Mibox8 Privacy Policy – Malaysian User Data Protection

1. Information & Data We Collect

Mibox8 collects personal information from users in several ways — either directly through the registration and platform usage process, or automatically through industry-standard tracking technologies. Below are the categories of data we collect and the purposes for doing so:

1.1 Data You Provide Directly

When registering and using the mibox8 platform, you provide us with the following information:

1.2 Automatically Collected Data

When you use the mibox8 platform, our systems automatically record the following technical information for purposes of security, platform performance, and user experience improvement:

• IP Address — Used to detect suspicious access attempts and ensure account security.
• Browser type and version — Allows us to optimise the platform's display across different devices.
• Device operating system — Helps our technical team resolve compatibility issues.
• Pages visited and time spent — Used to understand usage patterns and improve platform navigation.
• Access time and date — Retained as a security record for audit purposes.
• General geolocation data — Based on IP address to ensure compliance with platform operating regulations.
• Betting and transaction records — Retained for dispute resolution, internal audit, and legal compliance purposes.

1.3 Data from Third Parties

In certain circumstances, mibox8 may receive your personal data from legitimate third-party sources, including:

• Payment gateways such as Touch 'n Go eWallet, GrabPay, and FPX for transaction verification purposes.
• Third-party identity verification services we use for the KYC process.
• A search engine or marketing platform, if you arrived at mibox8 through one of our digital marketing campaigns.

In all cases, mibox8 collects only the minimum data necessary for the stated purpose, and ensures that any third parties involved are held to equally appropriate data protection standards.

2. How mibox8 Uses Your Personal Data

Mibox8 uses the personal data collected solely for legitimate purposes necessary to operate the platform and improve our services. The specific purposes for data use are as follows:

2.1 Account Management & Services

• Creating and managing your mibox8 account — including processing your registration, OTP verification, and storing your personal preferences.
• Processing your deposits and withdrawals via your chosen Malaysian payment method — whether Touch 'n Go eWallet, GrabPay, DuitNow, FPX Maybank2u, CIMB Clicks, Boost, or ShopeePay.
• Crediting eligible bonuses and promotions to your account, including the Welcome Bonus and ongoing promotions.
• Providing effective customer support whenever you reach out to our team via live chat or email.
• Sending important account notifications such as deposit confirmations, withdrawal processing updates, and security alerts.

2.2 Security & Compliance

• Detecting and preventing fraud, money laundering, bonus abuse, and other unlawful activity on the platform.
• Conducting KYC (Know Your Customer) processes to meet anti-money laundering compliance requirements.
• Monitoring accounts for suspicious activity and taking appropriate protective measures.
• To fulfil applicable legal and regulatory obligations, including lawful requests from Malaysian authorities.
• Maintaining betting and transaction records for audit purposes and the resolution of any disputes.

2.3 Platform Improvements & User Experience

• Analyzing platform usage patterns to identify areas for improvement in design, navigation, and performance.
• Running A/B tests to determine the most effective way to present information to Malaysian users.
• Optimizing platform speed and performance across the range of devices and internet connections commonly used in Malaysia.
• Developing new features that are relevant to local users' needs and preferences — such as integration with the latest Malaysian payment methods.

2.4 Marketing Communications (With Your Consent)

With your consent, mibox8 may use your email address and phone number to send you information about promotions, bonus offers, and platform updates. You may opt out of marketing communications at any time through your account settings or by contacting our support team.

3. Sharing & Disclosure of Personal Data

Mibox8 does not sell, rent, or commercialize your personal data to any third party for their own marketing or commercial purposes. This is a commitment we take seriously. However, there are limited situations where we need to share your data with specific parties:

3.1 Trusted Service Providers

To operate effectively, mibox8 works with a select group of third-party service providers. Data shared with them is kept to a minimum and governed by strict confidentiality agreements:

• Payment Gateway — Touch 'n Go, GrabPay, DuitNow, FPX, and other payment providers receive only the minimum transaction data required to process your deposits and withdrawals.
• Identity Verification Services — Third-party KYC providers who assist us in verifying user identities and meeting anti-money laundering compliance requirements.
• Cloud Infrastructure Services — Server and digital infrastructure providers that store and process mibox8 platform data under strict security agreements.
• Analytics Providers — A web analytics service that helps us understand platform usage patterns in aggregated, anonymized form.

All of these service providers are required to adhere to appropriate data protection standards and may only use your data for the purposes specified in their service agreements with mibox8.

3.2 Legal Requirements

Mibox8 may disclose your personal data if required by law or a valid court order in Malaysia, or if we believe in good faith that such disclosure is necessary to:

• Complying with applicable legal obligations or legal proceedings.
• Protecting the rights, property, or safety of mibox8, our users, or the general public.
• Detecting, preventing, or addressing fraud, security issues, or technical problems.
• To assist investigations by legitimate Malaysian law enforcement agencies.

3.3 What We Will Not Do

• We will not sell your personal data to any advertising or marketing companies.
• We will not share your betting records or account activity with unrelated third parties.
• We will not use your data for credit profiling or financial assessments by third parties.
• We will not disclose your account information to anyone else, even if they claim to be a family member, unless there is a valid legal authority permitting us to do so.

