🔒 mbi8my — Your personal data is fully protected with 256-bit SSL encryption 🛡️ mbi8my Privacy Policy updated — we are committed to being transparent about how your data is managed 🇲🇾 Customer Support 24/7 in Bahasa Malaysia for all privacy enquiries ✅ mbi8my does not sell or share your data with third parties without your consent 💳 Secure deposits via Touch 'n Go, DuitNow, GrabPay & FPX — all transactions are fully encrypted 🔒 mbi8my — Your personal data is fully protected with 256-bit SSL encryption 🛡️ mbi8my Privacy Policy updated — we are committed to being transparent about how your data is managed 🇲🇾 Customer Support 24/7 in Bahasa Malaysia for all privacy enquiries ✅ mbi8my does not sell or share your data with third parties without your consent 💳 Secure deposits via Touch 'n Go, DuitNow, GrabPay & FPX — all transactions are fully encrypted
OFFICIAL DOCUMENT

Mbi8my Privacy Policy – Malaysian User Data Protection

Mbi8my is fully committed to protecting the privacy of every Malaysian member. This policy transparently explains how we collect, use, store, and protect your personal data — so you can play with peace of mind, without worrying about the safety of your information.

Data Encryption
256-bit SSL
Effective Date
1 Jan 2026
Total Sections
11 Sections
Status
Active & Valid
mbi8my Privacy Policy Contents

Last updated: 1 January 2026. By using the mbi8my platform, you agree to the terms of this Privacy Policy. Please read the entire document carefully before registering or making any deposit.

Mbi8my's Privacy Commitment to You

Six privacy protection guarantees that mbi8my extends to every Malaysian member.

Full 256-bit SSL Encryption

All data transmitted between your device and mbi8my's servers is encrypted to 256-bit SSL standards — the same technology used by major Malaysian banks such as Maybank and CIMB. No third party can read or intercept your data in transit.

No Sale of Data to Third Parties

Mbi8my has never and will never sell, rent, or trade members' personal data to advertising companies, data brokers, or any third party for commercial purposes. Your information belongs to you — we only use it for the purposes you have consented to.

Restricted & Controlled Data Access

Only mbi8my staff who require access to your data to carry out their duties — such as customer support, payment processing, and account verification — are granted permission. Access is logged, monitored, and reviewed regularly to ensure there is no misuse.

Data Access & Correction Rights

You have the right to view all personal data we hold about you, request corrections to inaccurate data, or request deletion of data subject to legal requirements. Such requests will be processed within 14 business days of receipt.

Secure Servers & Regular Backups

Mbi8my member data is stored on servers protected by multi-layered firewalls, intrusion detection systems, and regular automated backups. Our infrastructure is designed to ensure high availability and to safeguard data against hardware failures or cyberattacks.

Data Breach Notification

In the event of any security incident involving your personal data, mbi8my is committed to notifying you within a reasonable timeframe after the incident is identified — along with the steps taken to address the situation.

Mbi8my Full Privacy Policy

This document explains how mbi8my ("we", "the platform") collects, uses, discloses, and protects your personal information ("User", "member"). We take your privacy seriously and are committed to being fully transparent about our data practices.

1

Introduction & Policy Scope

This Privacy Policy applies to all users of the mbi8my platform — including website visitors, prospective members in the registration process, active registered members, and former members who have closed their accounts. It covers all personal information collected through the mbi8my website, mobile application (if applicable), and any interactions with our customer support team.

Mbi8my is an online casino platform operating to serve adult Malaysian players. In the course of our operations — from account registration and deposit processing via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, and FPX, through to the handling of bets and the payment of winnings — we are required to collect and process certain personal data. This Privacy Policy explains precisely what that data is and how it is managed.

Policy Acceptance: By using the mbi8my platform in any way — including simply browsing our website — you are considered to have read and agreed to this Privacy Policy. If you do not agree, please discontinue use of the platform and contact us to close your account if you are already registered.
2

Data We Collect

Mbi8my collects several categories of personal data from our members. We only collect data that is strictly necessary to deliver the requested services and to meet our legal obligations.

