Mibox88 Privacy Policy – Data Protection & Privacy for Malaysian Players

Mibox88 is an online casino and Sports Betting platform operated exclusively for Malaysian players. We understand that your trust in us depends greatly on how we handle your personal information. This Privacy Policy has been carefully drafted so you know exactly what we do with your data — nothing hidden, no confusing technical language.

This Privacy Policy applies to all personal information collected through:

• The mibox88.click website and all associated pages
• Registration and account management process
• Deposit and withdrawal transactions via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX
• Interactions with the mibox88 customer support team
• Use of all games, including slots, Live Casino, blackjack, Sports Betting, and e-sports
• Participation in mibox88 promotions, bonuses, and VIP programmes

Mibox88 acts as the data controller for all personal data collected from users of our platform in Malaysia. We operate in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and all regulations issued under it.

Mibox88 only collects the personal information necessary to deliver our platform services effectively, ensure account security, meet legal requirements, and provide you with a better experience as a user.

Information You Provide Directly:

• Malaysian phone number — required during registration for identity verification and important account-related communications
• Account password — stored in encrypted form using a secure hashing algorithm; mibox88 cannot view your actual password
• Payment information — payment method details for deposits and withdrawals, such as your digital wallet account number (Touch 'n Go, GrabPay, Boost, ShopeePay) or Malaysian bank account number (for DuitNow and FPX)
• Identity document — MyKad or Malaysian passport, which may be requested for additional identity verification in certain situations such as withdrawals exceeding a specified limit
• Communication information — messages you send to the mibox88 support team via live chat or email

Automatically Collected Information:

• Device log data — IP address, device type, operating system, and web browser version used
• Platform usage data — pages visited, time spent, games played, and actions taken within the platform
• Transaction data — complete history of deposits, withdrawals, bets, and winnings in your mibox88 account
• Game session data — a record of all gaming sessions including slots, live casino, and Sports Betting, kept for security and dispute resolution purposes
• Cookie and tracking data — information collected through cookies and similar technologies, as described in further detail in Section 6

Mibox88 uses your personal data responsibly and only for purposes that are legitimate, clearly defined, and relevant. We do not use your data for any purpose not stated in this Privacy Policy without first obtaining your consent.

Primary Purposes of Data Use:

• Account management: Creating, verifying, and maintaining your mibox88 account, including phone number verification via OTP, password resets, and profile information updates.
• Financial transaction processing: Processes deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX, and withdrawals to your Malaysian bank account within 10–30 minutes.
• Gaming service providers: Grants you access to all slots, Live Casino, blackjack, Sports Betting for the Malaysia Super League and EPL, e-sports for MPL Malaysia, and all other services offered by mibox88.
• Bonus and promotion management: Calculating and crediting bonuses, weekly cashback, VIP rebates, and other promotions you are eligible for based on your gaming activity on mibox88.
• Customer support: Enabling mibox88's 24/7 support team to provide accurate and effective assistance in Bahasa Melayu, based on your account and transaction history.
• Security and fraud prevention: Detecting and preventing unauthorised access, identity fraud, bonus abuse, multiple account ownership, and other suspicious activities that could compromise the security of the platform and other members.
• Legal compliance: To fulfil mibox88's obligations under PDPA 2010, anti-money laundering (AML) laws, and other applicable regulatory requirements in Malaysia.
• Platform improvements: Analysing aggregate usage patterns (without identifying individuals) to improve the performance, design, and functionality of the mibox88 platform over time.

Marketing Communications: By registering a mibox88 account, you consent to receiving communications about promotions, new bonuses, and special offers via SMS to your registered phone number. You may opt out of marketing communications at any time by notifying the mibox88 support team. Please note that essential operational communications — such as OTP notifications, deposit and withdrawal notices, and security alerts — cannot be disabled as they are required for your account to function.

Mibox88 does not sell, rent, or trade members' personal data to any third party. We only share information under the limited circumstances set out below, and in all cases we ensure that the receiving party is bound by equivalent confidentiality and data protection obligations.

Parties That May Receive Data Under Certain Circumstances:

• Payment service providers: E-wallet and banking providers such as Touch 'n Go, GrabPay, Boost, ShopeePay, and Malaysian banks supporting DuitNow and FPX receive only the minimum transaction information required to process your deposits and withdrawals. These providers have their own privacy policies governing the use of that data.
• Licensed game providers: Third-party gaming platforms such as Pragmatic Play, PG Soft, Evolution Gaming, and SA Gaming receive the session data required to run their games. This data is used strictly for technical gaming purposes and is never used for marketing.
• Legal authorities: mibox88 will disclose information to Malaysian authorities — such as the police, public prosecutor, or regulatory bodies — when required by a court order, warrant, or valid legal obligation. This includes reports relating to suspected money laundering activities.
• Auditors and professional advisors: Independent auditors, lawyers, or financial advisors bound by strict confidentiality agreements may access certain data when conducting audits or providing advisory services to mibox88.

