Privacy Policy MB8 – Platform User Data Protection

1 Information We Collect

MB8 collects various types of information depending on how you interact with our platform. This data collection is carried out transparently and only for legitimate purposes.

• Full name, date of birth, and identity card or passport number upon registration.
• Email address and mobile number for communication and account verification purposes.
• Bank and e-wallet details for processing deposits and withdrawals.
• Identity verification (KYC) documents such as photos of your ID card, bank statements, or utility bills.
• Any information you share when contacting our support team.

• Your IP address, web browser type, and device operating system.
• Session data including pages visited, time spent, and actions taken within the platform.
• Mobile device information including device model and unique device identifier when using the MB8 app.
• Geolocation data required for location verification and compliance with local regulations.

2 How We Use Your Data

The personal data we collect is used solely for legitimate purposes — to enable us to provide you with the best, most secure, and legally compliant service.

• Account Management: To create, verify, and maintain your user account on the mb8 platform.
• Transaction Processing: To process deposits, withdrawals, and all financial transactions securely and accurately.
• Identity Verification (KYC): To comply with anti-money laundering (AML) requirements and verify user identity before large transactions are processed.
• Service Communications: Sending important notifications related to your account, transactions, security, and platform updates.
• Platform Improvement: Analysing usage patterns to improve user experience, platform performance, and new features.
• Legal Compliance: Fulfilling applicable legal and regulatory obligations, including reporting to authorities when required.
• Fraud Prevention: Monitoring and investigating suspicious activity to protect you and the platform from fraud and abuse.

MB8 does not use your personal data for any third-party marketing purposes without your explicit consent. Any promotional communications from MB8 itself may be unsubscribed from at any time.

3 Sharing Information with Third Parties

MB8 takes a highly cautious approach to data sharing. We do not sell or disclose your personal data to any third parties for their own commercial purposes.

However, in certain circumstances, we may need to share your information with the following parties:

• Payment Service Provider: Payment gateway providers and banks that process your transactions require the necessary information to complete fund transfers.
• KYC Service Provider: A third-party identity verification platform integrated with mb8 to securely process your verification documents.
• Authorities and Regulatory Bodies: When required by law, court order, or a competent regulatory authority.
• Technical Infrastructure Provider: Cloud and hosting service providers that support our platform operations, bound by strict confidentiality agreements.

4 Data Security

MB8 continuously invests in robust security infrastructure to ensure your personal data is always protected against unauthorised access, loss, or misuse.

• 256-bit SSL encryption for all data transmitted between users and our servers.
• Encryption of sensitive data such as financial information during storage in our database.
• Multi-layered firewall systems and 24/7 security monitoring.
• Two-factor authentication (2FA) is available for all user accounts for added security.
• Regular security audits conducted by our internal security team and independent third-party experts.
• Strict access controls — only authorised staff may access user data, and only to the extent necessary for their role.

While we make every effort to protect your data, no system is entirely immune to breaches. We therefore encourage you to take personal precautions as well, such as using a strong password and not sharing your login credentials with anyone.

5 Cookies and Tracking Technologies

MB8 uses cookies and similar tracking technologies to enhance your experience on the platform, understand how users interact with our website, and ensure the platform functions smoothly.

• Essential Cookies: Required for core platform functions such as login sessions and security. Cannot be disabled.
• Performance Cookies: Helping us understand how users use the platform so we can improve it.
• Functional Cookies: Storing your preferences such as language and display settings for a more personalised experience.
• Analytics Cookies: Collecting aggregated data on platform traffic and usage for internal improvement purposes.

You can manage your cookie settings through your web browser. However, disabling certain cookies may affect the functionality of some parts of the mb8 platform.

6 Your Rights

As an mb8 platform user, under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data:

To exercise any of the above rights, please contact the mb8 support team via live chat or email. We will process your request within 14 business days.

7 Data Retention and Deletion

MB8 retains your personal data only for as long as necessary for the purposes stated in this policy, or as required under applicable Malaysian law.

• Active account data is retained for the duration your account remains active, plus any additional period required by law.
• Financial transaction records are retained for a minimum of 7 years to comply with accounting and tax legal requirements.
• KYC data and identity verification documents are retained for the period required by anti-money laundering regulations.
• Customer support communication logs are retained for 3 years for reference and dispute resolution.
• Anonymised analytics data may be retained for a longer period for platform improvement purposes.

When data is no longer needed and there is no legal obligation to retain it, mb8 will delete or anonymise it using secure, irreversible methods.

8 Children's Data Protection

The mb8 platform is strictly for adults aged 18 and above. We do not knowingly collect any personal data from individuals under the age of 18.

If we determine that a child's personal data has been collected without proper age verification, we will take immediate action to delete the information and close the relevant account.

9 Changes to the Privacy Policy

MB8 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or service improvements.

• Users will be notified of any significant changes via in-platform notifications or their registered email address.
• The "Updated" date at the top of this document will always reflect the latest version currently in effect.
• Continued use of the MB8 platform after any changes are published will be considered acceptance of the new terms.
• Previous versions of the Privacy Policy are available upon request through our support team for your reference.

10 Contact Us Regarding Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact us through the following channels:

• Live Chat: Available 24/7 directly within the mb8 platform — the fastest way to get a response.
• Privacy Email: [email protected] (displayed as text only — not clickable).
• Response Time: We aim to respond to all privacy enquiries within 3 business days.

For formal requests relating to your data rights — such as access, correction, or deletion — please clearly state the type of request and include your account details to help expedite the process.

You may also refer to the FAQ us for answers to frequently asked questions about privacy and account security.