Data you provide directly to us:

  • Full name as stated in your official identification document
  • MyKad or passport number for the KYC verification process
  • An active Malaysian phone number for two-factor authentication and account communications
  • A valid email address for account notifications, bonuses, and service communications
  • Date of birth to verify that you meet the minimum age requirement of 18 years
  • Payment method information (digital wallet account holder name or bank account number) for processing deposits and withdrawals
  • Information you provide when communicating with our customer support team

Data collected automatically when you use the platform:

  • IP address and approximate geographic location (country and region level only)
  • Device type, operating system, and web browser version in use
  • Gaming activity history, including game types, bet amounts, and outcomes
  • Financial transaction history, including all deposits and withdrawals
  • Login and logout session logs, including timestamps and device information
  • Platform usage data, including pages visited and time spent on each page
Data We Do Not Collect: mbi8my does not store your credit or debit card information directly. All payments are processed through licensed, PCI DSS-compliant third-party payment service providers. Your PIN, banking passwords, or sensitive payment method details never pass through or are stored within mbi8my's systems.
3

How We Use Your Data

Mbi8my uses the personal data collected solely for the purposes outlined below. We will not use your data for any other purpose without first obtaining your additional consent.

  • Account Management: Processing registrations, verifying identity, managing passwords, and maintaining your account records
  • Transaction Processing: Processing deposits via Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, Maybank2u, CIMB Clicks, and FPX; as well as processing your winnings withdrawals
  • Provision of gaming services: Allows you to access and play all casino games available on mbi8my
  • Bonus and VIP programme management: Managing your welcome bonus, VIP cashback, and other promotions you are eligible for
  • Customer support: Responding to enquiries, resolving disputes, and providing technical support
  • Security and fraud prevention: Detecting and preventing suspicious activity, fraud, money laundering, and breaches of our terms
  • Legal compliance: Comply with legal obligations and regulations applicable to our operations
  • Platform improvements: Analysing usage data in aggregate and anonymised form to improve the user experience
  • Service Communications: Sending you important notifications regarding your account, security, or policy changes via email or SMS

If you have consented to receive marketing communications, we may also send you information about relevant mbi8my promotions, new bonuses, and special offers. You may withdraw this consent at any time via your account settings or by contacting our team.

4

Data Sharing with Third Parties

Mbi8my does not sell, rent, or trade member personal data to any third party for their own commercial purposes. However, in the course of our operations, we may share certain data with the following parties for limited and specific purposes:

  • Payment service providers: We share only the necessary information with licensed payment processors (such as FPX, Touch 'n Go, and GrabPay payment gateways) solely to process your deposit and withdrawal transactions
  • Game providers: Required usernames and game activity data are shared with game providers such as Evolution Gaming and Pragmatic Play to enable you to access their games through the mbi8my platform
  • Identity verification services: Your identification documents may be shared with licensed third-party KYC service providers to process your identity verification
  • Legal authority: mbi8my will disclose personal data when required by law, court order, or a lawful request from Malaysian law enforcement authorities
Third-Party Confidentiality Agreements: All third parties who receive mbi8my member personal data are required to sign strict confidentiality and data protection agreements. They are only permitted to use such data for the specific purposes set out in the agreement and may not disclose it to other parties without mbi8my's authorisation.
5

Data Security & Protection

Mbi8my invests heavily in security infrastructure to protect our members' personal data from unauthorised access, loss, theft, or disclosure. Key security measures we have in place include:

  • Data encryption in transit using TLS 1.3 and 256-bit SSL
  • Data encryption at rest within the database using AES-256
  • Two-factor authentication (2FA) is required for all sensitive operations, including withdrawals and password changes
  • 24/7 security monitoring with real-time threat detection systems
  • Periodic security assessments conducted by independent security auditors
  • Role-based access controls — staff can only access the data required for their specific duties
  • Mandatory information security training for all mbi8my staff
  • Clear and tested security incident response procedures
Your Responsibility Matters Too While mbi8my does everything it can to protect your data, the security of your account also depends on your own actions. Use a strong, unique password for your mbi8my account, never share your login credentials with anyone, and log out of the platform when you are done playing — especially when using a shared device.
6

