Mb918 Privacy Policy – Data Protection Malaysian Players

1 Introduction & Scope of Privacy Policy

Mb918 takes its responsibility to protect the privacy and personal information of every registered member seriously. This Privacy Policy explains in detail how mb918 collects, processes, stores, and safeguards your personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA 2010) and international industry best practices.

This policy applies to all users of the mb918 platform — including visitors browsing our website, individuals registering a new account, and active members using our Sports Betting, slots, Live Casino, poker, and all other services offered by mb918.

By registering an mb918 account or continuing to use our platform, you confirm that you have read, understood, and accepted this Privacy Policy. If you do not agree with any part of this policy, you should not use the mb918 platform. We encourage you to review this policy from time to time, as it may be updated to reflect changes in our practices or relevant legislation.

2 Information We Collect

Mb918 collects your personal information through several channels — directly when you register or use the platform, automatically as you interact with our systems, and in certain circumstances from legitimate third-party sources. The following are the categories of data we collect:

3 Data Collection & Usage Purpose

Mb918 only collects and uses your personal data for legitimate and necessary purposes. We do not collect data beyond what is required for those stated purposes. Below are the primary purposes for which mb918 uses your data:

• Account management — creating, maintaining, and managing your mb918 account, including identity verification, the login process, and account communications
• Financial transaction processing — handling deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX Maybank2u and CIMB Clicks, as well as withdrawal of winnings to your bank account or e-wallet
• Service delivery — enabling you to access all slots, Sports Betting on Liga Super Malaysia, EPL, BWF badminton, IPL cricket, MPL Malaysia e-sports, Live Casino, poker, and every other service available on mb918
• Platform security — detecting and preventing fraud, money laundering, multi-account usage, game manipulation, and any activity that violates mb918's Terms & Conditions
• Legal compliance — fulfilling our obligations under Malaysia's PDPA 2010 and all other applicable regulatory requirements
• Responsible gaming — monitoring play patterns to identify signs of problem gambling and ensuring self-control tools are functioning effectively
• Customer support — enabling the mb918 support team to assist you with enquiries, complaints, and account issues more efficiently
• Platform improvement — aggregated and anonymised usage data is analysed to better understand the needs of Malaysian players and continuously improve mb918's service quality
• Marketing communications — sending you information about mb918's latest promotions, bonuses, and offers (only where you have given your consent)

4 Legal Basis for Data Processing

Mb918 processes your personal data on valid legal grounds under Malaysia's Personal Data Protection Act 2010. These bases ensure that every instance of data processing we carry out is lawful, fair, and transparent:

• Contract performance — processing necessary to fulfil the agreement between you and mb918, including providing the services you signed up for and processing your financial transactions
• Legal obligation — processing required to comply with Malaysian law, including identity verification requirements, financial record-keeping, and mandatory reporting obligations
• Legitimate interests — processing carried out for platform security, fraud prevention, and service improvement purposes that benefit all mb918 members
• Consent — for marketing communications and certain other optional processing activities that require your explicit consent, which may be withdrawn at any time

Mb918 is committed to ensuring there is always a solid legal basis for every data processing activity we carry out. If you have any questions about the legal basis for a specific data processing activity, please contact us by email at support@mb918.best.

5 Data Sharing & Disclosure

Mb918 does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. Your data belongs to you, and we protect it with our fullest commitment. That said, under certain circumstances mb918 may need to share your personal data with the following parties:

• Payment service providers — parties that process your financial transactions, including DuitNow operators, Touch 'n Go, GrabPay, Boost, ShopeePay, and the banks involved in FPX processing. Such sharing is limited strictly to the information necessary to complete the relevant transaction
• IT and security service providers — technology companies that assist mb918 in operating and securing its platform, subject to strict confidentiality agreements
• Game providers — slot and casino game providers who need to process game data in order to deliver their games to you through the mb918 platform
• Legal authorities — Malaysian law enforcement agencies, courts, or regulatory bodies where required by law or a valid court order
• Fraud prevention body — in cases of suspected fraud, money laundering, or other illegal activity that must be reported under Malaysian law

In all of the data-sharing scenarios above, mb918 ensures that recipients are bound by confidentiality obligations equivalent to or stricter than mb918's own data protection standards. We do not permit third parties to use your data for their own purposes beyond the specific permitted use.

6 Data Security & Technical Protection

Mb918 takes significant investment in technical security infrastructure seriously to ensure your personal and financial data is protected at all times. The following are the key security measures we have in place:

• 256-bit SSL Encryption — all communications between your device and mb918's servers are encrypted using TLS 1.3 with AES-256 encryption, the same standard used by major Malaysian banking institutions such as Maybank and CIMB
• Data encryption at rest — sensitive personal data stored in mb918's databases is additionally encrypted, ensuring it remains unreadable even in the event of unauthorised server access
• Multi-layered access controls — only authorised mb918 staff with a legitimate operational need may access your personal data, with every access automatically logged and audited
• 24/7 Security Monitoring — mb918's automated monitoring system operates around the clock to detect and respond to any unauthorised access attempts, cyberattacks, or suspicious anomalies
• Data segregation — financial data, identity data, and gaming data are stored in separate systems with independent access controls to minimise the risk of a full-scale data breach
• Regular security audits — the mb918 security team conducts regular penetration testing and vulnerability assessments to identify and address potential weaknesses before they can be exploited
• Two-factor authentication (2FA) — mb918 offers a 2FA option for user accounts as an additional security layer to protect against unauthorised access even if your password is compromised

While mb918 takes all reasonable steps to protect your data, no security system is 100% foolproof. We therefore encourage you to play your part in keeping your account secure — use a strong password, do not share your login credentials, and report any suspicious activity to the mb918 support team immediately.

