MiBox8 Privacy Policy – Malaysian User Data Protection

1 Introduction

Mibox8 ("we", "Platform") takes our responsibility to protect every user's privacy seriously. This Privacy Policy is drafted in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and aims to clearly and transparently explain how we handle your personal information.

We understand that trust is the foundation of our relationship with users. We are therefore committed to never misusing the data you entrust to us. Every piece of information we collect is used solely for the purposes you have consented to, and to enable us to deliver a better, safer, and more efficient service to you.

This policy applies to all users who access the MiBox8 platform via the website, mobile app, or any other digital channel we operate. If you do not agree with any provision of this Privacy Policy, please discontinue use of our platform.

2 Types of Personal Data We Collect

In operating the platform, MiBox8 collects several categories of personal data depending on how you interact with us:

Data Category	Example Information	Primary Purpose
Identity Data	Full name, identity card number, date of birth	KYC verification, legal compliance
Contact Data	Email address, phone number	Account communications, security notices
Financial Data	Bank details, e-wallets, transaction records	Deposit and withdrawal processing
Technical Data	IP address, device type, web browser	Security, fraud prevention
Usage Data	Betting records, games played, activity logs	Service improvement, analytics

We only collect data that is strictly necessary for the stated purposes. This data minimisation principle ensures we do not gather excessive or irrelevant information beyond what is needed to operate the platform.

3 How We Use Your Data

The personal data you provide to us is used for the following purposes, all aimed at ensuring your experience on MiBox8 is safe, seamless, and enjoyable:

• Account management — Creating, verifying, and maintaining your account on the platform.
• Transaction processing — Processing deposits, withdrawals, and all financial transactions accurately and securely.
• Identity verification (KYC) — Ensures compliance with anti-money laundering legal requirements.
• Service Communications — Sending important notices related to your account, security, or platform updates.
• Fraud prevention — Detecting and blocking suspicious or unauthorised activity.
• Platform enhancement — Analysing usage patterns to improve features and user experience.
• Legal compliance — Fulfils reporting and compliance obligations to the relevant authorities.

4 Data Sharing & Disclosure

Mibox8 does not sell or trade your personal data. However, in certain limited situations, we may need to share your information with the following parties:

• Payment service providers — Such as payment gateways and partner banks, solely for processing your financial transactions.
• Technology service providers — Companies that help us operate our technical infrastructure, subject to strict confidentiality agreements.
• Legal authorities — When required by law, court order, or direction from a relevant regulatory authority.
• Fraud prevention partners — In cases involving fraud investigations or financial crime, limited information may be shared for investigative purposes.

Every third party that receives your data from mibox8 is bound by a data protection agreement ensuring they handle your information to a standard equal to or higher than our own policy.

5 Cookies & Tracking Technologies

The mibox8 platform uses cookies and similar tracking technologies to enhance your experience and ensure your session's security. Cookies are small text files stored on your device when you visit our platform.

• Essential Cookies — Required for core platform functions such as login, session security, and language preferences. These cookies cannot be disabled.
• Performance Cookies — Helps us understand how users interact with the platform so we can improve the overall experience.
• Functional Cookies — Storing your preferences such as display settings and game choices for a more convenient experience.
• Security Cookies — Used to detect unusual activity and protect your account from unauthorised access.

You can manage your cookie settings through your web browser. Please note that disabling certain cookies may affect platform functionality. For guidance on managing cookies, refer to your web browser's help section.

6 Data Security

Mibox8 continuously invests in security infrastructure to ensure your data remains protected at all times. The security measures we implement include:

• High-level data encryption using TLS 1.3 protocol for all communications between your device and our servers.
• An intrusion detection system (IDS) monitoring network traffic 24 hours a day, 7 days a week.
• Regular security audits conducted by independent cybersecurity experts.
• Strict access controls — only authorised staff with an operational need may access user data.
• Automated data backup systems at security-certified data centres.
• Two-factor authentication (2FA) is available for all user accounts as an added layer of protection.

7 Data Retention and Deletion

Mibox8 only retains your personal data for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law.

• Active account data — Retained for the duration your account remains active and for a specified period following account closure.
• Financial transaction records — Retained for a minimum of 7 years from the transaction date for compliance with Malaysian financial laws.
• KYC verification data — Retained for 5 years after the end of the business relationship, as required by anti-money laundering laws.
• Access & Security Logs — Retained for 12 months for security investigation purposes if required.

Once the retention period expires, your data will be securely deleted or anonymised so that it can no longer be linked to your identity. The deletion process follows security standards that ensure data cannot be recovered.

8 Your Rights as a User

Under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding your personal data held by MiBox8: