Privacy Policy

Privacy Policy mb8rock — Your Data, Our Responsibility

At mb8rock, your privacy is more than a legal obligation — it is our genuine commitment to every player. This document clearly explains how we collect, use, store, and protect your personal information while you use the mb8rock platform.

Last updated: 1 January 2026
256-bit SSL Encryption
Table of Contents
Data We Collect
Data Usage
Data Sharing
Data Security
Cookie Policy
Your Rights
256-bit SSL Encryption
Malaysia PDPA Compliance
No Third-Party Data Sales
Secure & Trusted Servers
Secure KYC Verification

How mb8rock Protects Your Privacy

Our approach to data privacy is built on six core pillars that ensure your personal information remains safe and under your control at all times.

Military-Grade Encryption

All personal data and financial transactions at mb8rock are protected with 256-bit SSL encryption — the same technology used by leading banking institutions in Malaysia. Your data cannot be read by any unauthorised party.

Secure & Verified KYC

The KYC documents you submit — including copies of your MyKad and proof of address — are stored in a separate encrypted system with strict access controls. Only specifically authorised personnel may access this data, and every access is recorded in an audit log.

Separate Data Storage

Player personal data is stored in a database fully isolated from the gaming system and daily operations. This separation ensures that in the event of any technical incident, your data remains protected and unaffected.

No Sale of Data to Third Parties

Mb8rock has never sold, rented, or traded your personal information to any third party for marketing or commercial purposes, and never will. Your data belongs to you — we are simply its custodian.

Malaysia PDPA Compliance

All data management practices at mb8rock comply with Malaysia's Personal Data Protection Act 2010 (PDPA). We conduct regular internal audits to ensure ongoing compliance with applicable legal requirements.

Immediate Incident Notification

In the event of any data security breach affecting your information, mb8rock will notify you within 72 hours via email or in-platform notification, in line with international data protection best practices.

This Privacy Policy applies to all mb8rock platform users, including website visitors, registered members, and mobile app users. By using our platform, you agree to the data processing practices described herein.

Information We Collect

To deliver a secure, seamless, and personalised experience, mb8rock collects various categories of information depending on how you interact with our platform.

Information You Provide Directly

When you register an account, complete the KYC process, contact customer support, or use any platform feature, you may submit the following information:

  • Identity information: Full name, national identification number (MyKad/passport), date of birth, and gender.
  • Contact information: Email address, mobile number, and current residential address.
  • Financial information: Bank account numbers, e-wallet details (Touch 'n Go eWallet, GrabPay, Boost), and deposit and withdrawal transaction records.
  • Verification documents: MyKad copy, passport, utility bill, or bank statement for KYC purposes.
  • Communications: Records of conversations with the customer support team via live chat or email.

Automatically Collected Information

Each time you browse the mb8rock platform, our system automatically records certain technical information for security and service improvement purposes:

Data Type Example Primary Purpose
Device data Device type, operating system, and screen resolution Display optimisation
Network data IP address, connection type, ISP Location detection & security
Browser data Browser type, version, and language settings Compatibility & user experience
Session data Pages visited, session duration, clicks, and navigation paths Analytics & UX improvement
Game data Wagering records, wins, losses, and play time Audit, game integrity & responsible gaming

How We Use Your Data

Mb8rock uses information collected solely for legitimate, clearly stated purposes. We do not use your data for any other purpose without first obtaining your permission.

Platform Operations Purpose

  • Safely open and manage your player account.
  • Process deposits and fund withdrawals accurately and promptly.
  • Verify your identity through the KYC process to prevent fraud.
  • Provide responsive and effective customer support.
  • Send important notifications related to your account, transactions, and security.

Security and Compliance Purpose

  • Detect and prevent fraud, money laundering, and any suspicious activity.
  • Fulfil anti-money laundering (AML) and counter-terrorism financing (CFT) compliance obligations.
  • Maintain complete audit logs for game integrity monitoring purposes.
  • Comply with applicable laws, regulations, and directives from relevant authorities.

Service Improvement Purpose

  • Analyse usage patterns to improve your gaming experience on the platform.
  • Personalise game recommendations and relevant promotional offers for you.
  • Conduct A/B testing and product research to develop new features.
Marketing: mb8rock only sends you promotional communications if you have given your consent during registration. You may withdraw this consent at any time through your account settings or by contacting customer support.

Legal Basis for Data Processing

Every instance of personal data processing carried out by mb8rock is based on at least one valid legal ground under Malaysia's Personal Data Protection Act 2010 (PDPA):

  • Consent: You have provided explicit consent at the time of registration or when specifically requested.
  • Contract performance: Processing is required to fulfil the contractual obligations between you and mb8rock.
  • Legal obligation: Processing is required to comply with applicable laws and regulations in Malaysia.
  • Legitimate interest: Processing is required for legitimate business interests such as fraud prevention and platform security.

Data Sharing with Third Parties

Mb8rock maintains a strict privacy policy regarding data sharing. We does not sell, rent, or disclose your personal information to external parties for commercial purposes. Data sharing only occurs in limited situations as follows:

Trusted Service Providers

We work with selected service providers who assist us in operating the platform — including payment gateway providers, identity verification services, cloud infrastructure providers, and licensed game suppliers. All these partners are bound by strict confidentiality agreements and are only permitted to use your data for purposes specified by mb8rock.

