Official Privacy Policy
Updated: January 2026

Privacy Policy mbi8my – Personal Data Protection for Malaysia Members

Your privacy is our priority. This document clearly explains how mbi8my collects, uses, stores, and protects your personal data — no complicated language, straight to what matters.

256-bit SSL
Full encryption
No Data Sales
Secured
Full Member Rights
Control your data
PDPA Compliant
Malaysia Standards

Mbi8my's Commitment to Your Privacy

Six core pillars that define mbi8my's approach to protecting the security and privacy of Malaysian members' data

Advanced-Grade Data Encryption

All data transmitted between your device and mbi8my servers is protected with 256-bit SSL encryption — the same standard used by banking institutions in Malaysia.

Secure Data Storage

Your personal information is stored on servers protected by multi-layered firewalls, 24/7 monitoring and strict access controls. Only authorised staff may access member data.

No Sale of Data to Third Parties

Mbi8my has never and will never sell, rent, or distribute members' personal information to any third party for marketing or commercial purposes without your consent.

Full Control in Members' Hands

You have the right to access, amend, download, or request deletion of your personal data at any time. Contact our support team and your request will be processed within 14 business days.

Compliance with Malaysia's PDPA

The mbi8my Privacy Policy is drafted in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). We ensure that all data handling practices meet local legal requirements.

Easy Opt-Out Options

Don't want to receive marketing communications? You can unsubscribe at any time through your account or by contacting customer support. Your request will be honoured immediately.

1 Personal Information We Collect

To provide a safe, personalised, and responsible gaming experience, mbi8my collects several categories of information from members. We only collect information that is genuinely necessary for platform operations and legal compliance.

1.1 Information You Provide Directly

This information is collected when you register an account, complete your profile, make a deposit or interact with our support team:

Data Category Example Information Purpose
Personal Identity Full name, MyKad number, date of birth KYC & Verification
Contact Information Email address, phone number Account Communications
Financial Information Bank account number, account holder name Deposit & Withdrawal
Identity Documents MyKad or passport copy KYC Verification
Login Information Username, password (encrypted) Account Security

1.2 Information Collected Automatically

When you use the mbi8my platform — whether through the website or mobile app — our systems automatically record certain technical information:

  • IP address and approximate location based on IP (not precise to actual location)
  • Device type, operating system and web browser version
  • In-platform browsing history, including games played and session duration
  • Transaction log data covering the time, amount, and status of each financial activity
  • Session cookie information and user interface preference settings
This technical information is used solely for security purposes, fraud detection and user experience improvement — not to personally identify you without context.

2 How We Use Your Data

Mbi8my uses the information collected for clear and lawful purposes. The following is a complete list of how member data is used:

2.1 Account Operations & Services

  • Processing new account registrations and verifying member identity through the KYC process.
  • Enabling secure login and maintaining active sessions with adequate protection.
  • Processing deposits, withdrawals and other financial transactions accurately and promptly.
  • Delivering bonuses, promotions and rewards you are eligible for in accordance with the applicable terms.

2.2 Security & Fraud Prevention

  • Detecting and investigating suspicious or unusual activity in your account.
  • Monitoring wagering patterns to identify potential system or bonus abuse.
  • Verifying that only the legitimate account owner is accessing and using the service.
  • Complying with Anti-Money Laundering (AML) requirements set out under Malaysian law.

2.3 Communication & Support

  • Sending important notifications related to your account, such as transaction confirmations and security alerts.
  • Providing technical assistance and customer support when you contact our team.
  • Delivering promotional information and exclusive offers — only if you have agreed to receive them.

2.4 Platform Improvement

Aggregated usage data (with no personally identifiable information) is used to analyze usage patterns, improve interface design, and introduce new features that are more useful for Malaysian members.

Important: mbi8my does not use member behavioural profiles to make automated decisions that could affect your rights without manual review by our team.

