Your privacy is a fundamental commitment at mbi8. This policy explains in plain terms what personal data we collect, why we collect it, how we use and protect it, and what rights you have as a registered member of our platform.
This Privacy Policy (the "Policy") sets out the data controller practices of mbi8, the operator of the online gaming and sports betting platform accessible at https://mbi8.cam (the "Platform" or "Website"). The terms "mbi8", "We", "Us", and "Our" refer to the Platform operator. The terms "You", "Player", "User", and "Member" refer to any individual who accesses, registers, or interacts with the mbi8 Platform.
At mbi8, we recognise that the personal information you entrust to us is sensitive. We are committed to handling your data with transparency, care, and purpose — collecting only what is necessary for us to provide our services, and protecting what we hold to the same standard you would expect from a regulated Malaysian financial institution.
This Policy applies to all personal data collected through the mbi8 Website, mobile-optimised platform, live chat support, email correspondence, payment processing interactions, and any other channel through which you interact with mbi8. It covers players across Malaysia, including those in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and all other regions served by our platform.
Your Consent: By registering an account on mbi8, depositing funds, or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, processing, and use of your personal data as described herein. If you do not agree with this Policy, you must refrain from using the mbi8 Platform.
This Policy should be read together with our Terms & Conditions, which govern your use of the mbi8 Platform more broadly, and our Responsible Gambling Policy.
For the purposes of this Privacy Policy, the following terms carry the meanings set out below:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person — including name, identification number, contact details, financial account information, and online identifiers such as IP addresses and device IDs. |
| "Processing" | Any operation performed on personal data, including collection, storage, use, disclosure, transfer, erasure, or destruction. |
| "Data Controller" | The entity that determines the purposes and means of processing personal data. For the purposes of this Policy, the Data Controller is mbi8. |
| "Data Processor" | A third party that processes personal data on behalf of mbi8 in accordance with mbi8's instructions — for example, payment processors, KYC verification providers, and cloud infrastructure partners. |
| "Cookies" | Small text files placed on your device by the mbi8 Website for purposes including session management, analytics, and personalisation. |
| "KYC" | Know Your Customer — the identity and address verification process conducted prior to withdrawal processing or upon regulatory requirement. |
| "PDPA" | The Personal Data Protection Act 2010 (Malaysia) — the primary legislation governing the collection, processing, and storage of personal data in Malaysia. |
mbi8 collects personal data that is necessary to deliver our services, maintain account security, comply with legal and regulatory obligations, and improve the platform experience. The categories of data we collect are set out below.
When you create an mbi8 account, we collect: your full legal name, date of birth, gender (where provided), Malaysian mobile phone number, email address, preferred username, and account password (stored in encrypted hashed form). This information is required to create and maintain your account.
Prior to processing withdrawals or upon regulatory request, we may collect: a copy of your Malaysian MyKad, passport, or other government-issued identity document; a proof of address document (e.g., utility bill, bank statement dated within three months); and, where applicable, a photograph or selfie for liveness verification. KYC documents are handled by our verification team and authorised KYC service providers only.
To process deposits and withdrawals via FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank, or cryptocurrency networks, we collect: your bank account name and number, FPX transaction reference IDs, DuitNow transfer details, e-wallet account identifiers, and cryptocurrency wallet addresses as applicable. Full payment card numbers are never stored on mbi8 servers.
We maintain records of all deposits, withdrawal requests, bet placements, game sessions, bonus activations, and account balance changes. This data is used for account management, dispute resolution, fraud prevention, and responsible gambling monitoring.
When you access mbi8, we automatically collect: IP address, browser type and version, operating system, device type and model, screen resolution, time zone, referring URL, pages visited, session duration, and click-path data. This data is used for security monitoring, platform optimisation, and fraud detection.
