Mhd8 Privacy Policy – How We Protect Your Personal Data

At mhd8, we understand that your trust in us starts with the security of the personal information you provide. This Privacy Policy is written in clear, plain language — we don't want our users to wade through lengthy, tedious documents without knowing what is actually happening to their data.

This document details: what types of data we collect when you use the mhd8 platform, why that data is collected, how it is used, who it may be shared with under certain circumstances, and what rights you have as a user to control your own personal information.

Mhd8 complies with Malaysia's Personal Data Protection Act 2010 (PDPA) and international data protection best practices. This compliance is not merely a legal obligation — it is part of our commitment to building a platform that every user in Malaysia can genuinely trust.

1 Types of Information We Collect

Mhd8 collects your personal information through various means as you use our platform. Generally, there are two main categories of data we collect:

A. Information You Provide Directly

• Registration information: Full name, phone number, email address, date of birth, and account details.
• Identity verification (KYC): A copy of your MyKad or passport, a verification selfie and proof of current residential address.
• Financial information: Bank account details, digital wallet account numbers (TNG, GrabPay), and deposit and withdrawal transaction records.
• Support communications: Messages, complaints, and enquiries you submit to the mhd8 customer support team.

B. Information Collected Automatically

• Device data: Device type, operating system, app version, and unique device identifier.
• Usage data: Games played, session duration, wagering history and activity patterns on the platform.
• Network data: IP address, approximate location based on IP, and internet service provider information.
• Cookie data: Session cookies, preference cookies, and platform analytics data (detailed in Section 4).

2 How Your Information Is Used

Every piece of data we collect has a clear and legitimate purpose. mhd8 uses your personal information for the following purposes:

Mhd8 does not use user data for any third-party advertising purposes without your explicit consent. If you do not wish to receive promotional communications, you may withdraw your consent at any time through the notification settings in your account.

3 Data Sharing with Third Parties

Mhd8 does not sell, rent or trade your personal information to any third party for their own commercial purposes. This is a core principle we uphold without exception.

However, under the following limited circumstances, your information may be shared with selected third parties:

• Payment service providers: Payment processors such as FPX, DuitNow, and digital wallet providers to complete your financial transactions. They only receive data required to process the relevant transaction.
• Technology service providers: Cloud infrastructure providers, identity verification services, and analytics tools that help us operate the platform. All these providers are bound by strict data protection agreements.
• Relevant authority: When required by Malaysian law or a valid court order, we will disclose the necessary information to the relevant law enforcement agencies.
• Fraud prevention: In cases of suspected fraud, relevant information may be shared with recognised financial institutions or fraud prevention agencies.

4 Cookies & Tracking Technologies

The mhd8 platform uses cookies and similar tracking technologies to enhance the user experience, maintain login session security and analyse overall platform usage patterns.

Here are the types of cookies we use:

• Essential session cookies: Required to keep your login session active and secure. These cookies cannot be disabled without affecting the core functionality of the platform.
• Preference cookies: Saves your language settings, display currency, and interface preferences so you do not have to re-enter them every time you log in.
• Analytics cookies: Collects anonymous usage data to help us understand how users interact with the platform and identify areas for improvement.
• Security cookies: Used to detect unauthorised access attempts, identify trusted devices, and protect your account from suspicious activity.

You can manage cookie settings through your web browser at any time. However, disabling certain cookies may affect your experience on the mhd8 platform, particularly the auto-login function and personal preference settings.

5 Data Security — How We Protect Your Information

Mhd8 continuously invests in a comprehensive data security infrastructure. Protecting your personal information is not just about legal compliance — it is about ensuring you can use our platform with complete peace of mind and confidence.

Key security measures we have in place:

• 256-bit SSL encryption: All data transmitted between your device and mhd8 servers is encrypted using the latest TLS protocol.
• Data-at-rest encryption: Sensitive data stored in our databases — including financial information and identity documents — is encrypted using AES-256 standards.
• Two-factor authentication (2FA): An additional security layer available to all users, with authentication options via SMS or an authenticator app.
• 24/7 Monitoring: Our security team monitors platform activity around the clock to detect and respond to any security threats in real time.
• Regular penetration testing: Independent security experts conduct regular vulnerability assessments to ensure our infrastructure remains robust.
• Internal access controls: mhd8 staff can only access user data based on their job requirements (least privilege principle). Access to sensitive data is automatically audited and logged.

6 Data Storage & Retention

Your personal data is stored on servers located in the Asia Pacific region, maintained to high physical and digital security standards. mhd8 uses certified cloud infrastructure operators that comply with international data security standards.

Data retention periods depend on the type of information and applicable legal requirements:

• Active account data: Retained for the duration of the active account and up to 7 years after account closure to meet financial record-keeping and audit requirements.
• Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysian financial reporting legal requirements.
• KYC documents: Retained for the period required by applicable anti-money laundering laws.
• Support communication logs: Retained for 3 years for reference and dispute resolution purposes.
• Anonymous analytics data: May be retained indefinitely as it contains no personally identifiable information.

Once the retention period expires, your data will be securely deleted or anonymised so it can no longer be linked to your identity.

7 Your Rights as a User

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have certain rights regarding the personal information we hold about you. mhd8 respects and facilitates the exercise of all these rights:

To exercise any of the above rights, please contact our privacy team via live chat or email. We will process your request within 30 calendar days of receipt.

8 Children's Data

The mhd8 platform is strictly for individuals aged 18 and above. We do not knowingly collect, store or process any personal information from individuals under the age of 18.

If we discover or are notified that a child's personal information has been collected without our knowledge, we will take immediate action to delete that information and close the associated account. Parents or guardians who suspect their child may be using the platform are urged to contact us immediately.

9 Changes to This Privacy Policy

Mhd8 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, new legal requirements or improvements to the services we offer. The date of the most recent update is always displayed at the top of this page.

For any significant changes to how we use or share your personal data, we will notify you in advance via your registered email or an in-platform notification at least 14 days before the changes take effect. This gives you sufficient time to review and decide whether you are still comfortable continuing to use our platform.

10 Contact Our Privacy Team

If you have any questions, concerns, or requests regarding this Privacy Policy or how mhd8 handles your personal data, our team is here to help:

• Live Chat: Available 24/7 via the chat icon in the mhd8 app or on our website — the fastest way to get an immediate response.
• Privacy Email: [email protected] — for written enquiries requiring documentation or more detailed clarification. We aim to respond within 5 business days.
• Official Telegram: The official mhd8 support channel — for general enquiries related to privacy and account security.

We are committed to addressing every privacy-related question seriously and transparently. No question is too small — if you have any doubts about your data, please contact us.