MB918 Privacy Policy – Malaysian Member Personal Data Protection

Your privacy is our priority. This document clearly explains how mb918 collects, uses, stores and protects your personal data throughout your membership.

Last Updated: 1 January 2026 SSL 256-bit Secure & Trusted Data

Mb918's Commitment to Your Privacy

Six core pillars that define MB918's approach to protecting every member's personal data.

High-Level Data Encryption

All members' personal data is encrypted using 256-bit SSL technology during transmission and storage, ensuring your information cannot be read by unauthorised parties.

No Sale of Data to Third Parties

Mb918 has never and will never sell, rent, or share members' personal data with any third party for marketing purposes without your explicit consent.

Full Member Control

You have the right to access, correct, transfer, or request deletion of your personal data at any time through your account settings or by contacting our team.

Secure & Monitored Servers

Your data is stored on servers protected by multi-layered firewalls, 24/7 monitoring, and automated backup procedures to prevent data loss.

PDPA Legal Compliance

Mb918 fully complies with the Personal Data Protection Act (PDPA) and applicable international data protection standards across all our data processing operations.

Data Breach Notification

In the event of any security incident involving your data, mb918 will notify you within 72 hours and take immediate action to limit any damage.

Your Data Is Safe

Mb918 uses 256-bit SSL encryption and the latest international security protocols to protect every member's personal information.

Register Securely
Related Documents
Latest version: 1 January 2026 · Version 3.1

1Introduction & Scope of Privacy Policy

This Privacy Policy is an official MB918 document that details how our platform collects, processes, stores, protects, and in certain situations discloses personal data provided by members and visitors to mb918.app. It has been prepared as part of MB918's commitment to transparency and accountability in the handling of personal data.

By using the MB918 platform — whether through a web browser, mobile app, or any other device — you confirm that you have read and understood this Privacy Policy and consent to the processing of your personal data as described in this document. If you do not agree with any aspect of this policy, please discontinue use of our platform immediately.

This Privacy Policy applies to all personal data collected through the MB918 platform, including the account registration process, financial transactions, game usage, communications with our customer support team, and any other interactions with our platform. It does not apply to third-party websites or services that may be accessible via links within our platform.

mb918 operates as the data controller fully responsible for how your personal data is processed. We comply with Malaysia's Personal Data Protection Act (PDPA) and applicable international data protection standards across all aspects of our operations.

2Types of Personal Data Collected

Mb918 collects various types of personal data depending on the nature of your interaction with our platform. We only collect data that is genuinely necessary to deliver quality service, maintain platform security, and comply with applicable legal requirements.

Data Category Data Examples Purpose of Collection
Identity Data Full name, date of birth, MyKad/passport number Identity verification (KYC), fraud prevention
Contact Data Email address, phone number Account communications, security notifications
Financial Data Bank account number, transaction history Deposit and withdrawal processing
Technical Data IP address, browser type, device information Account security, fraud detection
Usage Data Game history, session times, betting records Service improvement, responsible gaming

Your personal data is collected through several key channels: account registration forms, the KYC verification process, financial transactions, direct communications with our support team, natural platform usage, and through tracking technologies such as cookies as further described in Section 6.

Important Notice: mb918 will never ask for your full password, PIN, or sensitive security details via email, live chat, or any external communication channel. If you receive any such request claiming to be from mb918, treat it as a phishing attempt and report it to our team immediately.

