mibox88 Privacy Policy

1. Introduction

1.1 mibox88 is committed to protecting the privacy and personal data of all players and users of the Platform. We recognise the trust you place in us when you provide your personal information, and we take that responsibility seriously.

1.2 This Policy is written in plain, accessible language while meeting the requirements of applicable data protection legislation. Where legal precision is required, we have used appropriate terminology. If you have questions about any part of this Policy, please contact us using the details in Section 14.

1.3 This Policy applies to all personal data collected through the mibox88 Platform, including the website, any related mobile-optimised interface, and interactions with our customer support team.

2. Data We Collect

2.1 mibox88 collects the following categories of personal data from players:

2.2 mibox88 does not collect sensitive personal data (such as racial or ethnic origin, political opinions, health data, or biometric data) except where expressly required by applicable law or anti-money laundering regulation.

3. How We Collect Data

3.1 Directly from you: when you register a mibox88 account, complete KYC verification, make a deposit or withdrawal, contact Support, or participate in a promotion.

3.2 Automatically: through cookies, web beacons, and server logs when you visit or use the Platform. See Section 7 for details on our cookie practices.

3.3 From third parties: including payment processors (such as Touch 'n Go, DuitNow, FPX), identity verification providers, fraud prevention services, and analytics partners — where necessary for the purposes described in this Policy.

4. How We Use Your Data

4.1 mibox88 uses your personal data for the following purposes:

• To create and manage your mibox88 player account and verify your identity and age (21+);
• To process deposits, withdrawals, and bet settlements in Malaysian Ringgit (MYR);
• To comply with anti-money laundering (AML), counter-terrorism financing (CTF), and Know Your Customer (KYC) regulatory obligations;
• To detect, investigate, and prevent fraud, cheating, collusion, or any other prohibited conduct as described in the mibox88 Terms & Conditions;
• To provide and improve customer support services;
• To send account-related communications (e.g., OTP, transaction confirmations, security alerts);
• To send promotional communications, where you have provided consent or where we have a legitimate interest and you have not opted out;
• To monitor gaming patterns for responsible gaming purposes, including identifying signs of problem gambling behaviour;
• To analyse Platform usage and improve the overall player experience;
• To comply with any applicable legal obligation or regulatory direction.

4.2 mibox88 will not use your personal data for any purpose that is incompatible with the purposes listed above without first providing notice and, where required, obtaining your consent.

5. Legal Basis for Processing

5.1 mibox88 processes your personal data on the following legal bases, depending on the specific processing activity:

• Contractual necessity — processing required to perform our contract with you (account management, payment processing, game delivery);
• Legal obligation — processing required to comply with applicable law (KYC, AML, regulatory reporting);
• Legitimate interests — processing for fraud prevention, platform security, analytics, and responsible gaming monitoring, where these interests are not overridden by your data protection rights;
• Consent — for marketing communications and certain cookie categories, where consent is the applicable basis and you have provided it.

6. Data Sharing & Disclosure

6.1 mibox88 does not sell, rent, or trade your personal data to third parties for their own marketing purposes.

6.2 We may share your personal data with the following categories of recipients, strictly on a need-to-know basis:

• Payment service providers — Touch 'n Go, Boost, GrabPay, Maybank2u, CIMB, Public Bank, DuitNow, FPX, Hong Leong Connect, and other processors required to facilitate transactions;
• Identity verification and KYC providers — to confirm player identity and age;
• Fraud prevention and AML screening services;
• Game content providers — to the extent necessary for game delivery and RNG certification (providers receive only technical identifiers, not full personal profiles);
• IT and platform infrastructure providers — operating under strict data processing agreements;
• Regulatory authorities and law enforcement — where required by applicable law, court order, or regulatory direction (including financial intelligence units in Malaysia and other relevant jurisdictions);
• Professional advisers — including lawyers, auditors, and insurers, where necessary.

6.3 All third-party data processors engaged by mibox88 are required to implement appropriate technical and organisational security measures and to process personal data only in accordance with mibox88's documented instructions.

