Clear information about your personal data

mb18 Privacy Policy for Malaysian Users

This Privacy Policy explains how mb18 collects, uses, stores, shares and protects personal information when you visit the website, use account-related services or review Malaysia-focused sports betting and casino content.

Effective date: 1 January 2026
Privacy at a Glance

How mb18 approaches personal information

These feature blocks summarise the main principles applied by mb18. The complete policy below provides the formal details governing data processing.

CL

Clear Collection

mb18 explains the main categories of information collected and the practical reasons for using them.

MN

Data Minimisation

mb18 seeks to collect information that is relevant to service delivery, security and applicable compliance duties.

SH

Security Controls

Technical and organisational safeguards help reduce unauthorised access, alteration, disclosure and loss.

MY

MYR Transaction Privacy

Payment details may be processed for deposits, withdrawals, verification, fraud prevention and account reconciliation.

RG

Responsible-Play Data

mb18 may use activity information to operate limits, cooling-off periods and self-exclusion protections.

UR

User Rights

Eligible users may request access, correction or other appropriate action concerning their personal information.

Your privacy choices matter

By accessing mb18, you acknowledge that personal information may be processed as described in this policy. Where consent is required, mb18 will seek an appropriate indication of your choice. You may stop using mb18 if you do not agree with the processing necessary to provide the requested service.

1

Introduction

mb18 respects the privacy of Malaysian users and recognises that personal information requires responsible handling. This Privacy Policy describes the practices applied when an individual visits mb18, reviews content, communicates with support or uses any available account, payment, sports betting or casino-related feature.

References to “mb18”, “we”, “us” and “our” mean the website and the parties responsible for its operation. References to “user”, “player” and “you” mean the person whose personal information is processed. This policy should be read with the mb18 Terms & Conditions.

2

Scope of This Privacy Policy

This policy applies to information processed through the mb18 website, compatible mobile views and authorised support interactions. It covers users across Malaysia, including visitors from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya and Shah Alam, without limiting the policy to those locations.

The policy does not alter any mandatory privacy right available under applicable law. Where a particular mb18 feature gives a more specific privacy notice, that notice should be read together with this document. If the notices conflict, the more specific statement will apply to the relevant processing activity where legally permitted.

3

Personal Information We May Collect

The categories collected by mb18 depend on how you use the service. Registration and verification information may include your name, date of birth, username, contact details, residential address and documents used to establish identity or age. mb18 may also record communication preferences and account status.

Transaction information may include MYR deposit or withdrawal amounts, payment method, time, status and limited payment identifiers. Activity information may include login history, sports selections, casino categories viewed, reward participation, limits and account actions. Technical information may include IP address, browser type, device characteristics, operating system, referral information and security logs.

You should provide only accurate information requested through an authorised mb18 channel. Never send a password, complete banking credential or one-time verification code to a person who asks for it through an unverified message.

4

How Information Is Collected

mb18 may collect information directly when you create or update an account, submit documents, complete a transaction, adjust a responsible-gambling control or communicate with support. Information may also be generated automatically when your browser or device interacts with mb18.

Additional information may be received from payment processors, identity-verification services, fraud-prevention systems and other service providers involved in an authorised transaction. For example, a status update may confirm whether an FPX transfer was completed without giving mb18 unrestricted access to your bank account.

5

Purposes of Data Processing

mb18 may process personal information to create and administer accounts, deliver requested content, confirm eligibility, complete transactions and respond to support questions. Information may also be used to keep the service stable, remember suitable preferences and present relevant sports or casino categories.

Security-related purposes include authenticating users, detecting unusual access, preventing payment abuse and investigating suspected fraud. mb18 may analyse account activity to enforce the Terms & Conditions, resolve disputes, maintain records and protect other users. Data may also support responsible-gambling controls, including deposit limits, session reminders, cooling-off periods and self-exclusion.

6

Legal Grounds and Consent

Depending on the processing activity and applicable requirements, mb18 may rely on the performance of an agreement, compliance with a legal duty, legitimate operational interests or your consent. Legitimate interests may include maintaining website security, preventing fraud, improving usability and protecting the integrity of mb18 services.

Where processing depends on consent, you may withdraw that consent through an appropriate mb18 channel. Withdrawal does not affect processing completed lawfully before the request. Certain information may remain necessary to provide an account feature or satisfy retention, security and dispute-handling obligations.

7

MYR Payments, Verification and KYC

Users may encounter payment methods familiar in Malaysia, including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank and Hong Leong. Availability varies, and mb18 does not necessarily receive every detail held by the relevant bank or payment provider.

mb18 may process transaction references, account ownership details and verification documents to confirm identity, review withdrawals, prevent third-party funding and investigate unusual activity. KYC checks may compare submitted information with records supplied by authorised verification providers. Documents should be current, readable and submitted only through the designated mb18 process.

Payment information is not used to guarantee approval of a deposit or withdrawal. Transactions remain subject to account checks, method availability, valid limits and the applicable mb18 terms.

8

Cookies, Devices and Analytics

mb18 may use cookies and similar storage technologies to maintain sessions, remember preferences, support security and understand how pages perform. Essential cookies may be required for functions such as navigation, authentication or fraud prevention. Optional technologies may support usability measurement or preference management where permitted.