Mibox88 continually invests in technical and organisational security infrastructure to protect members' personal data from unauthorised access, loss, misuse, or disclosure. The following are the key security measures we have in place:

• Data encryption in transit: All data transmitted between your browser and mibox88's servers is encrypted using TLS 1.3 with a 256-bit SSL certificate — the same security standard used by leading banking institutions in Malaysia.
• Data encryption at rest: Sensitive data such as passwords (stored as one-way, irreversible hashes), payment information, and identity documents are stored in encrypted form within protected databases.
• Strict access controls: Access to systems containing members' personal data is restricted to authorised mibox88 staff only, on a need-to-know basis. All access is logged and audited on a regular basis.
• Threat detection system: mibox88 operates a 24/7 monitoring system capable of automatically detecting and responding to suspicious activity, intrusion attempts, and unusual access patterns.
• Regular security testing: The mibox88 platform undergoes regular security assessments and penetration testing by independent security experts to identify and address any vulnerabilities before they can be exploited.

While mibox88 takes all reasonable steps to protect your data, it is important to remember that no security system can guarantee 100% absolute protection. You also play a vital role in keeping your account safe — never share your password, use a strong and unique password, and contact us immediately if you suspect any unauthorised access to your mibox88 account.

Mibox88 uses cookies and similar tracking technologies to enhance your experience on our platform, ensure proper technical functionality, and understand how users interact with our platform in aggregate.

Types of Cookies Used:

• Essential cookies (strictly necessary): Required for core platform functions such as login verification, session management, and security. These cookies cannot be disabled without affecting platform functionality.
• Functional cookies: Storing your preferences — such as your chosen language, display settings, and last login details (if you opt to save them) — for a more convenient experience on future visits.
• Analytics cookies: Helping mibox88 understand aggregate usage patterns — most visited pages, time spent, and device types used — to improve the platform. This data is collected anonymously and does not identify individuals.
• Security cookies: Used to detect and prevent fraudulent activity, manage request rate limits, and protect the platform against cyberattacks.

You can manage your cookie settings through your web browser at any time. However, disabling essential cookies may affect the functionality of the mibox88 platform, and you may be unable to log in or use the platform properly.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have specific rights regarding the personal data held by mibox88. We are committed to respecting these rights and making them easy for you to exercise.

• Right of Access: You have the right to request a copy of the personal data mibox88 holds about you. Submit your request by emailing support@mibox88.click with the subject line "Data Access Request". mibox88 will process your request within 21 working days.
• Right to Rectification: If you find that your personal data held by mibox88 is inaccurate or incomplete, you have the right to request a correction. For basic account information, you can update it directly through your account settings.
• Right to Withdraw Consent: For data collected based on your consent (such as marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect any processing that took place prior to the withdrawal.
• Right to Object: You have the right to object to the processing of your personal data for specific purposes, particularly for direct marketing.
• Right to Data Erasure: In certain circumstances, you may request the deletion of your personal data. However, this right is not absolute — mibox88 may need to retain certain data to comply with legal obligations, resolve disputes, or protect the platform's legitimate interests.

To submit any request related to your privacy rights, contact the mibox88 support team by email at support@mibox88.click by including your registered phone number for identity verification. We will respond within the timeframe prescribed by applicable law.

Mibox88 retains your personal data for as long as your account remains active or as long as necessary to provide the services you have requested. After your account is closed or becomes inactive, we will retain your data for the period required by law or for the legitimate purposes set out below.

mibox88 Data Retention Policy:

• Financial transaction data (deposit history, withdrawals, bets) — retained for 7 years after the transaction date, in line with Malaysia's financial and tax legal requirements.
• Support communication data (live chat records, support emails) — retained for 3 years for dispute resolution and service quality improvement purposes.
• Security log data (access records, login attempts) — retained for 2 years for security investigation and fraud detection purposes.
• Basic account information (phone number, profile information) — retained for the duration of active account plus 1 year after account closure to allow for possible account reopening by the same member.
• Identity verification documents (MyKad, passport) — retained for the period required under applicable Malaysian anti-money laundering laws, generally no less than 6 years.

Once the applicable retention period has expired, your personal data will be securely deleted or anonymised so that it can no longer be linked to you as an individual. This deletion process is carried out on a regular basis and audited to ensure compliance.

If you have any questions, concerns, or complaints regarding mibox88's Privacy Policy or how we handle your personal data, please reach out to us through the following channels:

• Privacy Email: support@mibox88.click (please include "Privacy Inquiry" in the email subject line)
• Live Chat: Available on the mibox88 platform, 24 hours a day, 7 days a week, in Bahasa Melayu

Mibox88's privacy team is committed to:

• Respond to all privacy inquiries within 5 working days
• Processing data access requests within 21 working days
• Notifying the relevant authorities of any material data breach within the timeframe required by law

If you are not satisfied with mibox88's response to your privacy concern, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia under the provisions of PDPA 2010. mibox88 encourages you to contact us first, as most privacy issues can be resolved quickly through our internal channels.