Privacy Policy
How MRM88 Protects Your Personal Data

Last Updated: 1 January 2026

1Introduction

This Privacy Policy ("Policy") is issued by mrm88 ("mrm88", "we", "us", "our") and governs the collection, use, storage, disclosure, and protection of personal data that we obtain from or about you ("User", "you", "your") when you access or use the mrm88 online casino and sports betting platform, available at mrm88.cam and all associated subdomains, mobile interfaces, and related services (collectively, the "Platform").

mrm88 is committed to protecting the privacy and security of all Users in accordance with applicable data protection principles and best practices. We recognise that you entrust us with sensitive personal and financial information when you register and transact on our Platform, and we take that responsibility seriously.

By accessing the Platform, creating an account, or otherwise interacting with mrm88's services, you acknowledge that you have read and understood this Policy. If you do not agree with any part of this Policy, please discontinue use of the Platform and contact our support team to close your account.

2Definitions

For the purposes of this Policy, the following definitions apply:

• "Personal Data" means any information that identifies or can reasonably be used to identify a living individual, directly or indirectly — including name, identification number, contact details, location data, and online identifiers.
• "Processing" means any operation performed on personal data, including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" means the entity that determines the purposes and means of processing personal data — in this case, mrm88.
• "Data Processor" means a third-party entity that processes personal data on behalf of mrm88 under a written data processing agreement.
• "KYC Data" means identity verification documents and related information submitted by Users as part of the Know Your Customer verification process.
• "Cookies" means small text files stored on your device by the Platform that allow mrm88 to recognise your browser and remember certain information about your session and preferences.
• "Sensitive Personal Data" means a subset of personal data warranting additional protection, including financial account details, identification document numbers, and health-related information submitted in connection with responsible gambling tools.

3Data Controller

mrm88 acts as the Data Controller in respect of all personal data collected through the Platform. As Data Controller, mrm88 is responsible for determining why and how your personal data is processed, and for ensuring that such processing is conducted lawfully, fairly, and transparently.

For all data protection enquiries, including requests to exercise your data rights, please contact our support team via the details set out in Section 16 of this Policy.

4Personal Data We Collect

mrm88 collects personal data through several channels, including direct submission by you at registration, ongoing use of the Platform, payment transactions, and customer support interactions. The categories of personal data we collect include:

4.1 Registration & Account Data

• Full legal name
• Date of birth (for age verification — 21+ requirement)
• Residential address (including city, state, and postcode)
• Email address
• Malaysian mobile telephone number
• Username and encrypted password
• Security questions and answers (if set)

4.2 KYC & Identity Verification Data

• Copy of valid Malaysian identification document (MyKad / NRIC, Driver's Licence, or Passport)
• Proof of residential address (utility bill, bank statement, or official government correspondence)
• Selfie photograph holding identification document
• Proof of payment method (e.g., screenshot of Touch 'n Go eWallet or bank account)

4.3 Financial & Transaction Data

• Deposit and withdrawal transaction records, including amounts, timestamps, and payment method used
• Payment method identifiers (e.g., masked bank account numbers, e-wallet account references for Boost, GrabPay, DuitNow, FPX)
• Cryptocurrency wallet addresses (where USDT TRC20 deposits are used)
• MYR account balance history

4.4 Platform Usage & Technical Data

• IP address and geolocation data
• Device type, browser type, and operating system
• Session duration, pages visited, and features accessed
• Betting history, game play logs, and wagering records
• Timestamps of login, logout, and key account actions

4.5 Customer Support Data

• Records of live chat conversations, email correspondence, and support ticket submissions
• Details of any disputes, complaints, or responsible gambling requests raised

4.6 Responsible Gambling Data

• Deposit limit settings, self-exclusion records, and cooling-off period requests
• Any health or wellbeing information voluntarily disclosed by Users in connection with responsible gambling support requests (treated as Sensitive Personal Data)

5Purposes of Processing

mrm88 processes your personal data for the following specific purposes:

Purpose	Data Categories Used
Account creation and management	Registration & Account Data
Identity and age verification (KYC — 21+ compliance)	KYC & Identity Verification Data
Processing deposits and withdrawals in MYR	Financial & Transaction Data
Fraud detection and anti-money laundering screening	All categories, including Technical Data
Platform security and access control	Technical Data, Account Data
Responsible gambling monitoring and tool administration	Responsible Gambling Data, Transaction Data
Customer support and dispute resolution	Customer Support Data, Account Data
Platform performance and service improvement	Technical Data, Usage Data
Legal and regulatory compliance	All categories as required
Sending transactional notifications (deposits, withdrawals, security alerts)	Account Data, Transaction Data

mrm88 does not use your personal data for automated decision-making that produces legal or similarly significant effects without human review, except where explicitly required or permitted by law.