7. Cookies & Tracking Technologies

7.1 The mibox88 Platform uses cookies and similar tracking technologies to operate, secure, and improve the Platform. The following cookie categories are used:

• Strictly Necessary Cookies — required for the Platform to function (session management, login authentication, fraud detection). These cannot be disabled.
• Performance & Analytics Cookies — collect anonymised data about how players use the Platform (pages visited, session duration, error events). Used to improve Platform performance.
• Functional Cookies — remember your preferences (language, game settings, currency display).
• Marketing Cookies — used to deliver relevant promotions. Only activated with your explicit consent.

7.2 You may manage non-essential cookie preferences through the cookie consent mechanism displayed on first visit to the Platform. Disabling certain cookies may affect the functionality of the Platform.

8. Data Retention

8.1 mibox88 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law.

8.2 As a general principle, account data and transaction records are retained for a minimum of five (5) years following account closure to comply with AML and financial record-keeping obligations. Marketing preferences and certain technical logs may be retained for shorter periods.

8.3 Where data is no longer required, mibox88 will securely delete or anonymise it in accordance with our internal data lifecycle management procedures.

9. Your Rights

9.1 Subject to applicable law, you have the following rights in respect of your personal data held by mibox88:

• Right of access — to request a copy of the personal data we hold about you;
• Right to rectification — to request correction of inaccurate or incomplete data;
• Right to erasure — to request deletion of your data where we have no lawful basis to retain it;
• Right to restrict processing — to request that we limit how we use your data in certain circumstances;
• Right to data portability — to receive your data in a structured, machine-readable format where technically feasible;
• Right to object — to object to processing based on legitimate interests or for direct marketing purposes;
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

9.2 To exercise any of the above rights, please contact us via live chat or at the email address in Section 14. We will respond within a reasonable timeframe consistent with applicable legal requirements. Note that certain rights may be limited where data must be retained for legal compliance reasons (e.g., AML obligations).

10. Data Security

10.1 mibox88 implements appropriate technical and organisational measures to protect personal data against unauthorised access, loss, destruction, alteration, or disclosure. These measures include:

• SSL/TLS 256-bit encryption for all data in transit;
• Encryption of sensitive data at rest (including financial identifiers and identity documents);
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis;
• Regular security assessments and penetration testing;
• Two-factor authentication options for player accounts.

10.2 In the event of a personal data breach that poses a material risk to affected individuals, mibox88 will notify the relevant supervisory authority and affected players in accordance with applicable legal obligations.

11. Children's Privacy

11.1 The mibox88 Platform is strictly for persons aged 21 years and above. We do not knowingly collect personal data from individuals under 21. Where we become aware that a minor has registered an account or provided personal data, we will immediately suspend the account, delete the data, and refund any deposits (net of any losses) to the payment source.

11.2 If you believe a person under 21 has registered an account on mibox88, please contact our Support team immediately via live chat.

12. International Data Transfers

12.1 mibox88 may transfer personal data to service providers or infrastructure located outside Malaysia in the course of operating the Platform. Where such transfers occur, we ensure that appropriate safeguards are in place — including data processing agreements incorporating standard contractual clauses or equivalent protections — to ensure your data receives an equivalent level of protection.

12.2 By using the mibox88 Platform, you acknowledge that your personal data may be processed in jurisdictions outside Malaysia that have different data protection standards. We take all reasonable steps to ensure such transfers are lawful and adequately protected.

13. Changes to This Policy

13.1 mibox88 may update this Privacy Policy from time to time to reflect changes in our data practices, regulatory requirements, or Platform features. We will publish the revised Policy on this page with an updated "Last Updated" date.

13.2 For material changes affecting your rights, we will use reasonable endeavours to notify registered players via the Platform or by email to the registered address. Your continued use of the Platform following a policy update constitutes acceptance of the revised terms.

14. Contact Us

14.1 If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data by mibox88, please contact us via:

• 24/7 Live Chat — available directly within the mibox88 Platform (fastest response);
• Email: [email protected] (displayed as plain text; not a clickable link).

14.2 We aim to acknowledge all privacy-related enquiries within 2 business days and to provide a substantive response within a reasonable timeframe consistent with applicable law.