Privacy Policy

Introduction

This Privacy Policy (hereinafter referred to as "the Policy") is published by MB8Rock (hereinafter referred to as "MB8Rock", "the Company", "we", "our", or "us") and governs the collection, use, storage, disclosure, and protection of personal data relating to all registered users and visitors (hereinafter referred to as "you", "the Player", or "the User") of the MB8Rock website and associated platform accessible at mb8rock.cam.

MB8Rock recognises that privacy is a fundamental right. We are committed to handling your personal data responsibly, transparently, and in accordance with applicable data protection principles. This Policy has been prepared to give you a clear understanding of how your information is managed from the moment you visit our Platform through to account closure.

This Policy is incorporated by reference into our Terms & Conditions. By registering an account, making a deposit, or otherwise using the MB8Rock Platform, you acknowledge that you have read and understood this Policy in its entirety and consent to the processing of your personal data as described herein.

Definitions

For the purposes of this Privacy Policy, the following terms shall have the meanings ascribed to them below:

Data Controller

MB8Rock acts as the Data Controller with respect to all Personal Data collected through the Platform. As Data Controller, MB8Rock determines the purposes for which and the manner in which your Personal Data is processed.

Where MB8Rock engages third-party service providers to process Personal Data on its behalf — such as payment processors, KYC verification partners, and fraud detection platforms — those parties act as Data Processors under binding contractual obligations that require them to process data only as directed by MB8Rock and to maintain appropriate security standards.

Questions, requests, or complaints regarding the processing of your Personal Data may be directed to MB8Rock's support team at the contact details set out in Section 15 of this Policy.

Data We Collect

MB8Rock collects Personal Data through various touchpoints across the Platform. The categories of data collected, together with the context in which each category is obtained, are described below.

When you create an account on MB8Rock, we collect the information you provide during the registration process, including:

• Full legal name;
• Date of birth (used for age verification — you must be 21 or above);
• Email address;
• Mobile phone number;
• Residential address (country, state/city — Malaysian players may provide their city of residence such as Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, or Shah Alam);
• Preferred currency (MYR/RM for Malaysian players);
• Username and encrypted password.

To satisfy our legal and regulatory obligations and to protect Players from fraud, MB8Rock collects identity verification documents. These typically include:

• Proof of Identity: Malaysian MyKad (NRIC), Driver's Licence, or valid Passport — front and back copies.
• Proof of Address: Utility bill, bank statement, or official government correspondence issued within the past three months, displaying your name and current address.
• Selfie with ID: A clear photograph of you holding your identity document beside your face.
• Source of Funds Documentation (where required): Bank statements or payslips to support AML compliance for high-value transactions.

When you deposit or withdraw funds on the Platform, we collect:

• Payment method details (e-wallet identifiers for Touch 'n Go eWallet, Boost, GrabPay; bank account details for Maybank2u, CIMB Clicks, Public Bank Online, Hong Leong Connect; FPX reference identifiers; DuitNow transfer references; cryptocurrency wallet addresses for BTC/USDT);
• Transaction amounts in MYR;
• Transaction timestamps and reference numbers;
• Deposit and withdrawal history.

We record the following data in connection with your use of games and betting services on the Platform:

• Game sessions, bet history, and wager amounts;
• Win and loss records;
• Bonus claims, wagering progress, and promotional participation history;
• Sports betting selections (e.g., Liga Super Malaysia matches, EPL fixtures, UFC events).

When you access the Platform, our systems automatically collect certain technical information, including:

• IP address and approximate geolocation (country and city level);
• Device type, operating system, and browser version;
• Session duration, page views, and navigation paths;
• Referring URL and exit pages;
• Cookie identifiers and local storage data.

If you contact MB8Rock's customer support team via live chat or email, we retain records of those communications, including the content of messages and any attachments provided, for quality assurance, training, and dispute resolution purposes.

