Malaysian Player Data Security

Privacy Policy MB8 Million – How We Protect Your Information

At MB8 Million, your privacy is more than a legal obligation — it is a core part of our commitment to Malaysian players. This document clearly explains how we collect, use, store, and protect your personal information at all times.

Our Privacy Commitment
MB8 Million never sells or rents players' personal data to any third party for marketing purposes
All data is protected with 256-bit SSL encryption — the same security standard used by Malaysian banking institutions.
Players have the right to access, correct, and request deletion of their personal data at any time
This policy complies with Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable international standards
Last updated: 1 January 2026
SSL 256-bit
No Data Sales
Malaysia PDPA
Player Rights
Secured Data
24/7 Support

MB8 Million's Six Data Protection Principles

This is the foundation of how MB8 Million handles every Malaysian player's personal information responsibly.

Minimal Data Collection

MB8 Million only collects information that is strictly necessary to operate the platform — your name, Malaysian phone number, email address, and identity verification details. We do not collect irrelevant or excessive data. This "minimum collection" principle protects your privacy from the very start.

Encrypted Data Storage

All players' personal data is stored on servers protected by 256-bit SSL encryption. Sensitive information such as payment details via Touch 'n Go, GrabPay, DuitNow, or FPX is not stored directly by MB8 Million — it is handled entirely by PCI-DSS certified payment gateways.

No Third-Party Data Sharing

MB8 Million never sells, rents, or shares players' personal information with any third party for marketing or commercial purposes. Your data belongs to you — we use it solely for operational purposes and services directly related to your MB8 Million account.

Player Access & Control Rights

You have the right to access all personal information we hold about you, correct any inaccuracies, and in certain circumstances, request the complete deletion of your data. Contact the MB8 Million support team to exercise these rights at any time.

Defined Data Retention Period

MB8 Million sets clear data retention periods for each category of information. Financial transaction data is retained for 7 years in accordance with Malaysian legal requirements. Account data that has been inactive for 3 years will be automatically deleted unless there is a legal obligation to retain it.

Data Breach Notification

In the event of a data breach that may affect your personal information, MB8 Million is committed to notifying affected players within 72 hours of becoming aware of the incident — in line with international data protection best practice standards.

This Privacy Policy is effective from 1 January 2026 and supersedes all previous versions.
Important Note: By registering and using the MB8 Million platform, you agree to the collection and use of your personal information as described in this Privacy Policy. Please read this document carefully and contact us if you have any questions.

1. Information We Collect

MB8 Million collects various types of information from our players to enable the platform to operate safely, efficiently, and in compliance with legal requirements. We always strive to limit data collection to only what is strictly necessary.

Information you provide directly:

  • Full name as stated on your Malaysian identity card (MyKad)
  • An active Malaysian mobile number for OTP verification
  • A valid email address
  • Date of birth for age verification (18 and above)
  • Malaysian bank account or eWallet details for payment purposes
  • Identity verification documents (copy of MyKad, bank statement, utility bill) when requested

Automatically collected information:

  • IP address and device information used to access the MB8 Million platform
  • Platform usage data including games played, session duration, and betting patterns
  • Financial transaction data including deposits, withdrawals, and betting history
  • Technical information such as web browser type, mobile operating system, and language settings
  • Cookie data and similar tracking technologies to enhance the user experience
Data Category Example Primary Purpose
Identity Name, MyKad, date of birth Age verification & KYC
Relationship Phone, email Communication & account security
Financial TNG, GrabPay, FPX accounts Processing deposits & withdrawals
Usage Game history, sessions Service improvement
Technical IP, device, browser Security & fraud detection

2. How We Use Your Data

MB8 Million uses the information collected for several distinct purposes, each with a valid legal basis under Malaysia's Personal Data Protection Act 2010. We will not use your data for any purpose not stated here without obtaining your consent first.

