Mibox888 Privacy Policy – Player Data Protection in Malaysia

Mibox888 collects your personal information through several means when you interact with our platform. We only collect what is strictly necessary to provide a secure and fully functional service. The following are the categories of information we collect:

Registration and Account Information:

• Full name as stated in your official Malaysian identification document
• An active Malaysian phone number (used for OTP verification)
• A valid and active email address
• Date of birth (to verify that you are at least 21 years of age)
• Account password (stored in hashed form — unreadable by anyone, including mibox888 staff)

Identity Verification Information (when required):

• A copy of your MyKad or Malaysian passport for identity verification
• Other supporting documents that may be required to meet anti-money laundering (AML) obligations

Financial Transaction Information:

• Deposit and withdrawal records (amounts, timestamps, payment methods used)
• Transaction references from payment providers (DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, FPX)
• No credit card numbers or full bank account details are stored in mibox888's systems

Platform Activity Information:

• Gaming records – game types played, bets placed, wins, and losses
• Login activity — access time, IP address, device type, and browser used
• Preferences and settings saved within your account
• Communication records with the mibox888 customer support team

Mibox888 uses the personal information collected solely for purposes related to platform operations and player services. Each use of data has a clear and legitimate justification:

• Registration & Account Management: Enabling you to register, log in, and manage your mibox888 account securely
• Identity Verification: Ensuring all players meet the minimum age requirement of 21 and preventing duplicate registrations
• Financial Transaction Processing: Processing your deposits and withdrawals through legitimate Malaysian local payment methods
• Security & Fraud Prevention: Detecting and preventing unauthorised access, fraud, money laundering, and platform abuse
• Customer Support: Providing effective assistance to players who contact the mibox888 support team
• Legal Compliance: Complying with Malaysian legal requirements including PDPA 2010 and anti-money laundering regulations
• Platform Improvements: Analysing aggregated, anonymised usage patterns to improve the user experience
• Service Communications: Sending important notifications regarding your account, transactions, security updates and changes to terms

Mibox888 does not sell, rent, or trade players' personal information to any third party for commercial or marketing purposes. However, in the course of operating the platform, mibox888 may share the minimum necessary information with the following categories of third parties:

Authorised Payment Providers: DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay and FPX providers share transaction information necessary to process deposits and withdrawals. All these providers are subject to Bank Negara Malaysia regulations and maintain their own stringent privacy policies.

Game Providers: Third-party gaming platforms such as Evolution Gaming, Pragmatic Play, and Spribe may receive anonymised player identifiers for game verification and technical dispute resolution purposes. No full names or sensitive personal information are shared.

Legal Authorities: mibox888 will disclose player information to the relevant Malaysian authorities when required by law, court order, or in the course of an investigation into illegal activity. We will not make such disclosures voluntarily beyond what is legally required.

Security Consultants: In cases involving fraud investigations or serious security incidents, the minimum necessary information may be shared with registered cybersecurity consultants bound by strict confidentiality agreements.

Mibox888 implements multiple layers of technical and operational security to protect players' personal data from unauthorised access, disclosure, alteration, or destruction:

• Transit Encryption: All communications between your browser or app and mibox888's servers are protected with TLS 1.3 and a valid 256-bit SSL certificate
• Storage Encryption: Sensitive data is stored encrypted in the database — including passwords stored as irreversible hashes (bcrypt)
• Tiered Access Controls: Only authorised staff, based on their job requirements, may access player data, and all access is automatically logged
• Two-Factor Authentication: SMS OTP is used for logins and sensitive transactions as an added layer of security
• Continuous Monitoring: A threat detection system monitors the mibox888 platform around the clock to identify and respond to suspicious activity in real time
• Regular Security Audits: mibox888 undergoes regular third-party security assessments to identify and remediate vulnerabilities before they can be exploited
• Incident Response Plan: mibox888 maintains clear procedures for responding to data breaches — including notifying players and the relevant authorities within the timeframes required by law

Mibox888 uses cookies and related tracking technologies to ensure the platform functions correctly and to deliver a better user experience. We use three types of cookies:

Essential Cookies (Cannot Be Disabled): These cookies are required for the platform's core functions — maintaining login sessions, remembering items in your betting slip, and securing transactions. Without them, the mibox888 platform will not function properly.

Functional Cookies: These cookies remember your preferences such as language, display theme, and last game settings. They help personalise your experience and make returning to the platform more seamless and comfortable.

Analytics Cookies: mibox888 uses aggregated, anonymised analytics data to understand platform usage patterns – which pages are visited most frequently, which games are most popular, and where players encounter difficulties. This helps us improve the platform over time.

Mibox888 cookies are not used to build personalised advertising profiles, track your activity outside the platform, or share data with third-party advertising networks. You can manage and delete cookies through your browser settings, though doing so may affect the functionality of certain parts of the mibox888 platform.