Lawful Basis for Processing

MB8Rock processes your Personal Data on one or more of the following lawful bases, depending on the nature and purpose of the processing activity:

Purposes of Processing

MB8Rock processes your Personal Data for the following specific purposes:

• Account Administration: Creating, maintaining, and managing your MB8Rock Player account, including authentication and security.
• Payment Processing: Facilitating deposits via Malaysian payment methods (DuitNow, Touch 'n Go eWallet, FPX, Boost, GrabPay, Maybank2u, CIMB Clicks, Public Bank Online, Hong Leong Connect, BTC/USDT) and processing withdrawals in MYR.
• Identity Verification (KYC): Verifying your identity and age (minimum 21 years) to comply with regulatory requirements and to protect against identity fraud.
• Anti-Money-Laundering (AML) Compliance: Monitoring transactions for suspicious activity and reporting obligations as required under applicable financial crime regulations.
• Responsible Gambling: Monitoring gameplay patterns to identify potential problem gambling behaviour and to apply appropriate safeguards including deposit limits, session alerts, and self-exclusion tools.
• Customer Support: Responding to your queries, resolving disputes, and maintaining a record of support interactions.
• Platform Security & Fraud Prevention: Detecting and preventing unauthorised access, bonus abuse, account takeover, and other fraudulent activities.
• Platform Improvement: Analysing aggregate, anonymised usage data to improve the performance, design, and features of the Platform for Malaysian players.
• Legal Compliance: Meeting our obligations under applicable laws, including responding to lawful requests from regulatory authorities.
• Marketing (with consent): Sending promotional communications about MB8Rock offers, bonuses, and new features, where you have opted in to receive such communications.

MB8Rock will not process your Personal Data for any purpose incompatible with those listed above without first obtaining your separate consent or as otherwise permitted by applicable law.

Data Sharing & Disclosure

MB8Rock does not sell, rent, or trade your Personal Data to third parties. We may disclose your data to the following categories of recipients, strictly for the purposes described in this Policy:

We share transaction data with payment processors to facilitate deposits and withdrawals. This includes providers supporting DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank2u, CIMB Clicks, Public Bank Online, Hong Leong Connect, and cryptocurrency platforms. These providers receive only the data necessary to execute the transaction and are contractually prohibited from using it for any other purpose.

To fulfil our KYC obligations, we may share your identity documents and verification data with accredited third-party identity verification service providers. These providers process data solely for verification purposes under strict confidentiality agreements.

We work with specialist fraud detection and anti-money-laundering compliance partners who process account and transaction data on our behalf for the purpose of identifying and preventing financial crime. All such partners operate as Data Processors under binding data processing agreements.

MB8Rock may disclose your Personal Data to regulatory authorities, law enforcement agencies, or other governmental bodies where required to do so by applicable law, court order, or legitimate legal process. We will endeavour to notify you of any such disclosure unless prohibited by law from doing so.

In the event of a merger, acquisition, sale of assets, or other corporate restructuring event, your Personal Data may be transferred to the relevant successor entity. We will provide notice of such a transfer through a prominent notice on the Platform.

Data Retention

MB8Rock retains Personal Data for as long as is necessary to fulfil the purposes set out in this Policy, unless a longer retention period is required or permitted by applicable law. The following general retention principles apply:

• Active Account Data: Retained for the duration of the account relationship and for a minimum of five (5) years following account closure, to comply with AML and financial record-keeping obligations.
• KYC Documentation: Retained for a minimum of five (5) years from the date of verification or account closure, whichever is later, as required under applicable AML regulations.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction.
• Customer Support Records: Retained for a minimum of two (2) years from the date of the interaction.
• Technical & Device Data: Retained for a maximum of thirteen (13) months for analytics purposes.
• Marketing Consent Records: Retained until withdrawal of consent, plus one (1) additional year as evidence of consent history.

Upon expiry of the applicable retention period, Personal Data will be securely erased or anonymised such that it can no longer be linked to an identifiable individual. Anonymised, aggregated data may be retained indefinitely for statistical and platform improvement purposes.

Data Security

MB8Rock implements industry-standard technical and organisational security measures designed to protect your Personal Data against unauthorised access, disclosure, alteration, loss, or destruction. Our security infrastructure includes:

• 256-bit SSL/TLS Encryption: All data transmitted between your browser or device and the MB8Rock Platform is encrypted using Transport Layer Security (TLS). The padlock icon displayed in your browser confirms that your connection is secure.
• Encrypted Data Storage: Sensitive data, including KYC documents and financial records, is stored in encrypted form at rest using industry-standard encryption protocols.
• Access Controls: Access to Personal Data within MB8Rock's systems is strictly limited to authorised personnel who require access for the performance of their duties, governed by role-based access controls and audit logging.
• Two-Factor Authentication (2FA): Internal systems containing Player data are protected by multi-factor authentication requirements.
• Regular Security Audits: MB8Rock conducts periodic security assessments and penetration testing to identify and remediate vulnerabilities in our Platform infrastructure.
• Incident Response: MB8Rock maintains a formal data breach response procedure. In the event of a data breach that is likely to result in a risk to the rights and freedoms of affected individuals, we will notify relevant parties in accordance with applicable legal requirements and without undue delay.

