Official MB8 Document – Updated 2026

MB8 Privacy Policy – Personal Data Protection Malaysian Casino Players

MB8 is fully committed to protecting the privacy and personal data of all our members. This Privacy Policy explains transparently how we collect, use, store and protect your information — as well as your rights as an MB8 member regarding the personal data you entrust to us.

Updated: January 2026 Language: English (en-MY) Active & In-Force Policy

MB8's Commitment to Your Privacy

Six core principles that shape how MB8 handles and protects the personal data of all members.

256-Bit SSL Encryption at All Times

All data transmitted between your device and mb8 servers is protected by 256-bit SSL encryption — the same level of security used by Malaysia's leading financial institutions such as Maybank and CIMB.

Your Data Is Never Sold to Third Parties

MB8 has never and will never sell, rent or disclose your personal data to any third party for marketing purposes without your explicit written consent.

Minimum Necessary Data Collection

MB8 only collects personal data that is strictly necessary for the stated purposes — account registration, payment processing, identity verification and customer support.

Right to Access & Data Correction

You have the right to request a copy of the personal data we hold, correct any inaccurate information, or request deletion of your data at any time by contacting our team.

Malaysian Data Protection Law Compliance

The mb8 Privacy Policy is designed to comply with applicable data protection laws in Malaysia. Your rights as a data subject are fully respected and protected by our platform.

Data Breach Notification

In the event of any security breach affecting your personal data, mb8 is committed to notifying you within the stipulated timeframe and taking immediate remedial action.

Important Note: By registering for or using any MB8 services, you confirm that you have read and fully understood this Privacy Policy, and that you agree to the way we collect and process your personal data as described herein.

1 Introduction – MB8's Commitment to Your Privacy

MB8 ("Platform", "we", or "MB8") is an online entertainment platform operating at mb8-khelo.com, offering casino, Sports Betting, e-sports, and various other online gaming services to Malaysian players. In operating this platform, MB8 needs to collect and process a certain amount of personal data from our members.

We understand that your personal data is something sensitive and valuable. The trust you place in MB8 to handle that information responsibly is something we do not take lightly. That is why we have put together this comprehensive Privacy Policy — to ensure you know exactly what data we collect, why we collect it, how it is used, who can access it, and what your rights are in relation to that data.

This MB8 Privacy Policy applies to all users of the mb8-khelo.com website, all registered members, all prospective members browsing our platform, and all individuals who interact with MB8's services in any capacity. This Policy forms part of MB8's Terms & Conditions and should be read together with that document for a complete understanding.

This Privacy Policy is effective from January 2026. The latest update date will always be displayed at the top of this document. Please review this policy periodically to stay informed of how mb8 handles your personal data.

2 Types of Personal Data mb8 Collects

Mb8 collects several categories of personal data depending on your interactions with our platform. Below is a detailed summary of the data we may collect:

Data Category Examples Primary Purpose
Identity Data Full name, date of birth, gender, identification number Identity & age verification, legal compliance
Contact Data Malaysian phone number, email address Account verification, communication & customer support
Financial Data Bank account details, TNG/GrabPay e-wallet numbers, deposit & withdrawal history in MYR Payment processing & transaction verification
Account Data Username, password (encrypted), login history Account management & platform security
Gaming Activity Data Betting history, games played, bonuses claimed, wins & losses Bonus processing, legal compliance & responsible gaming
Technical Data IP address, device type, browser, operating system, access time Security, fraud detection & platform improvement
Communication Data Records of customer support conversations and emails sent to MB8 Dispute resolution & service improvement

We do not collect sensitive data such as health information, religious beliefs, political affiliations or biometric data unless specifically stated and with your explicit consent in particular contexts required by law. mb8 does not require credit card numbers, as all transactions are processed through approved local Malaysian payment methods.

3 How MB8 Collects Your Personal Data

MB8 collects personal data through several different channels throughout your interactions with our platform. It is important for you to understand these channels so you can make informed decisions about the information you share with us.

Directly from You:

  • During mb8 account registration — the name, phone number and password you provide.
  • During the identity verification process when you submit documents such as your national ID or passport.
  • When making a deposit via Touch 'n Go, GrabPay, DuitNow, FPX, or other accepted payment methods.
  • When contacting the mb8 customer support team via Live Chat or email.
  • When completing profile update forms or account settings within the platform.

