Mibox888 Privacy Policy – Personal Data Protection for Malaysian Members

1. Introduction

This Privacy Policy ("Policy") describes how mibox888 ("Platform", "We") collect, use, store and protect your personal information when you register for and use our online casino services at mibox888.xyz.

mibox888 is committed to protecting the privacy of all members in Malaysia. We believe every player has the right to know exactly what data we hold about them, why we need it, and what happens to it. No unnecessary legal jargon — this is written so everyone can understand.

This Policy applies to all information collected through the mibox888.xyz website, mobile applications (if any), email communications, Live Chat, and any other interactions with the platform mibox888. It should be read together with Terms & Conditions ours, which is the binding document governing use of the platform.

2. Personal Data We Collect

mibox888 only collects data that is strictly necessary to deliver our services safely and efficiently. The following are the categories of data we collect:

We do not collect sensitive data categories such as health information, religious beliefs, or political affiliations unless specifically required for compliance with responsible gambling laws.

Data may also be collected indirectly when you interact with our platform — for example, when you contact customer support via Live Chat, any feedback you provide is collected for service improvement purposes.

3. How Your Data Is Used

Every piece of data that mibox888 we collect each serves a clear purpose. We do not collect data simply to store it without use. Here is how your data is used:

• Account Management: Creating, verifying, and managing accounts mibox888 yours, including password recovery and profile updates.
• Transaction Processing: Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, Maybank2u, CIMB Clicks and FPX, and settling withdrawals to the same methods.
• AML and KYC Compliance: To comply with anti-money laundering (AML) and Know Your Customer (KYC) requirements mandated under Malaysian law.
• Security and Fraud Detection: Identifying and preventing fraudulent activity, bot usage, multiple account registrations, and any other misuse of the platform.
• Customer Support: Assists you when you reach out via Live Chat, email, or Telegram — your communication history is retained to facilitate follow-up.
• Marketing Communications: Sending information about promotions, new bonuses, Hari Raya festive campaigns, and special events – only where you have given your consent to receive such communications.
• Platform Enhancements: Analysing usage patterns in aggregate (not individually) to improve the interface, speed, and game selection at mibox888.
• Responsible Gaming: Monitoring betting patterns to identify members who may need responsible gaming support and extending appropriate assistance.

We operate on a data minimisation principle — collecting only what is necessary and nothing more. Any use of your data beyond what is stated above requires your prior consent.

4. Data Sharing and Disclosure

mibox888 does not sell or rent members' personal data to any third party for marketing purposes. Full stop. However, there are limited situations where data may need to be shared with certain parties:

• Payment Processors: E-wallet and banking service providers such as Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, Maybank2u, CIMB Clicks and FPX receive only the minimum transaction data required to process your payment. These providers have their own privacy policies governing the use of that data.
• Game Providers: Third-party gaming platform providers that supply slots and live casino games at mibox888 may receive a session ID required to operate the game. Your personal identity data is not shared.
• Legal Authorities: We will disclose the required data if compelled to do so by a court order, directive from a law enforcement authority, or a valid legal compliance requirement under Malaysian law.
• Technical Service Providers: Vendors providing technical infrastructure such as cloud computing services, analytics, and fraud detection tools may process data in a limited capacity. All such vendors are bound by strict confidentiality agreements.

5. Data Security

mibox888 implements multiple layers of technical and organisational safeguards to keep your personal data secure at all times:

• 256-bit SSL Encryption: All communications between your device and our servers mibox888 encrypted using the latest TLS protocol. This ensures that data such as login credentials and transaction details cannot be read even if intercepted.
• Secure Password Storage: Member passwords are never stored in plain text. We use a strong one-way hashing function with a unique salt for each account.
• Two-Factor Authentication: Members are encouraged to enable two-factor authentication (2FA) for an additional layer of protection when logging in.
• 24/7 Monitoring: An automated monitoring system operates around the clock to detect any suspicious login activity, unauthorised access attempts, or unusual patterns.
• Regular Penetration Testing: Platform mibox888 undergoes regular security testing by independent parties to identify and address any vulnerabilities before they can be exploited.
• Internal Access Controls: Access to members' personal data within the organisation mibox888 is based on a "need-to-know" principle — only staff who require access to carry out their duties are granted it, and every access instance is logged.