Platform operational purposes:

  • Creating and managing your player account at MB8 Million
  • Processing deposits and withdrawals via Malaysian eWallet and FPX
  • Verifying player identity and age for legal compliance
  • Providing access to slots, Baccarat, Live Casino, jackpot games, and live matches
  • Crediting bonuses and promotions to your account based on eligibility

Security and compliance purposes:

  • Detecting and preventing fraud, money laundering, and other unlawful activities
  • Fulfilling legal compliance requirements and directives from relevant authorities
  • Investigating complaints and disputes submitted by players
  • Enforcing MB8 Million Terms & Conditions

Communication and marketing purposes:

  • Sending important notifications related to your account, transactions, and security
  • Keeping you informed about the latest promotions and bonuses at MB8 Million (subject to your opt-in preferences)
  • Conducting customer satisfaction surveys to improve our services
Marketing Communications Controls: You can stop receiving marketing communications from MB8 Million at any time by updating your notification preferences in your account settings or by contacting our support team. Security-related communications cannot be disabled as they are essential for your protection.

3. Sharing Information with Third Parties

MB8 Million does not sell, rent, or disclose players' personal information to third parties without your consent, except in the limited circumstances described below. Any data sharing that takes place is subject to strict confidentiality agreements.

Third parties that may receive your data:

  • Payment service providers: PCI-DSS certified payment gateways processing Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay, and FPX transactions receive only the information necessary for payment processing purposes.
  • Game providers: Gaming software companies such as slots and Live Casino providers may receive non-personally identifiable game session data for technical purposes only.
  • Legal authorities: MB8 Million will disclose information to the relevant authorities when required by law, court order, or for legitimate serious criminal investigation purposes.
  • Technology service providers: Companies providing hosting, cybersecurity, and analytics services to MB8 Million are subject to strict data processing agreements and are not permitted to use your data for any other purpose.
Fraud Warning: MB8 Million will never ask for your account password or bank PIN via email, SMS, or any other channel. If you receive any such request claiming to be from MB8 Million, please report it to our support team immediately as it is likely a phishing attempt.

4. Data Security

Protecting your personal and financial information is MB8 Million's top priority. We continuously invest in the latest security infrastructure to keep your data safe from ever-evolving cyber threats.

The security measures we apply at MB8 Million include:

  • 256-bit SSL Encryption: All communications between your device and MB8 Million's servers are protected by banking-grade encryption. Your data cannot be read by any unauthorised party while in transit.
  • Two-Factor Authentication (2FA): Every login requires OTP verification via your registered Malaysian phone number. This prevents unauthorised access even if someone else knows your password.
  • 24/7 Monitoring: The MB8 Million security team monitors platform activity around the clock to detect any suspicious patterns or unauthorised access attempts.
  • Data segregation: Sensitive data such as financial information is stored separately from general profile data, with distinct layers of access controls.
  • Regular security audits: MB8 Million's infrastructure undergoes regular penetration testing and security audits by independent cybersecurity firms to identify and address any vulnerabilities.
Player Responsibilities: While MB8 Million takes all reasonable steps to protect your data, security also depends on your own actions. Use a strong, unique password, do not share your login credentials, and make sure you log out of your MB8 Million account after each session — especially when using a shared device.

5. Cookies Policy

MB8 Million uses cookies and similar tracking technologies to enhance the user experience, maintain platform security, and understand how players use our services. Cookies are small text files stored on your device when you visit the MB8 Million platform.

You can manage your cookie settings through your web browser at any time. Please note, however, that disabling essential cookies may affect the functionality and security of the MB8 Million platform.

6. Your Rights as an MB8 Million Player

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and the data protection principles we uphold, you have several important rights regarding the personal information we hold about you. MB8 Million is committed to respecting and facilitating the exercise of these rights.

Access Rights You have the right to know what data we hold about you and how it is used.
Right to Rectification Correct any personal information that is inaccurate or out of date in our records.
Right to Erasure Under certain circumstances, you may request the deletion of your personal data.
Right to Object Object to the processing of your data for direct marketing purposes at any time.
Data Portability Receive a copy of your personal data in a machine-readable format.
Right to Restriction Request a restriction on the processing of your data in certain circumstances during an investigation.

To exercise any of the above rights, contact the MB8 Million support team by email at support@mb8million.best with the subject line "Privacy Rights Request" along with your account number. We will process your request within 30 calendar days. In complex cases, this period may be extended to 60 days, with notification provided to you.

