mbb888 Privacy Policy

1.Introduction and Scope

This Privacy Policy ("Policy") describes how mbb888 ("mbb888", "the Platform", "we", "us", "our") collects, uses, stores, shares, and protects personal data provided by users ("you", "Player", "User") of the mbb888 platform at mbb888.app.

This Policy applies to all personal data collected through the mbb888 website, account registration process, identity verification (KYC) process, deposit and withdrawal transactions, customer support interactions, and any other interactions you have with mbb888. By registering an account or using the mbb888 Platform, you acknowledge that you have read and understood this Policy.

mbb888 is committed to protecting your privacy and handling your personal data in accordance with applicable data protection laws, including principles aligned with the Malaysian Personal Data Protection Act 2010 (PDPA). We review this Policy periodically and update it as required by changes in our practices or applicable regulations.

2.Data Controller

mbb888 is the data controller responsible for the personal data processed under this Policy. As data controller, mbb888 determines the purposes for which personal data is processed and the means by which it is processed.

If you have any questions about how mbb888 handles your personal data, or if you wish to exercise any of the rights described in Section 11 of this Policy, please contact our Data Protection contact via the details provided in Section 15.

3.Personal Data We Collect

mbb888 collects the following categories of personal data:

3.1 Identity Data. Full legal name, date of birth, nationality, and copies of government-issued identification documents (Malaysian MyKad, passport, or driving licence) collected as part of the KYC verification process.

3.2 Contact Data. Email address, mobile phone number, and residential address. These are required for account communications, transaction alerts, security notifications, and support correspondence.

3.3 Financial Data. Payment method details sufficient to process deposits and withdrawals — including e-wallet identifiers (Touch 'n Go eWallet, Boost, GrabPay), bank account details (Maybank, CIMB, Public Bank), DuitNow identifiers, FPX references, and USDT wallet addresses where applicable. Full payment card numbers are never stored by mbb888.

3.4 Transaction Data. Records of all deposits, withdrawals, and in-Platform financial transactions including amounts, timestamps, and payment method used.

3.5 Gaming Data. Complete records of all bets placed, games played, outcomes, session durations, and wagering histories. This data is required for regulatory compliance, dispute resolution, and responsible gaming monitoring.

3.6 Technical Data. IP address, device identifiers, browser type and version, operating system, session data, and login timestamps. This data is collected automatically when you access the mbb888 Platform.

3.7 Communications Data. Records of your communications with mbb888 customer support, including Live Chat transcripts, email correspondence, and WhatsApp message content where applicable.

4.How We Collect Your Data

mbb888 collects personal data through the following means:

• Direct provision: Data you provide during account registration, KYC verification submissions, support interactions, and promotional claim forms.
• Automated collection: Technical data collected automatically via cookies, server logs, and device fingerprinting when you access the Platform.
• Third-party sources: Identity and fraud verification data received from our KYC and AML service partners in connection with identity verification processes. Payment confirmation data received from payment processors upon completion of financial transactions.
• Responsible gaming monitoring: Behavioural data derived from gameplay patterns used for responsible gaming monitoring and proactive intervention where appropriate.

5.Legal Basis for Processing

mbb888 processes personal data on the following legal bases:

• Contractual necessity: Processing required to provide the mbb888 service under the account agreement — including account management, game provision, and payment processing.
• Legal obligation: Processing required to comply with applicable laws — including KYC/AML requirements, gaming regulations, tax obligations, and data retention requirements mandated by regulatory authorities.
• Legitimate interests: Processing for fraud prevention, Platform security, responsible gaming monitoring, and operational analytics — where mbb888's legitimate interests do not override your fundamental rights and freedoms.
• Consent: Where consent is the legal basis for processing (primarily for certain marketing communications), you may withdraw consent at any time by contacting support or updating your account communication preferences.

6.How We Use Your Data

mbb888 uses your personal data for the following purposes:

• Creating, managing, and securing your mbb888 account
• Processing deposits and withdrawals and maintaining accurate financial records
• Verifying your identity and age as required by applicable regulations
• Detecting, investigating, and preventing fraudulent transactions, money laundering, and other illegal activities
• Providing customer support and resolving disputes
• Operating responsible gaming monitoring systems and applying appropriate interventions
• Sending transactional communications — account notifications, deposit confirmations, withdrawal updates, and security alerts
• Sending promotional communications, where you have opted in to receive them
• Improving the Platform, including game offerings and user experience, through aggregated analytics
• Complying with all applicable legal and regulatory obligations

7.Sharing Your Data with Third Parties

mbb888 does not sell, rent, or trade your personal data. We share personal data only with the following categories of third parties, and only to the extent necessary:

• Payment processors: Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, and other payment infrastructure providers — to process your financial transactions.
• KYC and AML service providers: Third-party identity verification and anti-money laundering screening services — to fulfil our regulatory compliance obligations.
• Game content providers: Licensed game studios and live casino operators — limited account identifiers necessary to provide games and record outcomes.
• Technology and security providers: Fraud detection, cybersecurity, and Platform infrastructure providers operating under strict data processing agreements with mbb888.
• Regulatory and law enforcement authorities: Where legally required to disclose personal data in connection with a regulatory investigation, court order, or law enforcement request.