While we take all reasonable steps to protect your data, no security system can be guaranteed to be 100% secure. We encourage you to do your part by using a strong password, not sharing your login credentials, and reporting any suspicious activity to us promptly.

6. Cookies & Tracking Technologies

Platform mibox888 uses cookies and similar tracking technologies to enhance your experience and ensure the platform functions correctly. The following are the types of cookies we use:

You can manage cookie settings through your browser. However, disabling essential cookies may affect the functionality of the platform mibox888 and cause certain features to malfunction.

We do not use third-party cookies for advertising or cross-site tracking purposes. The analytics cookies we use collect only aggregate data and not data that directly identifies individuals.

7. Your Rights as a mibox888 Member

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and recognised data protection best practices, you have the following rights regarding personal data held by mibox888:

To exercise any of the rights above, please contact the Data Privacy team mibox888 at support@mibox888.xyz. We will respond within 14 working days from the date your request is received.

8. Children's Data

Platform mibox888 is exclusively for individuals aged 18 years and above. We do not knowingly collect any personal data from individuals under the age of 18.

Registration process mibox888 requires date of birth verification, and the identity verification process during the first withdrawal requires a copy of the MyKad confirming age. Accounts found to belong to minors will be closed immediately and any collected data will be deleted.

9. Cross-Border Data Transfers

In the course of operating the platform mibox888, some data may be processed on servers or by vendors located outside Malaysia. This includes cloud computing infrastructure providers and international game providers.

When cross-border data transfers occur, mibox888 ensures:

• The recipient country or entity provides a level of data protection equivalent to or greater than Malaysia's PDPA
• Appropriate data processing agreements are finalised with all vendors who receive Malaysian member data
• Members' personal data is not transferred to parties that cannot provide adequate protection guarantees

We consistently choose vendors that comply with internationally recognised data protection standards to minimise risks associated with cross-border data transfers.

10. Data Retention Period

mibox888 does not retain your personal data for longer than necessary. The following are our data retention guidelines:

• Active Account Data: Retained for as long as your account remains active and in use. Accounts inactive for more than 12 months will be notified before any action is taken.
• Financial Transaction Data: Retained for a minimum of 7 years after the transaction date or account closure, as required under Malaysia's Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001.
• Support Communication Records: Retained for 2 years to allow for issue follow-up and service improvements.
• Security Log Data: Retained for 1 year for fraud detection and security audit purposes.
• Cookie Data: In accordance with the retention periods stated in section 6 above.

When data is no longer required and there is no legal obligation to retain it, mibox888 will delete or destroy that data securely and irreversibly.

11. Changes to This Privacy Policy

mibox888 reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, applicable laws, or platform updates.

When significant changes are made to this Policy, we will:

• Sending notifications via your registered email at least 7 days before changes take effect
• Displaying a prominent notice on the platform's main page mibox888
• Updating the "Last Updated" date at the top of this page

Continued use of the platform mibox888 after the effective date of any changes will be considered as acceptance of the updated Policy. We encourage you to review this page periodically.

12. Contact Us About Data Privacy

For any enquiries, requests or complaints relating to this Privacy Policy or how mibox888 handles your personal data, please contact our Data Privacy team:

• Email: support@mibox888.xyz (subject: "Data Privacy Enquiry")
• Live Chat: Available 24/7 within the platform — select "Privacy & Data" from the topic menu
• Telegram: @mibox888support

We are committed to responding to all privacy enquiries within 14 working days. For requests that require identity verification (such as data access or deletion requests), the process may take slightly longer to ensure your account's security.

All data privacy-related communications are handled in strict confidence and are only accessible by staff responsible for processing such requests.