mrm88 Privacy Policy – How We Handle Your Data

This Privacy Policy ("Policy") describes how mrm88 ("mrm88", "We", "Us", "Our") collects, processes, stores, shares, and protects the personal data of individuals ("Member", "User", "You") who register for, access, or use the mrm88 platform at mrm88.bio and all associated services. By creating an mrm88 account or using the platform in any capacity, you acknowledge that you have read and understood this Policy and consent to the data processing practices described herein.

1. Introduction

1.1 mrm88 is committed to protecting the privacy and personal data of its Members. This Policy is designed to be transparent and straightforward: it tells you exactly what data we collect, why we need it, who we share it with, and how long we keep it.

1.2 This Policy should be read together with the mrm88 Terms & Conditions, which govern your overall use of the platform. In the event of any conflict between this Policy and the Terms & Conditions regarding data matters, this Policy shall prevail.

1.3 mrm88 may update this Privacy Policy from time to time. The date of the most recent revision is displayed at the top of this page. Continued use of the mrm88 platform after any amendment constitutes acceptance of the revised Policy.

2. Data Controller

2.1 For the purposes of applicable data protection law, mrm88 is the data controller in respect of personal data processed under this Policy. mrm88 determines the purposes and means of processing your personal data and bears primary responsibility for ensuring that processing is carried out lawfully and transparently.

2.2 Where mrm88 engages third-party service providers to process personal data on its behalf, those providers act as data processors and are bound by written data processing agreements requiring them to process data only on mrm88's documented instructions and to implement appropriate security measures.

3. Data We Collect

3.1 Registration Data. When you create an mrm88 account, we collect your full name, date of birth, email address, mobile phone number, and residential address. This information is required to establish your account and verify your eligibility to use the platform.

3.2 Identity Verification (KYC) Data. To comply with our obligations under international gaming authority licensing requirements and applicable anti-money laundering regulations, we collect copies of government-issued photo identification (such as a Malaysian national identity card or passport), proof of address documentation, and where required, proof of payment method ownership.

3.3 Financial Data. We collect details of deposit and withdrawal transactions, including amounts, timestamps, payment method identifiers (e.g., masked bank account numbers, Touch 'n Go eWallet reference codes), and transaction status records. We do not store full payment card numbers on our servers.

3.4 Gaming Activity Data. We maintain records of all gaming activity conducted on your mrm88 account, including game sessions, wager amounts, game outcomes, bonus claims, and VIP tier progression. This data is used for account management, dispute resolution, responsible gaming monitoring, and regulatory reporting.

3.5 Technical & Device Data. We automatically collect certain technical data when you access the mrm88 platform, including your IP address, browser type and version, operating system, device identifiers, session duration, and page navigation patterns.

3.6 Communications Data. We retain records of communications between you and mrm88 customer support, including live chat transcripts, email correspondence, and records of any responsible gaming self-assessment tools you use.

3.7 Location Data. We may process your approximate geographic location (derived from IP address) for the purpose of enforcing jurisdiction restrictions and complying with our licensing obligations.

4. How We Collect Data

mrm88 collects personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit, contact support, or respond to a survey or promotion;
• Automatically — through cookies, server logs, and analytics tools when you access the mrm88 website or platform;
• From third parties — including identity verification service providers, payment processors, fraud prevention agencies, and, where applicable, regulatory bodies.

5. Purposes & Legal Bases for Processing

mrm88 processes your personal data for the following purposes and on the following legal bases:

• Account administration and service delivery — necessary for the performance of the contract between you and mrm88;
• Identity verification and KYC compliance — necessary to comply with legal obligations under gaming authority licensing conditions and anti-money laundering regulations;
• Payment processing and fraud prevention — necessary for legitimate interests in maintaining financial integrity and protecting Members;
• Responsible gaming monitoring — necessary to comply with licensing obligations and to protect vulnerable players;
• Marketing and promotional communications — based on your consent, which you may withdraw at any time by contacting mrm88 support;
• Platform improvement and analytics — based on mrm88's legitimate interest in maintaining and improving the quality of its services;
• Regulatory reporting and legal compliance — necessary to comply with applicable legal obligations.

6. Cookies & Tracking Technologies

6.1 The mrm88 website uses cookies and similar tracking technologies to maintain session integrity, remember your preferences, measure platform performance, and where you have consented, to serve relevant promotional content.

6.2 Essential cookies are required for the platform to function correctly and cannot be disabled. These include session authentication tokens, CSRF protection cookies, and load-balancing identifiers.

6.3 Analytics cookies help mrm88 understand how Members interact with the platform — which games are most popular, where the registration flow is abandoned, and how support workflows can be improved. These are processed on the basis of legitimate interests.

6.4 You may manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using the mrm88 platform but may affect certain personalisation features.

7. Data Sharing & Disclosure

7.1 mrm88 does not sell, rent, or trade your personal data to third parties for marketing purposes.

