Last updated: 11 June 2026 · Applies to all mbi8 account holders and platform visitors
This Privacy Policy ("Policy") describes how mbi8 ("mbi8", "we", "us", "our") collects, processes, stores, and shares personal data relating to individuals who register accounts on, visit, or otherwise interact with the mbi8 platform at mbi8.vu ("Platform"). This Policy applies to all registered Players, prospective Players, and visitors regardless of their device or location of access.
By registering an mbi8 account or continuing to use the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not consent, you should not use the mbi8 platform.
This Policy should be read together with our Terms & Conditions and our Responsible Gaming Policy, both of which are published on this site.
1.1 mbi8 is committed to protecting the privacy and personal data of its Players and website visitors. We recognise that the trust of our Malaysian player base depends on our handling of personal information with the same care that we apply to financial security and fair gaming.
1.2 This Policy is intended to be clear, specific, and accessible. Where legal or technical language is necessary, we have provided plain-English explanations alongside formal definitions. If any aspect of this Policy is unclear, please contact our support team for clarification before providing personal data.
1.3 mbi8 processes personal data in compliance with applicable data protection laws and the requirements of our international gaming licence, which independently mandates standards for player data handling and retention.
2.1 For the purposes of applicable data protection legislation, mbi8 is the data controller in respect of the personal data of its Players and platform visitors. As data controller, mbi8 is responsible for determining the purposes and means by which personal data is processed.
2.2 mbi8 may appoint data processors — third-party service providers who process personal data on our behalf and under our instruction — in connection with the delivery of platform services. Such processors are contractually bound to handle data only as directed by mbi8 and to maintain appropriate security standards.
When you register an mbi8 account, we collect: full legal name, date of birth, email address, residential address, and a username and password of your choice. This information is mandatory for account creation and is used to establish and verify your identity in accordance with our KYC obligations.
To comply with our gaming licence and anti-money laundering obligations, mbi8 may request copies of identity documents — including your MyKad, passport, or driving licence — and proof of address documents such as a recent utility bill or bank statement. These documents are processed and retained in accordance with Section 8 of this Policy.
mbi8 collects data related to your financial transactions on the Platform, including deposit and withdrawal history, transaction amounts, payment method identifiers (e.g., bank account last four digits, registered Touch 'n Go account reference), and betting history. Full payment card numbers are not stored by mbi8 — card-present data is handled exclusively by PCI-DSS compliant payment processors.
mbi8 automatically collects technical data when you access the Platform, including: IP address, device type and operating system, browser type and version, session duration, pages visited, game history, in-play bet placement timestamps, and referral source. This data is used for platform security, fraud prevention, and to improve the mbi8 user experience.
If you contact mbi8 customer support via live chat, email, or any other channel, we retain records of that communication, including the content of messages and the date and time of contact. This data is used to resolve your query, train support staff, and maintain service records.
If you use mbi8's responsible gaming tools — including deposit limits, self-exclusion requests, cool-off periods, or reality check settings — we record the details of those preferences and restrictions. This data is used to enforce the protections you have requested and is treated with the highest level of confidentiality within mbi8's data systems.
mbi8 processes your personal data on the following legal bases:
5.1 Account Operation. To create, maintain, and manage your mbi8 account, including processing login sessions, updating account settings, and maintaining your balance and transaction records.
5.2 Payment Processing. To process deposits via Touch 'n Go eWallet, DuitNow, Boost, Maybank2u, CIMB Clicks, Public Bank, and other supported Malaysian payment methods, and to process withdrawal requests to verified payment methods in MYR.
5.3 Identity Verification. To verify your age (21+), identity, and address in accordance with KYC requirements mandated by our gaming licence and anti-money laundering obligations.
5.4 Security and Fraud Prevention. To detect, investigate, and prevent fraudulent activity, multi-accounting, bonus abuse, money laundering, and other prohibited conduct on the mbi8 platform.
5.5 Responsible Gaming. To implement and enforce the responsible gaming tools and restrictions you have activated, including deposit limits, self-exclusion periods, and session time controls.
5.6 Communications. To send transactional communications (account confirmations, deposit receipts, withdrawal confirmations, security alerts) and, where you have opted in, promotional communications about mbi8 bonuses and new game releases.
