At mibox8, protecting your personal data is not an obligation we treat as a footnote — it is a core part of how we operate. This Privacy Policy explains what data we collect, why we collect it, how it is used and stored, and what rights you hold as a mibox8 player in Malaysia.
These six principles summarise how mibox8 handles your personal data. Full legal details follow in the policy document below.
We collect only the personal information strictly necessary to create and verify your Account, process payments, and deliver our Services. We do not collect data speculatively or for purposes unrelated to your mibox8 experience.
mibox8 does not sell, rent, or trade your personal data to third-party advertisers or marketing companies under any circumstances. Your information belongs to you — we are simply custodians of it for the duration of your Account relationship with us.
All data transmitted to and from mibox8 is encrypted using 256-bit SSL/TLS protocols. Stored personal data is held in access-controlled environments with regular security audits. Payment data is handled through PCI-DSS compliant payment processors.
We tell you exactly what data we hold, why we hold it, and the legal basis for processing it. There are no undisclosed data practices at mibox8. Every category of personal data we process is documented in this policy.
You have the right to access, correct, restrict, or delete your personal data at any time. You can also withdraw consent for optional processing. We will respond to any data rights request within 30 calendar days of receipt.
We retain personal data only for as long as necessary to fulfil the purposes set out in this policy, or as required by applicable law. Once data is no longer needed, it is securely deleted or anonymised within defined timelines.
This Privacy Policy ("Policy") is published by mibox8 ("mibox8", "we", "us", or "our"), operator of the online casino and sports betting platform accessible at mibox8.cam. This Policy governs the collection, processing, storage, and disclosure of personal data relating to users ("you", "your", or "Player") who access or use the mibox8 platform, website, mobile applications, or any associated services (collectively, the "Services").
mibox8 is committed to processing personal data in a lawful, fair, and transparent manner. We recognise that Malaysian players entrust us with sensitive information when they register, deposit funds, and engage with our gaming services. This Policy sets out exactly what we do with that information — and what we do not do with it.
By creating an Account on mibox8 or otherwise using the Services, you acknowledge that you have read this Privacy Policy and consent to the data practices described herein. If you do not agree with any part of this Policy, you should not create an Account or use the Services. You may withdraw consent for optional processing at any time as described in Section 12 (Your Rights).
The following terms carry specific meanings throughout this Policy:
mibox8 acts as the Data Controller for all personal data collected through the mibox8 platform and Services. As Data Controller, mibox8 determines the purpose and the means by which your personal data is processed. Where mibox8 engages third-party Data Processors (for example, payment gateway operators or identity verification providers), those parties are bound by data processing agreements that require them to process your data only on mibox8's documented instructions and in compliance with applicable data protection law.
For questions or concerns regarding the processing of your personal data, please refer to Section 16 (Contact Us) of this Policy.
mibox8 collects personal data through several channels and in several categories. The table below sets out each category, the specific data points, and the primary collection context:
| Category | Data Collected | Collection Context |
|---|---|---|
| Identity Data | Full name, date of birth, NRIC/MyKad number or passport number, nationality | Account registration; KYC verification |
| Contact Data | Email address, mobile phone number, residential address (Malaysian city, state, postcode) | Account registration; support requests |
| Financial Data | Bank account details, e-wallet identifiers (Touch 'n Go, Boost, GrabPay), transaction history, deposit/withdrawal amounts in MYR | Payment processing; withdrawal verification |
| Technical Data | IP address, device type, browser type and version, operating system, session timestamps, geolocation data (country/city level) | Platform access; fraud prevention |
| Gameplay Data | Bet history, game sessions, wagering amounts, wins/losses, bonus usage, sports markets accessed | Service delivery; responsible gambling monitoring |
| Communications Data | Live chat transcripts, email correspondence, support ticket content | Customer support; dispute resolution |
| Verification Documents | Scanned copy or photograph of MyKad, passport, or other government-issued ID; selfie photograph for liveness checks | KYC verification; age verification |
We do not intentionally collect special-category personal data (such as health data, racial or ethnic origin, religious beliefs, or biometric data beyond liveness-check photographs required for KYC). If you voluntarily disclose such information during support interactions, we will treat it with heightened protection.
mibox8 processes your personal data on one or more of the following legal bases:
mibox8 uses your personal data for the following specific purposes:
mibox8 does not sell, rent, or trade your personal data. We may share your data with third parties only in the following circumstances and only to the extent necessary:
Third-Party Data Processors: All third-party processors engaged by mibox8 are bound by written data processing agreements that prohibit them from using your personal data for their own purposes and require them to maintain appropriate technical and organisational security measures.
Some of the third-party service providers engaged by mibox8 may be located outside Malaysia. Where personal data is transferred to a jurisdiction that may not offer the same level of data protection as Malaysia, mibox8 will implement appropriate safeguards — including standard contractual clauses or equivalent mechanisms — to ensure that your personal data receives a consistent level of protection regardless of where it is processed.