6Legal Basis for Processing

mrm88 processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to fulfil our obligations under the Terms & Conditions — including account management, payment processing, KYC verification, and customer support.
• Legal Obligation: Processing required to comply with applicable legal and regulatory requirements, including anti-money laundering obligations, age verification requirements, and data retention mandates imposed by law.
• Legitimate Interests: Processing necessary for mrm88's legitimate business interests — including fraud prevention, platform security, responsible gambling monitoring, and service improvement — where those interests are not overridden by your rights and interests.
• Consent: Where mrm88 relies on consent as the legal basis for processing (e.g., for optional marketing communications where offered), you may withdraw your consent at any time without affecting the lawfulness of processing conducted prior to withdrawal. Withdrawal of consent can be made by contacting our support team.

7Data Sharing & Disclosure

mrm88 does not sell, rent, or trade your personal data. We may share your personal data with the following categories of recipients, strictly for the purposes described in this Policy:

7.1 Service Providers & Data Processors

mrm88 engages third-party service providers to support platform operations. These providers act as Data Processors and are contractually required to process personal data only on mrm88's instructions and in accordance with applicable data protection principles. Categories of service providers include:

• Payment processors and Malaysian payment gateway operators (supporting Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, and other supported methods)
• KYC and identity verification providers
• Fraud detection and anti-money laundering screening services
• Cloud hosting and infrastructure providers
• Customer support platform operators
• IT security and penetration testing firms

7.2 Legal and Regulatory Authorities

mrm88 may disclose personal data to law enforcement agencies, regulatory bodies, courts, or other public authorities where required by applicable law, court order, or binding regulatory direction — including in connection with the investigation of financial crime or the enforcement of our Terms & Conditions.

7.3 Corporate Transactions

In the event of a merger, acquisition, restructuring, or sale of all or substantially all of mrm88's business assets, personal data held by mrm88 may be transferred to a successor entity, subject to equivalent data protection obligations being assumed by that entity.

8International Data Transfers

mrm88's primary platform infrastructure is operated to serve Malaysian users. Where personal data is processed by service providers located outside Malaysia — for example, cloud infrastructure providers — mrm88 ensures that appropriate safeguards are in place to protect your personal data to an equivalent standard, including contractual data protection clauses and technical security measures.

By using the mrm88 Platform, you acknowledge that your personal data may be transferred to and processed in locations outside Malaysia, subject to the protections described in this Policy.

9Data Retention

mrm88 retains personal data for as long as your account remains active and for a defined period thereafter, in order to comply with legal and regulatory obligations, resolve disputes, and enforce our agreements.

Key retention principles:

• Active account data is retained for the duration of your account's active status plus a minimum post-closure retention period as required by applicable legal and financial regulations.
• Transaction records are retained for a minimum period as required by applicable anti-money laundering legislation and financial record-keeping requirements.
• KYC documents are retained for the legally mandated period from the date of account closure or the date of the last transaction (whichever is later).
• Customer support records are retained for a period sufficient to manage ongoing disputes and for quality assurance purposes.
• Technical and usage data collected via cookies and server logs is retained for shorter periods in line with its operational purpose.

Upon expiry of the applicable retention period, personal data is securely deleted, destroyed, or anonymised in a manner that prevents reconstruction.

10Security Measures

mrm88 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security practices include:

• Encryption in Transit: All data transmitted between your device and mrm88's servers is encrypted using 256-bit SSL/TLS protocols. The Platform's HTTPS configuration is enforced at all times.
• Encryption at Rest: Sensitive personal data — including KYC documents, payment details, and account credentials — is stored with strong encryption at rest.
• Access Controls: Access to personal data within mrm88 is restricted to personnel who require it for their designated role, on a strict least-privilege basis.
• Two-Factor Authentication (2FA): mrm88 supports 2FA for user accounts and enforces strong authentication requirements for internal systems access.
• Regular Security Audits: mrm88 conducts periodic security assessments, vulnerability scans, and penetration tests to identify and remediate potential weaknesses.
• Incident Response: mrm88 maintains a documented data breach response procedure. In the event of a material data breach affecting your rights, we will notify affected Users without undue delay.

