Official Policy

Privacy Policy mb123 – Personal Data Protection for Malaysia Members

Mb123 is committed to protecting the personal data of every member to the highest security standards. This document clearly explains how we collect, use, store, and safeguard your information.

Last Updated: 1 January 2026
SSL 256
Bit Encryption
0
Sale of data to third parties
24/7
Security Monitoring
PDPA
Malaysia Act Compliance
Important Note: This Privacy Policy applies to all members and users of the mb123 platform. By using our services, you agree to the data collection and usage practices described herein. mb123 fully complies with the Malaysian Personal Data Protection Act 2010 (PDPA).
1 Introduction

Mb123 ("we", "Platform", "mb123.onl") values the privacy of every individual who uses our platform. This Privacy Policy is drafted to transparently explain how we manage your personal information from the moment you visit our website through to becoming an active mb123 member.

We believe transparency is the foundation of trust. That is why this document is written in plain, easy-to-understand language — not complex legal jargon — so you know exactly what happens to your data. No hidden agendas, no surprise fine print.

This policy applies to all information collected through the mb123.onl website, the mb123 mobile app, and any of our official communication channels including email and live chat. If you disagree with any part of this policy, please contact our team before continuing to use the platform.

Our Commitment: mb123 has never and will never sell your personal data to any third party for commercial purposes. Your data belongs to you.
2 Personal Data We Collect

Mb123 collects two main categories of information — information you provide directly to us, and information collected automatically while you use the platform.

Information You Provide

During the account registration and KYC verification process, you are required to provide the following information:

Full Name (MyKad) Phone Number Email Address Bank Information Date of Birth Full Address Identity Document

Automatically Collected Information

When you browse the mb123 platform, our systems automatically record the following technical information for security and user experience optimisation purposes:

  • IP address and geolocation information (state/country)
  • Device type, operating system, and browser version
  • Gaming activity records and login date/time
  • Deposit and withdrawal transaction data
  • Cookie information and session identifiers
  • Pages visited and time spent on each page
Why Is KYC Required? Identity verification is more than a routine procedure — it protects you from identity misuse and ensures your wins are processed to the correct account.
3 How Your Data Is Used

Every piece of data we collect has a specific and legitimate purpose. mb123 only uses your information for the following purposes:

Platform Operations

  • Create and manage your member account.
  • Process deposits, withdrawals, and all financial transactions.
  • Verify your identity through the KYC process to comply with legal requirements.
  • Provide responsive and effective customer support.

Security & Compliance

  • Detect and prevent fraudulent activity, money laundering, and unauthorized access.
  • Comply with legal obligations and reporting requirements to authorities.
  • Investigate any complaints or disputes raised by members.

Service Improvements

  • Analyze usage patterns to improve platform design and performance.
  • Personalize your gaming experience based on your preferences and history.
  • Send promotional notifications and updates — only if you have consented to receive them.

Mb123 will not use your data for any purpose not stated in this policy without first obtaining your consent.

4 Data Storage & Security

Your data security is mb123's top priority. We continuously invest in cybersecurity infrastructure to ensure your information is always protected.

Technical Protection Measures

  • 256-bit SSL Encryption: All communications between your device and mb123 servers are encrypted using the latest TLS 1.3 protocol.
  • Password hashing: Your password is stored in hashed form (bcrypt) and cannot be read by anyone, including mb123 staff.
  • Two-Factor Authentication (2FA): Additional security layers are available and recommended for all accounts.
  • 24/7 Monitoring: Our intrusion detection system operates around the clock to identify and block suspicious activity.
  • Certified data centres: Data is stored in data centres compliant with ISO/IEC 27001 standards with strict physical access controls.

Retention Period

Mb123 retains your personal data for as long as necessary for the stated purposes or as required by Malaysian law. Generally:

  • Active account data: retained for as long as the account remains active.
  • Financial transaction data: retained for a minimum of 7 years for AML/KYC compliance purposes.
  • Activity log data: retained for 12 months before being securely deleted.
  • Closed account data: retained for 3 years after closure for audit and dispute purposes.
PCI-DSS Compliant: All payment transactions are processed through PCI-DSS compliant gateways. mb123 does not store your credit or debit card details directly on our servers.
5 Data Sharing With Third Parties

Mb123 does not sell, rent, or disclose your personal data to third parties for marketing or commercial purposes. However, in the following limited situations, data sharing may occur:

Trusted Service Providers

We work with selected and trusted third-party providers to support platform operations, including:

  • Payment gateway: FPX, DuitNow, Touch 'n Go, GrabPay, and crypto processors to complete transactions.
  • Game providers: Gaming software companies that provide casino, slots, and sports content for the mb123 platform.
  • Identity verification services: A third-party KYC platform that helps verify member identity documents.
  • Analytics services: A website performance measurement tool that uses anonymised data only.