4. Data Security & Protection Measures

Mibox8 continuously invests in digital security infrastructure to ensure your personal data and financial information are protected to the highest standard. Below are the specific security measures we have in place:

4.1 Data Encryption

• SSL/TLS 256-bit: All data transmitted between your browser or app and mibox8's servers is encrypted using SSL/TLS protocol with 256-bit keys — the same standard used by leading banking institutions.
• Encrypted data is stored: Sensitive data stored in our databases — including passwords and identification information — is encrypted using industry-recognised algorithms.
• No payment data storage: Your bank card number, bank account information, or eWallet details are never stored on mibox8's servers. All payment details are handled directly by registered payment gateways.

4.2 Access Control

• Access to user data within mibox8's internal systems is restricted to staff who require it to perform their duties — in line with the principle of least privilege.
• All internal access to user data is logged and regularly audited by our security team.
• Two-factor authentication (2FA) is enforced for all administrator access to mibox8's internal systems.

4.3 Security Monitoring

• A 24/7 security monitoring system that detects and alerts on any suspicious activity or intrusion attempts.
• Penetration testing is carried out periodically by independent third parties to identify and address potential security vulnerabilities.
• A clear security incident response procedure to ensure any data breach is addressed promptly and effectively.

4.4 User Responsibilities for Account Security

While mibox8 takes all reasonable steps to protect your data, account security also depends on your own actions:

• Use a strong, unique password for your mibox8 account — do not reuse passwords from other accounts.
• Do not share your login credentials with anyone, including family members.
• Always log out of your account when using a shared device.
• Keep your device updated with the latest security patches.
• Report to mibox8 support immediately if you suspect your account has been accessed without authorization.

5. User Rights Regarding Personal Data

As a mibox8 user in Malaysia, you have specific rights regarding your personal data. mibox8 respects and supports the exercise of these rights:

To exercise any of the rights above, please contact the mibox8 support team via 24/7 live chat or email us at support@mibox8.top. State the specific right you wish to exercise and we will process your request within 14 business days. In cases where identity verification is required, we may request proof of identity before proceeding.

6. Cookies & Tracking Technologies

Like most digital platforms, mibox8 uses cookies and similar tracking technologies to enhance the user experience and understand how our platform is used. Below is more information about the types of cookies we use:

6.1 Types of Cookies Used

• Essential Cookies: These cookies are required for the platform's core functions, such as maintaining your login session, remembering language preferences, and processing transactions securely. The platform cannot function properly without them.
• Performance Cookies: Collecting information on how users interact with our platform — which pages are visited most frequently, time spent in each section, and any error messages encountered. This information is gathered in aggregate format and cannot be used to identify any individual.
• Functional Cookies: Allows the platform to remember your preferences — such as font size, odds display settings, and your chosen sports — so you don't have to reconfigure them every time you log in.
• Security Cookies: Used to detect fraudulent activity, prevent unauthorised access, and verify that active user sessions are legitimate.

6.2 Managing Cookies

You can manage or block cookies through your web browser settings. Most modern browsers — whether Chrome, Firefox, Safari, or Edge — provide options to view, delete, or block cookies. Please refer to your browser's help section for specific instructions.

Please note that blocking all cookies may affect the functionality of the mibox8 platform — particularly features related to login security and saved personal preferences. We recommend allowing at least essential and security cookies for a smooth gaming experience.

6.3 Other Tracking Technologies

In addition to cookies, mibox8 may use other industry-standard tracking technologies such as web beacons and pixels for analytics purposes. These technologies function similarly to cookies and are subject to the same policy.

7. Data Retention Period

Mibox8 only retains your personal data for as long as it is needed for the purposes stated in this policy, or for as long as required by applicable law. Below are the general retention period guidelines for the different categories of data:

• Active account data: Retained for as long as your account is active and you remain a user of the mibox8 platform.
• Financial transaction records: Retained for a minimum of 7 years following the transaction, in accordance with Malaysian financial compliance and anti-money laundering legal requirements.
• Betting records: Retained for a minimum of 5 years for audit and dispute resolution purposes.
• Customer support communication logs: Retained for 2 years after the issue is resolved.
• Closed account data: Personal data for closed accounts will be anonymized or deleted within 90 days, unless a legal obligation requires certain records to be retained for longer.
• Security log data: Retained for 12 months for fraud detection and security audit purposes.

Once the relevant retention period has expired, your data will be securely deleted or anonymised in a manner that ensures it can no longer be linked to you personally.

8. Changes to This Privacy Policy

Mibox8 reserves the right to amend or update this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or improvements in how we protect user data. Every change will be accompanied by an updated "Last Updated" date shown at the top of this document.

For material changes that affect how we process your data, mibox8 will endeavor to notify you through:

• In-platform notifications when you log in to your mibox8 account.
• Email to the address registered on your account.
• A prominent notice on our website's main page prior to any changes taking effect.

Your continued use of the mibox8 platform after changes take effect constitutes your acceptance of the updated Privacy Policy. If you do not agree with the changes, you may close your account and request deletion of your personal data before those changes come into effect.

We recommend reviewing this Privacy Policy page periodically to ensure you are always aware of the latest version of our policy.

9. Contact Us Regarding Privacy

If you have any questions, concerns, or complaints regarding how mibox8 handles your personal data, or if you wish to exercise any of your privacy rights, please contact us through the following channels:

• 24/7 Live Chat: Accessible directly from within the platform once logged in — our support team is available in Bahasa Melayu at all times.
• Email: support@mibox8.top — for written requests relating to privacy and data access rights, please send an email with the subject line "Data Privacy Request".

Mibox8 is committed to responding to all privacy-related enquiries within 5 business days. For more complex requests such as data transfers or account deletion, the processing period is 14 business days from the date the request is received.