While mrm88 takes all reasonable steps to protect your personal data, no digital platform can guarantee absolute security. You are encouraged to use a strong, unique password for your mrm88 account and to enable 2FA where available.

11Cookies & Tracking Technologies

mrm88 uses cookies and similar tracking technologies (including local storage and session tokens) to operate and improve the Platform. The cookies used by mrm88 fall into the following categories:

• Strictly Necessary Cookies: Required for core platform functionality, including session management, login authentication, and security. These cookies cannot be disabled without impairing Platform operation.
• Functional Cookies: Used to remember your preferences — such as language settings and display options — to provide a more personalised experience.
• Analytics Cookies: Used to collect anonymised information about how Users interact with the Platform, enabling mrm88 to improve performance and usability. Analytics data is aggregated and does not identify individual Users.
• Security Cookies: Used to support fraud detection and prevention functions, including identifying unusual login patterns or suspicious account activity.

mrm88 does not use cookies for third-party behavioural advertising or cross-site tracking. You may manage cookie settings through your browser's privacy controls. Please note that disabling strictly necessary cookies may affect your ability to use certain Platform features.

12Your Data Rights

As a User of the mrm88 Platform, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact our support team via the details in Section 16. mrm88 aims to respond to all data rights requests within 30 calendar days.

• Right of Access: You may request a copy of the personal data mrm88 holds about you, along with information about how it is processed.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data. For basic account details, you may update these directly in your account settings.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes it was collected, subject to overriding legal retention obligations.
• Right to Restriction of Processing: You may request that mrm88 restrict processing of your personal data in certain circumstances — for example, while the accuracy of data is contested.
• Right to Data Portability: Where processing is based on your consent or contractual necessity and conducted by automated means, you may request a copy of your personal data in a structured, machine-readable format.
• Right to Object: You may object to processing of your personal data where mrm88 relies on legitimate interests as the legal basis, unless mrm88 can demonstrate compelling grounds that override your interests.
• Right to Withdraw Consent: Where mrm88 processes your data on the basis of consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

13Protection of Minors

The mrm88 Platform is strictly for persons aged 21 and above. We do not knowingly collect personal data from individuals under the age of 21. Age verification is conducted as part of the account registration and KYC process to enforce this requirement.

If mrm88 discovers that personal data has been collected from an individual under the age of 21, that data will be deleted immediately and the associated account will be closed. If you believe that a minor has created an account using your details or otherwise, please contact our support team immediately.

14Responsible Gambling Data

mrm88 collects and processes certain data specifically in connection with responsible gambling tools and interventions. This includes records of deposit limit settings, self-exclusion applications, cooling-off periods, and any health or wellbeing information voluntarily disclosed by Users when seeking support.

Responsible gambling data is treated as Sensitive Personal Data and is processed under heightened security controls. This data is used solely for the purpose of administering and monitoring responsible gambling measures, and is not used for any commercial or marketing purpose.

Where a User applies for self-exclusion, mrm88 will retain a record of the self-exclusion request and the associated User identifiers for the duration of the exclusion period and for a defined period thereafter, in order to prevent circumvention of the exclusion through re-registration.

For more information about mrm88's responsible gambling tools, please visit our Responsible Gambling page.

15Policy Amendments

mrm88 reserves the right to amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or operational requirements. The "Last Updated" date at the top of this Policy will be revised whenever a material change is made.

Where changes are significant, mrm88 may notify Users via email or an in-Platform notification. Your continued use of the Platform following any amendment constitutes your acceptance of the revised Policy.

We encourage you to review this Policy periodically to stay informed about how mrm88 protects your personal data.

16Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact the mrm88 data support team through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week — including Malaysian public holidays. Access the live chat widget directly on the Platform for the fastest response.
• Email: [email protected] (plain text — not a clickable link)

mrm88's support team aims to acknowledge all privacy-related enquiries within 5 business days and to resolve requests within 30 calendar days. Where a request is complex or involves a large volume of data, the response period may be extended by up to an additional 30 days, with prior notification provided to you.

For enquiries relating to responsible gambling tools, self-exclusion, or data held in connection with a responsible gambling intervention, please specifically indicate this when contacting support so that your request is directed to the appropriate team.