All these third-party providers are bound by strict confidentiality agreements and are only permitted to use your data for specified purposes.

Mandatory Legal Disclosure

Mb123 will disclose your information to the authorities if required by a court order, police investigation, or reporting requirements of a legitimate regulatory body in Malaysia. In such situations, we will notify you to the extent permitted by law.

6 Cookie Policy

Mb123 uses cookies to enhance the user experience, secure login sessions, and understand how members use our platform. Cookies are small text files stored on your device by your web browser.

You can manage or delete cookies through your web browser settings. Please note that disabling essential cookies may affect your login functionality and account security.

7 Your Rights as a Member

Under the Malaysian Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by mb123:

Right of Access

You have the right to request a copy of the personal data we hold about you.

Right to Rectification

You may request the correction of inaccurate or incomplete data.

Right to Erasure

You may request the deletion of your data in certain circumstances permitted by law.

Right to Object

You may object to the processing of your data for marketing purposes at any time.

Right to Portability

You may request your data in a machine-readable format for transfer.

Right to Restrict Processing

You may request that we restrict how we use your data.

To exercise any of the above rights, please contact the mb123 support team via live chat or email at [email protected]. We will process your request within 14 working days.

8 Children's Data Protection

The mb123 platform is exclusively for individuals aged 21 years and above. mb123 does not intentionally collect, process, or store any personal data from individuals under the age of 21.

If we discover that data belonging to someone below the minimum age requirement has been collected without our knowledge, the account in question will be closed immediately and all related data will be deleted within 48 hours.

Parents or guardians who suspect their child has registered on the mb123 platform without authorisation are encouraged to contact our support team immediately at [email protected].

9 Third-Party Links & Services

The mb123 platform may contain links to third-party websites or services that operate independently from us, such as payment gateways or game providers. mb123's Privacy Policy does not apply to those third-party websites or services.

Mb123 is not responsible for the privacy practices or content of third-party websites. We encourage you to read the privacy policy of each website you visit separately.

All payment gateways integrated with the mb123 platform — including FPX, DuitNow, Touch 'n Go eWallet, and GrabPay — operate under their own privacy policies and security compliance standards approved by Bank Negara Malaysia.

10 Changes to This Privacy Policy

Mb123 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technology used.

Whenever a material change occurs, we will:

  • Updating the "Last Updated" date at the top of this page.
  • Displays in-platform notifications for active members.
  • Send email notifications to all registered members when changes affect how we use your data.

Your continued use of the mb123 platform after any Privacy Policy changes take effect constitutes your acceptance of those changes. If you disagree with any changes, you may close your account by contacting customer support.

11 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact our dedicated data protection team:

Live Chat
Available 24 hours a day, 7 days a week
Data Protection Email

We are committed to responding to all privacy-related enquiries within 3 working days. For urgent account security issues, please use the live chat channel for a faster response.

Why Is Your Data Safe with mb123?

We do not just make promises — we invest in security infrastructure that is measurable and independently auditable.

Bank-Grade Encryption

Every bit of data transmitted between your device and mb123 servers is protected by 256-bit TLS 1.3 encryption — the same technology used by leading financial institutions in Malaysia.

Fast & Certified KYC

Mb123's identity verification process uses recognised document authentication technology, ensuring your account can only be accessed and used by you. KYC also protects you from cybercrime.

Malaysia PDPA Compliance

Mb123 operates in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). This means your privacy rights are protected by local legislation applicable to all our operations.

No Data Sales

Mb123's core policy is clear: your personal data will never be sold, rented, or shared with any third party for advertising or marketing purposes. This is not merely a promise — it is embedded in our operating principles.

Full Notification Control

You have full control over the types of communications you wish to receive from mb123. Unsubscribe from promotions or updates at any time via your account settings with no impact on platform functionality.

Certified Infrastructure

The data centres storing mb123 member information comply with ISO/IEC 27001 standards for information security management. Physical access controls, regular backups, and penetration testing are conducted routinely.

Play Safe, Your Data is Protected

Now you know how mb123 protects your privacy. Register a free account today and enjoy a safe, fair, and responsible gaming experience.

Bahasa Melayu