MB8 Classic Privacy Policy – Personal Data Protection for Malaysian Users

1 Introduction

MB8 Classic ("we", "the company") operates an online Sports Betting platform at mb8classic.com. In the course of providing betting services to users in Malaysia — covering football, badminton, e-sports, jackpots, and live casino — we are required to collect and process our users' personal data.

This Privacy Policy has been drafted in compliance with the requirements of Malaysia's Personal Data Protection Act 2010 (PDPA) and covers all aspects of the collection, use, storage, disclosure, and deletion of personal data belonging to users of the MB8 Classic platform.

We believe transparency is the foundation of trust. That is why we have written this Privacy Policy in plain language that any everyday Malaysian user can understand — not in complex legal jargon. If you have any questions about how we handle your data after reading this policy, please reach out to us using the contact details provided at the end of this document.

2 Information We Collect

MB8 Classic collects various types of personal data depending on how you interact with our platform. The following are the categories of data we collect:

Data We Do Not Collect: MB8 Classic does not collect sensitive data such as medical information, religious beliefs, political views, or biometric data unless required by law or with your explicit consent for a specific purpose.

3 How We Use Your Personal Data

The personal data we collect is used for the following purposes, all of which are directly related to delivering MB8 Classic's services to you:

• Account Management: Create and manage your account, process your registration, and verify your identity;
• Transaction Processing: Processing deposits via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, and FPX, as well as handling your winnings withdrawals;
• Provision of Betting Services: Give you full access to all platform features, including Sports Betting on the Malaysia Super League and EPL, badminton, e-sports, jackpots, and Live Casino;
• Customer Support: Resolving enquiries, complaints, and technical issues you encounter;
• Security & Fraud Prevention: Detect and prevent fraudulent activity, money laundering, and unauthorised access to your account;
• Legal Compliance: Fulfil reporting obligations under applicable Malaysian laws;
• Product Improvement: Analysing aggregated and anonymised usage patterns to improve the mb8 classic platform;
• Service Communications: Send important notifications related to your account, security, and service updates.

MB8 Classic will not use your data for third-party marketing purposes or sell it to advertisers. Any marketing communications from MB8 Classic itself are optional, and you may opt out at any time.

4 Legal Basis for Data Processing

Under Malaysia's PDPA, mb8 classic processes your personal data on the following legal bases:

• Consent: For most data processing, we rely on the consent you provided during account registration. You may withdraw this consent at any time, though doing so may affect your ability to use certain services;
• Contract Performance: Certain data processing is necessary to fulfil the service agreement between you and mb8 classic — for example, processing your deposits and withdrawals;
• Legal Obligation: In certain situations, we are required by Malaysian law to process and retain your data, including for anti-money laundering purposes;
• Legitimate Interests: We process certain data on the basis of MB8 Classic's legitimate interests — such as fraud prevention and platform security — provided those interests do not override your fundamental rights.

5 Sharing Data with Third Parties

MB8 Classic does not sell or rent your personal data. However, we may share your data with the following selected parties under specific circumstances:

• Payment Service Providers: To process your deposits and withdrawals, we are required to share relevant transaction information with service providers such as Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, and FPX institutions including Maybank2u and CIMB Clicks. These providers are governed by their own privacy policies;
• Technology Service Providers: We engage selected third-party cloud service and technical infrastructure providers to support platform operations. All such providers are bound by strict confidentiality agreements;
• Regulatory Authority: Where required by Malaysian law or the directive of a competent authority, we will disclose the necessary information to regulatory bodies, law enforcement agencies, or courts;
• Identity Verification Services: For KYC purposes, we may engage licensed third-party identity verification services that operate in accordance with strict security standards.