3How We Use Your Personal Data

Personal data collected by MB918 is used responsibly and only for legitimate purposes. We ensure every use of data is proportionate and does not exceed what is necessary for the stated purpose. The following are the primary purposes for which your personal data is used:

  • Account Management: Creating and managing your member account, processing registrations, verifying identity, and providing access to all mb918 platform features.
  • Transaction Processing: Processing deposits, withdrawals, and all other financial transactions accurately and securely through supported payment methods including FPX, DuitNow, Touch 'n Go, and GrabPay.
  • Fraud Prevention & Security: Monitoring account activity to detect any signs of unauthorized access, fraud, money laundering, or violations of terms and conditions.
  • Legal Compliance: Fulfilling legal and regulatory obligations including anti-money laundering (AML) requirements, customer identity verification (KYC), and reporting to relevant authorities when required.
  • Service Enhancement: Analyzing usage patterns to improve platform functionality, personalize the user experience, and develop new, more relevant features.
  • Service Communications: Sending important account-related notifications, security updates, transaction confirmations, and relevant promotional information (subject to your marketing preferences).
  • Responsible Gaming: Monitoring play patterns to identify potential gambling issues and provide the necessary support through our responsible gaming tools.

mb918 does not use members' personal data for any automated decision-making that could significantly affect your rights or interests without appropriate human review. You have the right to request human review of any automated decision affecting your account.

4Data Sharing & Disclosure

Mb918 applies a "need-to-know" principle to every instance of member personal data sharing. This means your data is only shared when strictly necessary and only with parties that have a legitimate need to access it.

Parties that may receive your personal data include:

  • Payment Service Provider: Financial institutions, e-wallet providers, and payment processors required to complete your financial transactions. These providers are bound by strict confidentiality agreements.
  • Technology Provider: Technology companies providing platform infrastructure, cloud services, and security solutions. All such providers sign data processing agreements that comply with PDPA standards.
  • Regulatory Authority: Government agencies, law enforcement bodies, or courts when MB918 is legally required to do so by law or a valid court order.
  • Identity Verification Provider: Trusted third-party services used to verify identity documents and conduct background checks required for KYC compliance.

MB918 no sell, rent, or disclose your personal data to advertisers, data brokers, or any third party for direct marketing purposes without your explicit prior consent. Any data sharing beyond the scope stated above requires your written consent.

5Security & Data Protection

The security of your personal data is a responsibility that mb918 takes very seriously. We continuously invest in the latest security technologies and procedures to ensure your data is always protected against unauthorized access, loss, misuse, or accidental disclosure.

The technical and organizational security measures we employ include:

  • 256-bit SSL Encryption: All communications between your device and mb918 servers are encrypted using the latest TLS protocol, making transmitted data unreadable even if someone intercepts your connection.
  • Two-Factor Authentication (2FA): mb918 supports two-factor authentication for an added layer of security during login, protecting your account even if your password is compromised.
  • 24/7 Security Monitoring: Our cybersecurity team monitors all platform activity around the clock using intrusion detection systems (IDS) and real-time threat analysis tools.
  • Internal Access Control: Only authorised MB918 staff with a legitimate operational need may access member personal data. All access is logged and audited on a regular basis.
  • Regular Data Backups: Member data is automatically backed up to multiple server locations to ensure service continuity and prevent data loss due to technical failures.
  • Regular Security Testing: mb918 conducts regular penetration testing and security audits by independent security experts to identify and address any system vulnerabilities.

While mb918 takes all reasonable steps to protect your data, no security system is entirely foolproof. In the event of a data breach involving your information, mb918 will notify you within 72 hours and take immediate action to limit the impact of the breach.

6Cookies & Tracking Technologies

Mb918 uses cookies and similar tracking technologies to enhance the user experience, understand how members use our platform, and ensure the platform functions correctly. Cookies are small text files stored on your device when you visit the mb918 platform.

The types of cookies used by MB918 are as follows:

  • Essential Cookies: Required for core platform functions such as login session tracking, security, and transaction processing. These cookies cannot be disabled without affecting platform functionality.
  • Performance Cookies: Collecting information about how you use our platform to help us improve performance and usability. This data is collected in aggregate and does not identify individuals.
  • Functional Cookies: Remembering your preferences such as language, display settings, and login information to provide a more personalized experience in future sessions.
  • Analytics Cookies: Helping us understand overall platform usage patterns, the most visited pages, and time spent in each section of the platform.

