Last Updated: January 2026

MB8 Privacy Policy – Our Commitment to Protecting Malaysian Users' Data

This Privacy Policy explains how MB8 collects, uses, stores and protects your personal information when you use our platform at mb8.express. Your privacy is our priority, and we are committed to handling your data to the highest standards in line with applicable data protection requirements in Malaysia.

By registering an account or using the MB8 platform, you agree to the collection and use of your information as described in this Privacy Policy. If you do not agree, please do not use our platform. MB8 reserves the right to update this policy from time to time, and users will be notified of any significant changes.

MB8's Privacy Promise

256-bit SSL encryption for all data
Data is not sold to third parties
You may request that your data be deleted
Restricted access limited to staff who require it
Passwords are stored in hashed form
Continuous 24/7 security monitoring

MB8's Six Data Protection Principles

MB8's approach to your privacy is guided by six core principles that we take seriously.

Minimum Data Collection

MB8 only collects information that is genuinely necessary to provide our services. We do not collect irrelevant or excessive data. Every piece of information we request has a clear purpose — whether for identity verification, MYR payment processing, or improving your experience on the platform.

Advanced Technical Protection

All data transmitted between your device and MB8's servers is protected by 256-bit SSL encryption – the same standard used by major financial institutions. Your password is never stored in readable form; it undergoes a one-way hashing process that cannot be reversed, meaning even MB8 staff are unable to view your password.

No Sale of Data to Third Parties

MB8 never sells, rents or trades your personal information to any third party for marketing or commercial purposes. Your data is only shared with parties directly involved in delivering our services — such as payment processors for your Touch 'n Go eWallet, GrabPay or DuitNow transactions — and only to the extent necessary.

Strict Access Controls

Within MB8, access to users' personal data is limited to staff who genuinely require it to perform their roles. All access is logged and monitored. Unauthorized or inappropriate access to user data is a serious breach of MB8's internal policies and will be met with strict disciplinary action.

Clear User Rights

You have the right to access the personal data we hold about you, to request corrections if any information is inaccurate, and to request deletion of your data under certain circumstances. MB8 fully respects these rights and provides clear channels through which you can submit any request relating to your personal data.

Full Transparency in Data Use

MB8 is committed to being transparent about how we use your data. This Privacy Policy is written in plain, easy-to-understand language – not confusing legal jargon. You have the right to know exactly what happens to your information, and we are committed to explaining it honestly.

MB8 Full Privacy Policy

This document sets out in detail how MB8 manages the privacy and personal data of users on the mb8.express platform in Malaysia.

01 Personal Information We Collect

MB8 collects various types of personal information from users of our platform. All information collected has a clear and legitimate purpose in the context of providing safe and responsible online entertainment services. The types of information we collect are as follows:

Account Registration Information:

  • Full name as it appears on your official identity document
  • Malaysian identity card number (MyKad) or passport
  • Date of birth for age verification purposes
  • An active and regularly used email address
  • An active Malaysian mobile phone number
  • Current residential address

Financial Information:

  • Digital wallet account details (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay) used for deposits and withdrawals
  • Bank account information linked to DuitNow or FPX
  • Deposit and withdrawal transaction history in Ringgit Malaysia (RM)
  • Betting records and in-platform gaming activity

Technical Information:

  • The IP address of your device when accessing the MB8 platform
  • Device type, operating system, and web browser version in use
  • Cookie data and similar tracking technologies
  • In-platform activity logs including login dates and times
  • Geolocation information (at country or region level only, not precise location)

Important Note: MB8 does not directly collect credit or debit card numbers. All payments are processed through certified third-party payment processors such as Touch 'n Go eWallet, GrabPay, DuitNow, and FPX — each of which maintains its own financial security standards.

02 How MB8 Collects Your Information

MB8 collects your personal information through several different channels throughout the course of your use of the platform:

  • Registration form: The basic information you provided when first opening your mb8 account
  • KYC Process: Identity verification documents you upload as part of the mandatory Know Your Customer process
  • Financial transactions: Information generated when you make a deposit or withdrawal through a supported payment method
  • Platform usage: Data automatically generated during your use of the platform, such as betting records, games played and session duration
  • Support contact: Information you provide when contacting the MB8 support team via live chat or email
  • Cookies and similar technologies: Data collected automatically via cookies placed in your browser when you visit mb8.express

MB8 does not purchase or obtain your personal data from third-party data brokers or any external sources unrelated to your direct use of the platform.

