Privacy Policy mb918 — Your Personal Data Protection

This Privacy Policy ("Policy") is published by mb918 and applies to all users accessing the mb918 platform via mb918.pro and the official mb918 mobile app available for iOS and Android. This Policy describes our approach to the collection, processing, storage, and protection of your personal data.

Mb918 takes our responsibility towards every member's privacy seriously. We understand that your trust is the most valuable asset we must safeguard. We are therefore committed to managing your personal data with full integrity, transparency, and in accordance with the provisions of Malaysia's Personal Data Protection Act 2010 (PDPA).

This Policy covers all personal information you provide directly to us during registration, platform use, or through communications with the mb918 support team, as well as information we collect automatically via legitimate tracking technologies while you use our platform.

Mb918 collects your personal data through a variety of transparent and lawful methods. Below is a complete table of the types of data we collect, along with their sources and purposes:

Data We Do Not Collect

Mb918 does not collect sensitive information such as biometric data (except where required for KYC), health information, political views, religious beliefs, or personal data of minors under the age of 18. If you find that we are requesting such information outside of a legitimate KYC context, please contact our support team immediately.

Mb918 uses collected personal data solely for legitimate and transparent purposes. Every use of data is proportionate to actual needs and does not exceed what is required to operate the platform responsibly.

• Account Management: Creating, verifying and maintaining your mb918 account, including the KYC process required by law.
• Transaction Processing: Processing deposits, withdrawals and ensuring the security of all financial transactions in your account.
• Customer Service: Providing technical assistance, answering inquiries and resolving issues you encounter via Live Chat or email.
• Fraud Prevention: Detecting and preventing fraudulent activity, money laundering and platform abuse through behavioral analysis.
• Regulatory Compliance: Fulfilling legal and regulatory obligations imposed by relevant authorities, including anti-money laundering (AML) requirements.
• Platform Improvement: Analyzing usage patterns to enhance the gaming experience, improve the interface and develop relevant new features.
• Marketing Communications: Sending promotional information, bonus offers and platform news — only if you have given consent to receive such communications.
• Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling and providing appropriate support to players who need it.

Mb918 processes your personal data on the basis of one or more valid legal grounds as provided under Malaysia's Personal Data Protection Act 2010 (PDPA):

• Contract Performance: Data processing required to fulfill the agreement between you and mb918, including platform service provision, payment processing and account management.
• Legal Obligation: Data processing required to comply with applicable laws, including KYC requirements, AML reporting and tax obligations.
• Legitimate Interest: Processing for fraud prevention, network security, service improvement and legitimate business risk management purposes.
• Consent: For marketing communications and certain cookie usage, processing is based on explicit consent given by you and may be withdrawn at any time.

Mb918 limits the sharing of your personal data with third parties to only situations where it is genuinely necessary. We do not sell your data. Data sharing occurs only in the following situations:

Trusted Service Providers

Mb918 partners with carefully vetted service providers to support our platform operations. These include payment processors (FPX, DuitNow), cloud infrastructure providers, KYC verification services, and customer support systems. All these providers are bound by strict data protection agreements and are only permitted to use your data in accordance with mb918's instructions.

Legal Requirements

Mb918 may be required to disclose your personal data to government authorities, law enforcement agencies, or regulatory bodies when mandated by Malaysian law, court order, or in the context of a legitimate financial crime investigation. In such situations, mb918 will inform you of the disclosure if permitted to do so by law.

Merger or Acquisition

Should mb918 be involved in a merger, acquisition, or sale of business assets, your personal data may be transferred as part of that transaction. You will be notified in advance and will have the right to withdraw your consent before your data is transferred to the new entity.

