Privacy Policy mhd8 — Protecting Your Personal Data Is Our Priority

This Privacy Policy ("Policy") is published by mhd8, an online Sports Betting and casino platform operating under the domain mhd8.click and intended for users in Malaysia. This Policy transparently explains how we manage personal information provided by members and users of our platform.

Mhd8 is committed to protecting the privacy of every individual who interacts with our platform — whether during account registration, day-to-day platform use, communication with our customer support team, or when conducting financial transactions via Malaysian local payment methods such as Touch 'n Go eWallet, GrabPay, DuitNow, and FPX.

This Policy applies to all information collected through:

• The mhd8.click website and all associated subdomains.
• The mhd8 mobile app, where available.
• Communications via email, live chat, and other customer support channels.
• Any direct interactions between you and the mhd8 team.

Mhd8 only collects data that is necessary to provide, manage, and improve the platform's services. Below are the categories of data we collect and the reasons for collecting them:

Mhd8 does not collect sensitive data such as medical information, political views, or religious beliefs. We also do not collect biometric data except in specific identity verification cases that require your explicit consent.

Mhd8 uses members' personal data for the following legitimate and clearly defined purposes. We do not use your data for any other purpose without notifying you in advance:

• Account Management: Creating, verifying, and maintaining your mhd8 member account, including secure login and account recovery when needed.
• Transaction Processing: Facilitates deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX, as well as processing winnings withdrawals to your linked account.
• Platform Security: Detecting and preventing fraudulent activity, system exploitation, duplicate accounts, and any security threats to the platform or other members.
• Customer Support: Responding to enquiries, resolving complaints, and providing technical assistance in Bahasa Melayu via live chat and email.
• Legal Compliance: Fulfilling applicable Malaysian legal obligations, including requirements related to anti-money laundering and data protection.
• Product Improvement: Analysing aggregated usage patterns to improve platform design, technical performance, and the overall user experience.
• Service Communications: Sending important notifications related to your account, such as transaction confirmations, security alerts, and material updates to our terms.
• Responsible Gaming: Monitoring betting patterns to identify signs of potential problem gambling and to support the responsible gaming tools you have enabled.

Mhd8 does not sell, rent, or trade members' personal data to any party for marketing purposes. However, there are limited situations where data sharing is necessary for the platform's operations:

• Technology Service Provider: mhd8 works with carefully selected third-party service providers for technical functions such as server hosting, platform analytics, and security systems. These providers are contractually obligated to protect your data and use it only as directed by mhd8.
• Payment Processors: When you make a deposit or withdrawal via eWallet or FPX, the required transaction details are shared with the relevant payment provider (for example, Touch 'n Go or a banking institution via DuitNow) to process the transaction.
• Legal Requirements: mhd8 may be required to disclose member data to the relevant Malaysian authorities when compelled by a court order, applicable law or regulation, or in the course of investigations related to financial crime.
• Protection of mhd8's Rights: In the event of litigation or legal claims involving the platform, relevant data may need to be disclosed to legal counsel or the courts to the extent permitted by law.

In all of the sharing scenarios above, mhd8 ensures that only data genuinely necessary for that purpose is shared, and that recipients are bound by appropriate confidentiality obligations.

Mhd8 invests seriously in security infrastructure to ensure member personal data is protected from unauthorised access, loss, or alteration. The key security measures we have implemented include:

• 256-bit SSL/TLS Encryption: All communications between your device and mhd8 servers are encrypted using the highest industry-standard security protocols. This means your data cannot be read by third parties even if they manage to intercept the network communication.
• Internal Access Controls: Only mhd8 staff with a legitimate business need may access members' personal data, and all such access is recorded and monitored on a regular basis.
• 24/7 Threat Monitoring: mhd8's security systems operate around the clock to detect unusual activity, intrusion attempts, and other security threats in real time.
• Regular Security Audits: The mhd8 platform undergoes regular security testing and audits by our internal team and, from time to time, by independent security testers to identify and address any system vulnerabilities.
• Secure Data Backup: Member data is backed up regularly to secure, encrypted locations to ensure rapid recovery in the event of a system failure or unexpected incident.

Mhd8 does not retain your personal data longer than necessary for the purposes stated in this Policy or as required by applicable Malaysian law. Our data retention policy is as follows:

• Active Account Data: For as long as your account remains active and you are using the mhd8 platform, we retain the data necessary to maintain and deliver our services to you.
• Financial Transaction Data: Financial transaction records are retained for the period required under applicable Malaysian financial and tax laws, typically between five and seven years from the date of the transaction.
• Post-Account Closure Data: When an account is closed at your request, certain data may need to be retained for a specified period for legal compliance purposes, fraud prevention, or the resolution of any outstanding disputes.
• Communication Data: Customer support communication records are retained for as long as necessary for issue resolution and service quality purposes, after which they are deleted or anonymised.

Once the retention period has lapsed or the data is no longer required, mhd8 will securely delete or anonymise it in a manner that ensures it cannot be recovered or re-linked to you.

Mhd8 uses cookies and similar tracking technologies to enhance your experience on the platform. Cookies are small text files stored in your browser when you visit our platform.

Types of Cookies We Use:

• Essential Cookies: Required for core platform operations such as staying logged in and session security. These cookies cannot be disabled without affecting platform functionality.
• Performance & Analytics Cookies: Helps us understand how members use the platform — pages visited most frequently, time spent, and navigation patterns — for the purpose of platform improvement.
• Functional Cookies: Saving your preferences such as language settings and display options so you do not have to reconfigure them each time you log in.

You can manage cookies through your browser settings. However, disabling certain cookies may affect your experience on the mhd8 platform. All data collected via cookies is subject to the same protections as other personal data described in this Policy.

As an mhd8 member and owner of your personal data, you have the following rights, which may be exercised at any time by contacting us:

The mhd8 platform is strictly for individuals aged 18 and above. mhd8 does not knowingly collect or process personal data from anyone under the age of 18.

If mhd8 finds that personal data belonging to a minor has been collected without the knowledge or consent of a parent or legal guardian, we will take immediate steps to delete that data and close the associated account without delay.

Mhd8 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our operational practices, new legal requirements, or improvements to the way we protect your data.

When significant changes are made to this Policy, mhd8 will notify members via:

• In-platform notification on mhd8 upon your next login.
• Email the address registered to your account for material changes.
• Update the "Last Updated" date displayed at the top of this page.

Continued use of the mhd8 platform after any changes to this Policy take effect will be considered acceptance of the updated Policy. If you do not agree with the changes, you have the right to request closure of your account.

If you have any questions, concerns, or requests regarding this Privacy Policy or how mhd8 handles your personal data, please reach out to us through the following channels:

• Privacy Email: support@mhd8.click — for all privacy-related enquiries, data access requests, or data protection complaints. We respond within 2 to 4 hours for standard cases and within 24 hours for all enquiries.
• Live Chat: Available 24/7 on the mhd8 platform — for quick privacy-related queries that need an immediate response.

For formal complaints regarding data processing that you believe does not comply with this Policy or applicable law, please submit a written complaint to support@mhd8.click with the subject line "Data Privacy Complaint", along with full details and any relevant documentation. All privacy complaints will be taken seriously and responded to within 5 business days.

All privacy-related communications with mhd8 can be conducted entirely in Bahasa Melayu. Our team understands local needs and is ready to assist without any language barriers or confusing procedures.