Privacy Policy

This Privacy Policy ("Policy") describes how mari888 ("Platform", "we", "us", "our") collects, uses, stores, shares, and protects the personal data of individuals ("you", "your") who access or use the mari888 website at mari888.lat and all associated services. This Policy forms part of the mari888 Terms and Conditions and should be read in conjunction with them. By registering an Account or using the Platform, you acknowledge that you have read and understood this Policy and consent to the data practices described herein.

1. Introduction

1.1 mari888 is committed to protecting the privacy and security of your personal information. As a regulated gaming operator, we are required to collect certain categories of personal data to comply with Know Your Customer (KYC), Anti-Money Laundering (AML), and responsible gaming obligations under our international gaming licence.

1.2 This Policy applies to all data collected through the Platform, including data collected during registration, during gameplay, during financial transactions, and through your use of customer support services.

1.3 We process personal data only for lawful purposes, using appropriate technical and organisational safeguards to protect the data we hold on your behalf.

2. Data We Collect

2.1 Registration Data. When you create a mari888 Account, we collect your full name, date of birth, email address, mobile number, and country of residence. This information is required to establish and verify your identity in accordance with our KYC obligations.

2.2 Identity Verification Documents. For KYC and AML compliance, we may collect copies of government-issued photo identification (such as MyKad or passport), proof of address documents, and payment method verification materials. Malaysian players are required to complete identity verification before processing their first withdrawal.

2.3 Financial Data. We collect records of all deposits, withdrawals, and wagering transactions on your Account. Payment method details — including Touch n Go eWallet account identifiers and bank account information — are collected for transaction processing and fraud prevention purposes.

2.4 Device and Technical Data. We automatically collect your IP address, browser type, device identifier, operating system, and session timestamps when you access the Platform. This data is used for security monitoring, fraud detection, and compliance purposes.

2.5 Behavioural Data. We collect data about your gaming activity, including game selections, wagering patterns, session frequency and duration, and responsible gaming tool usage. This data supports our responsible gaming obligations, including the identification of potentially problematic gambling patterns.

2.6 Communications Data. Records of your communications with mari888 customer support — including live chat transcripts, email correspondence, and support ticket logs — are retained for quality assurance, dispute resolution, and regulatory compliance purposes.

3. How We Use Your Data

3.1 Account Management. To create, maintain, verify, and administer your mari888 Account, including processing login authentication and managing Account security settings.

3.2 Transaction Processing. To process deposits and withdrawals via your chosen payment methods, including Touch n Go eWallet, Boost, and Malaysian banking institutions such as Maybank, CIMB, and Public Bank.

3.3 Regulatory Compliance. To fulfil our KYC and AML obligations under our international gaming licence, including identity verification, transaction monitoring, and reporting requirements.

3.4 Fraud Prevention and Security. To detect, investigate, and prevent fraudulent activity, money laundering, account takeover attempts, and other prohibited conduct on the Platform.

3.5 Responsible Gaming. To monitor gaming activity for indicators of problem gambling, administer responsible gaming tools including deposit limits and self-exclusion, and fulfil our obligations under the responsible gaming requirements of our gaming licence.

3.6 Service Communications. To send you transactional notifications, Account security alerts, and customer support responses. Where you have provided consent, we may also send promotional communications about mari888 offers and products.

3.7 Platform Improvement. To analyse aggregated, anonymised usage data for the purposes of improving Platform performance, user experience, and product development.

4. Legal Basis for Processing

4.1 mari888 processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform the gaming services contract, including Account management, transaction processing, and customer support.
• Legal Obligation: Processing required to comply with KYC, AML, responsible gaming, and other regulatory obligations under our international gaming licence.
• Legitimate Interests: Processing for fraud prevention, platform security, dispute resolution, and service improvement, where such processing does not override your fundamental rights.
• Consent: Processing for direct marketing communications, where you have provided explicit opt-in consent. You may withdraw marketing consent at any time through your Account settings.

5. Sharing Your Data

5.1 Service Providers. We share personal data with vetted third-party service providers who assist in operating the Platform, including payment processors, identity verification services, fraud detection providers, and cloud infrastructure partners. All service providers are contractually bound to process data only as instructed by mari888 and to maintain appropriate security standards.