Records of your interactions with mbi8 customer support — including live chat transcripts, email correspondence, and any documents submitted to support — are retained for service quality, training, and dispute resolution purposes.
mbi8 collects personal data through the following channels and mechanisms:
mbi8 processes personal data only for specific, legitimate, and documented purposes. We do not process your data in ways that are incompatible with the purposes set out below.
| Processing Purpose | Data Categories Used |
|---|---|
| Account creation and management | Registration data, device data |
| Identity verification (KYC) and age confirmation (21+) | KYC documents, registration data |
| Deposit and withdrawal processing | Financial data, KYC data |
| Game and sports betting service delivery | Account data, transactional data |
| Fraud prevention and anti-money laundering (AML) compliance | All categories as required |
| Responsible gambling monitoring and intervention | Transactional data, gameplay data |
| Platform security and abuse prevention | Technical data, communications data |
| Customer support and dispute resolution | Communications data, transactional data |
| Regulatory reporting and legal compliance | All categories as required |
| Platform analytics and service improvement | Technical data (aggregated/anonymised) |
| Bonus and promotion administration | Account data, transactional data |
No Unsolicited Marketing: mbi8 does not send unsolicited marketing communications. Promotional notifications (where applicable) are sent only to members who have not opted out of such communications through their account settings. You may opt out at any time by contacting support.
mbi8 processes your personal data on one or more of the following legal grounds, consistent with the requirements of the Personal Data Protection Act 2010 (Malaysia) and applicable data protection principles:
mbi8 does not sell, rent, or trade your personal data to any third party for commercial purposes. Your data is shared with external parties only in the limited circumstances set out in this Section.
We engage third-party service providers who process data on our behalf under contractual data processing agreements. These include: payment processors (FPX network operators, DuitNow, e-wallet providers, cryptocurrency payment gateways); KYC and identity verification providers; cloud hosting and infrastructure services; live chat and customer relationship management (CRM) software providers; and fraud detection and risk scoring services. All processors are bound by confidentiality obligations and may only use your data for the specific purposes we authorise.
mbi8 may disclose personal data to law enforcement agencies, financial intelligence units, regulatory authorities, or courts of competent jurisdiction where required to do so by applicable law, court order, or regulatory directive. In such cases, disclosure is limited to the minimum data required to satisfy the legal obligation.
In the event of a merger, acquisition, asset sale, or corporate restructuring affecting mbi8, personal data may be transferred to the acquiring or successor entity as part of that transaction. We will provide notice to affected Players prior to any such transfer taking effect and will ensure equivalent privacy protections remain in place.
No Sale of Data: mbi8 has never sold and will never sell member personal data to data brokers, advertising networks, or any commercial third party. Your data exists solely to enable the services you signed up for.
mbi8 uses cookies and similar tracking technologies on our Website to deliver a functional, personalised, and secure user experience. By using the mbi8 Platform, you consent to the placement of cookies on your device in accordance with this Section.
You may manage cookie preferences through your browser settings. Note that disabling functional or security cookies may impair certain features of the mbi8 Platform, including session persistence and fraud protection mechanisms.
mbi8 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, and in accordance with applicable legal and regulatory retention requirements. The following general retention periods apply:
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.
mbi8 implements a multi-layered information security programme to protect personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security measures include, but are not limited to, the following:
While mbi8 takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You are encouraged to use strong, unique passwords for your mbi8 account and to enable any additional security features made available to you.
As a registered mbi8 member, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact the mbi8 support team through live chat or email, clearly stating your request and verifying your identity.
You have the right to request a copy of the personal data mbi8 holds about you, along with information about how it is processed. We will respond to verified access requests within 21 calendar days.
If any personal data we hold about you is inaccurate or incomplete, you have the right to request its correction. Account holders may update certain details directly through account settings; other corrections should be submitted to support.
You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and no other legal basis for processing applies. Note that erasure requests may be subject to our legal retention obligations — where retention is required by law, we will inform you of the applicable period.
