Privacy Policy – How mari88 Protects Your Personal Data

This Privacy Policy is issued by Mari88 ("we", "platform", or "the Company") and applies to all users and members who access or use the services provided through mari88.biz and related applications ("the Platform").

We take your privacy very seriously. Every time you register an account, make a deposit via DuitNow or Touch 'n Go eWallet, play blackjack or poker, or reach out to our support team, you are entrusting us with your personal information — a responsibility we do not take lightly.

This policy explains in detail: what data we collect, why we need it, how we use it, who may access it, and what rights you have over that data under Malaysia's Personal Data Protection Act 2010 (PDPA).

We collect your personal data through several means:

A. Information You Provide Directly

• At account registration: full name, Malaysian phone number, email address, password
• During the KYC process: Malaysian MyKad or passport number, verification selfie
• During deposits/withdrawals: payment method details (DuitNow, GrabPay, Boost, ShopeePay, FPX via Maybank2u or CIMB Clicks)
• When contacting support: conversation content and complaints

B. Automatically Collected Information

• Technical data: IP address, device type, operating system, web browser
• Usage data: pages visited, session duration, clicks and interactions
• Game data: betting history, games played, wins and losses
• Cookies and similar tracking technologies (see Section 6)

Mari88 uses your personal data for the following legitimate purposes:

We will not use your data for any purpose other than those stated above without obtaining fresh consent from you.

Core Policy Mari88 is to not share your personal data with external parties. However, in certain circumstances, data sharing may occur with:

• Payment Providers: DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, and FPX member banks — to process your financial transactions. These providers are bound by Malaysian payment industry security standards.
• Technology Providers: Companies providing the cloud infrastructure, hosting, and cybersecurity services used by Mari88 — all bound by strict non-disclosure agreements (NDAs).
• Regulatory Body: The Malaysian Communications and Multimedia Commission (MCMC), Bank Negara Malaysia, or Malaysian law enforcement agencies when required by law.
• Independent Audit: RNG and security audit bodies that verify the fairness of our games — technical data only, not members' personal data.

We implement multiple layers of technical and organisational safeguards to keep your personal data secure:

• Transmission Encryption: All data transmitted between your browser and mari88's servers is protected by HTTPS with a 256-bit SSL certificate
• Storage Encryption: Sensitive data in the database is encrypted using AES-256 standard
• Access Controls: The principle of least privilege — staff may only access data required for their specific role
• Two-Factor Authentication: Mari88's internal systems enforce mandatory 2FA for all staff members.
• 24/7 Monitoring: A real-time threat detection system continuously monitors for suspicious activity
• Regular Audits: Independent security assessments are conducted periodically to identify and address vulnerabilities.
• Staff Training: All staff are required to complete data protection and cybersecurity training annually

In the rare event that a data breach is identified, Mari88 is committed to notifying the relevant authorities and affected members within the timeframes prescribed by Malaysian law.

Platform Mari88 uses cookies and similar tracking technologies to enhance your experience. The types of cookies we use:

• Essential Cookies: Required for core platform functions — login, session security, and language preferences. Cannot be disabled.
• Performance Cookies: Collects non-identifiable usage data to help us improve the platform. Can be disabled.
• Functional Cookies: Stores your preferences such as display settings and game choices. Can be disabled.

You can manage cookie settings through your web browser. Please note that disabling essential cookies may affect the functionality of the Mari88 platform.

Mari88 retains your personal data only for as long as necessary for the stated purposes or as required by Malaysian law:

• Active Account Data: For the duration your account remains active, plus 6 years after account closure (financial record-keeping requirements)
• Transaction Records: 7 years from the transaction date, in accordance with Malaysia's Companies Act and tax regulations
• KYC Records: 5 years after the termination of the business relationship, in accordance with Malaysia's AMLA requirements
• Support Communication Logs: 2 years from the date of interaction
• Cookie Data: Session cookies expire automatically when you close your browser; persistent cookies expire within the period stated in the cookie settings

Once the applicable retention period expires, your personal data will be securely deleted or permanently anonymised.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights over your personal data held by Mari88:

• Right of Access: Requesting a copy of the personal data we hold about you
• Right to Rectification: Requesting correction of inaccurate or incomplete data
• Right to Erasure: Requesting deletion of your data when it is no longer needed (subject to legal obligations)
• Right to Withdraw Consent: Withdrawing consent for marketing or promotional communications
• Right to Object: Objecting to data processing for specific purposes
• Right to Portability: Requesting your data in a machine-readable format

To exercise any of these rights, contact us at support@mari88.biz. We will process your request within 14 working days from the date of receipt. Identity verification may be required before the request is processed.

Platform Mari88 is intended for adults aged 18 and above only. We do not knowingly collect or process personal data of individuals under the age of 18.

Should we discover that a child's personal data has been collected inadvertently, we will take immediate steps to:

• Closing associated accounts
• Immediately deleting all associated data
• Returning any deposited funds

If you believe a child under your care may have registered an account on Mari88, please contact our support team immediately at support@mari88.biz.

We may update this Privacy Policy from time to time to reflect changes in our practices, new Malaysian legal requirements, or improvements to how we protect your data.

When any significant changes are made:

• The "Last Updated" date at the top of this document will be revised accordingly
• Members will be notified via email or in-platform notification
• Significant changes will be announced at least 14 days before taking effect

Continued use of the mari88 platform after the effective date of any changes constitutes acceptance of the updated Privacy Policy.

If you have any questions, concerns, or complaints regarding how Mari88 handling your personal data, please contact our Data Protection Officer via:

• Email: support@mari88.biz — please state "Privacy Policy Enquiry" in the subject line
• Live Chat: Available 24/7 within the Mari88 platform — select the "Privacy & Security" category
• Response Time: Within 5 working days for general enquiries; 14 working days for formal requests exercising PDPA rights

If you are unsatisfied with our response, you have the right to file a complaint with the Department of Personal Data Protection Malaysia under the Ministry of Communications and Digital.