Data Retention Period

Mbi8my retains members' personal data only for as long as necessary for the purposes stated in this Privacy Policy or as required under Malaysian law. Our general data retention principles are as follows:

  • Active account data: Retained for the duration of your active membership plus 5 years after account closure, in compliance with legal requirements for financial record retention
  • Financial transaction history: Minimum 7 years to comply with Malaysia's financial reporting and tax requirements
  • Game records: Minimum 5 years for dispute resolution and compliance purposes
  • Customer support communication logs: 3 years for service quality and dispute resolution purposes
  • KYC data (identity documents): For the duration of active membership, plus 5 years after account closure
  • Security and access logs: 2 years for security investigation purposes if required

Once the retention period expires, your personal data will be securely deleted using approved data disposal methods, or permanently anonymised so that it can no longer be linked to you as an individual. Anonymised data may continue to be used for aggregate analytics purposes without a time limit.

7

Your Privacy Rights

As a mbi8my member and Malaysia-based user, you have certain privacy rights regarding your personal data. mbi8my respects and facilitates the exercise of these rights:

  • Right of Access: You have the right to request a copy of all personal data we hold about you in a readable format
  • Right to Rectification: You have the right to request the correction of any personal data that is inaccurate or incomplete.
  • Right to Erasure: You have the right to request the deletion of your personal data, subject to applicable legal limitations — for example, we are required to retain financial transaction records for a period stipulated by law
  • Right to Restrict Processing: You have the right to ask us to restrict how we process your data in certain circumstances
  • Right to Withdraw Consent: For processing based on your consent (such as marketing communications), you may withdraw that consent at any time.
  • Right to Complain: You have the right to lodge a complaint with mbi8my if you believe your personal data has been handled improperly.
How to Submit a Privacy Rights Request: To submit any of the privacy rights requests listed above, please email us at support@mbi8my.best with the subject line "Privacy Rights Request", along with your full name and account number. We will process your request within 14 business days upon receipt and verification of your identity. If your request cannot be fulfilled in full due to legal limitations, we will clearly explain the reasons.
8

Cookies & Tracking Technologies

Mbi8my uses cookies and similar tracking technologies to enhance your experience on our platform, ensure security features function correctly, and understand how users interact with our website in aggregate.

Types of cookies we use:

  • Essential Cookies: Required for core platform functions such as login session authentication, security, and language preferences. These cookies cannot be disabled without affecting platform functionality.
  • Performance Cookies: Collects information on how users interact with our platform — such as the most frequently visited pages and error messages — to help us improve the experience. All data is aggregated and anonymised.
  • Functional Cookies: Allows the platform to remember your preferences — such as your username (if you choose to save it), display settings, and other configurations — to deliver a more personalised experience
  • Analytics Cookies: Helps us understand overall usage patterns for platform improvement purposes. Data collected is anonymised and not linked to any individual's identity.
Managing Cookies: You can manage and delete cookies through your web browser settings at any time. However, disabling essential cookies may affect the functionality of the mbi8my platform, including your ability to log in, make deposits, or play. For guidance on managing cookies in popular browsers, visit your browser's help section (Chrome, Firefox, Safari, or Edge).
9

Children's Data

Mbi8my is an adult entertainment platform intended solely for individuals aged 18 and above. We explicitly do not collect, process, or store the personal data of children under the age of 18 intentionally.

If we confirm or have strong reason to believe that a user is under 18 years of age, we will immediately close the account and delete all associated personal data as soon as possible, subject to any applicable legal record-keeping obligations.

