Member privacy is a commitment MB8MY never compromises on. This document clearly explains what data we collect, how it is used, who can access it, and your rights as the owner of that data.
The core principles that define how mb8my handles every piece of your personal data
All data transmitted between your device and mb8my's servers is protected with 256-bit SSL encryption — the same level of security used by Malaysia's major banking institutions. Your information is never transferred in plain text that could be read by third parties.
MB8MY has never and will never sell, rent or share members' personal data with any third party for marketing or other commercial purposes without your explicit consent. Your data belongs to you — it is not an asset for MB8MY to trade.
Mb8my uses your personal data solely for the purposes clearly stated in this Privacy Policy — account operations, payment processing, security verification, and service communications. There is no hidden or undisclosed secondary use of your data.
You have the right to request a copy of the personal data held by MB8MY, to correct any inaccurate data, to request deletion of your data under certain circumstances and to object to the processing of your data. All such requests can be submitted to the MB8MY support team.
All MB8MY member personal data is stored on servers protected by a multi-layered security system comprising firewalls, intrusion detection systems and strict access controls that permit only authorised personnel to access the data.
MB8MY will not send you any marketing or promotional communications without your prior consent. You may opt in or out of any promotional communications at any time through your account settings or by contacting our team.
MB8MY never sells member data. For any enquiries, contact our 24/7 support.
This Privacy Policy describes mb8my's practices for collecting, using, disclosing, and protecting the personal information you provide when registering and using the mb8my platform at mb8my.xyz.
MB8MY respects the privacy rights of every member and is committed to handling your personal information responsibly, transparently, and in accordance with internationally recognised best practices in data protection. By using the MB8MY platform, you agree to the collection and use of information as described in this policy.
This Privacy Policy applies to all mb8my services, including the website, iOS and Android mobile apps, and all communication channels between you and mb8my. If you disagree with any part of this policy, please stop using the platform and contact us to close your account.
Key Summary: MB8MY collects data necessary to operate our services. We do not sell your data. You have the right to access, correct, and request the deletion of your data. All data is protected by 256-bit SSL encryption.
Mb8my collects various types of personal information depending on how you interact with our platform. Below is a detailed breakdown of the data categories we collect:
MB8MY no store credit card numbers or full payment card details. All payment processing is handled by PCI-DSS certified third-party payment gateways, and mb8my receives only secure transaction tokens.
Mb8my uses collected personal data solely for purposes related to the provision, improvement, and security of our services. We do not use your data for purposes unrelated to platform operations without your consent.
MB8MY does not sell, rent, or transfer members' personal data to third parties for their own marketing purposes. However, in the course of operating the platform, MB8MY may share necessary data with the following categories of third parties, all of whom are bound by strict confidentiality obligations:
MB8MY may be required to disclose members' personal information to government authorities, law enforcement bodies or courts where we are obligated to do so under applicable law, or where we believe such disclosure is necessary to protect the rights, property or safety of MB8MY, our members or the public.
MB8MY's Commitment: We will never sell your data. Any data sharing that takes place is solely to enable us to deliver our services to you more effectively, and all third parties involved are contractually obligated to protect your data.
Mb8my continually invests in a comprehensive cybersecurity infrastructure to ensure your personal data is always protected against unauthorized access, loss, destruction, or accidental disclosure.
Technical security measures implemented by MB8MY include:
While MB8MY takes all reasonable precautions, no digital security system is 100% impenetrable. We therefore encourage members to take their own protective measures, such as using a strong, unique password and enabling 2FA on your MB8MY account.
Mb8my uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website. The following are the types of cookies we use:
These cookies are essential for the basic functionality of the MB8MY platform and cannot be disabled. They include login session cookies, security cookies, and cookies that store your basic preferences. Without these cookies, the platform will not function properly.
These cookies help MB8MY understand how members use the platform — which pages are visited most frequently, how long gaming sessions last and where users encounter issues. This information is used in aggregated, anonymised form to improve the overall platform experience.
These cookies store your preferences such as your selected language, display settings and login information you have chosen for your browser to remember. They make your experience more convenient by eliminating the need to reconfigure your settings each time you use the platform.
You can manage and delete cookies through your web browser settings. However, disabling certain cookies may affect the functionality of some parts of the MB8MY platform. For guidance on managing cookies in popular browsers, please refer to your browser's help documentation.
MB8MY retains your personal data only for as long as necessary to fulfil the purposes outlined in this policy, or as required by applicable law. The following are our data retention guidelines:
When data is no longer needed for its stated purpose and there is no legal obligation to retain it, MB8MY will securely delete or anonymise that data.
MB8MY fully respects your rights as the owner of your personal data. You have the following rights, which you may exercise at any time by contacting the MB8MY team:
You have the right to request a copy of all personal data mb8my holds about you. mb8my will respond within 30 business days from the date the request is received.
If you find that any personal data held by mb8my is inaccurate or incomplete, you have the right to request an immediate correction. Most profile information can be updated directly through your account.
Under certain circumstances, you may request that mb8my delete your personal data. Such requests will be considered subject to mb8my's legal obligations to retain specific data, such as financial records.
You have the right to object to the processing of your personal data for specific purposes, particularly for direct marketing. mb8my will respect your objection and cease processing for those purposes.
You have the right to receive your personal data in a structured, machine-readable format and to transfer it to another data controller where technically feasible.
In certain circumstances, such as when there is a dispute regarding the accuracy of your data, you may request that MB8MY restrict the processing of your data while the matter is being resolved.
To exercise any of the rights above, please contact the mb8my team via 24/7 Live Chat or email support@mb8my.xyz, stating the right you wish to exercise along with your account details for identity verification. mb8my may need to verify your identity before processing your request in order to safeguard your data security.