Legal and Regulatory Requirements

Mb8rock may be required to disclose your personal information to government authorities, law enforcement bodies, or courts when mandated by Malaysian law or a valid court order. In such situations, we will endeavour to notify you of the request where permitted by law.

All third parties involved in processing your data are required to meet data security standards equal to or higher than those we uphold. We regularly audit our partners to ensure ongoing compliance.

Data Security Measures

Protecting your personal data is mb8rock's highest priority. We continuously invest in the latest security infrastructure to ensure your information is always safeguarded:

  • Data encryption in transit: All communications between your device and mb8rock servers are secured with TLS 1.3 protocol and AES-256 encryption.
  • Data encryption at rest: Data stored in our databases is also encrypted to prevent unauthorised access.
  • Layered access control: Only staff with specific operational needs may access player data, with multi-factor authentication strictly required.
  • 24/7 security monitoring: Our automated threat detection system continuously monitors all platform activity around the clock.
  • Regular penetration testing: mb8rock conducts regular security testing by independent experts to identify and address vulnerabilities before they can be exploited.
  • Secure data backup: Data backups are performed regularly to separate locations with full encryption to ensure swift recovery in the event of a system failure.

Data Retention Period

Mb8rock retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy or as required by Malaysian law.

Data Category Retention Period Reason
Active account information Throughout the active account period Service operations
Financial transaction records 7 years after transaction AML legal requirements
KYC Documents 5 years after account closure PDPA & AML Compliance
Support communication logs 2 years Service quality control
Analytics and session data 13 months Platform performance analytics

Once the retention period expires, your data will be securely deleted or anonymised so it can no longer be linked to your identity.

Cookie Policy

Mb8rock uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

Types of Cookies We Use

  • Essential cookies: Required for core platform functions such as login, game sessions, and security. These cookies cannot be disabled.
  • Performance cookies: Collect information on how you use the platform to help us improve our services. All data is anonymised.
  • Functional cookies: Remember your preferences and settings such as language, game limits, and display options.
  • Analytics cookies: Help us understand aggregated platform usage patterns for product development purposes.

You can manage or delete cookies through your browser settings. However, disabling essential cookies may affect overall platform functionality. Please refer to your browser's help guide for more information on managing cookies.

Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have certain rights regarding your personal data processed by mb8rock. We fully respect these rights and make it easy for you to exercise them.

International Data Transfers

In operating the platform globally, a limited portion of your personal data may be processed or stored on servers located outside Malaysia — particularly in connection with cloud infrastructure and licensed game provider systems. In all such cases, mb8rock ensures that data transfers are only made to countries or organisations that provide a level of data protection equivalent to or higher than that required under Malaysia's PDPA, and subject to appropriate data transfer agreements.

Changes to This Privacy Policy

Mb8rock reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new technologies, legal requirements, or other operational reasons. When we make material changes, we will notify you via a prominent notice on the platform or by email before the changes take effect. The "Last updated" date at the top of this page will always reflect the latest version of our Privacy Policy.

Your continued use of the mb8rock platform after changes are published constitutes your acceptance of the latest version of this Privacy Policy. If you disagree with any changes, you should stop using the platform and close your account in accordance with the prescribed procedure.

Contact Our Data Protection Officer

If you have any questions, concerns, or complaints regarding this Privacy Policy or how mb8rock handles your personal data, our data protection team is ready to listen and assist you.

How to Reach Us:
Contact the mb8rock customer support team via in-platform live chat operating 24 hours a day, 7 days a week. You can also reach us by email at [email protected] (text display only). We communicate in English and commit to responding to all privacy-related inquiries within 3 business days.

Your Data Protection Rights at mb8rock

We fully respect your rights under Malaysia's PDPA. The following rights are available to you at any time.

1
Right of Access

You have the right to request a copy of the personal data we hold about you. Requests will be processed within 21 business days following successful identity verification.

2
Right to Rectification

If any of your personal data is inaccurate or incomplete, you have the right to request a correction. We will update your records within a reasonable timeframe once the request has been verified.

3
Right to Withdraw Consent

For data processing based on your consent (such as marketing communications), you may withdraw that consent at any time without affecting the validity of prior processing.

4
Right to Object to Processing

You have the right to object to the processing of your personal data in certain circumstances, particularly where processing is based on our legitimate interests and you have compelling grounds to object.

5
Right to Restrict Processing

In certain circumstances — such as when there is a dispute over data accuracy — you may request that processing of your data be temporarily restricted until the matter is resolved.

6
Right to Lodge a Complaint

If you believe your privacy rights have been violated, you have the right to file a complaint with the Personal Data Protection Commissioner of Malaysia. mb8rock will fully cooperate with any official investigation.

Safe & Trusted

Play with Full Confidence at mb8rock

Now that you understand our commitment to your privacy and data security, register a free account today and enjoy over 1,000 game options with your personal data protected at all times.

No registration fees
Data protected by 256-bit SSL
24/7 Support in Bahasa Malaysia
Responsible Gaming Warning: Gambling can be addictive. Please play within your means. If you or someone you know is experiencing a gambling problem, seek immediate help via the Responsible Gaming us. The minimum age to play at mb8rock is 18 years.
Bahasa Melayu