Privacy Policy

This Privacy Policy ("Policy") is issued by mb123 ("mb123", "we", "us", or "our"), the operator of the online gaming platform accessible at mb123.cam (the "Platform"). It describes how mb123 collects, uses, stores, processes, shares, and safeguards the personal data of individuals ("Users", "Players", "you", or "your") who access or register on the Platform.

mb123 serves an English-language audience with a primary focus on Malaysian players. We understand that Malaysian users — whether based in Kuala Lumpur, Petaling Jaya, Penang, Johor Bahru, Shah Alam, or elsewhere — have a legitimate expectation that their personal data will be handled responsibly, transparently, and in accordance with applicable data protection principles.

By registering an account on mb123 or by continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and processing of your personal data as described herein. If you do not agree to this Policy, you must not register an account or continue to use the Platform.

For the purposes of this Privacy Policy, the following terms shall have the meanings set out below:

mb123 collects personal data that is necessary, proportionate, and relevant to the services we provide. The categories of data we collect are as follows:

Registration & Account Data

• Full legal name;
• Date of birth (for age verification — 21+ requirement);
• Residential address, including city (e.g., Kuala Lumpur, Penang, Johor Bahru);
• Email address;
• Mobile phone number;
• Username and encrypted password.

Identity Verification (KYC) Data

• Copy of Malaysian MyKad, Passport, or other government-issued photo identification;
• Proof of residential address (utility bill, bank statement);
• Selfie or live verification image where required for enhanced due diligence.

Financial & Payment Data

• E-wallet account identifiers (Touch 'n Go eWallet, Boost, GrabPay) — note that mb123 does not store full wallet credentials, only the verified account reference;
• Bank account details for FPX / DuitNow transactions (Maybank, CIMB, Public Bank, RHB, Hong Leong);
• Cryptocurrency wallet addresses for USDT TRC20 transactions;
• Transaction history, including deposit amounts, withdrawal amounts, dates, and payment method used.

Gaming & Behavioural Data

• Game session records including games played, bets placed, wins, losses, and session durations;
• Bonus and promotion activity;
• Sports betting selections, including Liga Super Malaysia, EPL, UFC, and other markets;
• Responsible gambling tool usage — deposit limits set, cool-off activations, self-exclusion requests.

Technical & Device Data

• IP address and approximate geolocation (country/city level);
• Device type, operating system, and browser;
• Session logs and access timestamps;
• Cookie data and analytics identifiers (see Section 9).

mb123 collects personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or participate in promotions;
• Automatically — through cookies, server logs, and analytical tools that record your interaction with the Platform (see Section 9);
• From payment providers — when you initiate a payment via Touch 'n Go eWallet, Boost, GrabPay, FPX, DuitNow, or other supported methods, the relevant payment provider transmits transaction confirmation data to mb123;
• From identity verification services — where mb123 uses approved third-party KYC service providers to verify identity documents and prevent fraud;
• From fraud prevention and AML systems — automated systems may flag or analyse account activity patterns for anti-money laundering (AML) compliance purposes.

mb123 processes your personal data only for lawful, specified, and legitimate purposes. The table below sets out the primary purposes for which your data is processed and the corresponding legal basis:

mb123 does not sell, rent, or trade your personal data to third parties for commercial or marketing purposes. We may, however, share personal data with the following categories of recipients in the circumstances described:

• Payment Processors: Your payment-related data (transaction amounts, payment method references) is shared with approved payment providers — including Touch 'n Go eWallet, Boost, GrabPay, FPX, DuitNow, and the relevant Malaysian banks — solely for the purpose of processing your transactions. These providers are contractually bound to handle your data in accordance with applicable data protection standards.
• KYC & Identity Verification Services: Identity documents submitted for KYC may be processed by approved third-party verification services operating under strict data processing agreements with mb123.
• Game Studio Partners: Certain game session data (game ID, bet amounts, session outcomes) may be shared with licensed game studio partners for game integrity monitoring and dispute resolution purposes. No personal identification data is shared beyond what is strictly necessary.
• Regulatory & Law Enforcement Authorities: mb123 may be legally required to disclose personal data to competent regulatory or law enforcement authorities in response to valid legal requests, court orders, or where required by applicable law for AML or fraud investigation purposes.
• Fraud Prevention Services: Anonymised or pseudonymised data may be shared with fraud prevention consortia to improve platform-wide security and detect patterns of fraudulent activity.

