At mb2u, your privacy is not merely a legal obligation – it is a moral responsibility that we take with the utmost seriousness. This Privacy Policy transparently sets out how we collect, use, store, and protect your personal information as a member of Malaysia's trusted online entertainment platform.
Your personal data is fully protected under the Personal Data Protection Act 2010 (PDPA) Malaysia.
The core principles governing how mb2u manages and protects your personal data
Every piece of data you submit to mb2u – from registration details to financial transactions – is protected by the same 256-bit SSL encryption used by Malaysia's leading banking institutions such as Maybank and CIMB. No data is ever transmitted unencrypted.
Mb2u has never sold, rented, or traded members' personal information to any third party for commercial purposes, and never will. Your data belongs to you, and we only use it for the purposes clearly stated in this Privacy Policy.
All data management practices at mb2u are fully aligned with Malaysia's Personal Data Protection Act 2010 (PDPA). We comply with all applicable local legal requirements governing the collection, processing, and storage of personal data belonging to Malaysian citizens and residents.
Only mb2u staff who require access to your data to carry out legitimate job functions are permitted to access member personal information. All staff are bound by strict confidentiality agreements and undergo regular data protection training.
You have the right to access, correct, or request the deletion of your personal data held by mb2u at any time. Simply contact our support team and your request will be processed within 14 business days in accordance with Malaysia's PDPA requirements.
In the event of any security incident affecting your personal data, mb2u is committed to notifying you within the timeframe required under applicable Malaysian law. We will not conceal any material data breach from our members.
This Privacy Policy transparently describes how mb2u collects, uses, discloses, and protects your personal information. By using the mb2u platform, you acknowledge that you have read and understood this Privacy Policy. If you disagree with any part of this policy, please discontinue your use of the mb2u platform immediately and contact us to close your account.
Platform mb2u managed by a professional team dedicated to meeting the online entertainment needs of Malaysians. In connection with the services we provide – including slot games such as Great Rhino, Dragon Kingdom, and Jinn Lamp; and live casino games such as Football Studio, Crazy Time, Free Bet Blackjack, and Gods Poker – we are required to collect and process certain personal data from our members to ensure our services run smoothly, securely, and in full compliance with applicable laws.
We fully understand that your trust is the most valuable asset to mb2u. Without that trust, all our efforts to build the best platform would be meaningless. That is why we place the highest priority on protecting members' personal data, operating in accordance with the principles set out by Malaysia's Personal Data Protection Act 2010 (PDPA) and international industry best practices.
This Privacy Policy applies to all your interactions with mb2u – whether through our official website, email, live chat, WhatsApp, or any other channel we operate.
mb2u collects various categories of personal data from members in accordance with operational requirements and legal obligations. The types of data we collect are as follows:
| Data Category | Example Information | Requirements |
|---|---|---|
| Identity Information | Full name, MyKad number, date of birth, gender | Mandatory |
| Contact Information | Phone number, email address, residential address | Mandatory |
| Financial Information | Bank account number, digital wallet details (TNG, GrabPay, Boost, ShopeePay, DuitNow) | Required for transactions |
| Technical Data | IP address, device type, web browser, operating system | Automatic |
| Usage Data | Game records, transaction history, login timestamps, gaming preferences | Automatic |
| Communication Data | Live chat transcripts, emails, and filed complaints | Where applicable |
Note: mb2u only collects data that is strictly necessary for its defined purposes. We adhere to the principle of "data minimisation" – meaning we do not collect more than what is required to deliver our services effectively and securely.
mb2u collects your personal data through several different methods:
The personal data you provide to mb2u used solely for legitimate and necessary purposes, including:
Marketing Preferences: You may withdraw your consent to receive marketing communications from mb2u at any time by contacting our support team or using the "unsubscribe" option included in every marketing email we send.
mb2u upholds its commitment that your personal data will never be sold or traded to any party for commercial purposes. However, in certain limited and lawful circumstances, your data may be shared with the following parties:
In all of the data-sharing cases outlined above, mb2u ensuring that all data recipients are bound by data protection obligations equivalent to, or stricter than, those we ourselves adhere to. We share only the minimum data necessary for each specific purpose.
mb2u implements multiple layers of technical and organisational security measures to protect your personal data from unauthorised access, use, modification, or disclosure:
All data transmitted between your device and mb2u's servers is encrypted using TLS 1.3 with AES-256 encryption.