You can manage your cookie preferences through your web browser settings. However, disabling essential cookies may affect platform functionality and your overall user experience. For more information on managing cookies, please refer to your web browser's help guide.

7Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act (PDPA) and applicable data protection laws, you have certain rights regarding your personal data held by MB918. MB918 is committed to respecting and facilitating the exercise of these rights.

Right to Access

You have the right to request a copy of all personal data we hold about you. Requests will be processed within 14 business days.

Right to Rectification

If any of your personal data is inaccurate or incomplete, you may request that we correct it promptly.

Right to Erasure

In certain situations, you may request the deletion of your personal data, subject to our legal retention obligations.

Right to Data Portability

You have the right to receive your personal data in a machine-readable format for transfer to another service provider.

Right to Object

You may object to the processing of your data for direct marketing purposes or where processing is based on legitimate interests.

Right to Restriction

In certain circumstances, you may request that we restrict the processing of your data while a dispute or review is in progress.

To exercise any of the above rights, please contact the mb918 data protection team via 24/7 live chat within the platform or by email at the address stated in Section 10. We will endeavour to process all requests within the timeframe required by applicable law.

8Data Retention Period

Mb918 does not retain your personal data longer than is necessary for the purposes stated in this Privacy Policy or to meet applicable legal and regulatory requirements.

As a general guideline, data retention periods are as follows:

  • Active Account Data: Personal data of members with active accounts is retained for the duration of your membership plus any period required by law following account closure.
  • Financial Transaction Records: Records of all financial transactions are retained for a minimum of 7 years from the transaction date as required by Malaysia's anti-money laundering laws and financial regulations.
  • KYC Data: Identity verification documents and KYC records are retained for a minimum of 5 years after the termination of the business relationship, in line with compliance requirements.
  • Security Logs: Access logs, security logs, and records of suspicious activity are retained for 2 years for investigation and fraud prevention purposes.
  • Customer Support Communications: Communication records with the customer support team are retained for 3 years for reference and service quality improvement purposes.

Upon expiry of the applicable retention period, your personal data will be securely deleted or anonymised so that it can no longer be personally linked to you.

9Changes to Privacy Policy

Mb918 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our data processing practices, new legal requirements, or platform improvements. We are committed to informing you of any significant changes.

When changes are made to this Privacy Policy, MB918 will:

  • Updating the "Last Updated" date at the top of this document
  • Displaying a clear change notice on the platform for at least 30 days
  • Sending email notifications to all registered members for significant changes
  • For significant changes, obtain fresh consent from members before the changes take effect

Your continued use of the mb918 platform after the effective date of any policy changes constitutes your acceptance of the updated Privacy Policy. It is your responsibility to review this Privacy Policy periodically to stay informed of the latest terms.

A history of all versions of the mb918 Privacy Policy is retained and may be requested by members for review. This forms part of our commitment to transparency in the handling of members' personal data.

10Contact Our Data Protection Team

If you have any questions, concerns, or wish to exercise your privacy rights, the mb918 Data Protection Officer (DPO) team is here to assist you. We are committed to providing accurate and helpful responses within a reasonable timeframe.

You can reach us through the following channels:

  • Live Chat: Fastest channel – available 24/7 directly within the mb918 platform for immediate privacy-related inquiries.
  • Email: [email protected] – for detailed inquiries or formal requests to exercise your privacy rights.
  • Response Time: mb918 aims to respond to all privacy inquiries within 3 business days and complete all formal requests within 14 business days.

If you are dissatisfied with how mb918 handles your privacy complaint, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia or the relevant regulatory body in your area of residence.

Effective date: 1 January 2026  ·  Document version: 3.1  ·  Language: Bahasa Melayu (Malaysia)

Your Data Is Safe. Now It's Time to Play.

Join over 100,000 active mb918 members and enjoy a safe, fair, and exciting online casino platform.

Bahasa Melayu