To Parents and Guardians: If you believe your child under the age of 18 has registered for or used the mbi8my platform, please contact us immediately at support@mbi8my.best. We will take prompt action to investigate and address the matter. mbi8my also encourages the use of parental control software on devices shared with children to prevent access to gambling websites.
10

Privacy Policy Amendments

Mbi8my reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or improvements to how we protect your information. We are committed to notifying you of any significant changes.

When we make material changes to this Privacy Policy, we will:

  • Updating the "Last Updated" date at the top of this document
  • Sending a notification to your registered email at least 7 days before any amendment takes effect
  • Displaying a clear notice on the mbi8my platform's main page for a reasonable period

Continued use of the mbi8my platform after the effective date of any Privacy Policy amendment will be considered your acceptance of the updated version. If you do not agree with the changes made, you have the right to close your account before the amendment takes effect — any remaining balance in your account will be returned in accordance with the standard withdrawal procedure.

11

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how mbi8my handles your personal data, we encourage you to reach out to us directly. Our team is ready to assist you in Bahasa Melayu.

  • Email: support@mbi8my.best — use the subject "Privacy Enquiry" for faster handling
  • Live Chat: Available 24 hours a day, 7 days a week via the chat icon on the mbi8my platform
  • Response time: Privacy enquiries are typically answered within 2 hours via Live Chat and within 24 hours via email

For formal privacy rights requests (data access, correction, or deletion), please submit your request by email, including your full name, mbi8my account number, and a clear description of your request. We may need to verify your identity before processing the request to ensure the security of your data.

mbi8my's Commitment: We take our responsibility to protect the privacy of Malaysian members seriously. Every privacy inquiry will be handled with care and respect. If you are not satisfied with our response, you have the right to lodge a complaint with the relevant authority under applicable Malaysian law.

Your Privacy Rights as a mbi8my Member

You have full control over your personal data at mbi8my. Learn about your rights and how to exercise them.

Right to Access Your Data

Request a complete copy of all personal data mbi8my holds about you, in a readable format. Requests are processed within 14 business days of identity verification. No charge is applied for the first request each year.

Right to Rectification

If any of your personal data on mbi8my is inaccurate or out of date — for example, a phone number or email address that has changed — you may request a correction through your account settings or by contacting our customer support team.

Right to Data Deletion

Request deletion of your personal data when you close your account. We will honour this request subject to our legal obligations to retain certain financial records and transaction data for the period prescribed under Malaysian law.

Right to Restrict Processing

In certain situations — such as when you are disputing the accuracy of your data or awaiting the outcome of a deletion request — you may ask us to restrict how we process your data while the matter is being resolved.

Right to Withdraw Consent

For any data processing based on your consent — such as receiving promotional emails and bonus offers — you may withdraw that consent at any time through your account settings or by contacting us directly.

Right to Lodge a Complaint

If you are not satisfied with how mbi8my has handled your personal data after contacting us, you have the right to lodge a formal complaint with the relevant authority in Malaysia under applicable law.

Summary: Data Collected & Its Purpose

A summary table describing each category of data collected by mbi8my, along with its purpose and retention period.

Data Category Example Primary Purpose Retention Period
Personal Identification Data Full name, IC/passport number, date of birth KYC & Verification 5 years after account closure
Contact Data Phone number, email address Account Communications Throughout active membership + 3 years
Financial Transaction Data Deposit, withdrawal, and bonus records Payment Processing Minimum 7 years (legal requirement)
Gaming Activity Data Game type, bet amounts, outcomes Platform Services Minimum 5 years
Technical Data IP address, device type, web browser Security 2 years
Customer Support Logs Live Chat conversation and email records Service Quality 3 years
Cookie & Analytics Data Pages visited, session duration Platform Improvement Up to 2 years
Marketing Communications Responses to promotional emails Bonus Communications Until consent is withdrawn

Mbi8my's Data Security Layers

Multi-layered protection that keeps your personal data secure at all times on the mbi8my platform.

