Privacy Policy — mari88

1. Introduction

This Privacy Policy ("Policy") describes how mari88 ("mari88", "we", "us", "our") collects, uses, stores, discloses, and otherwise processes the personal data of individuals ("you", "User", "Player") who access or use the mari88 online gaming platform at https://mari88.app and any associated services.

mari88 is committed to protecting the privacy and security of your personal data. We process personal data in accordance with applicable data protection legislation and the principles of transparency, fairness, and data minimisation. By registering for an account or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

This Policy should be read alongside the mari88 Terms & Conditions and Responsible Gaming Policy, which are incorporated herein by reference.

2. Personal Data We Collect

2.1 Identity & Contact Data

When you register for a mari88 account, we collect your full legal name, date of birth, residential address, email address, and Malaysian mobile phone number. This information is required to create your account, verify your identity, and comply with our Know Your Customer (KYC) obligations.

2.2 Verification Documents

As part of the KYC process, which is mandatory before any withdrawal can be processed, we collect copies of government-issued photo identification (such as a Malaysian MyKad or passport) and, where required, proof of residential address. These documents are used solely for identity and age verification purposes.

2.3 Financial Data

We collect details of payment methods used on the Platform, including bank account identifiers, e-wallet account references (such as Touch 'n Go eWallet, Boost, or GrabPay account identifiers), and transaction records. We do not store full payment card numbers or CVV codes. All financial data is processed in Malaysian Ringgit (MYR).

2.4 Gaming & Transaction Data

We collect records of all gaming activity on the Platform, including game sessions, wager amounts, game outcomes, bonus usage, deposit and withdrawal history, and account balance movements. This data is required for regulatory compliance, dispute resolution, and the provision of the Platform's services.

2.5 Technical & Usage Data

We automatically collect certain technical data when you access the Platform, including your IP address, device type, operating system, browser type and version, session duration, pages visited, and referring URLs. This data is collected via cookies and similar tracking technologies as described in Section 9.

2.6 Communications Data

If you contact our support team via live chat or email, we retain records of those communications, including the content of messages and any files shared, for quality assurance, dispute resolution, and training purposes.

3. How We Collect Your Data

We collect personal data through the following means:

• Directly from you — when you complete the registration form, submit KYC documents, make deposits or withdrawals, contact support, or update your account profile;
• Automatically — through cookies, web beacons, and server logs when you interact with the Platform;
• From third parties — from payment processors and identity verification service providers in the course of processing transactions and verifying your identity;
• From publicly available sources — where necessary to verify information you have provided or to comply with anti-money laundering screening obligations.

4. Purposes for Which We Process Your Data

mari88 processes your personal data for the following purposes:

• To create and administer your account and provide access to the Platform's services;
• To verify your identity and age (you must be 21 or older) in compliance with KYC requirements;
• To process deposits, withdrawals, and other financial transactions in MYR;
• To detect and prevent fraud, money laundering, and other prohibited conduct;
• To comply with applicable anti-money laundering, counter-terrorist financing, and gaming regulatory requirements;
• To send you service-related communications, including account notifications, security alerts, and transaction confirmations;
• To send you marketing and promotional communications, where you have given your consent or where we have a legitimate interest in doing so, and subject to your right to opt out at any time;
• To analyse usage patterns and improve the Platform's features, performance, and user experience;
• To resolve disputes and enforce our Terms & Conditions;
• To administer responsible gaming tools and restrictions, including self-exclusion and deposit limits.

5. Legal Basis for Processing

Where applicable data protection legislation requires us to identify a legal basis for processing your personal data, we rely on the following:

• Performance of a contract — processing necessary to provide you with the services described in the Terms & Conditions, including account administration, game provision, and transaction processing;
• Legal obligation — processing necessary to comply with KYC, anti-money laundering, age verification, and other regulatory requirements;
• Legitimate interests — processing for fraud prevention, platform security, dispute resolution, and analytics, where such interests are not overridden by your privacy rights;
• Consent — for marketing communications and non-essential cookies, where your explicit consent has been obtained.

6. Sharing Your Personal Data

mari88 does not sell your personal data to third parties. We may share your personal data with the following categories of recipients where necessary:

• Payment processors and banking partners — to facilitate deposits and withdrawals via Maybank2u, CIMB Clicks, FPX, DuitNow, Touch 'n Go eWallet, Boost, and GrabPay;
• Identity verification providers — to perform KYC checks and age verification in compliance with regulatory requirements;
• Game software providers — game studios may receive pseudonymised session data necessary to deliver their games on the Platform;
• Regulatory and law enforcement authorities — where we are required to do so by applicable law, court order, or lawful governmental request;
• IT infrastructure and cloud service providers — who host and maintain the Platform's technology infrastructure under binding data processing agreements;
• Professional advisers — including legal, financial, and compliance advisers, subject to obligations of confidentiality.