Automatically via Technology:

  • Cookies and similar tracking technologies when you browse the MB8 website (see Section 8 for more details).
  • Server logs recording IP addresses, access times and pages visited.
  • Technical data relating to the device and browser used to access the MB8 platform.
  • Transaction information processed automatically by MB8's payment system.

From Approved Third Parties:

  • Payment service providers including Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow and FPX-supported banks, to verify successful transactions.
  • Third-party identity verification services used to comply with KYC (Know Your Customer) legal requirements.
  • Information publicly available on social media platforms, in specific cases related to fraud investigations or legal compliance only.

4 How MB8 Uses Your Personal Data

MB8 uses collected personal data for specific, legitimate, and transparent purposes. We do not use your data for any purpose beyond what is stated here without first obtaining fresh consent from you.

Platform Operations Purpose:

  • Processing your mb8 account registration and verifying your identity and age.
  • Processing all deposits in MYR via Touch 'n Go, GrabPay, DuitNow, FPX, and other Malaysian local payment methods.
  • Processing withdrawal of winnings to your bank account or e-wallet within 5 to 15 minutes.
  • Crediting bonuses, verifying rollover requirements, and managing promotions on your account.
  • Providing responsive customer support in Bahasa Melayu 24 hours a day.

Security & Legal Compliance Purposes:

  • Detecting and preventing fraud, money laundering, and any activities that violate applicable laws or MB8's Terms & Conditions.
  • Meeting applicable legal compliance requirements in Malaysia, including KYC obligations and mandated financial transaction reporting.
  • Ensuring that the MB8 platform is only accessible to individuals who meet the minimum age requirement of 18 years old.
  • Maintaining transaction records for audit and financial compliance purposes.

Service Improvement Purpose:

  • Analysing platform usage patterns in aggregate (without identifying individuals) to improve the user experience.
  • Personalising your experience on the MB8 platform based on your game preferences and activity history.
  • Sending communications about promotions, bonuses, and platform updates relevant to your interests — you may unsubscribe at any time.

mb8 does not use your personal data to make automated decisions that have a legal effect or similarly significant impact on you without human involvement in the evaluation process.

5 Sharing Personal Data with Third Parties

Mb8 does not sell, rent or disclose your personal data to any third party for commercial marketing purposes without your explicit written consent. This is an absolute commitment we do not compromise on.

However, there are certain situations where MB8 needs to share your personal data with specific parties for legitimate purposes:

  • Payment Service Providers: Transaction data required to process deposits and withdrawals is shared with Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow and FPX-supported banks. This sharing is limited strictly to information necessary to complete the relevant transaction.
  • Game Service Providers: Minimum technical data required to run games is shared with approved game software providers. All such providers are bound by strict data protection agreements with MB8.
  • Identity Verification Services: Identity documents are shared with approved third-party KYC providers solely for identity verification and anti-money laundering compliance purposes.
  • Legal Authorities: MB8 will disclose your personal data to competent authorities such as the police, courts, or regulatory bodies when required to do so under applicable Malaysian law or by a valid court order.
  • Business Transfer: In the event of a merger, acquisition, or sale of MB8 assets, personal data may be transferred as part of the business assets. You will be notified in advance and given a choice before your data becomes subject to a different privacy policy.

Important: MB8 does not and will not share your betting or gaming activity history with any third party for marketing, insurance or credit assessment purposes. Your gaming activity data is confidential and is used solely for platform operations and legal compliance.

6 Data Security Measures at MB8

The security of your personal data is MB8's highest priority. We continually invest in the latest security infrastructure and practices to ensure your data is always protected against unauthorised access, disclosure, alteration or destruction.

1
256-bit SSL Encryption

All communications between your device and mb8 servers are encrypted using 256-bit TLS/SSL protocol. No data is transmitted in plain text that could be read by unauthorised parties.

2
Fully Encrypted Passwords

Your password is never stored in plain text. We use strong hashing algorithms, meaning no one — including MB8 staff — can ever view your original password.

3
Strict Internal Access Controls

Access to members' personal data within MB8's internal systems is restricted to staff who genuinely require it to carry out their duties. All access is logged and audited on a regular basis.

4
Continuous Threat Monitoring

Mb8 systems are monitored around the clock by our cybersecurity team to detect suspicious activity, unauthorised access attempts or any security threats that could compromise member data.

5
Regular Data Backups

Members' personal data and account information are regularly backed up to a secure, separate location to ensure swift data recovery in the event of any unexpected technical disruption.

