Mibox Privacy Policy – Malaysia User Data Protection

1Introduction and Scope of This Privacy Policy

Mibox values the privacy of every user who trusts our platform. As an online entertainment platform serving exclusively Malaysian users, we understand that your trust depends not only on the quality of the services we provide, but also on how we handle your personal information responsibly.

This Privacy Policy applies to all users who access or use the mibox.fun website, the mibox mobile app, and all related services. It covers how we collect, store, process, use, and protect your personal data throughout your time as a user of our platform.

We encourage you to read this document carefully and to contact our support team if any aspect is unclear. Transparency is one of mibox's core values, and we want to ensure you fully understand your rights as a user.

2Types of Personal Data We Collect

Mibox only collects data necessary to deliver a safe, seamless, and quality service to you. The data we collect can be divided into several key categories:

We do not collect sensitive personal data such as medical information, religious beliefs, or political views unless specifically required by applicable law.

3How We Collect Your Data

Your personal data is collected through several different methods as you interact with the mibox platform:

• Account registration — information you fill in when opening a new account at mibox.
• KYC Process — identity verification documents you submit for account verification and security purposes.
• Financial transactions — details provided when making a deposit or requesting a fund withdrawal.
• Platform usage — data automatically generated when you play, place bets, or browse our website.
• Support communications — information you share when contacting our customer support team via live chat or email.
• Cookies and Tracking Technologies — technical data collected via browser cookies to enhance user experience and platform security.

4Purposes for Using Your Personal Data

Mibox uses your personal data solely for legitimate and stated purposes. We do not use your data for any purpose unrelated to delivering our services. The primary purposes for data use include:

• Securely creating, verifying and managing your user account.
• Processing deposits, withdrawals and all requested financial transactions.
• Conducting KYC verification processes to meet compliance requirements and prevent fraud.
• Identifying and preventing fraudulent activity, money laundering and platform abuse.
• Delivering effective and responsive customer support.
• Sending account-related notifications, promotions and relevant service updates.
• Continuously improving platform quality, user experience and system security.
• Complying with applicable legal obligations and reporting requirements.

5Data Sharing with Third Parties

Mibox does not sell or rent your personal data to any third party. However, in certain situations, we may need to share some of your data with the following parties for limited and stated purposes:

• Payment providers and banks — to securely process your deposits and withdrawals via approved FPX channels, bank transfers, or e-wallets.
• Technical service providers — companies assisting with platform hosting, cybersecurity, and technical infrastructure, bound by strict confidentiality agreements.
• Regulatory authorities — when required by Malaysian law or by directive from a competent authority.
• Game service providers — game session details required by third-party game providers to ensure games function correctly.

In all data sharing situations, mibox ensures that recipients are bound by data protection obligations equal to or stricter than our own standards. Data is shared only to the extent necessary for the stated purpose.

6Data Security Measures

Protecting your personal and financial data is mibox's highest priority. We continuously invest in industry-grade security infrastructure to keep your data safe from any threat at all times.

• 256-bit SSL Encryption — all data transmitted between your device and our servers is encrypted using banking-grade security protocols.
• Data-at-rest encryption — data stored in our databases is also encrypted to prevent unauthorized access in the event of a breach.
• Two-factor authentication (2FA) — an additional security layer available to all user accounts to prevent unauthorized access.
• 24/7 Monitoring — automated monitoring systems operate around the clock to detect and respond to any suspicious activity.
• Regular security audits — security assessments are conducted periodically by independent third-party experts to identify and address vulnerabilities.
• Internal access controls — access to users' personal data within mibox staff is strictly limited on a need-to-know basis.

7Data Retention Period

Mibox retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable laws and regulations.

• Active account data — retained for the duration your account is active and for a reasonable period after account closure for compliance purposes.
• Financial transaction records — retained for a minimum of 7 years in accordance with Malaysian accounting and tax legal requirements.
• KYC Documents — retained for the period prescribed by applicable regulatory compliance requirements.
• Support communication logs — retained for 2 years to allow reference and resolution of any disputes that may arise.
• Technical data and system logs — retained for 90 days for troubleshooting and security purposes.

Once the retention period expires or when data is no longer needed, we will securely delete or anonymise it using methods that ensure it cannot be recovered.

8Your Rights as a User

As a mibox user residing in Malaysia, you have certain rights regarding your personal data under the Personal Data Protection Act 2010 (PDPA). mibox fully respects and facilitates the exercise of these rights.

9Cookies and Tracking Technologies

The mibox platform uses cookies and similar tracking technologies to enhance the user experience, maintain session security and enable certain features to function correctly. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

• Essential Cookies — required for core platform functions such as login, session security, and navigation. These cookies cannot be disabled.
• Performance Cookies — collects information on how users interact with the platform to help us improve service quality.
• Functional Cookies — remembers your preferences such as language, display settings, and personal choices to deliver a more tailored experience.
• Security Cookies — helps detect and prevent fraudulent activity and ensures the security of your account.

You can manage cookie settings through your browser. However, disabling certain cookies may affect the functionality and user experience of the mibox platform.

10Children's Privacy

Mibox services are intended exclusively for individuals aged 18 and above. We do not knowingly collect or process personal data from children or minors under the age of 18.

If we find that we have inadvertently collected personal data from an individual under the age of 18, we will take immediate steps to delete that data and close the relevant account. Parents or guardians who believe their child has registered on our platform are encouraged to contact our support team immediately.

11Amendments to This Privacy Policy

Mibox reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the technologies we use. All amendments will be posted on this page along with the updated date.

For material or significant amendments, we will notify users via in-platform notifications or registered email before the changes take effect. It is your responsibility to review this page periodically to stay informed about how we handle your personal data.

Continued use of the mibox platform after any amendments to this policy are published constitutes your acceptance of the updated terms. If you disagree with any changes, you have the right to close your account and stop using the platform.

12Contact Us Regarding Privacy

If you have any questions, concerns or complaints regarding this Privacy Policy or how we handle your personal data, our team is ready to assist you at any time.

You can reach us via:

• Live Chat — the fastest channel, available 24 hours a day, 7 days a week, directly within the mibox platform.
• Support Email — send your detailed enquiry to our support email address and we will respond within 1–2 business days.

For formal complaints regarding data protection, you may also refer to the Department of Personal Data Protection Malaysia (JPDP) as the regulatory body responsible under PDPA 2010.