3 Disclosure to Third Parties

Mbi8my does not sell, rent, or share your personal information with external parties for commercial purposes. However, there are certain situations where data sharing is necessary and legally permissible:

3.1 Trusted Service Providers

We work with selected third-party service providers to support platform operations, including:

  • Payment Processors: To facilitate deposit and withdrawal transactions securely.
  • KYC Services: Trusted and registered third-party identity verification platform.
  • Cloud Infrastructure: Server hosting providers that comply with the highest security standards.
  • Platform Analytics: Analytics tools used in anonymous mode to understand usage patterns.

All these third-party providers are bound by strict confidentiality agreements and are only permitted to use your data for specified purposes.

3.2 Legal Requirements

Mbi8my may be required to disclose member information to authorities if directed by a valid court order, a request from Malaysian law enforcement agencies, or in the context of a financial crime investigation involving money laundering.

In all of the above cases, we disclose only the minimum necessary information and will notify the member concerned where permitted by law to do so.

4 Cookies & Tracking Technologies

Mbi8my uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored in your web browser when you visit our site.

4.1 Types of Cookies Used

  • Session Cookies: Required to maintain your login session and ensure account security. These cookies are automatically deleted when you close your browser.
  • Preference Cookies: Saving your chosen language, theme and display preferences for a more convenient repeat experience.
  • Analytics Cookies: Collecting usage data in a non-personally identifiable form to help us understand how the platform is used and where improvements are needed.
  • Security Cookies: Helping our systems detect suspicious login attempts and protecting your account from unauthorised access.

4.2 Managing Cookies

You can control and delete cookies through your web browser settings. Please note that disabling certain cookies may affect platform functionality, particularly login session security features. For detailed guidance, refer to the help section of your web browser.

5 Data Security Measures

Mbi8my continuously invests in security infrastructure to ensure member data is always protected to the highest standards. The following are the key security layers we have implemented:

  • 256-bit SSL/TLS Encryption: All data communications between you and our servers are encrypted using industry-standard banking-grade security protocols.
  • Two-Factor Authentication (2FA): An additional layer of protection for account login that requires verification through your device.
  • Real-Time Monitoring: An automated threat detection system running 24 hours a day monitors for unusual activity.
  • Tiered Access Control: Only specifically authorised staff may access member data, and every access is logged in detail.
  • Regular Penetration Testing: Security audits and penetration testing are conducted regularly by independent security experts.
  • Secure Data Backup: Data is automatically backed up to separate locations with full encryption to ensure service continuity.
While we take all reasonable steps to protect your data, no system is ever 100% secure. In the event of a data breach that affects you, we will notify you within the timeframe required by law.

6 Data Retention & Deletion Period

Mbi8my retains your personal data only for as long as necessary to fulfil the purposes stated in this policy or as required by Malaysian law.

6.1 Standard Retention Period

  • Active account data: Retained for as long as your account is active and for a period of 7 years after account closure for legal compliance purposes.
  • Financial transaction records: Retained for 7 years in line with Malaysia's Companies Act and AML regulatory requirements.
  • Support communication logs: Retained for 2 years for reference and dispute resolution purposes.
  • Anonymous analytics data: Can be retained indefinitely as it can no longer be linked back to any individual.

6.2 Data Deletion Requests

If you close your account and request data deletion, mbi8my will delete or anonymise your personal information that is no longer needed — except for records required to be retained by law. Deletion requests will be processed within 30 calendar days after your identity is verified.

7 Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by mbi8my:

Your Rights Under PDPA

As a mbi8my member, you have full control over your personal data. Learn about the rights you can exercise at any time.

Right of Access

Request a copy of all personal data we hold about you in a readable format.

Right to Rectification

Request correction of any inaccurate or incomplete information in your records.

Right to Erasure

Request deletion of personal data that is no longer required, subject to legal obligations.

Right to Object

Object to the use of your data for direct marketing purposes or processing that lacks a legitimate legal basis.

Right to Data Portability

Receive your data in a structured, reusable format for transfer to another platform.

Right to Restrict Processing

Request that we restrict how your data is processed in certain situations while a dispute is being resolved.