In all cases, international transfers are limited to what is strictly necessary to deliver the Services and are governed by the same principles of data minimisation and purpose limitation as domestic processing.
mibox8 uses cookies and similar tracking technologies on the platform. The following categories of cookies are in use:
You may manage your cookie preferences through your browser settings. Disabling strictly necessary cookies will impair platform functionality. mibox8 does not use cookies to serve third-party advertising or to track your activity on external websites.
mibox8 retains personal data only for as long as necessary to fulfil the purposes set out in this Policy, or as required by applicable legal or regulatory obligations. The following default retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account & Identity Data | Duration of Account plus 5 years after closure | Contractual; AML compliance |
| Financial Transaction Records | 7 years from the date of transaction | Legal / regulatory obligation |
| KYC Verification Documents | 5 years after Account closure | AML/CFT regulatory obligation |
| Customer Support Records | 3 years from the date of last interaction | Legitimate interests (dispute resolution) |
| Technical & Log Data | 13 months from collection | Security; fraud prevention |
| Marketing Consent Records | Until consent is withdrawn, plus 1 year thereafter | Legal obligation (consent records) |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that renders it irrecoverable. Where data is anonymised rather than deleted, the resulting anonymous dataset may be retained indefinitely for statistical and analytical purposes.
mibox8 implements a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include:
No method of electronic transmission or storage is 100% secure. While mibox8 implements rigorous safeguards, we cannot guarantee absolute security. You are also responsible for maintaining the security of your Account credentials and should never share your password with any third party.
As a data subject, you hold the following rights with respect to the personal data mibox8 holds about you. These rights may be exercised by contacting mibox8 Support as described in Section 16. We will respond to all verified requests within 30 calendar days, or notify you if a longer period is required.
Request a copy of the personal data we hold about you and information about how it is processed.
Request correction of inaccurate or incomplete personal data held on your Account.
Request deletion of your personal data where there is no lawful basis for continued processing, subject to our legal retention obligations.
Request that we restrict processing of your data whilst a dispute regarding its accuracy or lawfulness is resolved.
Receive a copy of your data in a structured, machine-readable format where processing is based on consent or contractual necessity.
Object to processing of your personal data where mibox8 relies on legitimate interests as the legal basis, including for direct marketing.
Withdraw consent for any processing activity based on consent at any time, without affecting prior lawful processing.
Request human review of any decision made solely by automated means that significantly affects you.
To exercise any of these rights, please contact mibox8 Support via live chat or by emailing [email protected]. We may ask you to verify your identity before processing a rights request. We do not charge a fee for responding to rights requests under normal circumstances.
The mibox8 platform and Services are strictly intended for individuals aged 21 years and above. mibox8 does not knowingly collect, process, or store personal data from persons under the age of 21. Age verification is a mandatory step in the Account registration and KYC process.
If mibox8 discovers or receives credible evidence that an Account is held by or was created on behalf of an individual under the age of 21, we will immediately suspend the Account, conduct an investigation, and permanently close the Account if the age requirement is confirmed to be breached. Any funds deposited by an underage person will be returned to the verified payment source following investigation, subject to applicable law and AML checks.
Parent/Guardian Notice: If you have reason to believe that a minor under your supervision has created an Account on mibox8, please contact our Support team immediately. We take the protection of minors extremely seriously and will act on any verified report without delay.
The mibox8 platform integrates third-party services including payment gateways, game engines from licensed international studios, and analytics tools. When you interact with these integrated services — for example, initiating a deposit via Touch 'n Go eWallet or playing a game sourced from a licensed studio — your data may be processed by those third parties in accordance with their own privacy policies.
mibox8 takes reasonable steps to ensure that all integrated third parties handle personal data responsibly and in accordance with applicable law. However, mibox8 cannot accept responsibility for the privacy practices of independent third parties operating their own systems. We recommend reviewing the privacy policies of any third-party payment providers you use.
mibox8's platform does not contain links to external websites beyond those necessary to deliver the Services. Any links included in support materials or within the platform connect to mibox8's own pages only.
mibox8 reserves the right to update or revise this Privacy Policy at any time. Changes will be published on this page with an updated "Last Updated" date. Where amendments are material — such as a change in how we use your personal data or the categories of data we collect — we will endeavour to provide advance notice via the Platform or to your registered email address.
Your continued use of the mibox8 platform following the publication of any revised Policy constitutes your acknowledgement of the changes. If you do not accept the revised Policy, you should discontinue use of the Services and request Account closure. Any personal data collected prior to a policy change will continue to be treated in accordance with the version of the Policy in effect at the time of collection, except where a new legal basis applies.
If you have questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by mibox8, please contact us through any of the following channels:
Live Chat: Available 24 hours a day, 7 days a week, directly on the mibox8 Platform. Live chat is the fastest channel for urgent privacy matters.
Email: [email protected] — please include "Privacy Request" in your subject line. We aim to acknowledge all email privacy requests within 2 business days and to resolve them within 30 calendar days.
Data Rights Requests: When submitting a formal data rights request, please identify yourself with your registered Account username and the email address on file. We will verify your identity before processing any request that would involve access to or deletion of personal data.
Our support team handles privacy queries 24/7. For policy-related questions, bonus clarifications, or anything else — we're here. You can also visit our FAQ page for quick answers to the most common questions from Malaysian players.
For players aged 21 and above only. Play responsibly. Visit our Responsible Gambling page for support tools.