6 Cookies & Tracking Technologies

The mb8 classic platform uses cookies and similar tracking technologies to enhance the user experience and ensure essential platform functions operate correctly. The types of cookies we use are as follows:

• Essential Cookies: These cookies are required for core platform functions such as login, user sessions, and security. Without them, the platform will not work properly. Essential cookies cannot be disabled;
• Performance Cookies: These cookies collect information about how users interact with the platform — such as the most frequently visited pages and error messages encountered. All information is aggregated and anonymised;
• Functional Cookies: These cookies allow the platform to remember your preferences, such as language, display settings, and login information (if you select "remember me");
• Analytics Cookies: We use analytics tools to understand overall platform usage patterns for product improvement purposes. This data is not linked to any individual user's identity.

You can manage cookie settings through your web browser preferences. However, disabling certain cookies may affect the functionality of the mb8 classic platform and your overall user experience.

7 Data Security

Protecting your personal data is a top priority for mb8 classic. We implement a range of technical and organisational security measures to safeguard your data against unauthorised access, disclosure, alteration, or destruction:

• Data Encryption: All data transmitted between your device and our servers is protected with 256-bit TLS/SSL encryption. Sensitive data stored in our databases is also encrypted;
• Access Controls: Access to user data is strictly limited to staff who require it to carry out their job responsibilities, based on the principle of least privilege;
• 24/7 Monitoring: Our systems are continuously monitored to detect any suspicious activity or unauthorised access attempts;
• Security Audit: mb8 classic conducts regular security audits and penetration testing to identify and address potential vulnerabilities;
• Staff Training: All staff with access to user data undergo regular data protection training.

8 Data Retention

MB8 Classic retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy or to comply with applicable legal obligations:

• Active Account Data: For as long as your account remains active, we retain all personal data necessary to provide our services;
• After Account Closure: Upon account closure, we retain your personal data for a minimum period of seven (7) years to fulfil our legal obligations under anti-money laundering regulations and financial reporting requirements;
• Transaction Data: Financial transaction records are retained for seven (7) years from the date of the transaction in accordance with legal requirements;
• System Log Data: Technical and security logs are retained for 90 days before being automatically deleted;
• Marketing Data: If you have consented to receive marketing communications, this data is retained until you withdraw your consent.

Once the retention period expires, your data will be securely deleted using methods that ensure it cannot be recovered.

9 Your Rights Under Malaysia's PDPA

As a MB8 Classic user based in Malaysia, you have the following rights regarding your personal data under the PDPA 2010:

To exercise any of the rights above, please contact the MB8 Classic Data Protection Officer by email at privacy@mb8classic.com or via our platform's live chat. We will verify your request and process it within 30 business days. In cases requiring additional review, this period may be extended to up to 60 days, with prior notice given to you.

10 Children's Data

The MB8 Classic platform is intended solely for individuals aged 18 and above. We do not knowingly collect personal data from anyone under the age of 18.

If you believe that someone under the age of 18 has registered an account with MB8 Classic or has provided us with their personal data, please notify us immediately at support@mb8classic.com. We will take prompt action to close the account in question, delete the associated data, and refund any funds that may have been deposited.

11 Cross-Border Data Transfers

In the course of operating the platform, some of your personal data may be stored or processed on servers located outside Malaysia. When this occurs, MB8 Classic ensures that such transfers are carried out with adequate protections in place, including:

• Use of recognised standard contractual clauses to safeguard data in international transfers;
• Ensuring that the recipient country or region provides a level of data protection comparable to Malaysia's PDPA;
• Binding data processing agreements with all third-party infrastructure providers.

Cross-border data transfers are carried out only when necessary for platform operations and with appropriate safeguards in place.

12 Changes to This Privacy Policy

MB8 Classic reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, legal requirements, or the services we offer.

When we make material changes to this Privacy Policy, we will:

• Updating the "Last updated" date at the top of this page;
• Send an email notification to all registered members informing them of the changes;
• Display an in-platform notice for at least 14 days before the changes take effect.

We encourage you to review this Privacy Policy periodically. Your continued use of the mb8 classic platform after any amendments take effect constitutes your acceptance of the updated Privacy Policy.

13 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact us through the following channels: