At mib8, privacy is not just a word we put in a document — it is a core value that shapes every decision we make about how we handle your data. This document clearly and transparently explains what we collect, why we need it, and how we keep it safe.
Before reading the full policy, here are the six most important things every mib8 member should know about how we protect your privacy.
All data processing activities at mib8 fully comply with Malaysia's Personal Data Protection Act 2010 (PDPA). We conduct regular compliance reviews and ensure our practices remain aligned with applicable Malaysian legislation at all times.
All data transmitted between your device and mib8's servers is protected with 256-bit SSL encryption — the same level of security used by Malaysia's leading banks. Data stored on our servers is also encrypted to the highest industry standards.
Mib8 has never and will never sell, rent, or disclose members' personal data to any third party for marketing or commercial purposes without your explicit prior consent. Your data belongs to you — we are simply its custodian.
You have the full right to access, correct, transfer, or request the deletion of your personal data at any time. The process for exercising these rights is straightforward and can be initiated simply by contacting the mib8 support team.
Mib8 only collects data that is strictly necessary to provide the platform's services, fulfil legal obligations, and ensure the security of your account. We do not collect data that is not directly relevant to the purposes clearly stated in this policy.
Your personal data is kept only for as long as necessary to fulfil the purpose for which it was collected, or as required by law. Once the retention period ends, data is securely deleted or anonymised in accordance with established procedures.
This Privacy Policy ("Policy") is published by mib8 ("we", "platform") and explains how we collect, use, store, protect, and disclose personal information relating to users ("you", "member") of the platform mib8.com.
This Policy applies to all personal information collected through: (i) the mib8.com website; (ii) the mib8 mobile app for iOS and Android; (iii) any communications between you and mib8 via email, live chat, or other channels; and (iv) your use of any services offered by mib8.
By registering a mib8 account or continuing to use the platform after any updates to this policy, you confirm that you have read and agree to how we manage your personal data as described in this Policy. If you do not agree, please discontinue use of the platform and contact us to close your account.
This Privacy Policy is to be read together with mib8 Terms & Conditions which is the master agreement between you and the platform. Any disputes relating to data privacy will be resolved in accordance with applicable Malaysian law, specifically the Personal Data Protection Act 2010 (PDPA).
Mib8 collects various types of personal information depending on how you interact with the platform. The following are the main categories of data we collect:
| Data Category | Example Information | How It Is Collected |
|---|---|---|
| Identity | Full name, MyKad number, date of birth, gender | Registration form, identity verification |
| Relationship | Email address, phone number, residential address | Registration forms, profile updates |
| Financial | Bank account number, digital wallet, transaction history | Deposit and withdrawal process |
| Transactions | Betting history, winnings, deposits, withdrawals | Automated system records |
| Technical | IP address, device type, web browser, operating system | Server logs, cookies, analytics |
| Usage | Pages visited, games played, session duration | Platform analytics, activity logs |
| Communications | Live chat records, support emails, complaints | Customer support interactions |
This includes all information you actively enter in registration forms, account profiles, identity verification processes, or when communicating with our support team. You are responsible for ensuring that all information provided is accurate and up to date.
When you use the mib8 platform, our systems automatically record certain technical information such as your IP address, device type, and usage data. This information is necessary to maintain account security, detect suspicious activity, and improve platform performance.
Mib8 uses your personal data only for legitimate and transparent purposes. Below are all the purposes for which your data is used:
Your identity and contact information is used to create and manage your mib8 account, process deposits and withdrawals via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX (Maybank2u, CIMB Clicks), provide access to all games on the platform, and communicate with you regarding your account.
Mib8 is required by Malaysian law to verify the identity of all members as part of its Know Your Customer (KYC) procedures and compliance with the Anti-Money Laundering Act 2001 (AMLA). Your identity data is used solely for these compliance purposes.
Technical and transaction data is used to monitor suspicious activity, detect unauthorised access attempts, prevent fraud, and maintain the integrity of the mib8 platform. This is a legitimate and critical interest in protecting all members on the platform.
Anonymised usage data is used to understand how Malaysian players interact with the platform, identify areas for improvement, and develop new features that are more useful to the mib8 community.
With your consent, we may send you information about mib8 promotions, bonuses, and new offers via email or app notifications. You can withdraw this consent at any time by unsubscribing through the link in any email or through your account settings.
Mib8 does not use your data to make automated decisions that materially affect you without human involvement. Every significant decision — such as account suspension or withdrawal rejection — goes through review by a qualified member of staff.
Mib8 does not sell or rent your personal data to any third party. However, we may share personal data in the following limited circumstances:
We work with a number of third-party service providers that help us operate the platform, including: payment processors for Touch 'n Go, GrabPay, DuitNow, and FPX transactions; RNG audit service providers; and cloud infrastructure service providers. All these providers are bound by strict data protection agreements and are only permitted to use your data for the specified purposes.
Mib8 may be required to disclose personal data to relevant authorities in Malaysia — including the Royal Malaysia Police (PDRM), Bank Negara Malaysia, or judicial authorities — when directed by law, a court order, or a legitimate investigative requirement. In all such cases, we disclose only the minimum information necessary.
In the event that mib8 undergoes any merger, acquisition, or sale of business assets, members' personal data may be transferred as part of those business assets. In such cases, we will notify members before their data becomes subject to a different privacy policy.
Mib8 never shares members' personal data with advertisers, marketing firms, or any other commercial entity for third-party advertising or marketing purposes without your explicit consent. If you receive unsolicited communications claiming to be from mib8, please report them to support@mib8.com immediately.
Mib8 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or accidental disclosure.
Access to members' personal data within mib8 is restricted to staff who require it to carry out their job functions (the principle of least privilege). All staff with access to sensitive data have undergone background checks and comprehensive data protection training.
Mib8 has established cybersecurity incident response procedures. In the event of a data breach affecting your personal information, we will notify the relevant authorities within 72 hours and contact you directly within a reasonable timeframe to explain what happened and what protective measures have been taken.
Mib8 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required under applicable Malaysian law.
| Data Type | Retention Period | Reason |
|---|---|---|
| Identity & Account Data | Throughout active account + 7 years | AMLA legal requirements |
| Financial transaction records | 7 years from the transaction date | Accounting & audit requirements |
| Customer support records | 3 years from the date of interaction | Dispute resolution |
| Technical log data | 12 months | Security & fraud prevention |
| Marketing data & preferences | Until consent is withdrawn | Consent-based |
Once the specified retention period has ended, your data will be securely deleted or fully anonymised so that it can no longer be linked to you. Our deletion process complies with industry standards for irreversible data destruction.
As a data processor compliant with Malaysia's PDPA, mib8 recognises and respects the following rights you hold over your personal data:
You have the right to request a copy of all personal data we hold about you. Requests will be processed within 21 business days from the date of receipt.
If any data we hold about you is inaccurate or out of date, you have the right to request an immediate correction at no charge.
You may request the deletion of your personal data under certain circumstances, subject to data retention obligations required by law.
You have the right to object to the processing of your data for direct marketing purposes at any time, and we will action that request promptly.
You have the right to receive your personal data in a machine-readable format for transfer to another service provider of your choice.
In certain situations, you have the right to request that we restrict the processing of your data while a dispute or request is being resolved.
To exercise any of the rights above, contact the mib8 Data Protection Officer at support@mib8.com with the subject line "Personal Data Rights Request". Please include your full name, account number, and details of your request. We will respond within 21 business days.
Mib8 uses cookies and similar tracking technologies to enhance your experience on the platform. The following are the types of cookies we use:
| Cookie Type | Purpose | Duration |
|---|---|---|
| Maintaining your login session, security, language preferences | Session / 30 days | |
| Understanding platform usage patterns and identifying technical issues | 13 months | |
| Remembering your preferences such as favourite games and display settings | 12 months |
Essential cookies cannot be disabled as they are required for the platform's core functionality. For analytical and functional cookies, you can manage your preferences through your web browser settings. Please note that disabling certain cookies may affect your experience on the mib8 platform.
In addition to cookies, mib8 also uses technologies such as web beacons and pixels to help us track the effectiveness of our email communications. Data collected through these technologies is anonymised and cannot be used to identify you as an individual.
Mib8 strictly prohibits the use of the platform by individuals under the age of 21. The platform is not designed for or intended to attract children or teenagers. We do not knowingly collect personal data from individuals under the age of 21.
If we discover that personal data belonging to an individual under the age of 21 has been collected, we will take immediate steps to delete that data and terminate the associated account. Parents or guardians who believe their child has registered an account with mib8 are urged to contact us immediately at support@mib8.com.
Mib8 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements. Each update will include a new effective date at the top of this document.
For any material changes to how we use or protect your personal data, mib8 will send a notice to your registered email address and/or display a prominent notification on the platform at least 14 days before the changes take effect. This gives you adequate time to review the changes and make an informed decision.
