Privacy Policy

This Privacy Policy ("Policy") describes how mari88 ("Platform", "we", "us", "our") collects, uses, discloses, and safeguards personal data obtained from users ("you", "User", "Player") of the mari88 platform at mari88.win. By registering for or using the mari88 platform, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein.

1. Introduction

mari88 is committed to protecting the privacy and security of the personal information you share with us when using our online casino and sportsbook platform. This Policy applies to all personal data collected through the mari88 website, mobile browser interface, and any related customer support or account management channels.

We take our data protection obligations seriously. Whether you are logging in from Kuala Lumpur, Penang, Johor Bahru, or anywhere else in Malaysia, the same privacy standards apply to your account data. Our approach to privacy is shaped not only by legal requirements but by a genuine respect for the trust our players place in us when they share personal information to create and manage their mari88 accounts.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming policy, both of which form part of your overall agreement with mari88.

2. Data We Collect

2.1 Registration Data

When you create a mari88 account, we collect the personal information necessary to establish and verify your identity and to provide you with platform services. This includes:

• Full legal name as it appears on government-issued identification
• Date of birth (to verify the 21+ age requirement)
• Residential address, including postcode and state
• Email address and mobile phone number
• Username and encrypted password credential
• Preferred language and currency (MYR by default)

2.2 Identity Verification (KYC) Data

In compliance with our anti-money laundering obligations and responsible gaming requirements, we may request and retain copies of:

• Government-issued photo identification (e.g., Malaysian MyKad, passport)
• Proof of residential address (e.g., utility bill, bank statement dated within 90 days)
• Proof of payment method ownership (e.g., screenshot of eWallet account, bank statement showing account holder name)
• Source of funds documentation where required by enhanced due diligence thresholds

2.3 Transaction & Activity Data

The mari88 platform automatically records data generated by your use of platform services, including:

• Deposit and withdrawal transactions, including amounts, timestamps, and payment methods used
• Betting history across all products — Sportsbook, Slots, Live Casino, Mix Parlay, and World Cup Betting markets
• Bonus and promotion participation records
• Account balance history and wallet transaction logs

2.4 Technical & Device Data

When you access the mari88 platform, certain technical information is collected automatically by our systems:

• IP address and approximate geolocation (country and city level)
• Device type, operating system, and browser version
• Session timestamps and duration
• Referring URL and navigation path within the platform
• Cookie identifiers and session tokens (see Section 6)

2.5 Customer Support Data

If you contact the mari88 support team via live chat or email, we retain records of your communications, including the content of your enquiries and our responses, for quality assurance and dispute resolution purposes.

3. How We Use Your Data

mari88 uses collected personal data for the following purposes:

• Account creation and management: To register your account, verify your identity, and maintain accurate account records.
• Service delivery: To process deposits and withdrawals, settle bets, award bonuses, and provide all platform features you access through your mari88 account.
• Security and fraud prevention: To detect and prevent unauthorised access, fraudulent transactions, bonus abuse, and other prohibited conduct as defined in our Terms & Conditions.
• Regulatory compliance: To fulfil our obligations under anti-money laundering regulations, responsible gaming requirements, and the conditions of our operating licence, including KYC verification and reporting obligations.
• Responsible gaming: To monitor account activity for signs of problem gambling behaviour and to administer deposit limits, self-exclusion requests, and other player protection tools.
• Platform improvement: To analyse aggregated, anonymised usage data for the purpose of improving platform performance, game offerings, and the overall user experience.
• Customer support: To respond to your enquiries, resolve complaints, and maintain records relevant to any disputes.
• Marketing communications: To send promotional offers and account-related notifications to users who have consented to receive such communications. You may opt out at any time via your account settings.

4. Legal Basis for Processing

mari88 processes personal data under the following legal bases:

• Contract performance: Processing necessary to deliver the services described in our Terms & Conditions, including account registration, transaction processing, and bet settlement.
• Legal obligation: Processing required to comply with anti-money laundering laws, age verification requirements, licensing conditions, and other applicable regulatory obligations.
• Legitimate interests: Processing undertaken for fraud prevention, platform security, and aggregated analytics that do not override your fundamental privacy rights.
• Consent: Processing of data for marketing communications and non-essential cookies, where your prior consent has been obtained and can be withdrawn at any time.

