Privacy Policy MBK368 – Personal Data Protection for Malaysian Members

MBK368 ("we", "the Company") is the data controller for all personal information collected through the mbk368.app platform and related services. We understand how important privacy is to you, and we are committed to protecting your personal data in a transparent and responsible manner.

This Privacy Policy applies to all registered members, website visitors, and anyone who interacts with the MBK368 platform — whether through a web browser, mobile app, or any of our official communication channels including email and live chat.

This policy describes:

• What personal data we collect and how it is collected
• Why we need this data and how it is used
• Who your data may be shared with and under what circumstances
• Security measures we take to protect your data
• Your rights regarding your personal data under PDPA 2010

MBK368 collects various types of personal data depending on how you interact with our platform. The following are the main categories of data we collect:

Data We Do Not Collect: MBK368 never requests or stores your full password (only an encrypted hash), full credit/debit card details (only payment tokens stored by authorised payment processors), or your medical information.

MBK368 uses your personal data only for legitimate and necessary purposes. We do not process your data for anything unrelated to the services you use. The primary purposes are as follows:

• Account Management: Creating, verifying, and maintaining your MBK368 member account, including the identity verification (KYC) required by law.
• Transaction Processing: Securely process deposits and withdrawals via your chosen Malaysian payment methods, and maintain transaction records for accounting and audit purposes.
• Customer Service: Answering enquiries, resolving complaints, and providing technical support to MBK368 members via live chat, email, or other channels.
• Platform Security: Detect and prevent fraud, money laundering, unauthorised access, and activities that violate MBK368's Terms & Conditions.
• Legal Compliance: Fulfilling legal obligations, including reporting to Malaysian authorities where required by law.
• Platform Improvements: Analysing usage patterns in aggregate (without identifying individuals) to improve mbk368 platform features and performance.
• Service Communications: Sending important notifications about your account, changes to our terms, or security updates.
• Marketing (with consent): Send promotional information and MBK368 offers only where you have given explicit consent, and you may unsubscribe at any time.

Mbk368 does not sell, rent, or trade your personal data to any third party for their own marketing purposes. This is our absolute commitment to every member.

However, under certain circumstances, data may be shared with the following parties:

• Authorised Payment Processors: Parties such as DuitNow, Touch 'n Go, GrabPay, Boost, ShopeePay, and FPX providers (including Maybank2u and CIMB Clicks) require sufficient information to process your transactions. They are governed by their own privacy policies and security standards.
• Technology Service Provider: Companies providing hosting, analytics, technical support, and cybersecurity services required for mbk368 platform operations. All such providers are bound by strict confidentiality agreements.
• Malaysian Authorities: When required by law, court order, or a competent Malaysian government agency — including the Malaysian Anti-Corruption Commission (MACC) or the Royal Malaysia Police (PDRM) in the course of a legitimate investigation.
• Corporate Sharing: In the event of a merger, acquisition, or corporate restructuring, where data may be transferred to a successor entity — subject to equivalent privacy policy protections.

Mbk368 takes security infrastructure seriously to protect our members' personal data. Key security measures we have implemented include:

While we take all reasonable precautions, no security system is entirely immune to cyber threats. We encourage you to take your own security measures as well — such as using a strong password, keeping your login credentials private, and enabling 2FA on your MBK368 account.

The MBK368 platform uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions correctly.

Types of Cookies We Use:

• Essential Cookies (Required): Required for core platform functions such as secure login sessions, language preferences, and transaction verification. Cannot be disabled.
• Performance Cookies (Analytics): Anonymously collects information on how visitors use the platform — most frequently visited pages, time spent, and navigation paths. This helps us improve the MBK368 platform.
• Functional Cookies: Saving your preferences such as language selection, last betting limits, and display settings to provide a more personalised experience.
• Session Cookies: Automatically deleted when you close your browser. Used to maintain security during active sessions.

You can manage cookies through your web browser settings. Please note that disabling certain cookies may affect the functionality and your experience on the mbk368 platform. For more information on how to manage cookies, refer to your browser's help documentation.

As a data subject under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding your personal data held by MBK368:

To exercise any of the rights above, please contact us via support@mbk368.app with the subject line "PDPA Request – [request type]". We will respond within 21 business days.

MBK368 retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy, or as required by Malaysian law. General data retention guidelines are as follows:

• Active Account Data: For as long as your account remains active on the MBK368 platform, basic personal data is retained to enable the provision of services.
• Financial Transaction Records: Minimum 7 years after the transaction, in accordance with Malaysian accounting and tax legal requirements.
• KYC (Identity Verification) Records: Minimum 5 years after account closure, in accordance with anti-money laundering (AML) requirements.
• Security & Access Logs: 12 to 24 months for threat detection and security incident investigation purposes.
• Customer Support Communications: 3 years for support reference and dispute resolution.

Once the retention period expires, data will be securely deleted or permanently anonymised using procedures that ensure it cannot be recovered or re-linked to any individual.

The mbk368 platform may display links or integrations to third-party services – such as payment providers or game providers. Once you click those links and leave the mbk368 platform, this Privacy Policy no longer applies.

MBK368 is not responsible for the privacy practices or content of third-party websites. We encourage you to read the privacy policy of every website you visit before providing any personal information. That said, all payment processors we use for MYR transactions — including DuitNow, Touch 'n Go, GrabPay, Boost, ShopeePay, and FPX — are authorised entities that comply with Malaysian financial security standards.

The mbk368 platform is strictly for individuals aged 18 and above only. We do not knowingly collect, process, or store personal data from individuals under the age of 18.

If we become aware of or receive credible notification that personal data of a minor has been collected without valid parental or guardian consent, we will immediately take the following steps:

1. Immediately suspending the associated account
2. Deleting all collected data relating to that individual
3. Return any remaining account balance
4. Notify the parent or guardian if contact information is available

MBK368 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, technological developments, or new legal requirements.

When there are material changes, we will:

• Update the "Last Updated" date at the top of this document
• Display notifications within the MBK368 platform when you log in
• Sending email notifications to registered members for significant changes

We encourage you to revisit this page periodically. Your continued use of the mbk368 platform after any policy changes take effect will be considered acceptance of the revised policy. If you do not agree with any amendments, you have the right to close your account by contacting our support team.

MBK368 has appointed a Data Protection Officer (DPO) responsible for ensuring compliance with PDPA 2010 and handling all privacy-related enquiries or complaints.

For any enquiries, data access requests, or complaints relating to this Privacy Policy, please contact us:

This Privacy Policy was last updated on 1 January 2026 and takes effect on the same date. Previous versions are available upon request via email.