Mibox888 may use the email address and phone number you registered with to send the following communications:

Service Communications (Non-Opt-Out): Critical notifications regarding account security, transaction verification, withdrawal alerts, and important changes to the Terms & Conditions or Privacy Policy. These communications are essential for account operations and cannot be disabled.

Marketing Communications (Opt-out Available): Information about new promotions, special bonuses, exclusive event offers, and platform-related news from mibox888. You may opt out of marketing emails at any time by:

• Click the "Unsubscribe" link at the bottom of any mibox888 marketing email
• Contacting customer support and requesting removal from the marketing mailing list
• Updating your communication preferences in your mibox888 account settings

Opt-out requests will be processed within 5 business days. Even after opting out, you will continue to receive essential service communications related to your account.

The mibox888 platform is exclusively for individuals aged 21 and above. mibox888 does not knowingly collect, store, or process any personal information relating to individuals under the age of 21.

If mibox888 discovers that personal information belonging to a minor has been collected unintentionally, we will take the following steps immediately:

• Suspending access to the account in question
• Deleting all personal information associated with the minor in question
• Returning any outstanding financial balance to the rightful account holder
• Taking appropriate action in accordance with Malaysian law

If you have reason to believe that a minor has registered for or is using the mibox888 platform, please contact us immediately at support@mibox888.click.

In the course of operating the mibox888 platform, some information may be stored or processed outside Malaysia — particularly when using internationally certified cloud infrastructure services or global technology providers. This is standard practice across the global technology industry.

Mibox888 ensures that any cross-border data transfers are carried out with adequate safeguards in place:

• The cloud infrastructure providers used comply with internationally recognised security standards (ISO 27001, SOC 2)
• Binding data processing agreements are signed with all third-party providers involved
• Transferred data remains encrypted both in transit and at rest
• Data transfers comply with Malaysia's PDPA 2010 requirements

Mibox888 does not retain players' personal data for longer than necessary. The following are the retention guidelines for different data categories:

• Financial Records & Transactions: 7 years from the date of transaction, in accordance with Malaysia's tax and anti-money laundering legal requirements
• Active Account Data: Retained for the duration of the active account plus 1 year after closure, to allow for the resolution of any outstanding disputes
• Customer Support Communication Records: 3 years from the date of last communication
• Access & Security Logs: 2 years for security investigation and fraud prevention purposes
• Identity Verification Documents: For the duration of the active account and up to 5 years after account closure, in accordance with AML requirements
• Marketing Data and Preferences: Until you request deletion or unsubscribe

Once the retention period has lapsed or the data is no longer needed for a legitimate purpose, mibox888 will securely delete or destroy it using procedures that ensure it cannot be recovered or accessed again.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and mibox888's internal policies, every registered player has the following rights regarding their personal data:

• Right to Access: You may request a copy of all personal data mibox888 holds about you. Requests will be processed within 21 working days.
• Right to Rectification: If you find that any of your information is inaccurate or out of date, you may request a correction and mibox888 will process it within 14 business days.
• Right to Request Deletion: Under certain circumstances — such as when data is no longer needed for its original purpose or where you object to unlawful processing — you may request deletion of your data. Please note that mibox888 may need to retain certain data to fulfil its legal obligations.
• Right to Object: You may object to the processing of your data for direct marketing purposes at any time, without providing any justification.
• Right to Restrict Processing: In certain circumstances, you may request that mibox888 restrict the way your data is processed.

To submit any data rights request, contact us at support@mibox888.click, stating the type of request and your account details. Your identity will be verified before the request is processed, to protect your privacy from unauthorised submissions.

Mibox888 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data management practices, new legal requirements, or improvements to the security technologies we use.

When significant changes are made to this Privacy Policy, mibox888 will:

• Updating the "Last Updated" date at the top of this page
• Notifying affected players via email or in-platform notifications
• In cases of highly significant changes that materially affect player rights, providing at least 30 days' notice before those changes take effect

Continued use of the mibox888 platform after any changes take effect will be considered acceptance of the updated Privacy Policy. We recommend reviewing this page periodically to stay informed of mibox888's latest privacy practices.

If you have any questions, concerns, or complaints about how mibox888 handles your personal data, or if you wish to exercise any of your data rights, please contact us through the following channels:

• Privacy Email: support@mibox888.click – include "Privacy Enquiry" in the email subject line for faster handling
• Live Chat: Available 24 hours a day, 7 days a week, directly within the mibox888 platform
• Response Time: General enquiries within 24 hours; formal data rights requests within 14–21 working days
• Language of Service: Bahasa Melayu and English

The mibox888 privacy team is committed to handling every enquiry seriously and transparently. If you feel we have not adequately addressed your concerns, you have the right to lodge a complaint with Malaysia's Personal Data Protection Department or the relevant regulatory body.

This Privacy Policy document is the official mibox888 document and complies with the requirements of Malaysia's Personal Data Protection Act 2010. For any legal enquiries relating to this policy, you may wish to seek independent legal advice.