03 How Your Personal Information Is Used

Every piece of information MB8 collects is used for one or more of the following legitimate purposes:

Purpose of Use Types of Data Used
Identity and age verification (KYC) Name, MyKad number, date of birth, identification documents
User account management Email address, phone number, password (in hashed form)
Processing of deposits and withdrawals Payment account details and RM transaction history
Provision of betting and gaming services Betting records, game data, account balance
Fraud prevention and anti-money laundering IP address, device data, transaction patterns
Customer support and dispute resolution Communication history, account records, transaction logs
Legal compliance and regulatory reporting Identity information, financial records as required by law
Platform improvements and user experience enhancements Non-individually identifiable usage data (aggregated)

Marketing: MB8 may use your email address or phone number to send you information about relevant promotions, bonuses and platform updates. You may opt out of these marketing communications at any time by contacting our support team or using the unsubscribe link in any email we send you.

04 Sharing Information with Third Parties

MB8 does not sell, rent or disclose your personal information to third parties for their own marketing purposes. However, there are certain situations where we need to share your information with trusted parties in order to provide our services to you:

  • Payment Processors: Information required to process financial transactions is shared with providers such as Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow and FPX (Maybank2u, CIMB Clicks) — strictly to the extent necessary to complete the relevant transaction in MYR.
  • Game Software Providers: Minimum gaming data required to operate the casino and slots games provided by licensed third-party suppliers
  • Technology Service Providers: Companies that provide the server infrastructure, cloud services and technical tools used to operate the MB8 platform – all bound by strict confidentiality agreements
  • Legal Authorities: Where required by law or a valid court order, MB8 will provide the necessary information to the relevant authorities
  • Anti-Fraud Authority: Information required to investigate and prevent suspected fraud, money laundering, or other illegal activity may be shared with relevant authorities in accordance with applicable legal procedures

MB8 never shares users' personal information with third-party advertisers, social media platforms, or data brokers for targeted advertising purposes. If you receive an offer or communication claiming to be from MB8 through a channel you did not register with, please report it to us as it may be a phishing attempt.

05 MB8 Data Security Measures

MB8 invests seriously in security infrastructure to protect your personal data from unauthorised access, disclosure, alteration or destruction. The key technical and organisational measures we have implemented include:

  • 256-bit SSL/TLS Encryption: All communication between your browser and MB8's servers is encrypted using the highest security protocols — you can confirm this by looking for the padlock icon and "https" in your browser's address bar
  • Password Hashing: Your password is stored using a one-way hashing algorithm that cannot be reversed. This means no one — including MB8 staff — is able to view your actual password
  • Two-Factor Authentication (2FA): MB8 offers and encourages the activation of two-factor authentication for an additional layer of security on your account.
  • Continuous Security Monitoring: An automated monitoring system operates 24/7 to detect and alert on any suspicious or unusual activity
  • Internal Access Controls: Access to user data within MB8 is restricted to staff with a legitimate business need, and all access is automatically logged
  • Regular Security Testing: MB8 conducts regular penetration testing and security audits by independent third parties to identify and address vulnerabilities before they can be exploited

While MB8 takes all reasonable steps to protect your data, no security system is entirely foolproof. In the event of a data security breach affecting your information, MB8 is committed to notifying you promptly and taking appropriate remedial action.

What You Can Do: Account security is a shared responsibility. You can help protect your MB8 account by using a strong and unique password, enabling two-factor authentication, keeping your login credentials private, and notifying MB8 immediately if you suspect your account has been compromised.

06 Data Retention Period

MB8 retains your personal information for as long as necessary to fulfil the purposes outlined in this Privacy Policy, or as required or permitted by applicable law. The general principles we follow are:

  • Active Account Data: For as long as your account remains active and for a reasonable period after it is closed
  • Financial and Transaction Records: A minimum of 7 years from the transaction date, in compliance with Malaysian legal requirements for financial records
  • KYC and Identity Verification Records: For the duration the account exists and a minimum of 5 years after account closure for anti-money laundering compliance purposes
  • Support Communication Logs: Three years from the date of last communication, for dispute resolution purposes
  • Technical & Log Data: Retained for a maximum of 2 years from the date of creation for security analysis and technical troubleshooting purposes

Once the relevant retention period has expired, data will be securely deleted or anonymised so that it can no longer be linked to your identity. This secure deletion process ensures that your data cannot be recovered by any party after it has been erased.

07 Your Rights as an MB8 User

As an MB8 user residing in Malaysia, you have the following rights regarding your personal data:

  • Right of Access: You may request a copy of the personal information MB8 holds about you. We will provide this information in a readable format within a reasonable timeframe.
  • Right of Rectification: If the personal information MB8 holds about you is inaccurate or incomplete, you may request that it be corrected. You can also update certain information directly through your account settings
  • Right to Erasure: Under certain circumstances, you may request that your personal data be deleted. Please note that we may need to retain certain data to comply with legal obligations even after a deletion request has been made.
  • Right to Object to Marketing: You may opt out of all MB8 marketing communications at any time without having to provide any reason.
  • Right to Restrict Processing: In certain situations, such as during a dispute over the accuracy of your data, you may request that the processing of your data be temporarily restricted

To submit any request related to the rights above, please contact the MB8 support team via live chat or email at support@mb8.express. We will process your request within a reasonable timeframe, typically within 14 business days. In some cases, we may need to request additional identity verification before processing your request in order to protect your account from unauthorized submissions.