7.2 mrm88 may share your personal data with the following categories of recipients where necessary and lawful:

• Identity verification and KYC service providers — for the purpose of fulfilling our licensing obligations;
• Payment processors and financial institutions — to facilitate deposits and withdrawals in MYR via Touch 'n Go eWallet, Boost, Maybank, CIMB, Public Bank, and other supported methods;
• Fraud prevention and anti-money laundering agencies — where required by applicable regulations or to protect the integrity of the platform;
• Gaming authority and regulatory bodies — where required by our licensing conditions or by applicable law;
• Legal and professional advisers — where necessary for the pursuit or defence of legal claims;
• Law enforcement and government authorities — where required by valid legal process or to prevent imminent harm.

7.3 All third-party data processors are subject to written agreements requiring appropriate technical and organisational security measures and restricting further processing of your data beyond the stated purpose.

8. International Data Transfers

8.1 mrm88 operates internationally and some of your personal data may be transferred to, stored in, or processed in countries outside Malaysia. Where such transfers occur, mrm88 ensures that appropriate safeguards are in place, such as standard contractual clauses approved by relevant data protection authorities or reliance on adequacy decisions.

8.2 By using the mrm88 platform, you acknowledge and consent to the transfer of your personal data to jurisdictions outside Malaysia where mrm88 or its service providers operate, subject to the safeguards described in this section.

9. Data Retention

9.1 mrm88 retains personal data for as long as necessary to fulfil the purposes for which it was collected and to comply with applicable legal, regulatory, and contractual obligations.

9.2 Account data and gaming activity records are generally retained for a minimum of five (5) years following account closure, in accordance with the record-keeping requirements of mrm88's gaming authority licence and applicable anti-money laundering regulations.

9.3 KYC documentation is retained for the period required by applicable anti-money laundering law, which in most jurisdictions is a minimum of five (5) years from the date of the last transaction or the date of account closure, whichever is later.

9.4 Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with industry-standard data disposal procedures.

10. Security Measures

10.1 mrm88 implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• 256-bit SSL/TLS encryption for all data in transit;
• AES-256 encryption for sensitive data at rest;
• Role-based access controls limiting staff access to personal data on a need-to-know basis;
• Regular penetration testing and vulnerability assessments;
• Intrusion detection and anomaly monitoring systems;
• Secure data centre facilities with physical access controls.

10.2 Notwithstanding the above, no security system is entirely impenetrable. In the event of a data breach that poses a risk to your rights and freedoms, mrm88 will notify affected Members and relevant regulatory authorities in accordance with applicable legal requirements.

11. Your Rights

11.1 Subject to applicable law and regulatory limitations, you have the following rights in respect of your personal data held by mrm88:

• Right of Access — to obtain confirmation of whether mrm88 holds personal data about you and to receive a copy of that data;
• Right of Rectification — to request correction of inaccurate or incomplete personal data;
• Right of Erasure — to request deletion of personal data where it is no longer necessary for the purpose for which it was collected, subject to applicable retention obligations;
• Right to Restriction — to request restriction of processing in certain circumstances;
• Right to Data Portability — to receive your data in a structured, commonly used, machine-readable format where processing is based on consent or contract;
• Right to Object — to object to processing based on legitimate interests, including direct marketing;
• Right to Withdraw Consent — to withdraw consent for consent-based processing at any time without affecting the lawfulness of prior processing.

11.2 To exercise any of these rights, please contact mrm88 via live chat or by email at [email protected]. mrm88 will respond to rights requests within thirty (30) days. In complex cases, this period may be extended by a further sixty (60) days with notification.

12. Children & Minors

12.1 The mrm88 platform is strictly for individuals aged 21 years and above. mrm88 does not knowingly collect personal data from persons under the age of 21. If mrm88 becomes aware that personal data has been collected from a person under the age of 21, that data will be deleted and the associated account permanently closed without delay.

12.2 If you believe that a minor has registered an mrm88 account or provided personal data to mrm88, please contact us immediately at [email protected].

13. Third-Party Links

13.1 The mrm88 platform does not contain links to third-party websites for marketing purposes. Any external links that appear incidentally (for example, within responsible gaming resources) are provided solely for Member convenience. mrm88 is not responsible for the privacy practices of any third-party websites and recommends that you review the privacy policy of any third-party site you visit.

14. Policy Amendments

14.1 mrm88 reserves the right to amend this Privacy Policy at any time. Material changes will be communicated to Members via the registered email address or through a prominent notice on the mrm88 website prior to the effective date of the change.

14.2 The date of the most recent update is displayed at the top of this Policy. Continued use of the mrm88 platform after the effective date of any amendment constitutes your acceptance of the revised Policy.

15. Contact & Complaints

15.1 For any questions, concerns, or requests relating to this Privacy Policy or mrm88's data handling practices, please contact the mrm88 Data Protection team via:

• Live chat support, available 24/7 from within your mrm88 account;
• Email: [email protected] (plain text only — not a clickable link).

15.2 If you are dissatisfied with mrm88's response to a data protection concern, you have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction.