MB9 Privacy Policy – Data Protection Your Privacy

1. Introduction and Scope of This Policy

MB9 is committed to protecting the privacy and security of every member's personal data on our platform. This Privacy Policy clearly explains how we collect, use, store, disclose and protect your personal information when you use the website mb9.biz or the mb9 mobile app.

This Policy applies to all users of the MB9 platform, including website visitors, registered users, and active members. By registering or continuing to use the MB9 platform, you agree to how we manage your personal data as described in this document.

2. Information We Collect

MB9 collects various types of information depending on how you interact with our platform. Generally, the data we collect falls into two main categories:

Information you provide directly:

• Full name, national identity card number (MyKad) or passport
• Email address and mobile phone number
• Date of birth for age verification
• Current residential address
• Bank account details, e-wallet or payment method information you have registered
• KYC documents such as a copy of your ID card and proof of address
• Any information you provide when contacting customer support

Information collected automatically:

• IP address and device information (device type, operating system, browser version)
• General location data based on IP address
• Activity history within the platform, including games played and transaction records
• Cookie data and similar tracking technologies to enhance the user experience
• Platform access time logs and usage patterns

3. How We Use Your Data

Every piece of information we collect is used for legitimate and necessary purposes. mb9 uses your personal data for the following purposes:

Purpose of Use	Legal Basis
Member account management and verification	Contractual requirement
Deposit and withdrawal processing	Contractual requirement
Identity verification (KYC) and fraud prevention	Legal obligation
Sending account notifications and promotions	Legitimate interest / consent
Platform analytics and service improvement	Legitimate interest
Regulatory requirement compliance	Legal obligation
Customer support and dispute resolution	Contractual requirement

4. Disclosure of Data to Third Parties

MB9 does not sell your personal data to any third party. However, in certain limited situations, we may share your information with the following parties:

• Payment processors and banking partners — to securely process your deposits and withdrawals. All such parties are bound by strict confidentiality agreements.
• Cloud service and IT infrastructure providers — who assist us in hosting and maintaining the platform. Their access is limited to technical requirements only.
• Regulatory authorities and law enforcement — when required by law or a valid court order.
• Third-party fraud prevention services — to verify member identity and protect the platform from fraudulent activity.

In all of the above cases, MB9 ensures that the relevant third parties comply with data protection standards equal to or higher than our own.

5. Cookies and Tracking Technologies

The mb9 platform uses cookies and similar tracking technologies to enhance your experience. Cookies are small data files stored on your device that help us to:

• Maintaining your login session so you do not need to log in again each time
• Remembering your personal settings and preferences within the platform
• Analysing website traffic patterns to improve design and performance
• Detecting and preventing suspicious fraudulent activity

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of some areas of the MB9 platform.

6. Data Retention Period

MB9 retains your personal data only for as long as necessary based on the purpose of collection and applicable legal requirements. General data retention period guidelines are as follows:

• Active account data: For the duration that your account remains active with mb9.
• Financial transaction records: Minimum 7 years after the transaction date, in line with Malaysian tax and financial legal requirements.
• KYC documents: Minimum 5 years after account closure.
• Customer support communication logs: 3 years from the date of last interaction.
• Analytics cookie data: Maximum 13 months from the date of collection.

Upon expiry of the designated retention period, your personal data will be securely deleted or anonymised.

7. Your Rights as a Data Subject

As an mb9 member, you have the following rights regarding your personal data. We are committed to respecting and facilitating the exercise of each of these rights:

To exercise any of the above rights, contact the mb9 customer support team via Live Chat. All requests will be processed within 14 working days from the date the request is received.

8. Data Security and Protection Measures

MB9 continuously invests in cybersecurity infrastructure to ensure your personal data is always protected. The security measures we implement include:

• 256-bit SSL/TLS Encryption for all data in transit between your browser and our servers.
• Data encryption at rest (at-rest encryption) for all databases storing members' personal information.
• Role-based access control (RBAC) ensuring that only authorised personnel can access sensitive data.
• Regular security audits by independent third parties to identify and address potential system vulnerabilities.
• 24/7 threat monitoring with an intrusion detection system (IDS) that is active at all times.
• Two-factor authentication (2FA) available for all member accounts as an additional security layer.

9. Children's Privacy

The mb9 Platform is exclusively for users aged 18 and above. We do not intentionally collect or process any personal data from individuals under the age of 18. If we discover that a child's personal data has been collected without valid parental or guardian consent, we will take immediate steps to delete that data and close the account in question.

If you believe that a minor has registered on our platform, please contact the mb9 support team immediately.

10. Links to Other Websites

The mb9 platform does not contain links to third-party websites. All links within our platform are internal links to pages within the mb9.biz only. This ensures your browsing experience remains safe and controlled within an environment we fully manage.

11. Changes to This Privacy Policy

MB9 reserves the right to update or modify this Privacy Policy at any time. Any material changes will be communicated to members via in-platform notifications or email to the registered address at least 7 days before those changes take effect.

You are encouraged to review this page periodically to stay informed about how we manage your personal data. Continued use of the MB9 platform after any changes are published indicates your acceptance of the updated Privacy Policy.

12. Contact Us Regarding Privacy

If you have any questions, concerns, or complaints regarding how mb9 handles your personal data, or to exercise any of the rights outlined in this policy, please contact us through the following channels:

• Live Chat: Available 24/7 directly within the mb9 platform — the fastest way to get a response.
• Email: [email protected] — for written enquiries that require documentation.
• FAQ: Visit page FAQ for answers to the most frequently asked questions about privacy and account security.

The MB9 Data Protection Officer (DPO) team will handle every enquiry seriously and provide a response within 5 working days.