Privacy Policy MB918 – Casino Member Personal Data Protection

To provide you with a secure, smooth, and high-quality mb918 platform experience, we need to collect certain categories of personal information. This collection is done transparently and only for the purposes stated in this privacy policy.

A. Information You Provide Directly

• Full name as stated in official identification documents (identity card or passport)
• Date of birth for age verification (18 years and above)
• Active email address for account communications
• Mobile phone number for two-factor authentication and notifications
• Current residential address
• Bank account or e-wallet details (bank name, account number) for processing deposits and withdrawals
• Copy of identification document for KYC (Know Your Customer) verification

B. Information Collected Automatically

• IP address and country-level geolocation data
• Device type, operating system, and web browser version used
• Login and logout activity records
• Transaction, betting, and game history within the platform
• Cookie and session data for an improved user experience
• Access time records and pages visited within the platform

Every piece of data we collect is used solely for legitimate purposes directly related to delivering mb918's services. We do not use your data for purposes beyond the following scope without your prior consent:

You may withdraw your consent to marketing communications at any time by contacting our support team. Withdrawing marketing consent will not affect the delivery of core mb918 services to you.

Mb918 takes an extremely cautious approach to data sharing. Your personal information will not be sold, rented, or traded to any third party for marketing purposes. Data sharing only occurs in the following limited situations:

• Payment Service Providers: To process deposits and withdrawals, required transaction details are shared with certified payment gateways such as FPX, Touch 'n Go eWallet, GrabPay, and local Malaysian banks. All these providers are bound by strict confidentiality agreements.
• Game Service Providers: Minimal username and session information shared with third-party game providers (such as Pragmatic Play and Evolution Gaming) solely to enable game access.
• Legal Authority: mb918 will disclose required information to the relevant authorities when mandated by court order, law, or official investigation.
• Identity Verification Services: Minimum data required for KYC verification is shared with approved e-KYC service providers and is subject to data protection agreements.

Mb918 continuously invests in comprehensive cybersecurity infrastructure to ensure member personal data is always protected against both external and internal threats. The following are the layers of protection we maintain:

• Data Encryption in Transit: All data communications between your browser or app and mb918's servers are encrypted using TLS 1.3 with AES-256 encryption — the same standard used by leading financial institutions worldwide.
• Data Encryption at Rest: Sensitive data stored in our databases is also encrypted using asymmetric encryption, meaning the data cannot be read even if someone gains physical access to the servers.
• Two-Factor Authentication (2FA): Members are encouraged to enable 2FA on their accounts. This system adds an extra layer of security to ensure that only the legitimate account owner can log in.
• 24/7 Threat Monitoring: Our automated monitoring system operates around the clock to detect suspicious activity, intrusion attempts, or unusual access patterns.
• Regular Penetration Testing: mb918 conducts regular security testing carried out by independent security auditors to identify and address any system vulnerabilities before they can be exploited.
• Network Segregation: mb918's server infrastructure is divided into separate security zones, ensuring that any security incident is contained within an isolated area.

Mb918 uses cookies and similar tracking technologies to enhance the user experience, maintain session security, and understand how members interact with our platform. Cookies are small text files stored on your device when you visit our website.

Types of Cookies We Use:

• Essential Cookies: Required for core platform functions such as login verification, session management, and security. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collects anonymised data on how members use the platform to help us improve design and performance — for example, which pages are visited most frequently.
• Functional Cookies: Saves your preferences such as display language, notification settings, and game preferences to personalise your experience.
• Analytics Cookies: Helps us understand aggregate usage patterns for product improvement purposes. This data cannot be used to identify you as an individual.

You can manage your cookie settings through your web browser at any time. However, disabling certain essential cookies may affect your ability to fully use some features on the mb918 platform.

Mb918 retains your personal data only for as long as necessary for the purposes stated in this policy, or as required by applicable law. The following are our data retention guidelines:

When data is no longer needed and there is no legal obligation to retain it, mb918 will securely delete or anonymise that data using industry-standard methods.

As an mb918 member and data subject under Malaysia's Personal Data Protection Act 2010, you hold important rights that we fully respect. The following are rights you may exercise:

To exercise any of the rights above, please contact our Data Protection Officer (DPO) via email at [email protected]. We will respond to your request within 30 working days from the date of receipt. Some requests may require identity verification first to ensure the security of your data.

The mb918 platform is an adult entertainment service restricted to individuals aged 18 years and above only. We do not intentionally collect or store any personal data from children or individuals under the age of 18.

Should we discover that a child's personal data has been collected without our knowledge — for example, through registration using false information — we will take immediate action to:

• Suspending the relevant account immediately while an investigation is carried out
• Deleting all data related to that individual from our systems
• Returning any deposited funds, where applicable
• Reporting incidents to the relevant authorities if required

The mb918 platform may contain links to game provider websites or other third-party service providers within the context of platform use. This Privacy Policy applies solely to the mb918 platform and does not cover the privacy practices of any third-party websites.

When you access third-party websites via links found on the mb918 platform, you should read and understand those websites' privacy policies separately. mb918 is not responsible for the data collection or management practices of such third parties.

Mb918 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or improvements in how we protect your data. Any changes made will take effect immediately upon publication on this page.

When significant changes are made to this Privacy Policy, we will notify you via:

• Clear notice on the mb918 platform homepage
• Email notification to the email address registered to your account
• In-platform notifications for active members

We encourage you to review this Privacy Policy page periodically to stay informed about how we manage your personal information. The "Last Updated" date displayed at the top of this page indicates when the most recent changes were made.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please do not hesitate to contact mb918's Data Protection Officer.

Mb918 is committed to resolving all privacy-related inquiries and complaints seriously, transparently, and within a reasonable timeframe. Your trust is our most valuable asset, and we will always strive to maintain and strengthen it.