7 Data Retention Period

Mb918 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected or to comply with applicable legal requirements. Our data retention policy is as follows:

• Active account data — retained for as long as your account remains active on mb918. You may request account closure at any time, and your data will be deleted or anonymised in accordance with our established procedures
• Financial transaction records — retained for a minimum of 7 years after each transaction in accordance with Malaysian legal requirements under the Income Tax Act and related regulations
• Identity verification records (KYC) — retained for a minimum of 5 years after the account closure date in line with anti-money laundering (AML) requirements
• Customer support communication records — retained for 2 years following the resolution of each case, for service quality purposes and as a reference should any dispute arise
• Technical data and system logs — retained for 90 days for security purposes and technical troubleshooting
• Gaming data — betting history and game activity records are retained for 2 years, after which they are anonymised for analytical purposes only

Once the retention period expires, mb918 will securely delete or anonymise your personal data using methods that ensure it cannot be recovered. Data deletion is carried out in line with industry security standards to ensure no residual data remains accessible.

8 Your Personal Data Rights

Under Malaysia's Personal Data Protection Act 2010 and mb918's commitment to transparency, you have the following rights regarding your personal data held by mb918:

• Right to access — you have the right to request a copy of the personal data mb918 holds about you. mb918 will provide this information within 30 days of a valid request
• Right to rectification — if any personal data held by mb918 is inaccurate or out of date, you have the right to request a correction. We encourage you to update your account information promptly whenever changes occur
• Right to erasure — under certain circumstances, you may request mb918 to delete your personal data. This right is subject to our legal obligations to retain specific records as outlined in Section 7
• Right to withdraw consent — for data processing that relies on your consent (such as marketing communications), you may withdraw that consent at any time without affecting any processing that has already taken place
• Right to object to processing — you have the right to object to the processing of your data for direct marketing purposes at any time. You may also object to processing based on mb918's legitimate interests in certain circumstances
• Right to data portability — you have the right to receive the personal data you provided to mb918 in a structured, machine-readable format

To exercise any of these rights, please contact the mb918 data protection team by email at support@mb918.best with the subject line "Personal Data Rights Request". We will respond within 30 days of receiving your request. In complex cases, we may require additional time and will notify you accordingly.

9 Cookies & Tracking Technologies

Mb918 uses cookies and similar tracking technologies to ensure the platform functions properly and to enhance your user experience. Cookies are small data files stored on your device when you visit the mb918 platform.

The types of cookies used by mb918 are as follows:

• Essential cookies — required for core platform functions such as login sessions, security, and basic navigation. These cookies cannot be disabled without affecting platform functionality
• Performance cookies — collects anonymised information about how you use the mb918 platform to help us identify technical issues and improve performance
• Functional cookies — stores your preferences such as language, display settings, and game preferences to enable a more personalised experience on mb918
• Security cookies — helps mb918's systems identify legitimate sessions, detect unauthorised access attempts, and protect your account against attacks

You can manage and delete cookies through your browser settings. However, disabling certain cookies may affect the functionality of the mb918 platform or your user experience. Note: mb918 does not use third-party cookies for advertising or cross-site tracking purposes.

10 Children's Privacy

Mb918 is a platform exclusively intended for individuals aged 18 and above. We do not knowingly collect or process personal data from children or minors. Registration by individuals under the age of 18 is strictly prohibited under mb918's Terms & Conditions.

If mb918 discovers that personal data from a minor has been collected unintentionally, we will take immediate steps to delete that data and close the account in question. Parents or guardians who have reason to believe their child has registered on mb918 are encouraged to contact us promptly at support@mb918.best so that appropriate action can be taken without delay.

11 Links to Other Websites

The mb918 platform may contain links to third-party websites within certain content contexts. mb918 is not responsible for the privacy practices or content of those third-party sites. This Privacy Policy applies solely to the mb918 platform.

We encourage you to read the privacy policy of any third-party website you visit via links from the mb918 platform. Please note that even though payment service providers such as Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and FPX are mb918 partners, they maintain their own independent privacy policies and mb918 has no control over their practices.

12 Changes to the Privacy Policy

Mb918 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, new legal requirements, or technological developments. When material changes are made, mb918 will notify you via:

• A clear notice on the main page of the mb918 platform or at the top of this Privacy Policy page
• An email to the address registered to your account for significant changes
• An in-platform notice upon your next login after the changes take effect

Your continued use of the mb918 platform after any changes to this Privacy Policy take effect will be considered your acceptance of the updated policy. The "Last updated" date at the top of this page will always reflect the most current version of this policy.

13 Contact Us About Privacy

If you have any questions, concerns, or requests regarding mb918's Privacy Policy or how we handle your personal data, please contact us through the following channels:

• Email: support@mb918.best — please use "Data Privacy Enquiry" as your email subject to ensure it reaches the right team
• Live chat: via the mb918 platform, available 24/7 in Bahasa Melayu and English — the fastest way for general enquiries
• Ticket system: via the "Support" section in your mb918 account for matters requiring closer review and a written record

The mb918 data protection team will respond to all privacy enquiries within 5 business days. For requests relating to personal data rights as outlined in Section 8, we are committed to providing a complete response within 30 days.