All personal data stored in mb2u's databases is encrypted using both file-level and field-level encryption for dual-layer protection.
Members are encouraged to enable two-factor authentication via SMS OTP for an additional layer of security when logging in to their mb2u account.
The mb2u security team continuously monitors our systems 24 hours a day, 7 days a week to detect any suspicious or unusual activity.
The "least privilege" principle applies – each mb2u staff member has access only to the data necessary to carry out their specific role.
Periodic penetration testing is carried out by independent third parties to identify and remediate any system vulnerabilities.
Although mb2u while we take every reasonable measure to protect your data, no security system can guarantee 100% protection against all possible cyber threats. We encourage you to take your own personal precautions as well, such as using a strong password and never sharing your mb2u account login credentials with anyone.
mb2u retains your personal data only for as long as necessary to fulfil the purposes set out in this Privacy Policy, or as required under applicable Malaysian law.
Once the retention period has elapsed and there is no legal requirement to retain the data further, your personal data will be securely deleted using methods that ensure it cannot be recovered by any party.
Platform mb2u uses standard cookies and web tracking technologies to enhance the user experience and analyse platform usage. The following are the types of cookies we use:
You can control and manage cookies through your web browser settings. Please note, however, that disabling certain cookies may affect the functionality and user experience of the platform mb2u. For more information on how to manage cookies in your web browser, please refer to the help documentation for the browser you are using.
Server Logs: Like most online platforms, mb2u automatically records standard technical information when you visit our platform, including IP address, browser type and version, operating system, pages visited, and access times. These logs are used for security purposes and technical troubleshooting.
As a member mb2u and as an individual protected under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights with respect to your personal data:
You have the right to request a copy of the personal data mb2u holds about you. Requests will be processed within 21 business days.
If your personal data held by mb2u is inaccurate or incomplete, you have the right to request an immediate correction to ensure your records are current and accurate.
You have the right to object to the processing of your data for direct marketing purposes at any time, without needing to provide any justification.
Under certain circumstances permitted by law, you may request the deletion of your personal data from mb2u's records after your account has been closed.
You may request mb2u to restrict the processing of your data under certain circumstances, such as when you are disputing the accuracy of your data.
You have the right to receive your personal data in a machine-readable format for the purpose of transferring it to another service provider should you wish to do so.
To exercise any of the rights above, please contact mb2u's Data Protection Officer by emailing [email protected] with the subject line "Privacy Rights Request". Include your full name, mb2u account number, and a clear description of your request. We will verify your identity before processing any personal data request.
Platform mb2u is a service restricted exclusively to individuals aged 21 and above. We do not knowingly collect personal data from individuals under the age of 18.
Should we become aware that we have collected personal data from an individual under the age of 18 without appropriate parental or guardian consent verification, we will take immediate steps to delete that data from our records and close the account in question.
If you are a parent or guardian and believe your child has registered an mb2u account by providing false information about their age, please contact us immediately at [email protected] so that we can take the appropriate action.
mb2u reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or improvements made to the platform.
When we make material changes to this Privacy Policy, we will notify you through one or more of the following methods:
Continued use of the platform mb2u after the amendment's effective date will be deemed as your acceptance of the updated Privacy Policy. We encourage you to review this page periodically.
Current Version: This Privacy Policy is the latest version and takes effect from 1 January 2026. Previous versions are no longer applicable. You may request a copy of an earlier version by contacting our team.
If you have any questions, concerns, or requests regarding this Privacy Policy or the management of your personal data by mb2u, please contact us via:
Malay-speaking support team mb2u operates 24 hours a day, 7 days a week, and will endeavour to respond to any privacy-related enquiries within 2 business days. For formal requests concerning PDPA privacy rights, the response period is within 21 business days as required by law.
Your privacy and data security are our top priority. Register for free today and join over 500,000 active Malaysian members who trust mb2u for safe, fair, and responsible online entertainment.
256-bit SSL | PDPA 2010 Compliant | No Data Sales | 24/7 BM Support