Please note that the right to data deletion may not be fully fulfilled in all circumstances. MB8 is legally required to retain certain financial and transaction records for a minimum period as prescribed by law, even after an account is closed or a deletion request is received.

08 Cookies and Tracking Technologies

MB8 uses cookies and similar tracking technologies to enhance your experience on our platform. Below is an explanation of the types of cookies we use:

Essential Cookies Analytics Cookies Preference Cookies Security Cookies
  • Essential Cookies (Required): These cookies are required for the MB8 platform to function properly. They store your login session, language preferences, and basic security information. Without them, many platform functions will not work. These cookies do not store any personally identifiable information.
  • Analytics Cookies: These cookies help MB8 understand how users interact with the platform – which pages are visited most, how long users spend in a session, and where they encounter difficulties. This information is used in aggregated form that cannot identify individuals, in order to improve the platform.
  • Preference Cookies: These cookies store your preferences such as display settings, language preferences, and game choices so you do not have to reconfigure them each time you log in.
  • Security Cookies: Security cookies help us identify and prevent fraudulent activity by detecting unusual or suspicious usage patterns within your session.

You can manage and delete cookies through your web browser settings. However, disabling or blocking certain cookies may significantly affect the functionality of the MB8 platform. For more information on how to manage cookies in your browser, refer to your browser's support documentation.

09 Cross-Border Data Transfers

In the context of MB8 platform operations, your personal data may be processed or stored on servers located outside Malaysia. This may occur in the following situations:

  • The cloud server infrastructure used by MB8 may have data centres across multiple geographic locations to ensure platform performance and reliability
  • Casino game and slots software providers used by MB8 may operate from various countries
  • Some supporting technology service providers may process data at locations outside Malaysia

In all cases where data is transferred outside Malaysia, MB8 ensures that equivalent or greater protection than that provided under this Privacy Policy is in place. This is achieved through legally binding data processing agreements that require the receiving party to protect data in accordance with the standards we have set.

10 Children's Privacy and Age Protection

The MB8 platform is strictly for individuals aged 21 and above. We do not knowingly collect or process personal data from individuals under the age of 21. The measures MB8 takes to ensure this include:

  • Age verification requirement during account registration
  • The KYC process verifies age through official Malaysian identification documents
  • Active monitoring to detect and remove accounts registered by underage individuals
  • Immediate closure of accounts confirmed to belong to individuals under 21 years of age

If MB8 discovers that we have collected personal data from an individual under the age of 21 without proper verification, we will take immediate steps to delete that data and close the account in question. If you believe that someone under the age of 21 has registered an account with MB8, please notify us promptly at support@mb8.express.

11 Links to Other Websites

The MB8 platform may contain links to third-party websites in certain contexts. This Privacy Policy applies only to the MB8 platform at mb8.express and does not cover any third-party websites you may access through links within our platform.

MB8 is not responsible for the privacy practices or content of third-party websites. We encourage you to read the privacy policies of any other websites you visit, especially before providing them with personal information. Your safety outside the MB8 platform is entirely your own responsibility.

12 Amendments to This Privacy Policy

MB8 reserves the right to update or amend this Privacy Policy at any time as necessary – whether to reflect changes in our data handling practices, new legal requirements applicable in Malaysia, or improvements to the way we protect user information.

When significant changes are made to this Privacy Policy, MB8 will notify you through one or more of the following methods:

  • In-platform notifications on the MB8 platform when you log in
  • Email to the address registered to your account
  • Update the "Last Updated" date at the top of this page

Your continued use of the MB8 platform after any amendments are published constitutes acceptance of the updated Privacy Policy. It is your responsibility to review this page periodically. If you do not agree with the changes made, you may close your account by contacting the MB8 support team.

Contact Us: For any questions, concerns or requests relating to this Privacy Policy or how MB8 handles your personal data, please contact our Privacy Officer at support@mb8.express. We are committed to responding to all privacy-related enquiries within 14 business days.

Your Rights as an MB8 User – Visual Summary

Six key rights you hold regarding your personal data on the MB8 platform.

Right to Access Your Data
Request a copy of all personal data MB8 holds about you. We will provide this information within 14 working days.
Right to Rectification
If your information is inaccurate or out of date, request MB8 to correct it. Accurate data is essential to a good experience.
Right to Request Deletion
Under certain circumstances, you may request that your data be deleted, subject to legal retention obligations.
Right to Opt Out of Marketing
Opt out of all MB8 marketing communications at any time, with no penalty or difficulty.
Right to Restrict Processing
Request that the use of your data be temporarily restricted in certain circumstances, such as while you are disputing the accuracy of that data.
Right to Complain
If you are dissatisfied with how MB8 handles your data, you may submit a complaint via support@mb8.express.