Where mbi8 processes your data on the basis of consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
If you believe mbi8 has handled your personal data in a manner inconsistent with this Privacy Policy or applicable data protection law, you have the right to lodge a complaint. We encourage you to contact mbi8 support in the first instance. You may also contact the relevant data protection authority in your jurisdiction.
The mbi8 Platform is strictly intended for adults aged 21 years and above. mbi8 does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been submitted by a person under the minimum age, we will immediately suspend the associated account, delete the data in question, and void any transactions processed.
If you are a parent or guardian and believe that a minor has registered or interacted with the mbi8 Platform, please contact us immediately at the details provided in Section 15. We will take prompt action to investigate and address the matter.
Parental Controls: We recommend that parents and guardians install appropriate parental control software on shared devices to prevent access to gambling websites by minors. mbi8 supports national efforts to prevent underage gambling in Malaysia and cooperates fully with any relevant enforcement authority on such matters.
Some of the third-party service providers engaged by mbi8 — including cloud infrastructure, KYC verification, and analytics services — may process personal data in jurisdictions outside Malaysia. Where such international transfers occur, mbi8 takes steps to ensure that adequate safeguards are in place to protect your data to a standard equivalent to that required under Malaysian data protection law.
Safeguards employed for international transfers may include contractual data processing agreements incorporating standard data protection clauses, transfers to jurisdictions recognised as providing an adequate level of data protection, or other legally approved transfer mechanisms. Details of the specific safeguards applied to any given transfer may be requested by contacting mbi8 support.
mbi8 reserves the right to amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or service offerings. Where amendments are material, we will notify registered members by posting a prominent notice on the Website and, where practicable, by sending an email notification to your registered address.
The effective date displayed at the top of this document indicates the date on which the current version came into force. Your continued use of the mbi8 Platform following notification of an amendment constitutes your acceptance of the revised Policy.
The most current version of this Privacy Policy is always accessible at https://mbi8.cam/privacy-policy.
For any questions, concerns, or requests relating to this Privacy Policy — including to exercise any of the data subject rights described in Section 11 — please contact the mbi8 Data & Privacy Support team through the following channels:
Email: [email protected] — please include "Privacy Request" in the subject line
Live Chat: Available 24 hours a day, 7 days a week via the mbi8 Website — please state "Data Privacy Enquiry" at the start of your session
Response Commitment: Privacy-related requests are acknowledged within 3 business days; substantive responses are provided within 21 calendar days of identity verification
Coverage: Serving players across Malaysia — Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and all regions
When submitting a request, please provide sufficient information to identify your mbi8 account (e.g., registered email address or username) so that we may verify your identity and locate the relevant data. We will not process requests that we cannot reasonably verify.
We align our data handling practices with the expectations of Malaysian banking customers — because that is the standard our players deserve.
Every connection to mbi8 is encrypted using the same 256-bit TLS standard used by Maybank2u and CIMB Clicks. Your login credentials, payment details, and personal data are never transmitted in plain text.
mbi8 has never sold and will never sell member data to data brokers, advertisers, or commercial third parties. Your personal information exists solely to operate the services you signed up for.
We collect only the data we actually need. No unnecessary demographic profiling, no invasive third-party tracking pixels embedded in our pages. If we do not need it to serve you, we do not collect it.
Access, correction, erasure, and consent withdrawal rights are not just legal text — they are operational procedures at mbi8. Submit a request via live chat and receive a substantive response within 21 days.
mbi8's data handling practices are designed with awareness of Malaysia's Personal Data Protection Act 2010. We treat PDPA compliance as a baseline, not a ceiling, for how we handle Malaysian player data.
Third-party penetration tests and security reviews are conducted at regular intervals. Identified vulnerabilities are remediated before they can be exploited. Your data security is an ongoing operational priority, not a one-time setup task.
Your data is yours. We hold it in trust and protect it to a banking-grade standard. Explore mbi8 today — for players aged 21 and above only.
mbi8 is operated for entertainment purposes. All games involve risk. 21+ only. For data requests, contact [email protected].