All third-party processors engaged by mbb888 are required to handle personal data strictly in accordance with mbb888's instructions and applicable data protection standards.

8.Cookies and Tracking Technologies

mbb888 uses the following types of cookies and similar technologies:

• Strictly necessary cookies: Required for the Platform to function — session management, authentication state, fraud prevention signals, and security cookies. These cannot be disabled.
• Functional cookies: Store your preferences such as language settings, responsible gaming tool configurations, and game lobby display preferences.
• Analytics cookies: First-party analytics cookies used to understand aggregate Platform usage — pages visited, session durations, feature usage — to guide Platform improvements. These are not shared with third-party advertising networks.

mbb888 does not deploy third-party advertising or retargeting cookies. You can manage functional and analytics cookies through your browser settings. Disabling strictly necessary cookies will impair Platform functionality and may prevent login.

9.Data Retention

mbb888 retains personal data for the following periods:

• Active account data: Retained for the duration of your mbb888 account plus a minimum of 5 years following account closure, as required by applicable gaming and financial regulations.
• KYC documentation: Retained for a minimum of 5 years from the date of verification or account closure, whichever is later, to comply with AML regulatory requirements.
• Transaction records: Retained for a minimum of 7 years to satisfy financial record-keeping obligations.
• Customer support communications: Retained for 3 years from the date of the relevant interaction.
• Technical and log data: Retained for up to 12 months for security, fraud investigation, and Platform optimisation purposes.

Following the expiry of applicable retention periods, personal data is securely deleted or anonymised such that it can no longer identify you.

10.Data Security

mbb888 implements technical and organisational security measures appropriate to the nature and volume of personal data we process. These include:

• 256-bit SSL/TLS encryption for all data in transit between your browser and mbb888 servers
• Encryption at rest for sensitive personal data fields in our databases
• Role-based access controls limiting staff access to personal data on a need-to-know basis
• Comprehensive access logging and audit trails for all system access to personal data
• Regular security assessments and penetration testing by qualified security professionals
• Incident response procedures with defined timelines for breach notification where required

No data transmission over the internet can be guaranteed as 100% secure. While mbb888 takes all reasonable measures to protect your personal data, we cannot guarantee absolute security. Players are encouraged to use strong unique passwords and enable two-factor authentication on their mbb888 accounts.

11.Your Rights as a Data Subject

Subject to applicable law, you have the following rights with respect to personal data mbb888 holds about you:

• Right of access: You may request a copy of the personal data mbb888 holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of personal data in certain circumstances — noting that data required for regulatory compliance cannot be deleted during mandatory retention periods.
• Right to restriction of processing: You may request that we limit processing of your data in certain circumstances.
• Right to data portability: You may request a machine-readable copy of personal data you have provided to mbb888.
• Right to object: You may object to processing based on legitimate interests, including direct marketing communications.
• Right to withdraw consent: Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact mbb888 support via Live Chat or email. We will respond to all valid data subject requests within 30 days. We may request proof of identity before processing data subject requests to protect against fraudulent access.

12.International Data Transfers

Some of the third-party service providers used by mbb888 — including game content providers and certain KYC service partners — may process personal data outside of Malaysia. Where personal data is transferred internationally, mbb888 ensures that appropriate safeguards are in place, including contractual data processing agreements that impose data protection standards equivalent to those applicable within Malaysia.

By using the mbb888 Platform, you acknowledge that your personal data may be processed in jurisdictions outside your country of residence, subject to the safeguards described in this Policy.

13.Children's Privacy

mbb888 is strictly an adults-only platform. The minimum age requirement to register and use mbb888 is 21 years. mbb888 does not knowingly collect personal data from persons under 21. If mbb888 discovers that personal data has been collected from a person under 21, that account will be immediately closed, all gameplay voided, and the personal data deleted except where retention is required for regulatory purposes.

If you believe that mbb888 has inadvertently collected personal data relating to a person under 21, please contact us immediately using the details in Section 15.

14.Changes to This Privacy Policy

mbb888 may update this Privacy Policy from time to time to reflect changes in our data handling practices, regulatory requirements, or Platform functionality. The date of the most recent update is displayed at the top of this page.

Material changes to this Policy will be communicated to registered users via email or a prominent notice on the Platform prior to the changes taking effect. Your continued use of the mbb888 Platform following notification of changes constitutes acceptance of the updated Policy.

We encourage you to review this Policy periodically to stay informed about how mbb888 protects your personal data.

15.Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the personal data mbb888 holds about you, please contact us through the following channels:

• Email: [email protected]
• Live Chat: Available 24/7 through the mbb888 Platform
• WhatsApp: Available 24/7 — contact details displayed after mbb888 login

mbb888 aims to acknowledge all privacy-related enquiries within 5 business days and provide a substantive response within 30 days. For complex data subject requests, we will notify you if additional time is required and provide a revised timeline.