Limits on the Right to Erasure: While you have the right to request data erasure, MB8 Million may not be able to fulfil such a request in full if the data in question is required to comply with legal obligations, resolve disputes, or enforce agreements. Financial transaction data, for example, must be retained for 7 years under Malaysian legislation.

7. Protection of Children's Data

The MB8 Million platform is exclusively for individuals aged 18 and above. We do not knowingly collect, store, or process personal information from any individual under the age of 18.

MB8 Million's registration process is designed to verify player age. We reserve the right to request additional age verification in the form of official documents at any time. Should MB8 Million discover that a child's personal information has been collected without our knowledge, we will take immediate steps to delete that data and close the account in question.

Parents or guardians who are concerned that their child may have registered with MB8 Million are encouraged to contact our support team immediately.

8. Cross-Border Data Transfers

In the course of its operations, MB8 Million may need to transfer your personal data to servers or service providers operating outside Malaysia. This includes hosting servers, cloud service providers, and international gaming software suppliers.

Every cross-border data transfer carried out by MB8 Million is subject to adequate safeguards to ensure your data remains secure and is managed to a standard no lower than that set out in this Privacy Policy and Malaysia's PDPA. We will only transfer data to countries or organisations that offer an equivalent or higher level of data protection.

Local Data Preferences: Where possible, MB8 Million prioritises storing Malaysian players' data within infrastructure located in Malaysia or the Southeast Asian region to minimise risks associated with cross-border data transfers.

9. Data Retention Period

MB8 Million retains your personal information only for as long as necessary to fulfil the purposes outlined in this Privacy Policy or as required by Malaysian law. Once the retention period expires, data will be securely deleted or anonymised.

Data Type Retention Period Legal Basis
Active account data Throughout the active account period Service contract
Financial transaction records 7 years after transaction Malaysian legal requirements
KYC verification documents 5 years after account closure AML/KYC Compliance
Communication logs 2 years Dispute management
Inactive accounts 3 years after last activity Legitimate business interests
Analytics cookie data 13 months Service improvement

Once the specified retention period has expired, MB8 Million will securely delete your data using methods that ensure it cannot be recovered, or we will anonymise it so that it can no longer be linked to your personal identity.

10. Changes to This Privacy Policy

MB8 Million reserves the right to update or amend this Privacy Policy at any time in response to changes in law, technology, or our business practices. We are committed to informing you of any material changes that affect how we handle your personal data.

When material changes are made to MB8 Million's Privacy Policy, we will:

  • Updating the "Last Updated" date at the top of this document
  • Displaying a prominent notice on the MB8 Million platform homepage for a minimum period of 30 days
  • Sending notifications to your registered email address about changes that occur
  • For highly significant changes, we may request your active consent before continuing to process your data.

Continued use of the MB8 Million platform after the effective date of an amended Privacy Policy constitutes your acceptance of those changes. If you do not agree with the changes made, you have the right to close your account and request data deletion in accordance with the procedure set out in Section 6.

11. Contact Us About Privacy

MB8 Million takes the privacy of Malaysian players seriously. If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please do not hesitate to reach out to us.

Available communication channels for privacy-related enquiries at MB8 Million:

  • Privacy Email: support@mb8million.best — Please use the subject line "Data Privacy Enquiry" for a faster response. We aim to respond within 2 business days for privacy-related enquiries.
  • Live Chat: Available 24/7 directly within the MB8 Million platform. Suitable for general privacy enquiries that do not require sensitive account information.
  • Official Complaints: For serious privacy complaints, send an email with the subject line "Official Privacy Complaint" along with your MB8 Million account number, a detailed description of the complaint, and the relevant dates of the incident. We will investigate and respond within 10 business days.
Support in Bahasa Malaysia: All privacy-related communications with MB8 Million can be conducted entirely in Bahasa Melayu. Our team understands your needs without any language barrier.

If you are not satisfied with how MB8 Million has handled your privacy complaint, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP), the relevant authority in Malaysia for personal data protection matters.

Your Data Is Safe with Us

Play with Peace of Mind at MB8 Million

Your privacy and security are our priority. Register a free account at MB8 Million today and enjoy over 1,000 games with the assurance that your information is always protected to the highest standards.

Platform for users aged 18 and above only. Please play responsibly. Find out more.

Bahasa Melayu