Browser controls may allow you to remove or block cookies. Disabling essential storage can prevent parts of mb18 from working correctly. Technical records may show whether users access football content, live dealer information or account pages, but mb18 seeks to use such information in a proportionate manner.

9

Sharing and Disclosure

mb18 does not treat personal information as an unrestricted commercial asset. Information may be shared with service providers where necessary for hosting, payment processing, identity verification, support, security, analytics or responsible-gambling controls. Providers are expected to handle information for defined purposes and under appropriate obligations.

mb18 may disclose information where required by a valid legal process, to protect rights or safety, or to investigate unlawful conduct. In a legitimate corporate restructuring, relevant information may transfer with the affected service, subject to applicable safeguards. mb18 does not publish a player’s identity merely because that person follows EPL, Liga Super Malaysia, UFC or casino content.

10

International Data Processing

Some technical, security or support providers may process information outside Malaysia. When an international transfer occurs, mb18 seeks to apply appropriate contractual, technical or organisational protections having regard to the information and the processing involved.

Data-protection standards can differ between locations. mb18 therefore limits transfers to circumstances connected with legitimate service needs and applies safeguards where required. International processing does not remove the privacy commitments stated in this policy.

11

Data Retention

mb18 keeps personal information only for as long as reasonably necessary for the purpose for which it was collected, subject to valid security, accounting, dispute-resolution and compliance requirements. Retention periods may differ between basic website logs, account records, identity documents, transaction histories and self-exclusion information.

When information is no longer required, mb18 may delete it, anonymise it or place it beyond ordinary operational use. Some records may be retained after account closure to prevent fraud, honour self-exclusion, respond to a dispute or meet an applicable obligation.

12

Information Security

mb18 uses proportionate safeguards intended to reduce unauthorised access, disclosure, modification, destruction and loss. Measures may include access restrictions, encryption in appropriate contexts, logging, system monitoring, staff controls and periodic review of service-provider arrangements.

No internet service can guarantee absolute security. Users must also protect their mb18 accounts by choosing a strong, unique password, securing personal devices and signing out from shared equipment. If you suspect that an account or device has been compromised, contact mb18 support promptly using the website information displayed below.

13

Your Privacy Rights

Subject to applicable rules and verification, you may ask mb18 to confirm whether personal information is being processed, provide access to relevant information or correct inaccurate details. You may also request deletion, restriction, objection or another available remedy where the circumstances support it.

Access Request information about relevant personal data held by mb18.
Correction Ask mb18 to update information that is inaccurate or incomplete.
Deletion Request removal where continued retention is not required.
Restriction Ask for eligible processing to be limited while a concern is reviewed.

mb18 may need to verify your identity before acting on a request. A request can be limited or declined where necessary to protect another person, preserve security, prevent fraud or comply with a valid obligation. mb18 will explain the outcome where appropriate.

14

Responsible-Gambling Information

mb18 may process betting patterns, deposit behaviour, session activity and requests for help to operate responsible-gambling protections. Such information may be used to apply user-selected limits, identify concerning behaviour, provide safety messages or administer a cooling-off period.

Self-exclusion records may be retained after other account information would ordinarily be removed because the record helps prevent inappropriate re-registration. Access to responsible-gambling information is restricted according to operational need. For further guidance, users should review the mb18 Responsible Gambling page.

15

Children and the 21+ Age Requirement

mb18 gambling-related services are intended only for adults aged 21 and above who are legally eligible to participate. mb18 does not knowingly invite children or underage individuals to create an adult account or provide personal information for gambling purposes.

If mb18 reasonably believes that an account belongs to an underage person, access may be suspended while age is investigated. Relevant information may be retained where needed to protect the individual, prevent repeated registration or meet applicable requirements.

16

Changes to This Privacy Policy

mb18 may revise this policy to reflect changes in services, technology, security practices or applicable privacy requirements. The effective date will be updated when a revised version is published. Material changes may also be highlighted through an appropriate mb18 notice.

You should review this page periodically. Continued use of mb18 after an updated policy takes effect means that the revised information has been made available to you, but it does not replace any consent that must be obtained separately under applicable rules.

17

Contact Us

Questions, concerns or privacy requests may be directed to the mb18 support team. The website email is [email protected] and is displayed as plain text in the footer. Please provide enough detail to identify the request without including a password, complete bank credential or one-time verification code.

mb18 may request reasonable proof of identity before disclosing or changing personal information. This protects users against unauthorised requests and helps the team respond accurately. Privacy questions will be reviewed according to the nature and complexity of the request.

Protect Your Account

Simple habits can strengthen your mb18 security

Keep your mb18 password private, avoid signing in through unfamiliar devices and never approve an unexpected DuitNow, FPX or eWallet request. Genuine support procedures should not require you to disclose a password or one-time verification code.

Review account activity regularly and report suspicious access without delay. If you use mb18 on a shared phone, tablet or computer, sign out when finished and avoid saving credentials in a public browser. These steps support the technical safeguards maintained by mb18.

Continue with Confidence

Explore mb18 with your privacy in mind

Return to the homepage for Malaysia-focused sports, casino, rewards and MYR payment information, or review the mb18 Terms & Conditions before using any account feature. Gambling-related content is intended only for eligible adults aged 21 and above.