mb398 — How we protect your privacy
The mb398 platform takes your personal data seriously and protects it with full transparency and accountability. This policy explains how your data is collected, used, and stored.
This Privacy Policy ("Policy") governs how personal data is handled between the mb398 platform ("mb398", "we") and visitors or registered members ("you") who use our website and services. By accessing the mb398 website or continuing to use our services, you are considered to have read, understood, and agreed to this Policy.
Please review this policy regularly. We will try to notify you before any changes are made, but updates take effect immediately upon being published on the website.
Policy Table of Contents
Types of Personal Data We Collect
Registration Data
Information you provide when opening an account — your name, date of birth, email address, phone number, and the national registration card or citizenship verification card data submitted for identity verification (KYC). This data is strictly required for authentication and legal compliance.
Payment Data
Payment method details provided during deposits and withdrawals via KBZPay, Wave Money, AYA Pay, or bank transfer. We do not store full payment data ourselves — it is processed through trusted payment providers.
Gaming Activity Data
Data generated while you use the site — including games played, play frequency, amounts wagered, bonus claim history, and access logs. This data is used to protect your account and support responsible gambling tools.
Technical Data
IP address, browser type, device OS, date and time of access, and the referrer URL of the browser used to visit the site. This data is needed to ensure the site runs properly and to carry out security checks.
How We Collect Data
Information You Provide Directly
Data you provide directly through registering an account, filling in personal details, making deposits or withdrawals, and contacting customer support.
Automatically Collected Data
Data automatically recorded when you visit the site via session cookies, analytics trackers, and server logs. This data is used solely to improve the service and is not linked to any personally identifiable information.
Data Received from Third Parties
Verification data from KYC services or payment portals. Since this also involves third-party privacy policies, we coordinate with those third-party portals before sharing any data.
Purposes for Using Data
Account Management
Used to create your account, verify your identity, secure access, and allow you to update your personal information.
Payment Processing
Used to securely complete deposit and withdrawal transactions and to prevent fraudulent financial activity.
Customer Support
Used to accurately respond to inquiries and resolve issues submitted via 24/7 Live Chat and email.
Responsible Gambling
Data is used to analyse play patterns, help players set personal limits, and flag cases where support may be needed.
Security Protection
Technical data is used to detect and prevent suspicious access, financial fraud, and cyber attacks.
Site Improvement
Analytics data used to continuously improve site design, the gaming experience, and customer care.
Data Sharing and Disclosure
We Do Not Sell Your Data to Anyone
mb398 does not sell or hand over your personal data to any advertising company, data broker, or external organisation. This is a core commitment of mb398.
Service Providers
We may share data with partner companies that help us deliver our services — for example, payment processors, KYC verification services, and server hosting companies. These companies are bound by agreement not to use the data beyond the purposes we direct.
Legal Requirements
Your data may be disclosed when required by a court order, legal authority request, or legal obligation. We will try to notify you in advance unless we are legally prohibited from doing so.
Business Mergers
If mb398 undergoes a merger, acquisition, or transfer of assets, your data may be transferred to the receiving party. We will ensure that this policy remains in effect in such cases.
Cookies and Tracking Technologies
What Are Cookies
Cookies are small text files stored in your browser that help improve website functionality. mb398 uses cookies to remember your session, save your language preference, and measure website performance.
Strictly Necessary Cookies
These cookies cannot be disabled because they are essential for the website to function properly. They include login sessions, security tokens, and data form protection tokens.
Analytics Cookies
These are used to understand how the website is used and to improve our services. These cookies collect aggregate data only, which cannot identify you personally.
Managing Cookies
You can disable cookies through your browser settings. However, please note that disabling strictly necessary cookies may affect some website functions.
Data Security Protection
SSL Encryption
All data read and transmitted on the mb398 website is protected by SSL (Secure Sockets Layer) encryption. You will see "https://" and a padlock icon in your browser, confirming that your data is secure.
Access Control
Only specific staff members with a clear operational need are able to access your data, and access rights are strictly controlled by role.
Data Segregation and Backup
Data is stored on secure servers and backed up regularly. Measures are in place to prevent data corruption or loss.
Data Access Policy
Staff members and third-party service providers are required to commit to the data protection obligations outlined in their agreements.
In the Event of a Data Breach
If we become aware of a data breach, we will investigate as quickly as possible and notify affected customers where required. We will also identify and remove the root cause and take steps to prevent it from happening again.
Data Retention Period
While Your Account Is Active
We retain your data for as long as your account remains open. Data is kept as long as the purposes for which it was collected are still being fulfilled.
After Account Closure
If you request account closure or we deactivate your account, we may retain your data as required by law and for financial record-keeping purposes — typically up to 5 years. After this period, your data will be deleted or anonymised in a secure manner.
Financial Records
Payment-related data (deposit and withdrawal records) may be retained for a longer period to allow for review in the event of a legal claim. These records are kept for compliance and protection purposes.
Your Rights
Right to Access Your Data
You can request to view the data we hold about you. We will respond to your request within 30 days as a standard.
Right to Correct Your Data
If your personal information is inaccurate or incomplete, you can request a correction. Some data can be updated directly through your account settings.
Right to Delete Your Data
You can request deletion of data that is not subject to legal obligations. We will explain in advance if any data must be retained for legal reasons and cannot be deleted.
Right to Request Restriction
In certain cases, you may request that we restrict our processing of your data. During the restriction period, the data will be retained but will not be processed in any way.
Right to Data Portability
You may request to receive the data you have provided in a usable digital format. These requests are handled by us at [email protected].
Right to Object
You have the right to object to any of our data processing activities. We will review whether the objection can be resolved and respond within 30 days.
Contact Us to Exercise Your Rights
To exercise these rights, you may write to us at [email protected] or contact us via the 24/7 Live Chat on the website. You will need to provide certain information so we can verify your identity, and we will get back to you within 30 days.
Age Restrictions
Only players aged 21+ may access
mb398 services are for adults aged 21 and above only. Date of birth is verified at the time of account registration, and any data belonging to anyone under 21 will not be collected or stored — it will be deleted immediately. Any attempts to bypass this and allow underage access are strictly prevented.
Policy Changes
Right to Amend
mb398 may update this Privacy Policy at any time. Once changes are published on the website, the new policy takes effect immediately.
Notification
If there are significant changes to the policy, we will make reasonable efforts to notify you in advance through your registered contact details. Continued use of the website will be taken as acceptance of the new policy.
If You Do Not Agree
If you do not agree with the policy changes, you may stop using the service and close your account through mb398's contact channels.