All third parties with whom we share personal data are required to handle it in accordance with applicable data protection standards and are prohibited from using it for their own purposes beyond what is strictly necessary to provide services to mari88.

7. International Data Transfers

In the course of providing the Platform's services, your personal data may be transferred to and processed in jurisdictions outside of Malaysia. Where such transfers occur, mari88 implements appropriate safeguards to ensure that your data receives an equivalent level of protection to that provided under applicable Malaysian data protection laws, including the use of contractual clauses and data processing agreements with relevant service providers.

8. Data Retention

mari88 retains your personal data for as long as your account remains active and for such additional periods as are required to comply with legal, regulatory, and audit obligations. In general:

• Account and identity data is retained for a minimum of 7 years following account closure, in compliance with anti-money laundering record-keeping requirements;
• Transaction records are retained for a minimum of 7 years following the date of the transaction;
• Support communications are retained for a period of 3 years following resolution of the relevant matter;
• Marketing consent records are retained until you withdraw consent and for a reasonable period thereafter as evidence of consent.

Where we no longer have a legal basis for retaining personal data, it is securely deleted or anonymised.

9. Cookies & Tracking Technologies

9.1 What Are Cookies

Cookies are small text files placed on your device when you visit the Platform. They enable the Platform to recognise your device, remember your session state, and collect usage data. mari88 uses cookies and similar technologies including web beacons and local storage.

9.2 Categories of Cookies We Use

• Strictly necessary cookies: Essential for the operation of the Platform, including maintaining your login session and enabling secure transactions. These cannot be disabled.
• Functional cookies: Remember your preferences, such as language settings and game lobby layout. Disabling these may affect Platform functionality.
• Analytics cookies: Collect anonymised usage data that helps us understand how the Platform is used and identify areas for improvement. You may opt out of analytics cookies.
• Marketing cookies: Used to deliver relevant promotional content. These are only placed where you have given your consent.

You can manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent you from using core Platform features.

10. Your Rights

Subject to applicable law, you have the following rights in relation to your personal data held by mari88:

• Right of access: You may request a copy of the personal data we hold about you;
• Right to rectification: You may request correction of inaccurate or incomplete personal data;
• Right to erasure: You may request deletion of your personal data where we no longer have a legal basis to retain it, subject to our legal and regulatory retention obligations;
• Right to restriction: You may request that we restrict processing of your personal data in certain circumstances;
• Right to data portability: You may request that we provide your personal data in a structured, machine-readable format;
• Right to object: You may object to processing based on legitimate interests, and you may withdraw marketing consent at any time;
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of the above rights, please contact the mari88 support team via the in-app live chat or by email at the address listed in Section 15. We will respond to all verifiable requests within 30 days.

11. Children's Privacy

The mari88 Platform is strictly for users who are 21 years of age or older. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under this age threshold, we will take immediate steps to delete such data and close the associated account. If you believe that a minor has registered an account on the Platform, please notify us immediately via our support team.

12. Security Measures

mari88 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform, access controls limiting data access to authorised personnel on a need-to-know basis, two-factor authentication options for Player accounts, regular security assessments, and secure, encrypted storage for KYC documentation.

Notwithstanding the above, no data transmission over the internet or method of electronic storage is entirely secure. While we strive to protect your data, we cannot guarantee absolute security. In the event of a data breach that affects your rights and freedoms, we will notify you and any relevant regulatory authorities as required by applicable law.

13. Third-Party Services and Links

The mari88 Platform may contain references to our internal pages and services. This Policy applies solely to data processed by mari88. We are not responsible for the privacy practices of third-party payment processors or software providers, who operate under their own privacy policies. We encourage you to review the privacy policies of any third-party services you use in connection with your gaming activity.

14. Changes to This Privacy Policy

mari88 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Material changes will be communicated to registered Players via email to the registered address and/or by a prominent notice on the Platform prior to the changes taking effect. The date of the most recent update is displayed at the top of this page. Continued use of the Platform following the effective date of any updated Policy constitutes your acknowledgement of the changes.

15. Contact Us

If you have questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by mari88, please contact our Data Privacy team via the in-app 24/7 live chat support channel or by email at the address displayed in the footer of this website. We aim to acknowledge all privacy-related enquiries within 3 business days and to resolve substantive requests within 30 days of receipt.