MB18 Privacy Policy — Your Personal Data Protection

Mb18 ("we", "Platform") is fully committed to protecting the privacy of every player who uses our services at mb18.pro. This Privacy Policy transparently explains how we collect, process, store and protect your personal information when you register, play and interact with our platform.

This document is drafted in accordance with Malaysia Personal Data Protection Act (PDPA) 2010 and internationally recognised data protection principles. We regard your trust as our most valuable asset, one that cannot be compromised under any circumstances.

This Policy applies to all MB18 channels including the official website, mobile app, customer support Live Chat and any written communications between you and the MB18 team. Please read this document carefully as it contains important information regarding your rights as a user of our platform.

Mb18 only collects data that is strictly necessary for clearly stated purposes. We do not collect excessive or irrelevant information beyond the services we offer. Below are the data categories we collect and their respective purposes:

We also collect data you voluntarily provide through customer satisfaction surveys, referral programmes or participation in special mb18 promotions.

Every piece of data we collect is used solely for the stated purposes and will not be used beyond that scope without your consent. mb18 uses your personal data for the following primary purposes:

• Account management: Creating, verifying and maintaining your mb18 account, including secure login and account recovery processes.
• Transaction processing: Verifying and processing all deposits and withdrawals accurately and promptly to your registered payment method.
• KYC verification: Meeting legal requirements related to player identity verification, age verification and anti-money laundering (AML) compliance.
• Platform security: Detecting and preventing fraudulent activity, unauthorised access, bot usage or system exploitation that could compromise gaming integrity.
• Customer support: Responding to enquiries, resolving complaints and providing technical assistance via Live Chat, email or other communication methods.
• Responsible gaming: Monitoring gaming patterns to identify signs of problem gambling and providing timely assistance to players who need it.
• Marketing communications: Sending relevant promotional information, bonuses and exclusive offers — only to players who have consented to receive such communications.
• Platform improvements: Analysing aggregated usage data (without identifying individuals) to improve mb18's performance, interface and overall experience.

MB18 never sell, rent, or trade your personal data to any third party for marketing purposes. This is a core principle that is non-negotiable across all our operations.

However, in certain limited situations, mb18 may share your data with the following parties:

• Payment service providers: Financial institutions, e-wallet providers and payment processors required to complete your deposit and withdrawal transactions. All parties are bound by strict confidentiality agreements.
• Game software providers: Companies that supply slot games, Live Casino, and betting products to mb18 may receive minimal, non-personally identifiable game session data.
• Technical service providers: Cloud infrastructure providers, fraud detection services, and analytics tools that help us operate the platform safely and efficiently.
• Legal authorities: When required by law, court order or directive from a competent authority such as Bank Negara Malaysia or the Royal Malaysia Police, MB18 will disclose the necessary information.

Mb18 continually invests in the latest security infrastructure to ensure your personal data remains fully protected at all times. Our technical and organisational security measures include:

• Encryption in transit: All communications between your browser or app and mb18's servers use TLS 1.3 protocol with 256-bit encryption.
• Encryption at rest: Sensitive data stored in our databases — including identity information and financial records — is encrypted using AES-256.
• Two-factor authentication (2FA): mb18 provides a 2FA option for all accounts to add an extra layer of protection during login.
• Continuous threat monitoring: A 24/7 security monitoring system that automatically detects and responds to suspicious activity in real time.
• Regular audits: Internal and external security assessments are conducted regularly to identify and remediate potential vulnerabilities before they can be exploited.
• Staff training: All mb18 staff with access to player data undergo comprehensive information security training and sign binding confidentiality agreements.

While mb18 takes all reasonable precautions, no digital security system can be guaranteed 100% secure. We therefore also encourage you to play an active role in protecting your account by using a strong password and never sharing your login credentials with anyone.

Mb18 uses cookies and similar tracking technologies to enhance your experience on the platform. Cookies are small text files stored in your browser when you visit our website. Below are the types of cookies we use:

• Essential Cookies: Required for core platform operations such as login session verification, security and platform stability. These cookies cannot be disabled without affecting the website's core functionality.
• Preference Cookies: Saving your preferences such as language settings, display mode and other personal configurations so you don't have to reset them on every visit.
• Analytics Cookies: Helping us understand how players interact with the platform in aggregate — this information is used to improve navigation and user experience. Data is collected anonymously.
• Security Cookies: Used to detect suspicious login attempts, bot activity and other security threats that may compromise the platform or player accounts.

You can manage and delete cookies through your browser settings. Please note that disabling certain cookies may affect MB18 platform functionality, including the ability to remain logged in during your browsing session.

As an mb18 player, you have the following rights regarding your personal data, protected under Malaysia's Personal Data Protection Act (PDPA) 2010 and mb18's internal policies:

Mb18 retains your personal data for as long as your account is active and for a defined period after account closure, depending on the type of data and applicable legal requirements. Our retention policy is as follows:

• Active account data: Retained for as long as your account remains active and has not been officially closed.
• Financial transaction records: Retained for a minimum of 7 years after a transaction occurs, in accordance with Malaysia's financial and tax legal requirements.
• KYC records and identity verification: Retained for a minimum of 5 years after account closure to meet AML/KYC compliance requirements.
• Support communication logs: Retained for 2 years for reference purposes and the resolution of any disputes that may arise.
• Session data and technical logs: Retained for 90 days for security and fraud detection purposes before being automatically deleted.
• Marketing data: Deleted within 30 days after you withdraw your consent to marketing communications.

Once the specified retention period has expired, your data will be securely deleted or converted into a non-personally identifiable form using standardised data destruction methods.

Mb18 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our business practices, new legal requirements or developments in the data protection industry. Any material changes will be communicated to you through the following means:

• A prominent notice on the mb18 platform homepage prior to changes taking effect
• Email notification to all registered players at least 14 days before significant changes take effect
• In-platform notifications via your account notification centre

The "Updated" date at the top of this document always reflects the latest version of mb18's Privacy Policy. Continued use of our platform after the effective date of any change constitutes acceptance of the updated terms.

If you have any questions, concerns or complaints regarding how mb18 handles your personal data, our Data Protection Officer (DPO) team is ready to assist you.

If you are not satisfied with how mb18 has handled your privacy complaint, you have the right to lodge a complaint with Malaysia's Department of Personal Data Protection (JPDP), the regulatory authority for PDPA in Malaysia.