mb123 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, and to comply with applicable legal, regulatory, and internal policy obligations. The following general retention guidelines apply:

Upon expiry of the applicable retention period, mb123 will securely delete or anonymise your personal data in a manner that prevents recovery or reconstruction. Where legal obligations require retention beyond the periods stated above, the longer legal requirement shall prevail.

mb123 implements appropriate technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security framework includes:

• TLS/SSL Encryption: All data transmitted between your device and the mb123 Platform is encrypted in transit using Transport Layer Security (TLS) protocols;
• Encryption at Rest: Sensitive personal data stored on mb123 servers, including payment credentials and KYC documents, is encrypted at rest;
• Access Controls: Personal data access is restricted to authorised mb123 personnel on a need-to-know basis, with role-based access controls and audit logging;
• Two-Factor Authentication (2FA): Account holders are strongly encouraged to enable 2FA on their accounts. mb123 staff accessing backend systems are required to use 2FA;
• Regular Security Audits: mb123 conducts periodic security assessments and penetration testing to identify and address vulnerabilities;
• Password Security: User passwords are stored as salted, one-way cryptographic hashes. mb123 staff cannot retrieve your plaintext password.

mb123 uses cookies and similar tracking technologies to operate the Platform effectively, remember your preferences, analyse usage patterns, and improve the overall user experience. By continuing to use the mb123 Platform, you consent to our use of cookies as described in this section.

The following categories of cookies are used on the mb123 Platform:

You may manage or disable non-essential cookies through your browser settings. Please note that disabling functional or analytics cookies may affect your experience on the Platform but will not prevent you from accessing core gaming and account features.

Subject to applicable law and certain exceptions necessary for our legal and regulatory obligations, you have the following rights in relation to your personal data held by mb123:

To exercise any of the above rights, please contact our Data Protection team via live chat or by email at [email protected]. mb123 will acknowledge your request within 5 business days and respond substantively within 30 calendar days. In complex cases, this period may be extended by up to an additional 60 days, in which case you will be notified of the extension and the reason for it.

mb123 is strictly an adult gaming platform. We do not knowingly collect personal data from persons under the age of 21. The minimum age requirement of 21 is a hard eligibility criterion for all Account registrations.

If mb123 becomes aware that an Account has been registered by or is operated by a person under the age of 21, all personal data associated with that account will be deleted immediately, the account will be permanently closed, and no winnings will be disbursed. Any deposits made will be returned to the original payment source following verification.

The mb123 Platform does not contain links to third-party websites beyond those necessary for payment processing and the integrated game studio content available within the gaming environment. Where interactions with third-party payment processors occur (such as your Touch 'n Go eWallet app, Boost, GrabPay, or your Maybank online banking portal), those third parties process your data under their own privacy policies.

mb123 is not responsible for the privacy practices of third-party payment providers, game studios, or any other external services you may interact with through the payment or gaming process. We encourage you to review the privacy policies of those third parties separately.

mb123 reserves the right to amend, update, or replace this Privacy Policy at any time. When material changes are made, mb123 will update the "Last Updated" date at the top of this page and, where the changes are significant, may notify registered Users via the email address associated with their Account or via an in-platform notification.

Your continued use of the mb123 Platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised Policy. If you do not agree to the changes, you should cease using the Platform and may request account closure in accordance with our Terms & Conditions.

We recommend reviewing this Privacy Policy periodically to remain informed of how mb123 handles your personal data.

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way mb123 handles your personal data, please contact us through the following channels:

• Email: [email protected]
• Live Chat: Available 24/7 directly through the mb123 Platform — the fastest channel for urgent data queries
• Response Time: Email enquiries acknowledged within 5 business days; substantive response within 30 days

Our support team is available around the clock and includes agents based in or familiar with the Malaysian market, serving players across Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and all other regions of Malaysia.

If you believe your data rights have not been adequately addressed after contacting mb123, you may escalate your complaint to the relevant data protection supervisory authority or consumer protection body in your jurisdiction.