Privacy Policy MB8 — Your Personal Data Protection

MB8 is an online entertainment platform operating under the domain mb8.ng, providing sports betting, casino, Live Casino, fish shooting games, and wagering services to eligible members. We understand that trust is the foundation of our relationship with every member — and that trust begins with how we manage your personal data.

This Privacy Policy applies to all information collected through:

• The official MB8 website at mb8.ng and all associated subdomains
• MB8 mobile app or progressive web app (PWA)
• Any communication between you and the mb8 team via live chat, email, or other support channels
• Registration, identity verification (KYC), and financial transactions

This policy is drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). We take this responsibility seriously because we understand that your data is more than just numbers — it is a part of your personal life that must be handled with the utmost trust.

MB8 only collects data that is strictly necessary to deliver the services you registered for. The following are the categories of data we collect:

We never collect sensitive data such as your medical information, religious beliefs, or political views. Every piece of data collected has a clear purpose and will not be used beyond the scope stated in this policy.

The personal data we collect is used solely for legitimate and clearly stated purposes. The following are the primary purposes for which your data is used on the MB8 platform:

• Account Management: Processing registration, verifying your identity through the KYC process, and ensuring your account functions properly.
• Transaction Processing: Processing all fund deposits and withdrawals securely and accurately in accordance with the banking details you registered.
• Platform Security: Detecting, investigating, and preventing any fraudulent activity, money laundering, or conduct that violates the terms of use.
• Customer Service: Providing relevant and timely assistance whenever you contact the MB8 support team through any available channel.
• Responsible Gaming: Monitoring gameplay patterns to identify early signs of problem gambling and proactively providing assistance to members who need it.
• Service Communications: Sending important notifications regarding your account, transactions, policy changes, and security information you need to be aware of.
• Platform Enhancements: Analyzing usage data in aggregate (without identifying individuals) to improve the user experience on the MB8 platform.
• Legal Compliance: Fulfilling reporting obligations to the relevant authorities in accordance with applicable laws.

MB8 does not sell, rent, or disclose your personal data to third parties for commercial purposes. However, there are limited situations where data sharing is necessary to deliver our services:

• Payment Providers: Approved banking institutions and e-wallet providers receive only the financial data necessary to process your deposit and withdrawal transactions.
• Technology Providers: Companies providing technical infrastructure, gaming software, and security systems to mb8 may have limited access to data necessary for delivering their services.
• Legal Authorities: We may be required to disclose certain data to law enforcement agencies or regulatory bodies when mandated by a court order or applicable legislation.
• Auditors & Professional Advisors: Independent auditors, legal counsel, or consultants involved in mb8's operations may have access to data required within the scope of their professional duties, subject to strict confidentiality agreements.

All third parties receiving your data from mb8 are bound by strict data protection agreements. They are only permitted to use the data for specific purposes and are not allowed to use it for any other interests.

MB8 uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login session verification, security, and language preferences. These cookies cannot be disabled as the platform will not function properly without them.
• Performance Cookies: Collecting information about how you use the platform (pages visited, time spent, errors encountered) in aggregate form without identifying individuals. This data helps us improve platform performance.
• Functional Cookies: Remembering your preferences such as language, display layout, and account settings so you do not need to reconfigure them every time you access the platform.
• Analytics Cookies: Helping us understand overall usage patterns for product improvement and user experience purposes.

You can manage or block cookies through your web browser settings at any time. However, blocking essential cookies may affect certain features on the MB8 platform.

We implement multiple layers of technical and organizational security controls to protect your personal data from unauthorized access, loss, alteration, or unintended disclosure:

• Transmission Encryption: All communications between your device and mb8's servers are encrypted using TLS 1.3 protocol with 256-bit encryption.
• Storage Encryption: Sensitive data such as banking information and KYC documents are stored in encrypted form on secure servers.
• Layered Access Control: Only authorized personnel may access member data, and every access is automatically logged and monitored.
• Two-Factor Authentication: mb8's internal systems are protected by multi-factor authentication to prevent unauthorised access by external parties.
• Regular Penetration Testing: The mb8 platform undergoes regular independent security testing to identify and address vulnerabilities before they can be exploited.
• 24/7 Monitoring: Our threat detection system operates around the clock to identify and respond to any suspicious activity in real time.

While we take all reasonable steps to protect your data, no system can guarantee absolute security. We encourage you to also take protective measures on your end, particularly by keeping your account password confidential.

In accordance with the Personal Data Protection Act 2010 (PDPA) Malaysia, you have the following rights regarding your personal data held by mb8:

• Right of Access: You have the right to request a copy of the personal data we hold about you. Requests will be processed within 21 business days.
• Right to Rectification: If your data is inaccurate or outdated, you have the right to request that we correct it promptly.
• Right to Restriction of Processing: Under certain circumstances, you may request that we restrict how we use your data while a dispute is being resolved.
• Right to Object: You may object to the processing of your data for direct marketing purposes at any time.
• Right to Erasure: In certain circumstances permitted by law, you may request the deletion of your personal data from our systems.
• Right to Data Portability: You have the right to receive your personal data in a machine-readable format for transfer to another service provider.

MB8 retains your personal data only for as long as necessary for the purposes stated in this policy or as required by law. The following are the data retention guidelines we follow:

• Active Account Data: Retained for the duration that your account remains active and in use on the MB8 platform.
• Financial Transaction Data: Retained for a minimum of 7 years after a transaction occurs, in accordance with accounting requirements and anti-money laundering laws.
• KYC Documents: Retained for a minimum of 5 years after account closure or the date of the last transaction, whichever is later.
• Communication Records: Support chat logs and emails are retained for 2 years for reference purposes and service improvement.
• Technical Log Data: Access and security logs are retained for 90 days before being automatically deleted.

Upon expiry of the retention period, your data will be securely deleted or anonymised so that it can no longer be linked to your identity.

The mb8 platform may contain links to third-party websites or services such as game providers, payment platforms, or technology partners. It is important that you understand the following:

• MB8 is not responsible for the privacy practices or content of such third-party websites.
• Each third-party website has its own privacy policy independent of mb8.
• We encourage you to read the privacy policy of any third-party site before providing them with any personal information.

The appearance of third-party links on the MB8 platform does not mean we endorse or take responsibility for their content or privacy practices.

Mb8 services are exclusively for individuals aged 18 and above. We do not knowingly collect any personal data from children or individuals under the age of 18.

If you believe a child has provided us with personal data without parental or guardian consent, please contact us immediately. We will take action to delete that data from our systems as soon as possible upon notification.

MB8 performs age verification during the registration process and reserves the right to request identity document verification to confirm an applicant's age before an account is approved.

MB8 reserves the right to amend this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or service improvements. When we make material amendments, we will:

• Updating the "Last Updated" date at the top of this page
• Sending notifications to all members via their registered email or in-platform notifications
• Displaying a clear notice on the platform's home page for a specified period

We encourage you to review this Privacy Policy page from time to time to stay informed about how we manage your data. Continued use of the MB8 platform after any amendments take effect will be considered acceptance of the updated terms.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, our team is ready to assist you through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week via the chat icon at the bottom corner of the mb8 platform.
• Email: Send your enquiry to [email protected] and we will respond within 2 business days.
• Help Centre: Visit the FAQ us for answers to frequently asked questions about privacy and data security.

We are committed to addressing every privacy-related inquiry seriously and within a reasonable timeframe. Your satisfaction and trust are our top priority.