Mb918 continuously invests in the latest security infrastructure to ensure your personal data remains protected at all times. The technical and organizational security measures we implement include:

• Data Encryption in Transit: All communications between your device and mb918 servers are protected by TLS 1.3 with AES-256-bit encryption — the same standard used by leading financial institutions worldwide.
• Data Encryption at Rest: Sensitive data such as banking information and KYC documents are encrypted at rest on mb918 servers using industry-approved encryption algorithms.
• Role-Based Access Control: Access to user data is restricted to staff who require it to perform their duties, supported by a comprehensive audit log system.
• Two-Factor Authentication (2FA): mb918 supports and encourages the use of 2FA on all accounts to add an extra layer of security against unauthorized access.
• 24/7 Security Monitoring: An automated monitoring system tracks suspicious activity and intrusion attempts around the clock, with immediate response by our security team.
• Regular Penetration Testing: mb918 conducts regular penetration testing by independent security experts to identify and address any system vulnerabilities.

Mb918 uses cookies and similar tracking technologies to enhance your experience on our platform, maintain login session security, and understand how users interact with our platform.

Types of Cookies Used

• Essential Cookies: Required for core platform functions such as login session verification, account security, and language preferences. These cookies cannot be disabled.
• Performance Cookies: Collecting information on how web pages are used to help us improve platform performance and speed.
• Functional Cookies: Saving your preferences such as display settings, language and game preferences to deliver a more personalized experience.
• Analytics Cookies: Helping us understand platform usage patterns for continuous improvement purposes. This data is aggregated and contains no personally identifiable information.

You can manage your cookie settings through your web browser. However, disabling certain cookies may affect the functionality of some parts of the mb918 platform. For a full guide on managing cookies in popular browsers, visit your browser's help section.

Mb918 retains your personal data only for as long as necessary to fulfil the original purpose of collection or as required by applicable law. The following are our data retention guidelines:

Upon expiry of the retention period, your personal data will be securely deleted or anonymized so that it can no longer be personally associated with you. The deletion process employs methods that comply with recognized data security standards.

As an mb918 user, you have certain rights regarding your personal data under Malaysia's PDPA. mb918 is committed to facilitating the exercise of these rights efficiently and without unnecessary obstacles.

To exercise any of the above rights, please contact the mb918 support team via 24/7 Live Chat or our support email. We will process your request within 30 calendar days from the date of receipt of a complete request. For complex requests, this period may be extended by up to 60 days, with prior notice to you.

In operating the mb918 platform, your personal data may be transferred to, stored in, or processed in countries outside Malaysia. This occurs when we use cloud infrastructure service providers or international payment processors that operate across multiple global locations.

Mb918 ensures that all cross-border data transfers are protected by adequate safeguard mechanisms, including:

• Legally binding data processing agreements with all third-party vendors who receive your data.
• Standard contractual clauses that ensure a level of protection equivalent to Malaysia's PDPA requirements.
• Regular security assessments of all service partners to ensure ongoing compliance.
• Data encryption during transfer to prevent interception or unauthorized access.

You may request further information about the protection mechanisms used for specific data transfers by contacting the mb918 privacy team.

The mb918 platform is exclusively for users aged 18 and above. mb918 does not intentionally collect, process, or store any personal data of individuals under the age of 18. Registration, access, and use of the mb918 platform by minors is strictly prohibited.

As part of its rigorous KYC process, mb918 verifies the age of every new account applicant. Should mb918 find that personal data of a minor has been collected without knowledge or consent, we will take immediate steps to delete that data and close the account in question.

If you have any questions, concerns or complaints regarding this Privacy Policy or how mb918 manages your personal data, we encourage you to reach out to our privacy team through mb918's official support channels.

You may reach us via 24/7 Live Chat available on the mb918 platform, or by emailing our support team at [email protected]. Our team is ready to assist and will respond within 1–2 business days for privacy-related enquiries.

Privacy Policy Amendments

Mb918 reserves the right to amend or update this Privacy Policy at any time to reflect changes in business operations, legal requirements, or current industry practices. Any significant amendments will be communicated to you via your registered email or in-platform notification at least 14 days before taking effect.

You are encouraged to review this Privacy Policy periodically. Your continued use of the mb918 platform after any amendments are published constitutes your acceptance of the updated terms. The date of the last update is always displayed at the top of this document for your reference.