Personal Data Protection

Mb18 Privacy Policy — Your Information Security Is Our Priority

Mb18 is committed to protecting the privacy and security of every piece of personal information you entrust to us. This document clearly explains how your data is collected, used, and protected.

256-bit SSL Encryption Last Updated: 1 Jan 2026 No Third-Party Data Sales

Mb18's Six Pillars of Data Protection

We don't just comply with the law — we go beyond the minimum requirements to ensure your data is truly secure.

End-to-End Data Encryption

All data transmitted between your device and mb18's servers is protected by 256-bit SSL encryption — the same security standard used by leading banking institutions in Malaysia.

Secure Data Storage

Your personal information is stored on servers equipped with multi-layered protection, role-based access controls, and automated backup systems to ensure no data is lost.

Strict Access Control

Only mb18 staff with specifically granted permissions may access members' personal data — and every access is automatically logged and monitored to detect any suspicious activity.

No Personal Data Sales

Mb18 has never and will never sell, rent, or transfer your personal information to any third party for marketing purposes without your explicit consent.

Malaysia PDPA Compliance

The mb18 Privacy Policy is structured in accordance with the requirements of Malaysia's Personal Data Protection Act 2010 (PDPA), ensuring you retain full rights over your own personal data.

Immediate Breach Notification

In the event of any security incident affecting your data, mb18 is committed to notifying you within 72 hours and taking immediate remedial action.

Mb18 Full Privacy Policy

Version 2.4 — Effective 1 Jan 2026
Your privacy is a fundamental right, not just a box to tick. mb18 takes every aspect of data protection seriously, and we are proud of our strong security track record since the platform launched.

1 Introduction & Scope

This Privacy Policy ("Policy") is issued by mb18, an online entertainment platform operating through the mb18.org website and the mb18 mobile app. This Policy describes how we collect, use, store, disclose, and protect your personal information when you use our services.

This Policy applies to all registered members, website visitors, mobile app users, and any individual who interacts with the mb18 platform in any capacity. By using mb18's services, you agree that your personal information will be processed in accordance with this Policy.

Mb18 fully complies with Malaysia's Personal Data Protection Act 2010 (PDPA) and all relevant international data protection standards. In the event of any conflict between a translated version of this Policy and the English version, the English version shall prevail.

This Policy should be read together with Terms and Conditions and Responsible Gaming Policy mb18, each of which forms part of the overall agreement between you and mb18.

2 Information Collected

Mb18 collects various categories of personal information depending on the services you use and your level of interaction with the platform. Below is a breakdown of the data categories we collect:

Data Category Data Examples Requirements
Identity Information Full name, date of birth, gender, identity card number or passport number Mandatory (KYC)
Contact Information Email address, phone number, residential address Mandatory
Financial Information Bank account number, card details, deposit and withdrawal transaction records Mandatory (Payment)
Technical Data IP address, browser type, operating system, device data, access logs Automatic
Behavioural Data Game history, betting patterns, session duration, and game preferences Automatic
Communication Information Support chat records, emails, and user feedback Where applicable

2.1 Sensitive Data

Mb18 does not collect sensitive data such as health information, religious beliefs, or political views unless required by law. Any identity documents submitted for KYC purposes are stored with the highest level of encryption and are accessible only by authorised compliance staff.

3 How We Collect Data

3.1 Direct Collection

Mb18 collects personal information directly from you through the following channels:

  • Account registration form — name, email, phone number, and password.
  • KYC verification process — identity documents and proof of address.
  • Financial transactions — deposit and withdrawal details via your chosen payment method.
  • Customer support interactions — live chat records, support tickets, and email correspondence.
  • Profile update — information you update yourself in your account settings.

3.2 Automatic Collection

When you browse the mb18 website or use the mb18 app, our systems automatically record technical and behavioural data including IP address, device type, operating system, pages visited, session duration, and in-game actions. This data is collected using cookies, tracking pixels, and first-party analytics technologies.

3.3 Third-Party Sources

In certain circumstances, mb18 may receive information about you from trusted sources such as identity verification service providers, payment processors, and fraud prevention agencies. This data is used solely for verification, security, and legal compliance purposes.

4 Purpose of Data Use

Mb18 uses your personal information solely for legitimate and reasonable purposes. The following outlines the primary purposes for which your data is used:

  • Account management: Creating, verifying, and maintaining your mb18 account and ensuring secure login.
  • Transaction processing: Processing deposits, withdrawals, bonuses, and all financial transactions related to your account.
  • Identity verification (KYC): Meeting anti-money laundering (AML) legal requirements and verifying the minimum age of 18.
  • Personalise your experience: Tailoring content, game offers, and promotions to match your preferences and playing habits.
  • Service communications: Sending important notifications related to your account, transactions, service updates, and support responses.
  • Platform security: Detecting and preventing fraud, account abuse, and other illegal activities.
  • Legal compliance: Fulfilling legal obligations, regulations, and directives from authorities.
  • Analytics & improvement: Analysing usage patterns to improve our platform, products, and services.
Marketing: mb18 will only send promotional communications if you have given explicit consent during registration or through your account notification settings. You may withdraw this consent at any time via your account settings.

