Mb8rock Privacy Policy — Protecting Your Data Is Our Priority

1Information We Collect

Mb8rock collects various types of personal information when you register, log in, or interact with our platform. This collection is carried out transparently and only for legitimate purposes to enable us to provide you with the best service.

Information you provide directly:

• Full name, date of birth, and identification number (MyKad/passport) during the identity verification (KYC) process.
• Email address and mobile number used for account registration.
• Bank account or digital wallet details (account number, bank name) for deposit and withdrawal purposes.
• Hashed passwords — we do not store passwords in plain text.
• KYC supporting documents such as selfie photos, copies of identity cards, or bank statements when required.

Information collected automatically:

• Your IP address, device type, operating system, and browser version when you access the platform.
• Game session data including login times, games played, total wagering amounts, and game results.
• Financial transaction data — every deposit, withdrawal, and transfer on the platform is automatically recorded.
• Approximate location data (based on IP address) for security and compliance purposes.
• Cookie data and other tracking technologies you consent to when visiting our website.

2How We Use Your Data

Mb8rock uses the personal information collected for lawful and transparent purposes. We do not use your data for any purpose outside the scope stated in this policy without obtaining your consent first.

For marketing communications, you may withdraw your consent at any time by contacting our support team. Withdrawal of consent will not affect any processing carried out prior to the withdrawal.

3Information Sharing

Mb8rock maintains a strict policy regarding the sharing of your personal data. We not sell, rent, or transfer your personal data to any third party for marketing or commercial purposes. Data sharing only occurs in the following situations:

• Payment service providers — information required to process deposits and withdrawals is shared with trusted payment gateway providers such as Maybank, CIMB, Touch 'n Go, and DuitNow. These providers are bound by strict confidentiality agreements with mb8rock.
• Game providers — the minimum session data required to run games is shared with licensed game software providers that operate games within the mb8rock platform.
• Identity verification services — KYC data is shared with licensed identity verification service providers for document checks and background verification.
• Authorities and regulatory bodies — mb8rock will disclose the required information when mandated by Malaysian law or instructions from the relevant authorities.
• Business transfers — in the event of a merger, acquisition, or asset sale, user data may be transferred to the new entity, subject to equivalent privacy protections.

4Cookies and Tracking Technologies

The mb8rock website uses cookies and similar tracking technologies to enhance the user experience, maintain session security, and analyse platform usage patterns. The following are the types of cookies we use:

• Essential Cookies — required for basic website operations such as login session verification and security. These cookies cannot be disabled as they are critical to platform functionality.
• Performance Cookies — collects information on how visitors use our website, such as the most frequently visited pages and error messages received. This data is used for aggregate website improvement without identifying individuals.
• Functional Cookies — allows the website to remember preferences you have set, such as language, region, and display settings, to provide a more personalised experience.
• Analytics Cookies — used to understand how users interact with our platform for ongoing product improvement purposes.

You can manage cookie settings through your browser preferences. However, disabling essential cookies may affect platform functionality and your experience on mb8rock. For more information on managing cookies, refer to your browser's documentation.

5Data Security

Mb8rock invests seriously in data security infrastructure to ensure your personal information is always protected against unauthorised access, loss, or damage. The following are the security measures we practise:

• 256-bit SSL/TLS Encryption for all data in transit between your device and mb8rock servers.
• Data encryption at rest (at-rest encryption) for all sensitive data stored in our databases.
• Two-factor authentication (2FA) available to member accounts as an additional security layer during login.
• 24/7 security monitoring uses a real-time threat detection system that identifies and blocks suspicious activity immediately.
• Penetration testing conducted periodically by independent cybersecurity firms to identify and address system vulnerabilities.
• Internal access controls strict controls ensure that only specifically authorised staff can access user data, and every access is logged for audit purposes.

6Your Rights

As a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by mb8rock:

To exercise any of the above rights, please contact the mb8rock support team via Live Chat or email at [email protected]. We will process your request within 72 working hours.

7Data Retention & Deletion

Mb8rock retains your personal data for as long as your account is active and for the period required after account closure to fulfil our legal and business obligations. The following are general data retention guidelines:

• Active account data — retained for as long as your account is active on the mb8rock platform.
• Financial transaction data — retained for a minimum of 7 years after a transaction occurs, in line with Malaysian legal requirements relating to financial records and anti-money laundering.
• Customer support communication records — retained for 3 years from the date of last interaction.
• Game session data — retained for 2 years for dispute resolution and audit purposes.
• KYC and identity verification data — retained for 5 years after account closure in accordance with Malaysia's anti-money laundering (AML) laws.

Once the retention period expires, data will be securely deleted or anonymised using methods that ensure it can no longer be linked back to your identity. Early deletion requests may be submitted but are subject to review of any applicable legal obligations.

8Children's Privacy

The mb8rock platform is exclusively for adult users aged 18 years and above. We do not knowingly collect or process personal data from individuals under the age of 18.

During the registration and KYC verification process, mb8rock verifies the age of all new members. Should we discover or become aware that we have collected data from a person under the age of 18, we will take the following steps immediately:

• Suspending the account immediately while an investigation is carried out.
• Permanently deleting all personal data associated with the account from our systems.
• Returning any deposited funds to the original source in accordance with standard procedures.

If you believe someone under the age of 18 has registered or is using the mb8rock platform, please notify us immediately through our customer support channels. We take child protection seriously and will respond promptly to any such report.

9Third-Party Links

The mb8rock platform may contain references or links to third-party websites or services in certain contexts, such as game providers or support channels. mb8rock's Privacy Policy applies solely to the mb8rock platform and does not cover the privacy practices of any third party.

Mb8rock is not responsible for the privacy policies, content, or security practices of any third-party websites or services. We advise you to read the privacy policy of each platform you visit independently, especially before providing any personal information to them.

10Policy Amendments

Mb8rock reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, new legal requirements, or improvements in how we handle user information.

When any material amendment is made, mb8rock will:

• Updating the "Last Updated" date shown at the top of this page.
• Displaying a clear notice on the platform's home page for at least 7 days after the amendment takes effect.
• Sending email notifications to all registered members for significant and material changes.

Continued use of the mb8rock platform after an amendment notice has been displayed constitutes your acceptance of the updated policy. If you do not agree with any changes, you have the right to close your account by contacting our support team.

11Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or how mb8rock handles your personal data, our Data Protection Officer (DPO) team is ready to assist you.

You can reach us through the following channels:

• Live Chat — the fastest method, available 24/7 directly on the mb8rock platform.
• Telegram — contact our agents via the official mb8rock Telegram channel for prompt responses.
• WhatsApp — WhatsApp support service is available around the clock for privacy-related enquiries.
• Email — [email protected] for written enquiries requiring documentation or follow-up.

For data rights requests (access, correction, deletion), please clearly state your account number and the type of request so we can process it as quickly as possible. All requests will be handled within 72 business hours.

You may also lodge a complaint regarding personal data protection with the Department of Personal Data Protection Malaysia if you believe your rights under the PDPA have been violated by mb8rock.