Your Privacy at MB8 – What You Need to Know

When you use an online betting platform like MB8, you share various types of personal information — from your name and identification number at registration, to payment details when you make a deposit via Touch 'n Go eWallet or DuitNow. Understanding how this information is handled is not just your right — it is an essential part of making informed decisions about which platforms you trust with your data.

MB8 builds trust with Malaysian users through transparency in how we handle data — not merely through vague promises of "security" that are never concretely explained. That is why this Privacy Policy is written in plain, straightforward language — so you know exactly what happens to your information, rather than simply being told it is "safe" without understanding what that actually means.

Why 256-bit SSL Encryption Matters to You

When you log in to your MB8 account or make a deposit using GrabPay or Boost, all data transmitted between your device and MB8's servers is encrypted using SSL (Secure Sockets Layer) with a 256-bit key. To put the strength of this protection into perspective: 256-bit encryption uses 2 to the power of 256 possible key combinations — a number so vast that even if every computer in the world worked together, it would take longer than the age of the universe to brute-force all possibilities. This is the same security standard used by Malaysia's leading banks in their online banking systems.

You can verify that your connection to mb8.express is secure by looking for the padlock icon to the left of the address bar in your browser. If the padlock is present and the URL begins with "https://" (not just "http://"), all data you send and receive is encrypted. Never enter your login credentials or financial information on any website that does not have this HTTPS protection.

MB8's KYC Process – Why It's Required and How It Protects You

Many new MB8 users ask why they need to submit a copy of their MyKad or other identification document to withdraw their winnings. The answer is twofold: first, it is a legal requirement in the regulated financial and online services industry to ensure the platform is not used for money laundering or other illicit activities. Second — and this is often overlooked — the KYC process is actually there to protect YOU.

Imagine if someone managed to gain access to your MB8 account password through dishonest means. Without a KYC process in place, they could potentially withdraw funds from your account without any barriers. With verified KYC, MB8 knows exactly who the legitimate account owner is and can reject withdrawal requests from anyone unable to verify their identity as the rightful account holder. It is a layer of protection whose importance you may not fully appreciate until you actually need it.

How Your Payment Data is Protected

When you use Touch 'n Go eWallet, ShopeePay, Boost, or any other Malaysian digital payment method to deposit into your MB8 account, you never enter your financial details directly into MB8's systems. Instead, you are redirected to the payment provider's own secure interface — where authentication takes place within their controlled environment — and MB8 receives only a confirmation that the payment was successful, without gaining access to your digital wallet account details or password.

This is the principle of "payment data segregation" — meaning that even if MB8's systems were to experience any unforeseen security issue, your GrabPay account information or FPX Maybank2u details would never have been in our systems to begin with. Those sensitive financial details remain entirely within the systems of licensed payment providers, which are subject to their own regulated financial security standards.

Privacy in the Context of Responsible Gaming

MB8 provides responsible gambling tools such as deposit limits, session time limits, and self-exclusion options as part of our commitment to responsible gaming. Data relating to individual users' use of these tools is treated as highly sensitive and handled with the strictest confidentiality within MB8. Your choice to use self-limit or self-exclusion tools will not be disclosed to any third party for any purpose unrelated to providing those tools to you.

If you need to use self-exclusion tools or make changes to your account limits, contact the MB8 support team via live chat, available 24 hours a day, 7 days a week. All such requests are handled with complete confidentiality and without judgement. Your decision to take control of your gaming habits is one that MB8 fully respects and supports.

MB8 Terms & Conditions – Related Document

This Privacy Policy should be read alongside MB8's Terms & Conditions, which govern the overall conditions of platform use including account policies, deposits, withdrawals and bonuses. Together, these two documents form the complete agreement between you and MB8 regarding how we operate and protect your interests as a user.

Read Full Terms & Conditions
Responsible Gaming with MB8

MB8 is committed to responsible gambling. Our platform is strictly for users aged 21 and above. Set your betting limits, only wager what you can afford to lose, and never chase your losses. If you feel that gambling is beginning to affect your life or finances negatively, use the responsible gambling tools in your account settings or contact the MB8 support team 24/7. Your responsible gambling choices are always kept completely confidential.

Learn More About Responsible Gaming

Your Data is Safe with MB8

Register with Confidence – Your Privacy is Fully Protected by MB8

MB8 protects your data with 256-bit SSL encryption, does not sell your information to third parties, and fully respects your privacy rights. Create a free account in under 2 minutes, deposit via Touch 'n Go eWallet or DuitNow from as little as RM10, and enjoy a safe, fair and trusted Sports Betting and online casino platform in Malaysia.

Bahasa Melayu