How mibox88 collects, uses, protects, and manages your personal data.
This Privacy Policy ("Policy") describes how mibox88 ("we", "us", or "our") collects, uses, stores, discloses, and protects personal data obtained from players and visitors ("you") who access the mibox88 platform at mibox88.win ("Platform"). By registering an account or using the Platform, you acknowledge that you have read and understood this Policy. This Policy forms part of the mibox88 Terms & Conditions.
1.1 mibox88 is committed to protecting the privacy and personal data of all players and users of the Platform. We recognise the trust you place in us when you provide your personal information, and we take that responsibility seriously.
1.2 This Policy is written in plain, accessible language while meeting the requirements of applicable data protection legislation. Where legal precision is required, we have used appropriate terminology. If you have questions about any part of this Policy, please contact us using the details in Section 14.
1.3 This Policy applies to all personal data collected through the mibox88 Platform, including the website, any related mobile-optimised interface, and interactions with our customer support team.
2.1 mibox88 collects the following categories of personal data from players:
| Category | Examples | Purpose |
|---|---|---|
| Identity Data | Full name, date of birth, NRIC / passport number | KYC verification, age & identity confirmation |
| Contact Data | Mobile number (Malaysian +60), email address | Account communication, OTP delivery, support |
| Financial Data | Bank account details, e-wallet identifiers (Touch 'n Go, Boost, DuitNow), transaction history | Payment processing, fraud prevention, AML compliance |
| Technical Data | IP address, device type, browser, operating system, session timestamps | Security, fraud detection, platform optimisation |
| Usage Data | Games played, bet history, deposit/withdrawal patterns, pages visited | Platform improvement, responsible gaming monitoring, promotions |
| Communications Data | Live chat transcripts, support ticket content | Customer service, dispute resolution, training |
2.2 mibox88 does not collect sensitive personal data (such as racial or ethnic origin, political opinions, health data, or biometric data) except where expressly required by applicable law or anti-money laundering regulation.
3.1 Directly from you: when you register a mibox88 account, complete KYC verification, make a deposit or withdrawal, contact Support, or participate in a promotion.
3.2 Automatically: through cookies, web beacons, and server logs when you visit or use the Platform. See Section 7 for details on our cookie practices.
3.3 From third parties: including payment processors (such as Touch 'n Go, DuitNow, FPX), identity verification providers, fraud prevention services, and analytics partners — where necessary for the purposes described in this Policy.
4.1 mibox88 uses your personal data for the following purposes:
4.2 mibox88 will not use your personal data for any purpose that is incompatible with the purposes listed above without first providing notice and, where required, obtaining your consent.
5.1 mibox88 processes your personal data on the following legal bases, depending on the specific processing activity:
6.1 mibox88 does not sell, rent, or trade your personal data to third parties for their own marketing purposes.
6.2 We may share your personal data with the following categories of recipients, strictly on a need-to-know basis:
6.3 All third-party data processors engaged by mibox88 are required to implement appropriate technical and organisational security measures and to process personal data only in accordance with mibox88's documented instructions.
7.1 The mibox88 Platform uses cookies and similar tracking technologies to operate, secure, and improve the Platform. The following cookie categories are used:
7.2 You may manage non-essential cookie preferences through the cookie consent mechanism displayed on first visit to the Platform. Disabling certain cookies may affect the functionality of the Platform.
8.1 mibox88 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law.
8.2 As a general principle, account data and transaction records are retained for a minimum of five (5) years following account closure to comply with AML and financial record-keeping obligations. Marketing preferences and certain technical logs may be retained for shorter periods.
8.3 Where data is no longer required, mibox88 will securely delete or anonymise it in accordance with our internal data lifecycle management procedures.
9.1 Subject to applicable law, you have the following rights in respect of your personal data held by mibox88:
9.2 To exercise any of the above rights, please contact us via live chat or at the email address in Section 14. We will respond within a reasonable timeframe consistent with applicable legal requirements. Note that certain rights may be limited where data must be retained for legal compliance reasons (e.g., AML obligations).
10.1 mibox88 implements appropriate technical and organisational measures to protect personal data against unauthorised access, loss, destruction, alteration, or disclosure. These measures include:
10.2 In the event of a personal data breach that poses a material risk to affected individuals, mibox88 will notify the relevant supervisory authority and affected players in accordance with applicable legal obligations.
11.1 The mibox88 Platform is strictly for persons aged 21 years and above. We do not knowingly collect personal data from individuals under 21. Where we become aware that a minor has registered an account or provided personal data, we will immediately suspend the account, delete the data, and refund any deposits (net of any losses) to the payment source.
11.2 If you believe a person under 21 has registered an account on mibox88, please contact our Support team immediately via live chat.
12.1 mibox88 may transfer personal data to service providers or infrastructure located outside Malaysia in the course of operating the Platform. Where such transfers occur, we ensure that appropriate safeguards are in place — including data processing agreements incorporating standard contractual clauses or equivalent protections — to ensure your data receives an equivalent level of protection.
12.2 By using the mibox88 Platform, you acknowledge that your personal data may be processed in jurisdictions outside Malaysia that have different data protection standards. We take all reasonable steps to ensure such transfers are lawful and adequately protected.
13.1 mibox88 may update this Privacy Policy from time to time to reflect changes in our data practices, regulatory requirements, or Platform features. We will publish the revised Policy on this page with an updated "Last Updated" date.
13.2 For material changes affecting your rights, we will use reasonable endeavours to notify registered players via the Platform or by email to the registered address. Your continued use of the Platform following a policy update constitutes acceptance of the revised terms.
14.1 If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data by mibox88, please contact us via:
14.2 We aim to acknowledge all privacy-related enquiries within 2 business days and to provide a substantive response within a reasonable timeframe consistent with applicable law.
All data transmitted between your device and the mibox88 Platform is encrypted with 256-bit SSL — the same standard used by Malaysian banking institutions. Your personal and financial data is never sent in plain text.
mibox88 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. Data shared with third parties is strictly limited to what is required for Platform operation, payment processing, and legal compliance.
You have the right to access, correct, delete, or port your mibox88 account data. Submit a request via live chat or email and we'll respond within the timeframes required by applicable data protection law.
mibox88 complies with anti-money laundering obligations applicable in our operating jurisdiction. KYC checks and transaction monitoring are conducted as required by law — not as optional add-ons.
We explain every cookie category we use and give you control over non-essential cookies. Marketing cookies are only activated with your explicit consent. Strictly necessary cookies keep your mibox88 session secure and functional.
mibox88 operates strictly for players aged 21 and above. Age verification is a mandatory step in KYC. Accounts found to belong to persons under 21 are immediately suspended and the data is deleted.
Play with confidence knowing your personal and financial data is protected by bank-grade encryption and a clear, principled privacy framework.
By using mibox88 you acknowledge this Privacy Policy. 21+ only.