256-bit SSL Encryption

All communications between your device and mbi8my's servers are encrypted using TLS 1.3 with 256-bit keys — the same standard used by Malaysia's leading financial institutions.

Two-Factor Authentication (2FA)

All sensitive operations — withdrawals, password changes, and phone number updates — require two-step verification via SMS OTP to your Malaysian number.

Real-Time Threat Monitoring

Our 24/7 security monitoring system detects and responds to suspicious activity on your account — including login attempts from unfamiliar locations or devices.

Data Encryption at Rest

Your personal data is stored in a database encrypted with AES-256 — meaning it cannot be read even by staff who do not have the appropriate access authorisation.

Regular Security Audits

Mbi8my's security infrastructure is regularly reviewed by independent, trained security auditors to identify and address any vulnerabilities before they can be exploited.

Staff Access Controls

The "least privilege" principle applies — each mbi8my staff member can only access the data they need for their specific role. All access is logged and reviewed periodically by supervisors.

Mbi8my Privacy Inquiries – We're Here to Help

For any enquiries, privacy rights requests, or complaints regarding how mbi8my handles your personal data, please contact us by email support@mbi8my.best or Live Chat 24/7 within the platform. We are committed to responding to all privacy enquiries within 24 hours and processing privacy rights requests within 14 business days. For more information about our platform usage policies, please visit the page Terms & Conditions mbi8my.

Frequently Asked Questions – mbi8my Privacy Policy

Answers to the most frequently asked questions about privacy and data protection at mbi8my.

No. mbi8my has never sold, rented, or traded members' personal data to any third party for their commercial purposes, and never will. We share only the necessary data with specific parties for limited operational purposes — such as with payment processors (Touch 'n Go, DuitNow, GrabPay, FPX) to process your transactions, with game providers to enable you to access their games, and with identity verification parties for KYC. All such sharing is governed by strict confidentiality agreements, and data is used solely for its designated purpose.

To request a copy of your personal data, send an email to support@mbi8my.best with the subject line "Data Access Request". In your email, include your full name, mbi8my account number, and a description of the data you wish to access — for example, transaction history, game records, or stored personal information. Our team will first verify your identity through a brief verification process before proceeding. You will receive the requested data within 14 business days in a readable format such as PDF or CSV. No charge is applied for the first request each calendar year.

When you close your mbi8my account, we do not immediately delete all your data, as certain legal obligations require us to retain specific records. Financial transaction records are retained for a minimum of 7 years in accordance with Malaysian legal requirements. Identity data (KYC) is retained for 5 years following account closure. Customer support data is retained for 3 years. Once each respective retention period has elapsed, all your data will be securely deleted using approved data disposal methods, or permanently anonymised so that it can no longer be associated with you.

mbi8my has a comprehensive, tested security incident response procedure in place. Should a security incident involving member personal data occur, our security team will act immediately to contain the incident, assess its scope and impact, and restore systems to a secure state. Affected members will be notified within a reasonable timeframe — typically within 72 hours of the incident being confirmed — along with details of what happened, what data may have been affected, and the steps we are taking to address the situation. We will also notify the relevant authorities where required by law. To date, mbi8my has not experienced any significant data breach incidents.

Yes, you can opt out of receiving promotional emails and marketing communications from mbi8my at any time. There are three ways to do so: first, click the "Unsubscribe" link found at the bottom of any promotional email we send; second, log in to your mbi8my account and adjust your notification settings under your account profile; or third, contact our customer support team via Live Chat or email and request to be removed from the promotional mailing list. Please note that even if you unsubscribe from promotional emails, we will still need to send you emails related to your account operations — such as deposit confirmations, withdrawal notices, or important security alerts — as these are necessary service communications, not marketing.

Your Data Is Safe at mbi8my – Join Us Today

Sign up for free and enjoy a safe, trusted online casino experience alongside over 50,000 Malaysian members who already trust mbi8my.

256-bit SSL Encryption • Your data is never sold to third parties • 24/7 privacy support • support@mbi8my.best

Bahasa Melayu