Mari888 Privacy Policy – Personal Data Protection for Malaysian Players

Introduction

Welcome to the Privacy Policy page mari888. Platform mari888 is operated by a team committed to safeguarding the privacy and data security of every member who entrusts their personal information to us. This Privacy Policy sets out our data handling practices and complies with Malaysia's Personal Data Protection Act 2010 (PDPA).

When you register an account, make a deposit via Touch 'n Go, DuitNow, or any other Malaysian payment method we support, play slots, blackjack, roulette, or any other game on our platform, or contact our support team mari888 – you entrust us with a certain amount of information. We understand the trust that represents, and we handle every piece of it with the utmost care and responsibility.

This policy applies to all services provided by mari888, including our website, online gaming platform, and customer support channels. By using the mari888, you acknowledge that you have read, understood, and agreed to this Privacy Policy.

Personal Data We Collect

Mari888 collects personal data across several categories depending on how you interact with our platform. Below is a detailed breakdown of the types of data we collect and where they come from:

We do not collect sensitive data such as health information, religious beliefs or political views, except in the context of responsible gambling management where you have chosen to disclose this to us for self-protection purposes.

How We Use Your Personal Data

Every piece of data we collect has a clear and legitimate purpose. Mari888 uses members' personal data for the following purposes:

• Account management: Creating and maintaining member accounts, verifying identity through the KYC process, and enabling secure access to the platform.
• Transaction processing: Processing deposits via Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay, and FPX in Malaysian Ringgit (MYR), as well as withdrawals of winnings to verified accounts.
• Provision of gaming services: Managing game sessions for slots, blackjack, roulette, Live Casino and Sports Betting; storing game history and betting records.
• Fraud prevention and security: Detecting suspicious transaction patterns, preventing money laundering and safeguarding the integrity of the mari888 platform.
• Legal compliance: Meeting the reporting and record-keeping obligations required under applicable Malaysian law.
• Customer support: Responding to enquiries, resolving complaints and providing technical assistance to members.
• Platform improvements: Analysing usage patterns to improve the user experience, platform performance and game library.
• Marketing communications: Sending information about mari888 promotions, bonuses and special events – only to members who have opted in to receive such communications.
• Responsible gambling: Monitoring gaming patterns to identify members who may need responsible gambling support.

Legal Basis for Data Processing

Under Malaysia's Personal Data Protection Act 2010 (PDPA), mari888 processes members' personal data on the following lawful legal bases:

• Consent: When you register a mari888 account, you grant us consent to process your personal data for the purpose of providing our services. This consent may be withdrawn at any time.
• Contract performance: Processing required to fulfil our contractual obligations to you — including handling MYR deposits, withdrawal of winnings, and account management.
• Legitimate interests: Data analytics for platform improvements, fraud prevention and cybersecurity that protects the interests of all members.
• Legal obligations: Compliance with relevant Malaysian regulatory directives, including Anti-Money Laundering (AMLA) reporting obligations.

For each data processing activity, we identify the most appropriate legal basis and document it in our internal compliance records.

Data Sharing with Third Parties

Mari888 does not sell, rent, or trade members' personal data to any third party for marketing or commercial purposes. Data sharing only occurs under the following limited circumstances, and exclusively with parties bound by strict data protection agreements:

• Payment service providers: Payment processors for Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay, and FPX receive only the transaction information necessary to process deposits and withdrawals in MYR. They are permitted to use this data solely for payment processing purposes.
• Game software providers: Providers such as Evolution Gaming, Pragmatic Play, and PG Soft receive the game session data necessary to operate their games on the mari888 platform. This data does not include full financial information.
• Identity verification services: Third parties that assist with KYC processing and document verification are subject to strict data protection agreements.
• Legal authorities: In situations where we are required by Malaysian law or a court order to disclose information to the relevant authorities, we will do so after verifying the legitimacy of the request.
• Cloud services & infrastructure: Server hosting providers that store our data are bound by data processing agreements that comply with the highest security standards.

Data Security – How We Protect Your Information

Data security is the top priority at mari888. We continuously invest in security infrastructure and industry best practices to ensure your data remains protected. The technical and organisational security measures we have implemented include:

• Data encryption in transit: All communications between your browser and the mari888 server are protected with TLS 1.3 protocol with a 256-bit SSL certificate – the same standard used by Malaysian banking institutions such as Maybank and CIMB.
• Data encryption at rest: All sensitive data, including KYC information and financial records, is stored with AES-256 encryption in our secured databases.
• Two-factor authentication (2FA): Available for all financial transactions and can be enabled for account logins. We strongly encourage all members to activate 2FA.
• Role-based access control: Only mari888 staff with a legitimate business need are permitted to access members' personal data, and every access is logged for audit purposes.
• 24/7 threat monitoring: An intrusion detection system and anomaly monitoring operate around the clock to detect and respond to security threats promptly.
• Regular security testing: Penetration testing and security audits are conducted regularly by independent security experts to identify and address any vulnerabilities.
• Incident response plan: We have a comprehensive security incident response plan in place. In the event of any data breach affecting members, we will notify those impacted within 72 hours.

While we take all reasonable steps to protect your data, no system is 100% immune to cyber threats. We encourage members to play their part in account security by using strong passwords, enabling 2FA and not sharing login credentials.

Data Retention Period

Mari888 retains members' personal data only for as long as necessary for the stated purposes, or as required by Malaysian law. Our data retention schedule is as follows:

• Active account data: Retained for the duration of the active account and for an additional period following account closure as required by law.
• Financial transaction records: Retained for a minimum of 7 years from the transaction date, in line with Malaysia's anti-money laundering and tax legal requirements.
• KYC Documents: Retained for a minimum of 5 years after the business relationship ends, or longer if required by law.
• Technical and security logs: Retained for 90 days for security incident investigation and technical debugging purposes.
• Customer support records: Retained for 2 years to facilitate follow-ups and as a historical record of service interactions.
• Marketing data: Retained until you withdraw consent to receive marketing communications from mari888.

Once the relevant retention period has expired, data will be securely deleted or anonymised in accordance with our established data disposal procedures.

Cookies & Tracking Technologies

Platform mari888 uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions properly. The types of cookies we use are as follows:

• Essential cookies (required): Required for core platform functionality — including login verification, game session management, and transaction security. These cookies cannot be disabled as they are fundamental to platform operations.
• Performance cookies: Collecting anonymised data on how visitors use our platform – pages visited, time spent and errors encountered. This information helps us improve the overall user experience.
• Preference cookies: Storing your preferences such as interface language, last betting limits and display settings to make your gaming sessions more comfortable.
• Analytics cookies: Helping us understand how members use different parts of the platform – insight we use to plan feature improvements and new game additions.

You can manage your cookie preferences through your web browser settings. However, disabling essential cookies may affect platform functionality. For mobile browsers used to access mari888, cookie settings can be managed through your browser app's settings.

Your Rights Over Personal Data

Under Malaysia's PDPA and our own policies, you as a member mari888 holds the following rights regarding your personal data:

• Right to access: You have the right to request a copy of the personal data we hold about you. Data access requests will be processed within 21 business days.
• Right to rectification: If any of your personal data is inaccurate or out of date, you have the right to request a correction. For information that requires re-verification (such as your name or IC number), supporting proof may be required.
• Right to erasure: In certain circumstances, you may request that we delete your personal data. Please note that we may need to retain certain data to fulfil our legal obligations, even after a deletion request has been made.
• Right to withdraw consent: You may withdraw your consent to data processing at any time, particularly for marketing communications. Withdrawing consent does not affect the validity of any processing carried out prior to the withdrawal.
• Right to object to marketing: You may opt out of marketing communications from mari888 at any time by contacting our support team or using the unsubscribe link in any of our emails.
• Right to data portability: You have the right to receive your personal data in a machine-readable format for transfer to another service provider where applicable.

To exercise any of the rights above, please contact our support team mari888 via live chat or email at support@mari888.site by specifying the type of request and the required identity verification information.

Children's Data Protection

Platform mari888 is intended strictly for individuals aged 18 and above. We do not knowingly collect or process personal data from minors under the age of 18. Our KYC process is specifically designed to verify this age requirement before any first withdrawal is processed.

If we discover that personal data belonging to a minor under the age of 18 has been collected without our knowledge due to false information provided during registration, we will:

• Suspend the relevant account immediately.
• Promptly delete all associated personal data.
• Taking appropriate action in accordance with applicable policies and laws.

If you suspect that a minor may have registered on our platform, please contact the mari888 support team immediately.

Changes to This Privacy Policy

Mari888 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our business practices, evolving legal requirements, or improvements in data protection standards. Each new version will be published on this page along with an updated effective date.

For changes that directly affect member rights or materially alter how we process data, we will notify members via:

• A clear in-platform notification displayed at login.
• Email to the registered address no later than 7 days before the changes take effect.
• Update the "Effective Date" at the top of this document.

We encourage you to review this page periodically. Continued use of the platform mari888 continued use after the effective date of an amended policy will be considered acceptance of that updated policy.

Contact Us – Privacy-Related Enquiries

If you have any questions, concerns or requests relating to this Privacy Policy or the way mari888 handles your personal data, please reach out to us through the following channels:

We are committed to addressing every privacy-related enquiry thoroughly and within a reasonable timeframe. Member satisfaction and trust are our top priorities. mari888.