Mibox8 Privacy Policy – How We Protect the Personal Data of Malaysian Members

Mibox8 is an online sports betting, live casino, slots, lottery, and entertainment platform operating in Malaysia. We understand that member trust is our most valuable asset — and that trust begins with how we handle the personal information you entrust to us.

This Privacy Policy applies to all individuals who register an account, browse the website, use the mobile app, or interact with any mibox8 service in any way. It covers all personal data collected directly from you, automatically through platform use, and via third parties in connection with our services.

Mibox8 acts as the data controller — meaning we determine the purposes and means by which your personal data is processed. In fulfilling this responsibility, we adhere to best-practice data protection standards and are committed to ensuring your data is handled with care, security, and integrity at all times.

Mibox8 collects your personal data through three main channels: information you provide directly during registration or platform use, data generated automatically as you use our services, and information received from third-party payment service providers in connection with your transactions.

Data you provide directly:

• The username and password you choose during registration.
• An active Malaysian phone number for OTP verification and security communications.
• A valid email address for account communications and important notifications.
• Identity verification documents such as a copy of your Malaysian National Identity Card (MyKad) requested as part of the KYC (Know Your Customer) procedure where applicable.
• Payment account details — including the account holder name for e-wallets (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow) or bank account numbers (Maybank2u, CIMB Clicks via FPX) — for verification and withdrawal processing purposes.

Automatically collected data:

• The device's IP address, web browser type, operating system, and device information used to access mibox8.
• In-platform activity records — including betting history, lottery purchases, games played, and deposit or withdrawal transactions.
• Login session times and duration, along with general platform usage patterns.
• Cookie data and similar tracking technologies — as described in Section 6 of this policy.

Mibox8 uses the personal data it collects solely for legitimate purposes necessary to deliver quality services to our members. The following are the primary purposes for which your personal data is used:

Mibox8 does not use member personal data for fully automated decision-making that significantly affects you without human involvement, except in cases of fraud detection where temporary automated action may be taken to protect account security — and in all such cases, a manual review will be conducted within 24 hours.

Mibox8 does not sell, rent, or transfer members' personal data to any third party for third-party marketing or commercial purposes unrelated to mibox8's services. Personal data sharing is limited to the following situations only:

• Payment service providers: Information required to process your deposits and withdrawals is shared with providers such as Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and FPX service providers. This sharing is limited solely to the information needed for transaction verification and processing.
• Game software providers: Third-party Live Casino and slots providers may receive your unique account identifier (not your name or personally identifiable information) for the purpose of delivering gaming services.
• Governing authority: Personal data may be shared with law enforcement agencies or regulatory bodies when required by Malaysian law or a valid court order.
• Support service provider: Third-party customer support platform providers bound by strict confidentiality agreements, who may only use the data for the purpose of delivering support services to mibox8.

All third parties that receive personal data from mibox8 are bound by confidentiality and data protection obligations equivalent to or higher than the standards we apply ourselves. mibox8 conducts regular reviews of the privacy practices of our third-party service providers.

Mibox8 takes the security of member personal data seriously. We invest in robust security infrastructure and ensure our team consistently follows best practices in data protection. The security measures we implement include:

• 256-bit SSL Encryption: All communication between your browser and mibox8 servers is encrypted using TLS 1.3 with 256-bit encryption — ensuring no third party can read or intercept data in transit.
• Secure password storage: Member passwords are never stored in plain text. We use strong hashing algorithms with a unique salt for each account.
• Strict access controls: Access to member personal data within mibox8's internal systems is restricted to staff who genuinely need it to perform their duties, and all access is automatically logged.
• 24/7 security monitoring: mibox8's systems are continuously monitored by our security team to detect any suspicious activity, intrusion attempts, or anomalies that may indicate a security threat.
• Periodic security testing: mibox8 conducts regular penetration testing and security audits by independent security experts to identify and address vulnerabilities before they can be exploited.

While mibox8 implements all reasonable security measures, no system in the world can be guaranteed 100% secure against every threat. We encourage you to take your own protective steps, such as using a strong password, enabling two-factor authentication (2FA), and never sharing your login credentials with anyone.

Mibox8 uses cookies and similar tracking technologies to enhance the user experience, maintain login session security, and understand overall platform usage patterns. The following are the types of cookies used by mibox8:

You can manage cookie settings through your web browser preferences. Please note that disabling essential cookies may affect the functionality of the mibox8 platform — including the ability to log in and carry out transactions. Analytics cookies are optional and can be disabled without affecting your use of the platform.

Mibox8 member personal data is stored on protected servers. In certain cases related to the provision of specific services — such as third-party gaming platforms or support service providers — data may be processed outside Malaysia. In all such cases, mibox8 ensures:

• Data transfers are carried out only to providers that maintain adequate and equivalent data protection measures.
• Comprehensive data processing agreements have been signed with all third-party providers that process mibox8 member data.
• Data transferred is limited strictly to what is necessary for the relevant service purpose.

Regarding data retention periods, mibox8 adheres to the principle of storage limitation. Active personal data is retained for as long as your account remains active. Once an account is closed, certain records may be kept for a maximum of 7 years as required by applicable legal and anti-money laundering regulations. Data that is no longer needed will be securely deleted using recognised disposal methods.

As a mibox8 member, you have several important rights regarding your personal data. We fully respect these rights and are committed to making them easy to exercise:

Mibox8 may send members communications relating to promotions, bonuses, special events, and platform updates via SMS, email, or in-app notifications. All marketing communications are based on your preferences:

• During registration, you may choose whether or not to receive marketing communications from mibox8.
• You can update your communication preferences at any time through the notification settings in your mibox8 account.
• To stop receiving marketing emails, click the "Unsubscribe" link at the bottom of any promotional email you receive from mibox8.
• To stop receiving promotional SMS, reply "STOP" to the sender's number or update your preferences in your account settings.

Please note that opting out of marketing communications will not affect your receipt of important notifications related to account security, transaction verification, or winnings — as these are essential service communications required for the operation of your account.

Mibox8 services are intended for adults aged 18 and above only. mibox8 does not knowingly collect, process, or store personal data from individuals under the age of 18.

If we discover that personal data has been inadvertently collected from a minor, we will take immediate steps to delete that data and terminate the account in question. If you believe a child has registered an account on mibox8, please contact us immediately at support@mibox8.click so that the appropriate action can be taken.

Parents and guardians are encouraged to monitor their children's internet use and ensure that online betting platforms are not accessible to minors. mibox8 fully supports child protection efforts in the digital environment.

Mibox8 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, evolving legal requirements, or service improvements. Any significant amendments will be communicated to members via:

• In-platform notifications on mibox8 when you log in after an amendment takes effect.
• Email to your registered address at least 14 days before any significant amendments take effect.
• Update the "Last Updated" date at the top of this page.

If a proposed amendment materially affects how we use your personal data, we will seek your renewed consent before the amendment applies to your account. Continued use of the mibox8 platform after the effective date of minor amendments will be considered acceptance of the updated policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or the way mibox8 handles your personal data, please contact us through the following channels:

• Live Chat: Available 24/7 on the mibox8 platform. The fastest way to get a response — typically within 3 minutes.
• Privacy Email: support@mibox8.click — please state "Privacy Inquiry" in your email subject line to help expedite processing.

Our team operates in Bahasa Malaysia and will respond to all privacy-related enquiries within 5 business days. For more formal privacy rights requests, the response time is 14 business days as outlined in Section 8.