5. Sharing Your Data

mari88 does not sell or rent personal data to third parties. We may share personal data with the following categories of recipients only where necessary and under appropriate safeguards:

• Payment processors: To facilitate deposits and withdrawals via Touch n Go eWallet, Boost, Maybank, CIMB, Public Bank, and any other supported payment methods. These providers process payment data under their own privacy policies and applicable financial regulations.
• Game and platform technology providers: Software providers whose games and systems are integrated into the mari88 platform may receive limited session and bet data necessary for game operation and integrity verification.
• Identity verification services: Third-party KYC and document verification providers used to authenticate user identity documents during the verification process.
• Regulatory and law enforcement authorities: Where required by law, court order, or the conditions of our gaming licence, we may disclose user data to competent regulatory bodies or law enforcement agencies.
• Group companies: mari88 may share data within its corporate group for administrative, compliance, or service delivery purposes, subject to the same data protection standards as this Policy.

All third parties with whom mari88 shares personal data are contractually required to process that data only for specified purposes and to maintain appropriate technical and organisational security measures.

6. Cookies & Tracking Technologies

The mari88 platform uses cookies and similar local storage technologies. These fall into the following categories:

• Strictly necessary cookies: Session authentication tokens and security cookies required for the platform to function. These cannot be disabled without preventing access to your account.
• Functional cookies: Preferences cookies that remember your settings, such as preferred language and saved payment method display, to personalise your experience on return visits.
• Analytics cookies: First-party analytics cookies that collect aggregated, anonymised data on how users navigate the platform, helping us identify performance issues and improvement opportunities.

We do not use third-party advertising or retargeting cookies. You may manage cookie preferences through your browser settings, though disabling strictly necessary cookies will prevent platform login.

7. Data Security

mari88 implements industry-standard technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, and disclosure. Key security measures include:

• 256-bit SSL/TLS encryption for all data in transit between client and server
• Password hashing using industry-standard one-way algorithms — plain-text passwords are never stored
• Two-factor authentication available for all user accounts
• Access to personal data within our organisation is restricted on a need-to-know basis, with role-based access controls and activity logging
• Regular security assessments and penetration testing by independent third parties
• Incident response procedures for timely detection and containment of any data security breaches

While we take all reasonable precautions, no security system is completely impenetrable. In the event of a data breach affecting your rights and freedoms, we will notify you and relevant authorities in accordance with applicable legal requirements.

8. Data Retention

Personal data is retained for the following periods:

• Active account data: Retained for the duration of your account relationship with mari88 and for a minimum of five years following account closure, to satisfy anti-money laundering record-keeping obligations.
• Transaction records: Retained for a minimum of seven years to comply with financial record-keeping requirements applicable under our operating licence.
• KYC documents: Retained for a minimum of five years following the end of the business relationship or the date of the last transaction, whichever is later.
• Customer support records: Retained for three years following the resolution of the relevant enquiry or complaint.
• Technical and session logs: Retained for 12 months for security monitoring and platform diagnostic purposes, after which they are deleted or anonymised.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised.

9. Your Rights

Subject to applicable data protection law, you have the following rights with respect to your personal data held by mari88:

• Right of access: You may request a copy of the personal data we hold about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data in circumstances where we no longer have a lawful basis for retaining it, subject to our overriding legal obligations.
• Right to restriction: You may request that we limit our processing of your personal data in certain circumstances, such as during a period when you have contested its accuracy.
• Right to data portability: You may request a machine-readable copy of personal data you have provided to us, where processing is based on consent or contract performance.
• Right to object: You may object to processing based on our legitimate interests, including processing for direct marketing purposes.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of these rights, contact the mari88 support team via live chat or by email to [email protected]. We will respond within 30 days of receiving your verified request.

10. Children's Privacy

The mari88 platform is strictly intended for users aged 21 years and above. We do not knowingly collect personal data from persons under the age of 21. If we become aware that personal data has been collected from an underage user, the account will be closed immediately, the data will be deleted, and any deposited funds will be returned to the originating payment method. If you believe a minor has created a mari88 account, please contact our support team immediately.

11. International Data Transfers

The personal data you provide to mari88 may be processed on servers located outside Malaysia. Where such transfers occur, we ensure that appropriate safeguards are in place — including contractual data transfer agreements based on standard contractual clauses — to provide a level of data protection equivalent to that required under applicable law in our operating jurisdiction.

12. Changes to This Policy

mari88 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Material changes will be communicated to registered users via the email address associated with their mari88 account or via an in-platform notification. The revised Policy will take effect on the date indicated in the "Last Updated" header. Continued use of the platform following notification constitutes acceptance of the updated Policy.

13. Contact Us

If you have questions, concerns, or requests relating to this Privacy Policy or our data processing practices, please contact the mari88 Data Protection team through the following channels:

• Live Chat: Available 24/7 within the mari88 platform
• Email: [email protected]

We are committed to resolving privacy-related queries fairly and promptly. Formal data subject requests will be acknowledged within 5 business days and resolved within 30 calendar days, subject to the complexity of the request and our ability to verify your identity.