Mb918 Privacy Policy – How We Protect Your Personal Data

Mb918 ("we", "our platform") takes user privacy very seriously. This Privacy Policy outlines our commitment to protecting your personal information and complying with applicable data protection laws, including Malaysia's Personal Data Protection Act 2010 (PDPA).

This policy applies to all users who register an account, use the services, or visit the mb918 website on any device — whether a computer, tablet, or smartphone. If you do not agree with any part of this policy, you are advised not to use the mb918 platform.

We may update this Privacy Policy from time to time. Any significant changes will be communicated via in-platform notifications or email. It is your responsibility to review this page periodically.

Mb918 collects various types of information depending on how you interact with our platform. Below is a complete breakdown of the data categories we collect:

We may also receive information about you from third parties such as payment service providers when you make a deposit, or from public sources for identity verification purposes.

Mb918 uses the information collected solely for legitimate purposes directly related to the provision of our services. Below is a full list of data usage purposes:

• Account management: Registering, verifying, and maintaining your account on the mb918 platform.
• Transaction processing: Processing deposits, withdrawals, and all financial activity in your account.
• Identity verification (KYC): Meeting anti-money laundering legal compliance requirements.
• Customer support: Responding to enquiries, resolving complaints, and providing technical support.
• Platform security: Detecting and preventing fraud, unauthorised access, and suspicious activity.
• Service improvement: Analysing usage patterns to improve the platform, games, and user experience.
• Service communication: Sending important notifications related to your account, transactions, and system updates.
• Responsible gaming: Monitoring gameplay patterns to identify users who may need assistance.

Mb918 does not use your data to make automated decisions that materially affect your rights without human oversight.

Mb918 does not sell your personal information to any party under any circumstances. However, there are limited situations where we may need to share your data with specific parties:

• Payment providers: FPX, TNG eWallet, DuitNow, and other gateway providers require minimum information to process your transactions. This data is limited to only what is necessary.
• Game providers: To operate games provided by third-party suppliers, minimum account information may be shared with the relevant supplier.
• Legal authorities: mb918 complies with official requests from legitimate law enforcement agencies when required by court order or applicable law.
• Audit and compliance: Independent auditors who help us verify compliance with legal requirements and security standards.

Mb918 uses cookies and similar technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login verification and session security. These cookies cannot be disabled.
• Performance Cookies: Helping us understand how users interact with the platform so we can improve it.
• Functional Cookies: Saving your preferences such as language and display settings for a more personalised experience.
• Analytics Cookies: Used to anonymously analyse platform traffic patterns and usage.

You can manage cookie settings through your browser preferences. Please note that disabling certain cookies may affect the functionality of the mb918 platform.

Mb918 implements comprehensive technical and organisational security measures to protect your personal information from unauthorised access, disclosure, alteration or destruction.

Key security measures we use include:

• 256-bit SSL encryption for all data in transit.
• Encryption of sensitive data stored in our database.
• Multi-layered firewall and Intrusion Detection System (IDS).
• Role-based access control — only staff with a job-related need may access user data.
• Two-factor authentication (2FA) for internal system access.
• Regular security audits conducted by independent security experts.
• Mandatory data protection training for all mb918 staff.

While we take all reasonable precautions, no security system is 100% perfect. In the event of a data breach that affects you, mb918 will notify you within the timeframe required by applicable law.

As a data subject, you have certain rights regarding your personal data held by mb918. These rights include:

To exercise any of the above rights, please contact our privacy team via the platform's live chat or email at [email protected]. We will process your request within 30 business days.

Mb918 retains your personal data for as long as necessary for the purposes stated in this policy, or as required by applicable law. General data retention guidelines are as follows:

• Active account data: Retained for as long as your account remains active on the mb918 platform.
• Financial transaction data: Retained for a minimum of 7 years as required by anti-money laundering and financial regulations.
• Support communication logs: Retained for 3 years after the last interaction.
• KYC Data: Retained for 5 years after account closure or the date of the last investigation.
• Cookie and analytics data: Retained for between 30 days to 2 years depending on the type of cookie.

Once the retention period expires, your data will be securely deleted or anonymised in accordance with mb918's internal procedures.

Mb918 reserves the right to modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or the services we offer.

When significant changes occur, we will:

• Updating the "Last Updated" date at the top of this page.
• Sending email notifications to all registered users.
• Displaying notices on the mb918 platform for at least 14 days before changes take effect.

Continued use of the mb918 platform after changes take effect constitutes your acceptance of the updated policy. If you do not agree with the changes, you have the right to close your account.

If you have any questions, concerns or complaints regarding this Privacy Policy or how mb918 handles your personal data, please contact us through the following channels:

We are committed to responding to all privacy-related enquiries within a reasonable timeframe and resolving any concerns in a transparent and fair manner.

This Privacy Policy was last updated on 1 January 2026.