels:

• Live Chat: Available 24/7 on the Platform — average response time 3–5 minutes. This is the fastest channel for urgent data-related requests.
• Email: [email protected] — for non-urgent data requests and formal privacy enquiries. We aim to respond within 24 hours for general support and within the legally required timeframe for formal data subject requests (typically 30 calendar days).

When submitting a data subject request, please include your registered email address and Account username so that our team can verify your identity and locate your records promptly. mb8i will not action a data request until the identity of the requester has been reasonably verified.