mibox88 Privacy Policy

1. Data Controller

mibox88 ("we", "us", "our") is the data controller responsible for the personal data processed through the mibox88 platform at mibox88.club. mibox88 operates under international gaming authority licensing and handles all personal data in accordance with applicable data protection legislation and the requirements of its licensing jurisdiction.

For all data protection enquiries, Players may contact mibox88 at: [email protected]

2. Data We Collect

mibox88 collects personal data through several means during the account lifecycle. The categories of data we collect include:

2.1 Registration Data

• Full legal name as it appears on a government-issued identity document;
• Date of birth (used for mandatory age verification);
• Residential address, including postcode and state within Malaysia;
• Email address and, where provided, mobile telephone number;
• Username and encrypted account password.

2.2 Identity Verification Data (KYC)

• Scanned or photographed copies of government-issued identification documents (e.g., Malaysian MyKad, passport);
• Proof of residential address documents (e.g., utility bill, bank statement);
• Payment method verification documents where required for withdrawal processing.

2.3 Financial Data

• Transaction records including deposit amounts, withdrawal requests, and bonus credits;
• Payment method details sufficient to process transactions (e.g., DuitNow registered mobile number, FPX bank selection, Touch 'n Go eWallet account reference). mibox88 does not store full card numbers or banking credentials.

2.4 Usage and Technical Data

• IP address and general geolocation data derived therefrom;
• Device type, operating system, and browser information;
• Game session data including games played, bet amounts, outcomes, and session duration;
• Login timestamps and session activity logs;
• Cookie and tracking data as described in Section 9 of this Policy.

2.5 Communications Data

• Records of communications between the Player and mibox88 support, including emails and live chat transcripts;
• Responses to surveys, feedback forms, or promotional communications where the Player voluntarily participates.

3. How We Use Your Data

mibox88 processes personal data for the following purposes:

1. Account administration: creating and managing your mibox88 account, verifying identity, and maintaining account security;
2. Service delivery: enabling gameplay, processing deposits and withdrawals in MYR, managing Rewards points, and delivering promotions you have opted into;
3. Regulatory compliance: fulfilling Know Your Customer (KYC), Anti-Money Laundering (AML), and responsible gaming obligations required under mibox88's gaming licence;
4. Fraud prevention: detecting, investigating, and preventing fraudulent activity, cheating, or abuse of the Platform;
5. Responsible gaming: monitoring gameplay patterns for indicators of problem gambling and applying self-imposed limits or exclusions as requested;
6. Customer support: responding to enquiries, resolving complaints, and administering account recovery processes;
7. Platform improvement: analysing aggregated usage data to improve Platform performance, game selection, and user experience;
8. Marketing communications: sending promotional communications to Players who have opted in to receive them. Players may unsubscribe at any time by contacting support.

4. Legal Basis for Processing

mibox88 processes personal data on the following legal bases:

• Contractual necessity: processing required to perform the account agreement with the Player, including account management, payment processing, and game provision;
• Legal obligation: processing required to comply with regulatory requirements, including KYC, AML, responsible gaming mandates, and licensing conditions;
• Legitimate interests: processing for fraud prevention, platform security, and internal analytics where such interests are not overridden by the Player's privacy rights;
• Consent: processing for direct marketing communications, where the Player has explicitly opted in. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

5. Data Sharing and Disclosure

mibox88 does not sell personal data. We may share personal data with the following categories of recipients only to the extent necessary for the stated purpose:

• Payment processors: Malaysian payment service providers including DuitNow, FPX network banks, Touch 'n Go eWallet, Boost, and GrabPay, solely for processing deposit and withdrawal transactions;
• Game providers: certified gaming software providers (e.g., Evolution Gaming, Pragmatic Play, PG Soft) who receive the minimum data necessary to deliver game services within the Platform;
• Identity verification services: third-party KYC and AML service providers engaged by mibox88 to fulfil regulatory verification obligations;
• Regulatory and law enforcement authorities: where disclosure is required by applicable law, court order, or a request from a competent regulatory or law enforcement authority;
• IT and infrastructure providers: cloud hosting, data storage, and security service providers operating under binding data processing agreements with mibox88.