Your continued use of the mib8 platform after any Policy change takes effect will be considered your acceptance of the updated policy. If you do not agree with the changes made, you have the right to close your account and request deletion of your data before the changes come into effect.
If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by mib8, please contact our Data Protection Officer (DPO) through the following channels:
We are committed to responding to all privacy-related enquiries within 21 business days. For more urgent cases involving a potential data security breach, we will prioritise a response within 48 hours. If you are not satisfied with our response, you have the right to lodge a complaint with Malaysia's Department of Personal Data Protection (JPDP).
Protecting your personal data is not merely a legal obligation for mib8 — it is a moral responsibility we take seriously every day.
If you've ever wondered why platforms like mib8 need a lengthy and detailed privacy policy, the answer is simple: because you have the right to know. The right to know what happens to the phone number you registered, the banking details you entered, and the transaction records the system saves every time you make a deposit via Touch 'n Go or DuitNow. This is not merely a terms document — it is a trust contract between mib8 and over 1.2 million members across Malaysia.
The online betting industry does not always have a strong reputation when it comes to data protection. Too many platforms collect data without limits, sell it to advertisers, and leave users in the dark about what happens to their personal information. mib8 takes a deliberately different stance. We believe trust is the foundation of a healthy long-term relationship with our Malaysian player community — and that trust cannot exist without full transparency about our privacy practices.
Malaysia's Personal Data Protection Act 2010 (PDPA) is the legal framework underpinning all privacy practices mib8. The PDPA establishes core principles including consent requirements, purpose limitation, notification, and rights of correction and access. mib8 not only complies with all these principles — we go further in several respects because we believe it is the right thing to do for our community.
One of the most significant decisions we have made is our policy of never selling members' personal data to any third party for advertising or marketing purposes. This means other companies cannot use information about your playing habits, your location, or your financial details to target you with unsolicited ads. In an increasingly connected world where personal data is often treated as a commodity, mib8 takes the position that our members' data belongs to them — we are merely its custodian for as long as it is needed to provide our services.
Technical security of data at mib8 is built on a layered defence approach. 256-bit SSL encryption protects all data in transit — the same standard used by major Malaysian banks such as Maybank and CIMB. Sensitive data stored on servers is encrypted using AES-256. Our security monitoring systems operate 24 hours a day, 7 days a week to detect any suspicious activity. Regular penetration testing is carried out by independent security experts to ensure our protection systems remain effective against the latest cyber threats.
From a personal control standpoint, mib8 gives you real control over your data. You may request access to all data we hold about you. You may request a correction if any information is inaccurate. You may withdraw your marketing consent at any time through your account settings. And under certain circumstances, you may request the deletion of your data — we will process such requests with full respect, subject to the data retention obligations prescribed by Malaysian law, such as the AMLA requirement to retain financial transaction records.
We are also aware that trust can be easily lost when something unexpected occurs. That is why mib8 has established comprehensive incident response procedures. In the event of any security breach involving member data — however unlikely given our level of protection — we are committed to notifying the relevant authorities within 72 hours and contacting affected members directly with a full explanation and the protective measures taken. We will not conceal security incidents or downplay their impact.
Responsible gaming programme mib8 also carries important privacy dimensions. The usage data we collect — including playing habits, session duration, and betting patterns — may be used to identify members who might benefit from responsible gaming support. This use of data for member protection is the one instance where we apply analytics data for a purpose beyond product improvement alone, and we do so with a genuine commitment to safeguarding the wellbeing of our community.
Ultimately, this Privacy Policy is our promise to you. A promise that the data you entrust to mib8 will be handled with the utmost care, used only for purposes you have agreed to, and protected to the highest security standards we can provide. If you ever feel we have fallen short of this promise, reach out to us — the door of mib8's Data Protection Officer is always open to hear and resolve any concerns you may have.
This Privacy Policy reflects mib8's genuine commitment to protecting the personal data of over 1.2 million Malaysian members. We are fully compliant with the Personal Data Protection Act 2010 (PDPA) and the international security standard ISO 27001. Your data is protected with 256-bit SSL encryption at all times.
For any privacy enquiries or to exercise your rights, please contact the mib8 Data Protection Officer at support@mib8.com. Read also mib8 Terms & Conditions for a full overview of your rights and responsibilities as a member.
Your data is protected with bank-grade encryption, compliant with Malaysia's PDPA, and never sold to anyone. Play with peace of mind at mib8 — a platform that puts your security and privacy first.