5 Information Sharing

5.1 Core Principles

Mb18 does not sell, rent, or trade members' personal information to any third party for their own commercial purposes. This is our absolute commitment and will not change.

5.2 Parties Who May Receive Your Data

In the course of platform operations, mb18 shares necessary information with the following parties on a strictly need-to-know basis:

  • Payment processors and banks: To facilitate the deposit and withdrawal transactions you request. Financial data is shared through encrypted and secure channels.
  • KYC service providers: Trusted, PDPA-compliant third-party identity verification providers to authenticate your documents.
  • Game providers: Game studios and companies providing content on the mb18 platform may receive anonymised statistical data for technical purposes.
  • IT service providers: Companies providing cloud infrastructure, cybersecurity, and technical support are bound by strict confidentiality agreements.
  • Legal authority: Government agencies, regulators, or courts where required by Malaysian law or a valid court order.
Warning: mb18 will never ask for your account details or password via email, SMS, or chat. If you receive such a request claiming to be from mb18, do not respond and report it to our security team immediately.

6 Data Storage & Security

6.1 Retention Period

Mb18 retains your personal information for as long as your account is active and for any additional period required by Malaysian law. Generally, financial transaction records are kept for a minimum of 7 years to meet tax and AML legal requirements, while customer support communication data is retained for 3 years.

6.2 Security Measures

Mb18 implements comprehensive technical and organisational security measures to protect your data from unauthorised access, loss, or damage:

  • 256-bit SSL/TLS encryption for all data transmitted over the internet.
  • At-rest encryption for all information stored in the database.
  • Two-factor authentication (2FA) for staff access to internal systems.
  • 24/7 security monitoring and automated intrusion detection systems.
  • Regular penetration testing by independent cybersecurity firms.
  • Mandatory security awareness training for all staff who handle personal data.

6.3 Storage Location

Personal data of Malaysian members is stored in data centres located in the Asia-Pacific region, meeting international physical and digital security standards. Any cross-border data transfers are carried out in compliance with the PDPA and with adequate contractual safeguards in place.

7 Your Rights as a Member

Under Malaysia's PDPA and the mb18 Privacy Policy, you hold the following rights regarding your personal information:

Right of Access

You may request a copy of all personal information we hold about you at any time.

Right to Rectification

You may request a correction to any inaccurate or incomplete information in your profile.

Right to Erasure

You may request the deletion of your personal data, subject to applicable legal retention obligations.

Right to Object

You may object to the processing of your data for direct marketing purposes at any time, without providing a reason.

Right to Data Portability

You may request your data in a machine-readable format for transfer to another service provider.

Right to Restriction

You may request that we restrict the processing of your data while a dispute or review is in progress.

To exercise any of the above rights, please contact the mb18 Data Protection team via live chat or email. We will process your request within 30 calendar days of receipt.

8 Cookies & Tracking Technologies

8.1 What Are Cookies?

Cookies are small text files stored in your browser or device when you visit the mb18 website. They help our platform run smoothly, remember your preferences, and deliver a more personalised experience.

8.2 Types of Cookies We Use

  • Essential Cookies: Required for core platform functions such as login session authentication and security. These cookies cannot be disabled.
  • Functional Cookies: Remembering your preferences such as language, display settings, and login details for your convenience.
  • Analytics Cookies: Helping us understand how users interact with the platform for continuous improvement purposes. Data is collected anonymously.
  • Performance Cookies: Monitoring response times and platform availability to ensure a seamless gaming experience.

8.3 Managing Cookies

You can manage cookie settings through your browser's preferences. However, disabling essential cookies may affect the functionality of the mb18 platform. For detailed guidance on managing cookies in popular browsers, please refer to your browser's help section.

9 Third-Party Links

The mb18 platform may contain links to third-party websites or services such as payment providers and game studios. mb18 is not responsible for the privacy practices of these third parties and encourages you to read their respective privacy policies before submitting any personal information. This Privacy Policy applies solely to the mb18 platform.

10 Privacy Policy Updates

Mb18 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or service improvements. Members will be notified of any significant changes via in-platform notifications or their registered email at least 14 days before the changes take effect.

The "Updated" date at the top of this document always reflects the latest version of the Privacy Policy in force. Continued use of the mb18 platform after the effective date of any change constitutes your acceptance of the amended Policy.

11 Contact Us

If you have any questions, concerns, or wish to exercise your privacy rights, mb18's Data Protection Officer (DPO) team is ready to assist through the following channels:

  • Live chat: Available 24 hours a day, 7 days a week via the chat icon on the mb18 platform.
  • Email: [email protected] (response within 3 business days)
  • Office: Please refer to the About Us for office address details.
For complaints that cannot be resolved directly with mb18, you have the right to refer the matter to the Personal Data Protection Commissioner of Malaysia in accordance with the provisions of PDPA 2010.
🔒

Your Data Is Secure. Your Experience Is Protected.

Join over 500,000 mb18 members enjoying online entertainment with full confidence that their privacy is always protected.

256-bit SSL Encryption Malaysia PDPA Compliance No personal data sales
Bahasa Melayu