Privacy Policy mhd8 – Our Commitment to Protecting the Personal Data of Malaysian Players

Mhd8 is an online sports betting and casino platform serving Malaysian players. We understand that players' trust in us depends not only on the quality of our games or the speed of our payouts — it also relies heavily on how well we respect and protect the personal data you entrust to us.

This Privacy Policy has been drawn up in accordance with the requirements of Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practices in personal data management. The primary purpose of this document is to give you a clear and transparent understanding of what happens to your information from the moment you register with mhd8 through to the day you close your account.

Every time you make a deposit via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX, when you play roulette or blackjack at a mhd8 Live Casino table, or when you contact our support team – certain data is processed. We want you to know exactly what that data is, how it is used, and how it is protected.

Mhd8 collects your personal data through three main channels – information you provide directly, data collected automatically during platform use, and data received from legitimate third parties.

Data you provide directly to mhd8:

• Registration information: Full name, MyKad or passport number, date of birth, gender, residential address, mobile number and email address
• Financial information: eWallet account details (Touch 'n Go, GrabPay, Boost, ShopeePay) or Malaysian bank account details (Maybank, CIMB and others) registered for deposit and withdrawal purposes — stored in encrypted form
• Identity verification documents: A copy of your MyKad or passport submitted for age and identity verification (KYC) purposes
• Communications: Live chat message content, emails, and any complaints or feedback you submit to the mhd8 support team

Automatically collected data:

• IP address and geographical location information (country/city)
• Device type, model, operating system, and browser version
• Gaming session logs including date, time, game type, bet amounts, and outcomes
• Records of all deposit and withdrawal transactions
• Cookie data and related tracking technologies — see Section 6 for more information

Mhd8 uses your personal data solely for legitimate purposes directly related to the provision of platform services. We do not process your data for unrelated purposes without your consent.

• Service provision: Creating and managing your account, processing deposits and withdrawals, and enabling you to play all games available on mhd8
• Identity verification (KYC): Verifying your age and identity to comply with legal requirements and prevent fraud
• Security and fraud prevention: Detecting and preventing suspicious activity, multiple account usage, money laundering, and any misuse of the platform
• Customer support: Handling enquiries, resolving complaints and providing technical support in Malay
• Responsible gaming: Monitoring gameplay patterns to identify signs of problem gambling and enforce limits set by players themselves
• Legal compliance: Comply with reporting, audit, and record-keeping obligations required under Malaysian law
• Service improvement: Analysing usage patterns in aggregate (without identifying individuals) to improve the user experience on the mhd8 platform
• Account-related communications: Sending important notifications about your account, changes to our Terms or Privacy Policy, and critical service updates

Mhd8 does not sell, rent or trade your personal data to third parties. However, in the course of operating the platform, there are certain situations where your data may be shared with approved parties:

• Payment providers: Required transaction details are shared with eWallet providers (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow) and Malaysian banks via FPX to process your deposits and withdrawals — all of these providers are subject to strict financial data security standards
• Game providers: Usernames and required game session data are shared with the live casino and slots software providers partnered with mhd8 – all such providers are bound by strict confidentiality agreements
• Legal authorities: mhd8 will disclose required data to Malaysian authorities (such as PDRM, SPRM, or the courts) when mandated by a court order, warrant, or other lawful legal requirement
• Audit and compliance: Independent auditors or legitimate regulatory bodies may be granted limited access to specific records in the context of compliance reviews

The security of your personal data is an absolute priority for mhd8. We continuously invest in security infrastructure and follow industry best practices to ensure your data remains protected at all times.

Technical measures implemented by mhd8:

• 256-bit SSL/TLS Encryption: All communications between your browser/app and mhd8's servers are encrypted using the latest TLS 1.3 protocol
• Financial data tokenisation: Bank account numbers and eWallet details are never stored in plain text – all financial data is held as secure tokens that cannot be used without the correct encryption key
• Role-based access control: Only mhd8 staff who require access to specific data for their job functions are granted permission – the principle of least privilege is strictly observed
• Two-factor authentication (2FA): All internal access to mhd8 systems that store player data requires two-factor authentication
• 24/7 threat monitoring: Intrusion detection systems (IDS) and intrusion prevention systems (IPS) run continuously to identify and block cyber threats
• Regular backups: Critical data is regularly backed up to separate, secure locations with tested recovery procedures in place

Even with all of the above measures in place, no digital system can be guaranteed to be 100% secure against every threat. In the event of a data breach affecting your information, mhd8 will notify you within a reasonable timeframe in accordance with legal requirements and will take appropriate remedial action.

Mhd8 uses cookies and similar tracking technologies to enhance your experience on the platform. Cookies are small data files stored on your device when you browse the website or use the mhd8 app.

You can manage or disable cookies through your browser settings. Please note, however, that disabling essential cookies may affect core mhd8 platform functionality, including the ability to log in and complete transactions.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and mhd8's policy, you have the following rights regarding your personal data:

To exercise any of the rights above, please contact mhd8 by email at support@mhd8.best with the subject line "Privacy Rights Request", or via 24/7 live chat. We will respond to your request within 30 business days. In certain cases, we may require additional identity verification before processing your request to ensure account security.

Mhd8 retains your personal data only for as long as is necessary to fulfil the purposes outlined in this Privacy Policy, or for as long as required under applicable Malaysian law.

• Active account data: Retained for the duration of your account and for 5 years after account closure – a requirement under Malaysia's anti-money laundering laws
• Financial transaction records: All deposit and withdrawal records are retained for a minimum of 7 years in accordance with Malaysian financial law requirements
• Gaming session logs: Retained for 5 years for dispute resolution and audit purposes
• Customer support communications: Retained for 2 years from the date of last communication
• KYC documents (MyKad/passport): Retained for 5 years after account closure in accordance with Malaysian AML/KYC legal requirements

When data is no longer required and there is no legal obligation to retain it, mhd8 will delete or de-identify that data in a secure and irreversible manner.

Mhd8 strictly prohibits the use of its platform by individuals under the age of 18. The mhd8 platform is not designed for children or minors, and we do not knowingly collect personal data from them.

Should we receive information or confirm that personal data has been collected from an individual under the age of 18, we will take the following steps without delay:

• Suspending the relevant account immediately while an investigation is conducted
• Delete all personal data belonging to that individual from our systems
• Returning any valid cash credit balance to the original payment method
• Reporting the matter to the relevant authorities where required

Mhd8 reserves the right to amend this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or improvements to how we protect your information.

When we make significant amendments, we will:

• Updating the "Last Updated" date at the top of this document
• Displaying a clear notice on the mhd8 platform's main page at least 7 days before the amendment takes effect
• Notifying all members via email or in-platform notification for amendments that involve material changes to your privacy rights

Your continued use of the mhd8 platform after the effective date of any amendment constitutes your acceptance of the updated Privacy Policy. We encourage you to review this page periodically.

If you have any questions, concerns or requests regarding this Privacy Policy or the processing of your personal data by mhd8, you may reach us through the following channels:

Every privacy-related request will receive a reference number and an initial response within 3 business days. Requests requiring more in-depth review, such as full data access or account deletion requests, will be resolved within 30 business days.