Privacy Policy mb8a — Protection Your Personal Data

Mb8a ("we", "the platform") respects the privacy of every individual using our services. This Privacy Policy explains in detail how we collect, use, store and protect your personal information when you register or use the mb8a platform.

This Policy applies to all users of the mb8a website, mb8a mobile app, and any official mb8a communication channels. By using our platform, you agree that your personal data will be processed in accordance with this Privacy Policy and in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA 2010).

Mb8a collects various types of information depending on how you interact with our platform. The following are the data categories collected:

Data is collected directly from you during registration, profile completion, financial transactions and platform usage, as well as automatically through standard tracking technologies such as cookies and server logs.

Mb8a uses your personal data for the following legitimate and stated purposes:

• Account management: Create, verify and manage your member account including mandatory KYC processes.
• Transaction processing: Process deposits, withdrawals and any other financial transactions in Malaysian Ringgit.
• Platform security: Detect and prevent fraud, money laundering, unauthorized access and other suspicious activities.
• Service communications: Send important notifications related to your account, transaction updates, and customer support responses.
• Platform improvements: Analyze usage patterns to improve features, interface and overall member experience.
• Legal compliance: Comply with obligations under relevant Malaysian laws including PDPA 2010.
• Marketing communications: Send promotional information and special offers — only to members who consent to receive them.

Your personal data is stored on secure servers and protected with storage-level encryption. mb8a retains your data as long as your account is active, or as long as necessary to fulfil the purposes stated in this Policy.

After your account is closed, certain data will be retained for the period stipulated by Malaysian law — typically between 5 to 7 years — for the purposes of legal compliance, dispute resolution and fraud prevention. After this period expires, data will be securely deleted or anonymized.

Mb8a does not sell, rent or trade your personal information to any third party for marketing or commercial purposes. However, in certain limited circumstances, data may be shared with the following parties:

• Payment service providers: Payment processors such as DuitNow, FPX and digital wallets to enable financial transactions to be completed securely.
• Technology service providers: Companies providing technical infrastructure, cloud hosting and analytics services — subject to strict data protection agreements.
• Regulatory authorities: Malaysian government authorities or law enforcement agencies when required by law or court order.
• Fraud prevention: Risk rating agencies or industry fraud intelligence sharing platforms, to protect all members from illegal activities.

All third parties working with mb8a are required to comply with data protection policies that match or exceed our own standards.

Mb8a implements multiple layers of technical and organizational security to protect your personal data from unauthorized access, loss, misuse or disclosure:

• 256-bit SSL Encryption protects all data transmitted between your device and mb8a servers.
• Data at-rest encryption ensures stored data remains unreadable even in the event of unauthorized physical access.
• Two-factor authentication (2FA) available for all member accounts to add an extra layer of protection.
• Continuous security monitoring detects anomalies and suspicious access attempts in real time.
• Internal access control ensures only authorized personnel can access members' personal data as required by their duties.
• Periodic security testing conducted by independent cybersecurity experts to identify and address system vulnerabilities.

Mb8a uses cookies and similar tracking technologies to enhance user experience, ensure login session security, and understand how members interact with our platform. The cookies we use fall into several categories:

• Essential cookies: Required for core platform functions such as login authentication and session security. Cannot be disabled.
• Performance cookies: Collect information about how pages are used to help us improve platform performance.
• Functional cookies: Store your preferences such as language and display settings for ongoing convenience.
• Analytics cookies: Help us understand usage patterns in aggregate and anonymous form for continuous improvement.

You can control and delete cookies through your web browser settings. However, disabling essential cookies may affect platform functionality.

Under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding your personal data held by mb8a:

To exercise any of the above rights, please contact our support team via live chat or email. We will respond to your request within 14 working days.

Mb8a services are exclusively for individuals aged 18 and above. mb8a does not intentionally collect any personal data from children or individuals below the legal age.

Should we become aware that personal data has been collected from underage individuals without proper verification, we will take immediate action to delete such data and close the account in question. Parents or guardians who believe their child has registered on mb8a are urged to contact us immediately.

Mb8a reserves the right to update or amend this Privacy Policy from time to time to reflect changes in data practices, legal requirements or service improvements. The latest version will always be available on this page with a clear "Updated" date.

For material changes, we will notify members through in-platform notifications or registered email before the changes take effect. Continued use of the platform after any amendments are published is deemed your acceptance of the amended Policy.

If you have any questions, concerns or complaints regarding this Privacy Policy or how we handle your personal data, please contact the mb8a Data Protection Officer through the following channels:

We are committed to responding to all privacy-related enquiries within 14 working days from date of receipt.