5.7 Platform Improvement. To analyse aggregated and anonymised usage data to improve the mbi8 platform, game lobby, payment flow, and customer support experience.
5.8 Legal Compliance. To comply with regulatory requests, court orders, or other legal obligations, including reporting requirements under gaming licensing frameworks.
6.1 mbi8 does not sell your personal data to third parties. We share personal data only where necessary for platform operations or where required by law, with the following categories of recipient:
6.2 All third-party data processors engaged by mbi8 are contractually required to process personal data only on mbi8's instructions, to implement appropriate technical and organisational security measures, and to comply with applicable data protection legislation.
7.1 mbi8 operates internationally, and some of our service providers may be located outside Malaysia. Where personal data is transferred to countries that do not provide an equivalent level of data protection to that applicable in Malaysia, mbi8 implements appropriate safeguards — including contractual data protection clauses — to ensure that transferred data receives an adequate standard of protection.
7.2 By registering an mbi8 account, you consent to the transfer of your personal data to countries outside Malaysia where necessary for the purposes described in this Policy, subject to the safeguards described above.
8.1 mbi8 retains personal data for as long as your account remains active and for such additional period as is required by our gaming licence obligations, anti-money laundering regulations, and applicable law — typically a minimum of five (5) years following account closure.
8.2 Transaction records and KYC documentation are retained for a minimum of five years from the date of the relevant transaction or the date of account closure, whichever is later, in compliance with financial record-keeping requirements.
8.3 Responsible gaming records — including self-exclusion requests and limit settings — may be retained for longer periods where required to enforce protections that remain in effect after account closure.
8.4 Following the expiry of mandatory retention periods, personal data is securely deleted or anonymised in accordance with mbi8's data disposal procedures.
9.1 mbi8 uses cookies and similar tracking technologies on the Platform for the following purposes:
9.2 You may manage your cookie preferences through your browser settings. Note that disabling essential cookies will impair your ability to use the mbi8 platform, including the login function. mbi8 does not use third-party advertising networks or behavioural tracking cookies.
10.1 mbi8 implements appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include TLS encryption of all data in transit, encryption of sensitive data at rest, role-based access controls, multi-factor authentication for administrative access, regular security assessments, and incident response procedures.
10.2 While mbi8 takes all reasonable precautions to protect your data, no internet transmission or data storage system can be guaranteed to be 100% secure. You are responsible for maintaining the security of your mbi8 login credentials and for notifying us immediately if you suspect any unauthorised access to your account.
10.3 In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected individuals, mbi8 will notify the relevant regulatory authority and, where required, affected individuals, in accordance with applicable data protection law.
Subject to applicable data protection law and our legal retention obligations, you have the following rights in relation to the personal data mbi8 holds about you:
To exercise any of these rights, contact mbi8 via live chat or by emailing [email protected]. We will respond to valid requests within 30 days. In some cases, we may need to verify your identity before processing a request.
12.1 The mbi8 platform is strictly for adults aged 21 and above. mbi8 does not knowingly collect personal data from individuals under the age of 21. Any account found to belong to a person under 21 will be closed immediately and any personal data collected will be deleted, except where retention is required by law.
12.2 If you believe that a minor has registered an mbi8 account or that personal data of a minor is held by mbi8, please contact support immediately.
13.1 mbi8 reserves the right to amend this Privacy Policy at any time. The revised Policy will be posted on this page with an updated effective date. Where changes are material, mbi8 will notify registered Players via email or platform notification. Your continued use of the mbi8 platform after the posting of an amended Policy constitutes your acceptance of that Policy.
If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data by mbi8, please contact our Data Privacy team via:
Please include your registered username and a clear description of your query or request. We will acknowledge receipt within 2 business days and aim to resolve all data privacy requests within 30 days of receipt.
Reminder: mbi8 is for adults aged 21 and above only. For information about our responsible gaming tools and self-exclusion options, visit our Responsible Gaming page.
Your personal data is secure. Your balance is in MYR. Your privacy is protected. Now explore everything mbi8 has to offer — live casino, slots, jackpots, and sportsbook.
21+ only. Play responsibly. Online gambling involves financial risk.