5.2 Regulatory and Law Enforcement. We may disclose personal data to regulatory authorities, law enforcement agencies, or courts when required to do so by applicable law, court order, or our gaming licence obligations.

5.3 Game Providers. Where necessary for game delivery and fair play verification, certain transaction and gameplay data may be shared with certified game providers such as Evolution Gaming, Pragmatic Play, and PG Soft under strict data processing agreements.

5.4 No Sale of Data. mari888 does not sell, rent, or trade your personal data to third-party marketers or data brokers under any circumstances.

6. Cookies & Tracking Technologies

6.1 The Platform uses the following categories of cookies and similar tracking technologies:

• Essential Cookies: Required for Platform functionality, session management, and security. Cannot be disabled without affecting core Platform features.
• Analytics Cookies: Used to collect anonymised data about how users interact with the Platform, helping us improve user experience and performance.
• Fraud Prevention Cookies: Used to identify and prevent fraudulent activity, including detection of multiple accounts and suspicious login patterns.

6.2 You can manage cookie preferences through your browser settings. Disabling essential cookies may impair your ability to use certain Platform features, including login functionality.

7. Data Security

7.1 mari888 employs industry-standard technical and organisational security measures to protect your personal data, including:

• 256-bit SSL/TLS encryption for all data in transit;
• Encryption at rest for sensitive personal and financial data;
• Role-based access controls limiting staff access to personal data on a need-to-know basis;
• Regular third-party penetration testing and security audits;
• Two-factor authentication options for all player Accounts;
• Automated anomaly detection for suspicious login and transaction activity.

7.2 Notwithstanding the above, no digital transmission or storage system is completely secure. In the unlikely event of a data breach affecting your rights and freedoms, we will notify you and any applicable regulatory authority in accordance with our legal obligations.

8. Data Retention

8.1 We retain personal data for as long as your Account remains active and for a minimum of five years following Account closure, in compliance with our gaming licence AML record-keeping obligations.

8.2 Identity verification documents are retained for a minimum of five years from the date of verification, or longer where required by applicable law or regulatory guidance.

8.3 Communications records, including customer support transcripts, are retained for three years unless a longer period is required for dispute resolution or regulatory compliance.

8.4 Anonymised and aggregated analytics data may be retained indefinitely, as it does not constitute personal data.

9. Your Rights

9.1 Subject to applicable law and our regulatory obligations, you have the following rights regarding your personal data held by mari888:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete personal data.
• Right to Erasure: Request deletion of your personal data where we have no lawful basis for continued retention. Note that KYC and AML obligations may require us to retain certain data notwithstanding an erasure request.
• Right to Restrict Processing: Request that we limit processing of your data in certain circumstances.
• Right to Data Portability: Request transfer of your personal data to another controller in a machine-readable format, where technically feasible.
• Right to Object: Object to processing based on legitimate interests, including direct marketing.

9.2 To exercise any of the above rights, contact our Data Protection team at [email protected]. We will respond to verifiable requests within 30 days. Note that the email address is provided as plain text and is not a clickable link.

10. Children's Privacy

The mari888 Platform is strictly for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from an underage individual, the Account will be permanently closed and all associated data will be deleted or handled in accordance with applicable regulatory requirements. If you believe an underage individual has registered on the Platform, please contact us immediately.

11. International Data Transfers

11.1 mari888 operates a global technology infrastructure. Your personal data may be transferred to and processed in countries outside Malaysia where our service providers, cloud infrastructure, and game provider partners operate.

11.2 Where personal data is transferred internationally, we ensure appropriate safeguards are in place, including contractual data processing agreements that impose data protection standards equivalent to those applicable to our operations.

12. Third-Party Links

The Platform may contain references to third-party services and products. This Policy applies solely to data processed by mari888. We are not responsible for the privacy practices of third parties. We encourage you to review the privacy policies of any third-party services you access.

13. Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our data practices, regulatory requirements, or Platform features. Material changes will be communicated to registered players via email or on-Platform notification before taking effect. The date of the most recent revision is displayed at the top of this page. Continued use of the Platform following notification of updates constitutes acceptance of the revised Policy.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact the mari888 Data Protection team:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 through your Account dashboard
• Response Time: We aim to respond to all privacy-related enquiries within 5 business days and to formal data rights requests within 30 days

For concerns about our responsible gaming practices or to access responsible gaming tools, please visit our Responsible Gaming page.