The MB8MY platform is an adult entertainment service restricted to individuals aged 18 and above only. MB8MY does not knowingly collect, use, or disclose the personal data of individuals under the age of 18.
If MB8MY discovers that personal data belonging to a minor has been collected without proper knowledge or through deceptive means, we will take immediate action to delete that data and close the associated account. Parents or guardians who believe their child has registered an MB8MY account without permission should contact us immediately via Live Chat or at support@mb8my.xyz.
mb8my applies an age verification process during registration and KYC to ensure no individual under 18 years of age uses our platform. Any breach of this age requirement constitutes a serious violation of mb8my's Terms & Conditions.
Mb8my reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or improvements to the way we operate. All amendments take effect upon publication of the updated version on the mb8my website.
When significant changes are made to how we use or process your personal data, mb8my will endeavour to provide reasonable notice — either by email to the address registered to your account, or via a prominent notice within the platform before the changes take effect.
It is your responsibility to check this page periodically. The "Updated" date at the top of this page indicates when this Privacy Policy was last revised. Your continued use of the MB8MY platform following the publication of any amendments constitutes your acceptance of the updated policy.
Current version: 1.0 | Effective date: 1 January 2026 | Governing language: Bahasa Melayu. In the event of any conflict between another language translation and the Bahasa Melayu version, the Bahasa Melayu version shall prevail.
If you have any questions, concerns, or requests regarding MB8MY's Privacy Policy or the handling of your personal data, please contact us through any of the following channels:
The MB8MY team is committed to responding to all privacy-related enquiries within 3 business days. For more complex requests, such as data access or data deletion applications, the process may take up to 30 business days depending on the complexity of the request.
MB8MY values the trust you place in us by using this platform, and we are constantly working to improve our privacy practices to better protect your personal information. Your feedback on this Privacy Policy and how we handle your data is always welcome and appreciated.
Awareness of data privacy among Malaysian internet users continues to grow year on year, and this is a development MB8MY welcomes. When users better understand their rights and are more discerning in choosing platforms they trust with their personal information, platforms that operate with integrity — like MB8MY — will continue to earn long-term member trust.
For most new players, the first question that comes to mind is: "What data does mb8my actually collect about me?" It's a perfectly reasonable question, and mb8my strongly encourages you to ask it. The short answer is that mb8my collects the information needed to operate your account securely — your name, phone number, email address, and payment details such as your DuitNow number or Touch 'n Go eWallet account used for deposits. We also collect basic technical information such as device type and IP address for security purposes.
The Know Your Customer (KYC) process is one of the most frequently asked questions among MB8MY members, particularly when making their first withdrawal and being asked to submit a copy of their MyKad. In reality, KYC is there to protect you — it ensures that no one else can withdraw funds from your account, even if they somehow manage to gain access to it. It is also a standard requirement across the global online entertainment industry to comply with anti-money laundering legislation.
MB8MY takes the handling of your KYC documents extremely seriously. Copies of your MyKad or passport are stored on encrypted servers with strictly limited access. They are used solely for identity verification purposes and can only be accessed by specifically authorised MB8MY security personnel. Once the legally mandated retention period has expired, these documents will be securely deleted.
Many members ask whether MB8MY stores their full bank account or eWallet details. The answer is no — MB8MY does not store full account numbers or sensitive payment information in any reusable form. When you make a deposit using DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, or FPX via Maybank2u or CIMB Clicks, the transaction is processed by a PCI-DSS certified third-party payment gateway. MB8MY only receives a verification token confirming that the transaction was successful — not your actual payment account details.
This means that even in the worst-case scenario where mb8my's systems are compromised by an unauthorized party, your bank account or eWallet details will not be exposed — because mb8my never stores that information directly. This layer of protection gives members the peace of mind that their financial transactions remain secure at all times.
Another way mb8my uses data is for platform usage analytics — understanding which games are most popular, when players are most active, and where players encounter difficulties navigating the platform. This data is collected and analysed in aggregated, anonymised form, meaning it is never linked to any individual member's identity.
This information is invaluable to MB8MY in making meaningful improvement decisions — for example, if data shows that many players are abandoning the deposit process at a particular step, the MB8MY technical team can investigate and resolve the issue. The end result is a smoother and more enjoyable gaming experience for all members. This is a use of data that delivers direct benefit to you as a member without any privacy risk.
MB8MY may send emails or in-app notifications about the latest promotions, weekend bonuses, or special Hari Raya offers to members who have given consent to receive marketing communications. If you no longer wish to receive these communications, you may withdraw your consent at any time via your account settings or by clicking the "unsubscribe" link at the bottom of any marketing email from MB8MY.
It is important to understand that "marketing communications" and "transactional communications" are different. You cannot opt out of transactional communications such as deposit confirmations, successful withdrawal notices, or important security alerts regarding your account — these are essential notifications related to the operation of your account, and MB8MY is required to send them to ensure the security and functionality of your service.
Ultimately, this Privacy Policy reflects MB8MY's core values — transparency and trust. We believe Malaysian players deserve to know exactly how their information is handled, and we are confident that by being open about our privacy practices, we can build a strong, lasting relationship with our members. MB8MY has been serving Malaysian players since 2019, and our reputation has been built on trust earned through consistent action every day. This Privacy Policy is part of our ongoing commitment to you.
Frequently asked questions on member privacy and data security
Your privacy is protected, your data is secure, and your trust is valued. Register for free today and enjoy over 100 of Malaysia's best games with easy deposits via DuitNow, Touch 'n Go, or GrabPay.
The mb8my team is available 24/7 via Live Chat to answer any questions about your privacy and data security.