Privacy Policy mb18

Information We Collect

When you register as an mb18 member or use our services, we may collect the following categories of personal information:

• Identity Information: full name, date of birth, identity card number (MyKad) or valid identification document, gender and nationality.
• Contact Information: email address, mobile phone number and current residential address.
• Financial Information: e-wallet account details (Touch 'n Go eWallet), DuitNow information, FPX online banking details, and cryptocurrency wallet addresses (USDT, BTC, ETH) linked to your account. Credit or debit card numbers are not stored directly in our system.
• Activity Information: records of deposits, withdrawals, bets, games played, and account login and logout logs.
• Technical Information: IP address, device type, operating system, web browser, and session and cookie data.
• Communications: the content of correspondence with our customer support team via live chat or email.

Purpose of Data Collection

The personal information we collect is used for the following purposes:

• To create and manage your member account securely.
• To verify your identity through the KYC (Know Your Customer) process in line with international licensing requirements.
• To process deposits and withdrawals via supported payment methods.
• To provide effective and responsive customer support.
• To detect and prevent fraud, money laundering, suspicious account activity or misuse of the platform.
• To send important notifications relating to your account, promotions, bonuses and policy changes.
• To comply with legal and regulatory obligations under the international licence held by mb18.
• To improve the user experience through aggregated and anonymised analysis of website usage patterns.

Sharing of Personal Information

mb18 does not sell or rent your personal information to any third party. However, in certain circumstances, your information may be shared with:

• Payment Processors: trusted payment gateway providers that enable deposit and withdrawal transactions to be processed securely. These parties are bound by strict confidentiality agreements.
• Technology Service Providers: companies that provide cloud computing, server hosting, cybersecurity and data analytics services on behalf of mb18, subject to data protection agreements.
• Regulatory Authorities: regulatory bodies, law enforcement agencies or government authorities that request information based on valid legal authority.
• Verification Service Providers: third parties that carry out identity verification and background checks for KYC and AML (Anti-Money Laundering) compliance purposes.

Data Security Measures

mb18 implements multiple layers of technical and organisational protection to keep your data secure:

• 256-bit SSL encryption for all communications between your device and our servers.
• Password storage in hashed form using an irreversible algorithm.
• Intrusion detection systems and real-time monitoring of suspicious activity.
• Role-based access control — staff may only access data needed for their specific duties.
• Regular security audits and penetration testing by independent experts.
• Clear incident response procedures in the event of a data breach.

While we take all reasonable measures, no system is entirely 100% secure. You are also responsible for keeping your account password confidential and not sharing it with anyone.

Your Rights Regarding Personal Data

As a data subject, you have the following rights regarding the personal information we hold about you:

• Right of Access: you have the right to request a copy of the personal data we hold about you at any time.
• Right of Rectification: if any of your information is inaccurate or out of date, you may request that a correction be made.
• Right of Erasure: in certain circumstances, you may request that your data be deleted, subject to our legal obligations to retain certain records.
• Right to Restriction of Processing: you may request that we limit how your data is used in certain circumstances.
• Right to Data Portability: you may request your data in a machine-readable format for transfer to another party.
• Right to Object: you may object to the processing of your data for direct marketing purposes or based on our legitimate interests.
• Right to Withdraw Consent: you may withdraw consent given at the time of registration, though this does not affect the validity of any processing that took place before the withdrawal.

Use of Cookies and Tracking Technologies

The mb18 website uses cookies and similar tracking technologies to improve website functionality and user experience. The types of cookies we use include:

• Essential Cookies: required for basic website functions such as login sessions and navigation. These cookies cannot be disabled.
• Performance Cookies: collect anonymous information about how you use our website to help us improve it.
• Functional Cookies: remember your preferences such as language and display settings to provide a more personalised experience.
• Security Cookies: help detect and prevent fraudulent activity and protect your account.

You can manage cookie settings through your web browser settings. However, disabling essential cookies may affect website functionality. mb18 does not use third-party cookies for advertising purposes.

Data Retention Period

mb18 only retains your personal data for as long as necessary to fulfil the original purpose of collection or as required by applicable law. Generally:

• Active account data is retained for the duration of your membership.
• After account closure, financial and transaction records may be retained for the period required to meet legal and audit obligations.
• Customer support communication logs are retained for quality control and historical record purposes.
• When data is no longer needed, we will delete or destroy it in a safe and responsible manner.

Changes to This Privacy Policy

mb18 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technology developments. Any material changes will be communicated to you via:

• A notification in your account upon login.
• A notification email sent to your registered email address.
• An announcement on the mb18 website homepage.

Continued use of our services after the changes take effect will be considered your acceptance of the updated Privacy Policy. We encourage you to review this page periodically.

Contact Us About Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact the mb18 support team:

• Live Chat: available 24/7 via the chat icon on the mb18 website, in Malay and English.
• Email: [email protected]

We are committed to taking every privacy-related enquiry seriously and responding within a reasonable timeframe. mb18 operates under international licensing and is bound by the data protection standards set by the relevant regulatory body.