Rujukan Laman

Privacy Policy at mb88my

We keep your personal information secure and separate from gameplay activity. When you open an account with mb88my, your data is encrypted end-to-end, your payment details stay isolated…

End-to-end encryptionSeparate payment ledgerAccount-only visibilityNo third-party sales
mb88my Privacy Policy at mb88my
REACH OUT

Contact Privacy Support

Questions about your data or account privacy reach us through these channels. We respond within 48 hours on business days.

Team online

Email Support

Send a privacy or data-access request to [email protected]. Include your account username and the specific data or action you're asking about.

In-App Chat

Open your mb88my lobby, tap Support, and choose 'Account & Privacy'. Chat agents can guide you through data requests or address account concerns in real time.

Account Settings

Navigate to your profile, select Privacy Settings, and review what data you've shared. Update email, phone, or payment method anytime without leaving your account.

SECURITY BACKBONE

How We Keep Your Data Safe

Data protection is not a afterthought at mb88my — it runs through every layer. Your password is hashed with industry-standard algorithms, your payment method is never stored in plain text, and session…

Password Hashing

Your password is hashed with bcrypt and salted on entry. We never store or transmit it in readable form. If you forget it, we send a reset link to your email only.

Payment Isolation

Payment method details are tokenized and stored separately from your profile. We never see your full card or bank details; payment processors handle those directly.

Session Security

Your login session expires after 30 minutes of inactivity. On logout or after expiry, your session token is invalidated. We recommend logging out on shared devices.

Audit Logging

Every account change — new email, payment method update, withdrawal request — is logged with a timestamp and sent as a verification email to help you spot unauthorised access.

Monthly Review

Our security team runs monthly penetration tests and encryption audits to catch vulnerabilities before they become threats. Results are shared with our compliance officer.

Data Retention Control

You can request a full data export or account deletion anytime. Exports arrive within 7 business days. Deletion removes your profile but retains transaction records for seven years as required by law.

Privacy Questions Answered

We collect your name, date of birth, email, phone number, and payment method. We also record your IP address and device type for security and fraud prevention. Gameplay data — games played, stakes, session times — is tied to your account but not shared with third parties.

Only you can view your balance and full transaction history when you log in. Our support team can see transaction records only to assist with disputes or verification, and only when you request it. We never display your data publicly.

Payment processors (Touch 'n Go, GrabPay, Boost dan FPX) see only what's needed to complete your deposit or withdrawal. We do not sell, rent, or share your account details with marketing, analytics, or unrelated services. Your data stays within mb88my.

Your profile and active account data are deleted immediately upon closure. However, transaction records are archived for seven years to comply with financial regulations and tax authorities. You cannot access archived records after closure, but they remain encrypted and protected.

Yes. Open your Account Settings, go to Privacy Settings, and select 'Request Data Export' or 'Request Account Deletion'. Data exports arrive within 7 business days. Account deletion removes your profile immediately; archived transaction records are retained for seven years per law.

We send a verification email every time someone logs in from a new device or changes your email, phone, or payment method. Review these alerts regularly. If you spot unauthorised activity, change your password immediately and contact our support team at [email protected].

We monitor for breaches continuously. If one occurs, we notify you within 48 hours via email and provide guidance on securing your account. We also report the breach to relevant authorities where required by law. All customer data is encrypted; even in a breach, your password and payment details remain unreadable.