6
Two-Factor Authentication (2FA)

MB8 offers two-factor authentication via SMS OTP to protect your account from unauthorised access, even if your password has been compromised.

While MB8 takes all reasonable and up-to-date security measures, no security system can guarantee 100% data protection in every scenario. You also play an important role in protecting your data by keeping your password confidential, using secure devices, and ensuring you log out of your MB8 account when using shared devices.

7 Personal Data Retention Period

MB8 retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy, or as required by applicable Malaysian law, whichever is longer.

In general, the retention periods are as follows:

  • Active Account Data: Retained for the duration your account is active, plus any additional period required by law.
  • Financial Transaction Data: Deposit, withdrawal, and betting activity records in MYR are retained in accordance with applicable financial and anti-money laundering legal requirements in Malaysia, typically seven years from the date of transaction.
  • Identity Verification Data: KYC documents are retained for the period required by applicable legal and compliance obligations.
  • Support Communication Data: Live Chat conversation records and emails are retained for three years for dispute resolution and service improvement purposes.
  • Technical & Log Data: Server logs and technical data are retained for as long as necessary for security and fraud detection purposes, typically 12 months.

When personal data is no longer needed, mb8 will securely delete or anonymise it using approved procedures to ensure it cannot be recovered or accessed again.

8 Use of Cookies on the MB8 Platform

The MB8 website uses cookies and similar tracking technologies to enhance your browsing experience and ensure the platform runs smoothly. Cookies are small text files stored on your device when you visit the website.

MB8 uses several types of cookies:

  • Essential Cookies (Required): Cookies required for the MB8 platform to function properly — including maintaining your login session, securing transactions and saving your language preferences. These cookies cannot be disabled.
  • Functional Cookies: Cookies that remember your preferences and settings on the MB8 platform — such as your configured betting limits and game preferences — for a more personalised experience.
  • Analytics Cookies: Cookies that help us understand how members use the MB8 platform in aggregate — pages visited, session duration and navigation patterns. This information is used solely to improve the platform.
  • Security Cookies: Cookies that help mb8 identify suspicious activity, unauthorised login attempts and potential fraud patterns.

You can manage cookie settings through your browser. However, disabling certain cookies may affect MB8 platform functionality — for example, you may need to log in again on each visit if session cookies are disabled. For information on how to manage cookies in your browser, please refer to your browser's help documentation.

9 Your Rights as an MB8 Member Regarding Personal Data

As an MB8 member, you have certain rights regarding the personal data we hold and process about you. MB8 fully respects these rights and is committed to fulfilling valid requests within a reasonable timeframe.

Right of Access

You have the right to request and receive a copy of the personal data MB8 holds about you at any time.

Right to Rectification

You have the right to request correction of any personal data that is inaccurate, incomplete or out of date.

Right to Erasure

You have the right to request the deletion of your personal data in certain circumstances, subject to retention obligations prescribed by law.

Right to Restrict Processing

You have the right to request that MB8 restrict how we process your personal data in certain circumstances as defined by law.

Data Portability Rights

You have the right to receive the personal data you have provided to mb8 in a structured, machine-readable format for transfer to another party.

Right to Object

You have the right to object to the processing of your personal data for specific purposes, such as direct marketing, at any time and without needing to provide a reason.

To exercise any of the rights above, please contact the mb8 team by email at support@mb8-khelo.com or via 24/7 Live Chat. State the right you wish to exercise and provide sufficient information for us to verify your identity. mb8 will process your request within a reasonable timeframe in accordance with applicable law — typically within 30 working days. In complex cases, this period may be extended, and you will be notified accordingly.

Please note that some of these rights are not absolute and are subject to certain exceptions under the law — for example, we may not be able to delete your financial transaction records that must be retained to meet Malaysia's anti-money laundering legal requirements.

10 Child Protection & Underage Players

Mb8 strictly prohibits use of its platform by individuals under the age of 18. The mb8 platform is exclusively for adult entertainment, and we take this responsibility very seriously.

MB8 does not knowingly collect or process the personal data of minors. If we identify that a person under the age of 18 has registered an MB8 account, we will immediately:

  • Suspend and terminate the account immediately.
  • Deleting all related personal data we hold.
  • Refunding any deposits made by the underage user following proper verification.

If you are a parent or guardian and discover that your child has registered for or used the MB8 platform without your knowledge, please contact the MB8 support team immediately via Live Chat or email at support@mb8-khelo.com. We will take prompt action to address the situation.

11 Amendments to MB8's Privacy Policy

MB8 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, technological changes, or platform service improvements.

When significant changes are made to this Privacy Policy, MB8 will take the following steps to ensure you are informed:

  • Updating the "Last Updated" date at the top of this document and on the MB8 website.
  • For material changes, members will be notified via email or in-platform notification with reasonable advance notice — typically at least 14 days before the changes take effect.
  • In cases of highly significant changes that require your renewed consent, we may ask you to agree to new terms before continuing to use the platform.

It is your responsibility to review this Privacy Policy periodically. Your continued use of the MB8 platform following any amendments constitutes your full acceptance of the updated policy. If you do not agree with any changes, you have the right to close your account and request the deletion of your personal data.

12 How to Contact mb8 Regarding Data Privacy

If you have any questions, concerns or complaints regarding how MB8 handles your personal data, or wish to exercise any of the privacy rights set out in this Privacy Policy, please contact us through the following channels:

  • Data Privacy Email: support@mb8-khelo.com — include "Data Privacy Enquiry" in the subject line of your email to ensure it is promptly directed to the responsible team.
  • 24/7 Live Chat: Via the Live Chat icon on the MB8 platform — for general privacy and data enquiries, our support team is available in Bahasa Melayu at any time.

MB8 aims to respond to all data privacy enquiries within 5 business days for general enquiries, and 30 business days for formal privacy rights requests. For more complex complaints, we will provide you with regular status updates throughout the resolution process.

If you are not satisfied with how MB8 has handled your privacy complaint after contacting us directly, you have the right to refer the matter to the relevant data protection authority in Malaysia.

For data deletion requests or the exercise of any other privacy rights, please submit your request by email from the address registered to your mb8 account to facilitate identity verification. This protects you against any party attempting to exercise your rights without authorisation.

FAQ – MB8 Privacy Policy

Answers to the most frequently asked questions about privacy and personal data protection at MB8.

mb8 does not share your financial information with third parties for marketing or commercial purposes. Limited transaction data is shared solely with approved payment providers such as Touch 'n Go, GrabPay, DuitNow and FPX banks, strictly to process your deposits and withdrawals. Only the minimum information necessary to complete the transaction is shared. All payment providers are bound by strict data protection agreements with mb8 and applicable Malaysian data protection law.

To request deletion of your personal data, send an email to support@mb8-khelo.com from the email address registered to your MB8 account. Include "Data Deletion Request" in the subject line and provide your account username. The MB8 team will process your request within 30 business days. Please note that some data may not be fully deleted if MB8 has a legal obligation to retain it — for example, financial transaction records that must be kept in accordance with Malaysia's anti-money laundering legal requirements. In such cases, we will clearly inform you which data can and cannot be deleted, along with the reasons.

When you close your MB8 account, your personal data is not deleted immediately. It will be retained for as long as required under applicable Malaysian law — typically seven years for financial and transaction records. Once the mandatory retention period has elapsed, your data will be securely deleted or anonymised. During this retention period, your data will not be used for any marketing purposes and access to it is strictly limited to legal compliance requirements only. If you are closing your account for Responsible Gaming reasons, please inform our team so we can put appropriate additional measures in place.

Yes, you can unsubscribe from MB8 marketing communications at any time. There are several ways to do so — click the "Unsubscribe" link at the bottom of any MB8 promotional email, update your communication preferences in your MB8 account settings, or contact our support team via Live Chat or email and let us know you wish to stop receiving marketing communications. Please note that unsubscribing from marketing emails does not mean you will stop receiving important account-related communications, such as deposit and withdrawal notifications or critical security information — these are necessary for the operation of your account and cannot be disabled.
Related MB8 Policy Documents

This Privacy Policy should be read together with MB8's other policy documents for a complete understanding of how our platform operates and your rights as a member. All MB8 policy documents are transparent and freely accessible to all users.

Play Safe & Stay Private at MB8

Your personal data is protected with 256-bit SSL. Register your mb8 account free today and enjoy over 200 casino games, Sports Betting and E-Sports with deposits from RM10 via Touch 'n Go or DuitNow.

SSL 256-bit Touch 'n Go GrabPay DuitNow FPX

Please play responsibly. Minimum age 18 years. Learn more.

Bahasa Melayu