Mbb88 Privacy Policy – Our Commitment to Protecting Your Personal Data

This Privacy Policy applies to all personal data collected, used, stored or processed by mbb88 in connection with Malaysian users' use of the platform. It covers all your interactions with mbb88, including account registration, deposits and withdrawals via Malaysian payment methods, sports and casino betting activity, and communications with our customer support team.

In the context of this Privacy Policy:

• "Personal Data" means any information that can be used to identify you directly or indirectly – including your name, MyKad number, email address, phone number, IP address, and financial transaction details.
• "Processing" covers any operation carried out on personal data, including collection, storage, use, sharing, modification and deletion.
• "Data Controller" refers to mbb88 as the party that determines the purposes and means of processing users' personal data.
• "Data Processor" refers to third parties that process data on behalf of and under the instructions of mbb88, such as payment gateway providers Touch 'n Go, DuitNow, and GrabPay.

Mbb88 collects several categories of personal data from users at various points of interaction with the platform. Below is a full breakdown of the types of data we collect and how they are collected:

Data You Provide Directly:

• Full name as stated on your Malaysian identity card (MyKad)
• An active email address for account communications
• A valid Malaysian mobile number for OTP verification
• Account password (stored in encrypted hash form — we do not store passwords in plain text)
• KYC information, including a copy of your MyKad and a selfie for identity verification when required
• E-wallet or bank account number for withdrawal processing

Automatically Collected Data:

• IP address of the device used to access mbb88
• Web browser or application type and version
• Device type, operating system, and device identifier
• Log data including the date, time and pages visited within the platform
• Betting activity records, including selected markets, stake amounts, and outcomes
• Session data, including usage duration and navigation patterns within the platform

Data from Third Parties:

• Transaction confirmations from payment providers such as Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay and FPX
• Identity verification information from authorised third-party services, if used during the KYC process

Mbb88 collects and processes users' personal data on a lawful basis under Malaysia's PDPA 2010. Every piece of data we collect has a clear and specific purpose. We do not collect data without a reasonable justification directly related to the services we provide.

The primary purposes for collecting personal data at mbb88 are as follows:

• Account Management: Create, manage and maintain your mbb88 account, including identity verification, secure login and password management.
• Transaction Processing: Processes deposits via Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay and FPX, and withdrawals of winnings to your designated account in MYR.
• KYC & Legal Compliance: Meeting identity verification, anti-money laundering (AML), and other applicable regulatory compliance requirements.
• Customer Service: Responding to enquiries, resolving complaints, and providing technical assistance to users via live chat, WhatsApp, and email.
• Platform Security: Detecting and preventing fraud, suspicious account activity, bot usage, and any breaches of terms that could compromise the integrity of the mbb88 platform.
• Service Improvement: Analyses usage data in aggregate form without personal identification to improve platform features, user experience and product offerings.
• Marketing Communications: Sending information about mbb88 promotions, bonuses, and new offers — only to users who have consented to receive such communications.

Personal data collected by mbb88 is used responsibly and in line with the stated purposes. We do not use your data for any other purpose without prior notice and your consent.

In practical terms, here is how your data is used in the day-to-day operations of the mbb88 platform:

• Your full name and phone number are used for identity verification and OTP delivery during login or financial transactions.
• Your email address is used to send important account notifications such as deposit confirmations, security alerts, and customer support communications.
• Your betting activity records are used to calculate eligible bonuses, settle pending bets and detect any suspicious betting patterns.
• IP addresses and device data are used for security purposes — to detect logins from unusual locations and prevent unauthorised access to your account.
• Payment transaction data is used to verify deposits and process withdrawals to your Malaysian e-wallet or bank account.

Mbb88 does not sell, rent or disclose users' personal data to third parties for marketing or commercial purposes. This is a non-negotiable commitment. However, there are limited circumstances in which mbb88 needs to share certain information with third parties necessary for the operation of the platform.

Permitted data sharing is as follows:

• Payment Gateway Providers: mbb88 shares the necessary transaction information with payment providers such as Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay and FPX to process deposits and withdrawals in Malaysian Ringgit (RM). This data is the minimum required for technical purposes only.
• Technology Service Providers: Third parties providing technical infrastructure, cloud services and analytics tools may process data on mbb88's behalf under strict data processing agreements.
• Relevant Authorities: mbb88 will disclose personal data to Malaysian authorities such as the police, anti-money laundering bodies or courts when legally required to do so by law, court order or an investigation conducted in accordance with Malaysian law.
• Business Transfer: In the event of a merger, acquisition, or transfer of mbb88 assets, user data may be transferred to the succeeding entity — provided that the new entity upholds a privacy policy at least equivalent to this Privacy Policy.

All third parties that receive data from mbb88 are bound by data protection agreements that prohibit them from using that data for any purpose other than those specified.