Notwithstanding the above, no method of electronic transmission or storage is entirely secure. MB8Rock cannot guarantee absolute security. Players are advised to maintain the security of their own account credentials and to contact support immediately if they suspect any unauthorised access to their account.

Cookies & Tracking Technologies

MB8Rock uses cookies and similar tracking technologies to operate the Platform effectively, enhance your experience, and gather analytical insights that help us improve our services for Malaysian players. The following categories of cookies may be used on the Platform:

You may manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform, including your ability to log in or access game features. Strictly necessary cookies cannot be disabled without impairing the operation of the Platform.

Your Data Rights

Subject to applicable law, you hold the following rights with respect to your Personal Data as processed by MB8Rock. Requests to exercise any of the rights below should be submitted to our support team through the contact details in Section 15.

• Right of Access: You have the right to request a copy of the Personal Data MB8Rock holds about you, together with information about how it is being processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete Personal Data we hold about you. You may update certain account details directly through your account settings.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to MB8Rock's legal obligation to retain certain data (e.g., AML retention periods as described in Section 8).
• Right to Restriction of Processing: You may request that MB8Rock restrict the processing of your Personal Data in certain circumstances — for example, while the accuracy of data is being verified.
• Right to Data Portability: Where processing is based on your consent or a contract, you may request that we provide your Personal Data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to the processing of your Personal Data where that processing is based on MB8Rock's legitimate interests. Upon receipt of such an objection, MB8Rock will cease processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

MB8Rock will respond to all legitimate data rights requests within 30 days of receipt. In cases of complexity or high volume, this period may be extended by a further 30 days, in which case we will notify you of the extension and the reasons for it.

Minors & Age Restriction

The MB8Rock Platform is strictly intended for individuals who are 21 years of age or older. MB8Rock does not knowingly collect, process, or retain Personal Data from individuals under the age of 21.

During account registration, all users are required to confirm that they meet the minimum age requirement. This declaration is verified through our KYC process, which requires submission of a valid, government-issued identification document confirming date of birth.

If MB8Rock becomes aware or has reasonable grounds to believe that an account has been registered by or on behalf of a person under the age of 21, it will immediately suspend that account, initiate an investigation, and — if the suspicion is confirmed — permanently close the account and delete or anonymise all associated Personal Data to the extent permitted by applicable law. Any funds held in such an account will be handled in accordance with our Terms & Conditions.

Third-Party Links

The MB8Rock Platform does not contain links to third-party websites or services. Should any reference to a third party appear in informational content (for example, in the context of Malaysian payment methods such as Touch 'n Go eWallet, DuitNow, or Maybank2u), such references are for informational purposes only and do not constitute endorsement of, or any affiliation with, the relevant third party.

MB8Rock accepts no responsibility for the privacy practices, security standards, or content of any external organisation or platform. If you access any third-party service — such as your bank's online portal or an e-wallet application — in connection with a deposit or withdrawal, you do so subject to that third party's own terms and privacy policy.

Policy Amendments

MB8Rock reserves the right to amend, revise, or update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform features. Material changes to this Policy will be communicated to registered Players by a prominent notice on the Platform and, where appropriate, by email to the address registered on your account, with a minimum of 14 days' prior notice.

The date of the most recent revision is indicated at the top of this page. Your continued use of the MB8Rock Platform following the publication of any amended Policy constitutes acceptance of the revised terms. If you do not agree with any amendment, you should cease using the Platform and may close your account in accordance with the Terms & Conditions.

We encourage you to review this Privacy Policy periodically to remain informed of how MB8Rock handles your Personal Data.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data by MB8Rock, please contact us through the following channels:

MB8Rock is committed to resolving all privacy-related enquiries promptly and in good faith. If you are not satisfied with our response, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.