All third-party service providers engaged by mibox88 are subject to contractual data protection obligations no less protective than those set out in this Policy.

6. Data Retention

6.1 mibox88 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Account and KYC records: retained for a minimum of five (5) years following account closure, as required by AML regulations applicable under mibox88's licensing jurisdiction;
• Transaction records: retained for a minimum of five (5) years from the date of each transaction;
• Communications records: retained for three (3) years from the date of the communication;
• Technical logs: retained for twelve (12) months from the date of generation, unless extended for an ongoing investigation.

6.2 Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with mibox88's data disposal procedures.

7. Security Measures

mibox88 implements technical and organisational security measures appropriate to the risk of processing Personal Data on an online gaming platform. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between the Player's device and mibox88 servers;
• Encryption of stored sensitive personal data including identity document images and KYC records;
• Role-based access controls limiting employee access to personal data to those with a legitimate operational need;
• Automated intrusion detection and anomaly monitoring on Platform infrastructure;
• Regular third-party security audits and penetration testing of Platform systems.

Notwithstanding the above, no internet-based data transmission or storage system can be guaranteed as completely secure. Players are encouraged to use strong, unique passwords and to enable two-factor authentication on their mibox88 accounts to reduce the risk of unauthorised access.

8. Your Data Rights

Subject to applicable law and mibox88's regulatory obligations, Players have the following rights regarding their personal data:

• Right of access: to request a copy of the personal data mibox88 holds about you;
• Right of rectification: to request correction of inaccurate or incomplete personal data;
• Right to erasure: to request deletion of personal data where retention is no longer necessary, subject to overriding legal and regulatory obligations;
• Right to restriction: to request that mibox88 restrict processing of your data in certain circumstances, such as where the accuracy of the data is contested;
• Right to data portability: to receive your personal data in a structured, commonly used, machine-readable format where processing is based on consent or contractual necessity;
• Right to object: to object to processing based on legitimate interests or for direct marketing purposes;
• Right to withdraw consent: to withdraw consent to marketing communications at any time without affecting prior lawful processing.

To exercise any of the above rights, contact mibox88 at [email protected]. mibox88 will respond within thirty (30) days of receiving a verifiable request.

9. Cookies and Tracking Technologies

mibox88 uses cookies and similar tracking technologies on the Platform for the following purposes:

• Strictly necessary cookies: required for the Platform to function, including session authentication, account security tokens, and language preferences. These cannot be disabled;
• Functional cookies: used to remember Player preferences such as display settings and recently played games;
• Analytics cookies: used to collect aggregated and anonymised data about how Players interact with the Platform, enabling mibox88 to improve navigation and game category performance;
• Marketing cookies: used to deliver relevant promotional content to Players who have opted in to marketing communications. Players may opt out of marketing cookies by contacting support.

Players may manage cookie preferences through their browser settings. Disabling strictly necessary cookies will impair Platform functionality and may prevent account access.

10. Minors

mibox88 strictly prohibits access by persons under 21 years of age. The Platform does not knowingly collect personal data from individuals under 21. If mibox88 becomes aware that personal data has been collected from a person under 21, that data will be deleted and the associated account will be permanently closed.

If you believe that a person under 21 has registered an account on mibox88, please contact us immediately at [email protected].

11. Changes to This Policy

mibox88 reserves the right to update this Privacy Policy at any time. The "Last Updated" date at the top of this page will reflect the date of the most recent revision. Where changes are material, mibox88 will notify registered Players by email. Continued use of the Platform following publication of a revised Policy constitutes acceptance of the updated terms.

12. Contact

For questions, complaints, or requests relating to this Privacy Policy or the processing of your personal data by mibox88, please contact:

Email: [email protected]

mibox88 aims to acknowledge all data protection correspondence within 24 hours and to provide a substantive response within thirty (30) calendar days. For time-sensitive matters, please indicate "DATA REQUEST – URGENT" in your subject line.