Mbb88 makes serious investments in security infrastructure to ensure that users' personal data is protected to a standard on par with the financial industry. The following are the technical and organisational security measures we have in place:

Technical Security:

• 256-bit SSL/TLS Encryption: All communications between your browser or app and mbb88's servers are encrypted using the latest SSL/TLS protocols. This means data in transit cannot be read by any intercepting party.
• Data-at-Rest Encryption: Sensitive data stored in the mbb88 database — including passwords (in hashed form), payment account numbers, and KYC information — is encrypted using AES-256 encryption.
• Two-Factor Authentication (2FA): Two-factor authentication is available for all mbb88 accounts and we encourage all users to enable it for added protection.
• 24/7 Monitoring: The mbb88 security team continuously monitors network and system activity to detect any intrusion attempts or suspicious anomalies.
• Firewall and Intrusion Prevention System: mbb88's infrastructure is protected by multi-layered firewalls and intrusion detection/prevention systems (IDS/IPS) configured to the latest industry standards.

Organisational Controls:

• Principle of least privilege – staff are only granted access to data required for their specific role
• Internal access audits conducted periodically to detect any unauthorised access
• Security and data privacy awareness training for all mbb88 staff
• Incident response procedures tested regularly to ensure readiness in the event of a security incident

Mbb88 retains users' personal data only for as long as necessary to fulfil the stated purposes or as required by Malaysian law. When data is no longer needed, it will be securely deleted or anonymised.

Mbb88's data retention guidelines are as follows:

• Active Account Data: Retained for as long as your account remains active on the mbb88 platform. This data is necessary for the normal operation of your account and the services you use.
• Closed Account Data: After an account is closed at the user's request, core data will be retained for 7 years in accordance with Malaysian legal requirements relating to financial record-keeping and AML compliance.
• Financial Transaction Records: Records of all deposit and withdrawal transactions are retained for a minimum of 7 years in compliance with the Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001 (AMLATFPUAA).
• Customer Support Communication Log: Customer support conversation records are retained for 2 years for dispute resolution and service improvement purposes.
• KYC Data: Identity verification documents are retained for 7 years after the end of the business relationship, in accordance with legal requirements.

The mbb88 platform uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions smoothly. Cookies are small data files stored in your web browser when you visit the mbb88 platform.

Types of cookies used by mbb88:

• Essential Cookies: Required for core platform functions such as login session management and account security. These cookies cannot be disabled as they are essential for the platform to operate.
• Performance Cookies: Collects aggregated, non-personally identifiable information about how users interact with the platform. This data is used to improve platform performance and stability.
• Functional Cookies: Saves your preferences and settings such as preferred language and display settings to enhance ease of use.
• Analytics Cookies: Used to understand overall platform usage patterns for product improvement purposes. This data is anonymised before analysis.

You can manage or delete cookies through your web browser settings at any time. However, disabling essential cookies may affect the functionality of the mbb88 platform and your overall experience. Please refer to your browser's documentation for instructions on how to manage cookies.

As a mbb88 platform user and data subject under Malaysia's PDPA 2010, you have the following rights regarding the personal data we hold and process:

As mbb88 is a financial platform handling deposits and withdrawals in Malaysian Ringgit (RM), we place particular emphasis on protecting users' financial data. All transactions via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay and FPX are processed through payment gateways compliant with PCI DSS (Payment Card Industry Data Security Standard).

There are important things you should know:

• Mbb88 does not store credit or debit card numbers you. If you use a card for any transaction, your card details are processed directly by a certified payment provider and never pass through or are stored on mbb88 servers.
• Your e-wallet account details (Touch 'n Go, GrabPay, Boost, ShopeePay) registered for withdrawals are stored in encrypted form and used solely for processing your withdrawals.
• All financial transactions on mbb88 are recorded in full detail for audit purposes and compliance with Malaysia's anti-money laundering (AML) requirements.
• Winnings will only be withdrawn to the same payment method used for the deposit (matching rule) as an additional security measure to prevent fraud.

Mbb88 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, new legal requirements or industry developments. Every update will include a clearly stated revision date at the top of this page.

For significant changes to how we use your personal data, mbb88 will make reasonable efforts to provide advance notice through:

• Email notification to your registered email address
• Clear notification banners displayed within the mbb88 platform
• Push notifications in the mbb88 mobile app

In all cases, the updated Privacy Policy will take effect on the date stated in the document. Continued use of the mbb88 platform after the effective date constitutes acceptance of the amended policy. If you do not agree with any of the changes, you have the right to close your account before the effective date.

If you have any questions, concerns or requests regarding mbb88's Privacy Policy or how we handle your personal data, our data protection team is ready to help. We are committed to responding to all privacy enquiries within a reasonable timeframe.

Ways to reach us regarding privacy matters:

• Data Protection Email: support@mbb88.life – please include "Privacy Enquiry" in your email subject line
• Live Chat: Available on the mbb88 platform 24 hours a day, 7 days a week in Bahasa Malaysia
• WhatsApp: Available via the support number listed in the platform's support section

For formal requests relating to data rights such as access, correction, or deletion, please submit a written request to the email above, stating your full name, mbb88 account number, and the nature of your request. We will verify your identity before processing any data request to ensure the security of your information.

Effective Date of This Privacy Policy: 1 January 2026. This policy supersedes all previous versions of the mbb88 Privacy Policy.