To exercise any of the above rights, contact the mbi8my customer support team via 24/7 live chat. We will process your request within 14 business days after identity verification.

8 Children's Privacy

The mbi8my platform is intended exclusively for individuals aged 18 years and above. We do not knowingly collect, store, or process any personal information from individuals under the age of majority.

If you are a parent or guardian who believes your child has registered or provided personal information to mbi8my without your consent, please contact us immediately. We will investigate the matter and take appropriate action, including deleting all related information within a short timeframe.

Mbi8my applies multiple layers of age verification — including during registration and throughout the KYC process — to ensure the platform cannot be accessed by underage individuals. This is part of our commitment to responsible gaming.

9 Amendments to the Privacy Policy

Mbi8my reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our operational practices, the latest legal requirements, or improvements in how we handle member data.

When significant amendments are made, we will:

  • Updating the "Last Updated" date displayed at the top of this page.
  • Publishing a clear notice on the platform's home page for at least 14 days.
  • Sending email notifications to registered members if the amendment directly affects your privacy rights.

Continued use of the mbi8my platform after any amendments take effect constitutes your acceptance of the latest version of this Privacy Policy. We encourage you to review this page periodically.

If you disagree with any amendments to this Privacy Policy, you have the right to close your account and request data deletion in accordance with the procedure outlined in Section 6.

10 Contact Us About Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, our Data Protection Officer (DPO) team is ready to help.

You can reach us via:

  • Live Chat: Available 24 hours a day, 7 days a week via the chat icon at the bottom right corner of the platform.
  • Support Email: [email protected] (displayed as text only — please type this address manually)
  • Official Complaint Form: Available in the "Contact Us" section within your member account after login.

We are committed to responding to all privacy-related enquiries within 3 business days. For more complex requests such as data exports or full account deletion, processing time is up to 14 business days.

If you are unsatisfied with our response, you have the right to file a complaint with the Department of Personal Data Protection Malaysia or the relevant authority.

Privacy FAQ

Answers to the most frequently asked questions by mbi8my members regarding the protection of their personal data.

Not at all. mbi8my has never and will never sell, rent, or share members' personal data to any third party for marketing or commercial purposes. Your data is only shared with service providers that assist in platform operations — such as payment processors — and all of them are bound by strict confidentiality agreements.

All financial transactions are processed through channels protected with 256-bit SSL encryption. Your bank account number is stored in encrypted format and cannot be viewed by general staff. mbi8my uses payment processors that comply with PCI DSS standards to ensure the security of your financial data at every stage of the transaction.

Yes, you have the full right to request access to all personal data we hold. Contact our support team via live chat or email, and after identity verification, we will provide a complete data report within 14 business days. This service is provided free of charge.

When you close your account, mbi8my will delete or anonymize your personal information that is no longer required within 30 days. However, financial and transaction records must be retained for 7 years in accordance with Malaysian legal requirements — specifically the Companies Act and AML regulations. This data will not be used for any marketing or operational purposes.

KYC (Know Your Customer) is an identity verification process required by financial and anti-money laundering laws. It requires you to submit a copy of an identity document such as your MyKad or passport. This information is used solely to verify your identity and meet compliance requirements — not for any other purpose. Your documents are stored in encrypted format and can only be accessed by specifically authorised staff.

You can stop receiving marketing communications at any time in two simple ways: first, through the notification settings section in your account; or second, by contacting our customer support team via live chat. Opt-out requests will be processed within 5 business days. Please note that you will still receive important account-related notifications such as transaction confirmations — these cannot be disabled as they are tied to your account security.
Trusted Platform in Malaysia

Join mbi8my with Confidence and Peace of Mind

Your personal data is fully protected. Enjoy a safe, fair, and responsible online gaming experience alongside thousands of Malaysian members who already trust mbi8my.

SSL
256-bit Encryption
PDPA
Full Compliance
24/7
Customer Support
KYC
Secure Verification
Bahasa Melayu