Last updated: May 2026
This Privacy Policy explains how mb88-login.my collects, uses, stores and protects the personal information of users who access our platform. By registering an account and using our services, you agree to the practices described in this policy. If you do not agree, please discontinue use of the platform.
We collect information in two ways: information you provide directly during registration and account use, and information collected automatically through your interaction with the platform.
Information you provide:
| Data Type | When Collected | Purpose |
|---|---|---|
| Email address | Registration | Account identification and communication |
| Password (encrypted) | Registration | Account security |
| Malaysian mobile number | Registration | Verification and security alerts |
| Full name | KYC verification | Identity confirmation before first withdrawal |
| Malaysian IC / Passport | KYC verification | Regulatory compliance and fraud prevention |
| Payment method details | Deposit / Withdrawal | Transaction processing |
| Date of birth | KYC verification | Age verification — 18+ requirement |
Information collected automatically:
| Data Type | Purpose |
|---|---|
| IP address | Security, fraud detection, geographic access control |
| Device type and operating system | Technical optimisation |
| Browser type and version | Platform compatibility |
| Session duration and activity logs | Security monitoring and responsible gaming |
| Transaction history | Regulatory compliance and dispute resolution |
We use the information we collect for the following purposes:
Account operation: To create and maintain your account, process deposits and withdrawals, and provide access to the platform’s game catalogue and sportsbook.
Regulatory compliance: To fulfil our obligations under applicable licensing requirements, including Know Your Customer (KYC) verification before processing withdrawals and Anti-Money Laundering (AML) transaction monitoring as required by our gaming licence framework.
Security: To detect and prevent fraudulent activity, unauthorised account access and money laundering. We monitor transaction patterns and login behaviour for anomalies that may indicate account compromise or policy violations.
Communication: To send account-related notifications including deposit confirmations, withdrawal processing updates, security alerts and bonus credit notifications. We do not send unsolicited promotional emails without your explicit consent.
Responsible gaming: To monitor engagement patterns that may indicate problematic gambling behaviour and to enforce responsible gaming tools that you have activated on your account, including deposit limits, session limits and self-exclusion.
Platform improvement: To analyse aggregated, anonymised usage data to improve platform performance, game selection and user experience.
All payment transactions on mb88-login.my are processed through secure payment infrastructure. We do not store full card numbers on our servers. DuitNow and Touch ‘n Go eWallet transactions are processed through the respective payment provider’s infrastructure — we receive transaction confirmation but not your full banking credentials.
Payment data is retained for the minimum period required by our licensing framework and applicable Malaysian financial regulations for audit and dispute resolution purposes.
We do not sell your personal information to third parties. We share your information only in the following circumstances:
Licensed payment processors: To process deposits and withdrawals through DuitNow, Touch ‘n Go, Visa, Mastercard and other supported payment methods. Each processor operates under their own privacy and security framework.
Regulatory authorities: When required by law, by our gaming licence conditions, or by a valid legal request from an authorised authority. This includes reporting obligations to relevant financial intelligence units as required by anti-money laundering regulations.
Identity verification providers: For KYC document verification, we may use licensed third-party identity verification services. These providers process your identity documents under strict data handling agreements.
Game providers: Providers such as Evolution Gaming, Ezugi, Pragmatic Play and NetEnt receive the minimum data necessary to deliver their games to your session. They do not receive your payment or full identity information.
We do not share your data with advertising networks or marketing data brokers.
| Data Category | Retention Period | Reason |
|---|---|---|
| Account registration data | Duration of account + 5 years | Regulatory requirement |
| KYC documents | Duration of account + 5 years | AML compliance |
| Transaction records | 7 years from transaction date | Financial regulatory requirement |
| Session and activity logs | 2 years | Security and dispute resolution |
| Responsible gaming records | Duration of account | Player protection |
| Marketing preferences | Until consent withdrawn | Compliance with consent requirement |
After retention periods expire, data is securely deleted or anonymised in a manner that prevents re-identification.
We implement the following technical and organisational security measures:
Despite these measures, no internet transmission or digital storage system is completely secure. If you become aware of any security concern related to your account, contact our support team immediately.
mb88-login.my uses cookies and similar technologies for the following purposes:
Essential cookies: Required for platform functionality — session management, login persistence and security. These cannot be disabled without affecting platform functionality.
Analytics cookies: Used to understand how users interact with the platform in aggregate. Data is anonymised before analysis.
Preference cookies: Store your platform preferences such as language and display settings.
You can manage cookie preferences through your browser settings. Disabling essential cookies will affect your ability to use the platform.
As a registered user, you have the following rights regarding your personal data:
Access: Request a copy of the personal data we hold about you.
Correction: Request correction of inaccurate personal data.
Deletion: Request deletion of your personal data, subject to our regulatory retention obligations. Note that data required for regulatory compliance cannot be deleted during the mandatory retention period.
Restriction: Request that we restrict processing of your data in certain circumstances.
Withdrawal of consent: Where processing is based on your consent, you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.
To exercise any of these rights, contact our support team via live chat or email with your registered account details.
Data related to your responsible gaming settings — deposit limits, session limits, loss limits, self-exclusion records — is treated with the highest level of protection and is not used for marketing purposes under any circumstances. Self-exclusion records are retained for the full duration of the exclusion period and beyond to prevent circumvention through re-registration.
We may update this Privacy Policy to reflect changes in our data practices or legal requirements. When we make material changes, we will notify registered users by email and display a notice on the platform. Continued use of the platform after notification constitutes acceptance of the updated policy.
For privacy-related queries, data requests or concerns about how we handle your information, contact our support team through the live chat on mb88-login.my or via email at the address provided in your account contact section. We aim to respond to all privacy queries within 5 business days.
