Privacy Policy — mry88

1. Introduction

This Privacy Policy ("Policy") is published by mry88 ("mry88", "we", "us", "our") and applies to all personal data collected and processed in connection with your use of the mry88 website, mobile platform, and all associated gaming services (collectively, the "Platform").

mry88 acts as the data controller in respect of personal data collected through the Platform. As data controller, mry88 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is conducted lawfully, fairly, and transparently.

This Policy should be read together with the Terms & Conditions and the Responsible Gaming policy, both of which are published on the Platform. By registering a mry88 account or using the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein, where consent is the applicable legal basis.

2. Personal Data We Collect

mry88 collects the following categories of personal data in connection with your use of the Platform:

2.1 Identity Data

• Full legal name as stated on your government-issued identity document
• Date of birth (used for age verification — mry88 is strictly 21+ only)
• Gender (where provided)
• National identity number (e.g., MyKad number for Malaysian nationals) — collected for KYC verification purposes only
• Copies of government-issued identity documents submitted during KYC verification

2.2 Contact Data

• Registered Malaysian mobile number
• Email address (where provided)
• Correspondence and communication records with mry88 support

2.3 Financial Data

• Deposit and withdrawal transaction records (amounts, timestamps, payment method references)
• Payment method identifiers (e.g., last four digits of a bank account, e-wallet account reference) — mry88 does not store full card numbers or full bank account numbers
• Account balance history and bonus transaction records

2.4 Gaming Activity Data

• Game session records including game played, bet amount, outcome, and timestamp
• Sportsbook betting history including markets, stakes, and settlement outcomes
• Responsible gaming tool settings and usage (deposit limits, self-exclusion status, cool-off periods)

2.5 Technical & Usage Data

• IP address and geolocation data (country/region level) at the time of login
• Device type, operating system, and browser information
• Session duration, pages visited, and navigation patterns within the Platform
• Login timestamps and authentication event logs

3. How We Collect Your Data

mry88 collects personal data through the following means:

• Direct collection: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or updating your account profile.
• Automated collection: Technical and usage data collected automatically via cookies, server logs, and platform analytics tools when you access and use the Platform.
• Third-party sources: Identity verification data returned by third-party KYC service providers; payment transaction data provided by payment processors (FPX, Touch 'n Go eWallet, Boost, DuitNow, GrabPay, Maybank, CIMB, USDT providers) in connection with deposit and withdrawal processing; fraud prevention data from anti-fraud service providers.

4. How We Use Your Personal Data

mry88 uses the personal data it collects for the following purposes:

• Account management: To register, maintain, and administer your mry88 account, including authentication at login, account recovery, and account closure.
• Service delivery: To provide access to games, process bets, settle winnings, and operate the Sportsbook and Casino in accordance with the platform rules.
• Payment processing: To process deposits and withdrawals via the supported Malaysian payment methods and to maintain accurate financial records.
• KYC & compliance: To verify your identity and age (21+), to comply with anti-money laundering (AML) obligations, and to meet other regulatory requirements applicable to mry88's gaming licence.
• Responsible gaming: To monitor gaming activity for indicators of problem gambling, to administer responsible gaming tools you have activated, and to enforce self-exclusion where applicable.
• Fraud prevention & security: To detect, investigate, and prevent fraud, money laundering, account takeover, and other prohibited conduct on the Platform.
• Customer support: To respond to your enquiries, resolve complaints, and communicate material account or platform updates.
• Platform improvement: To analyse usage patterns, identify technical issues, and improve the Platform experience for Malaysian players.
• Marketing communications: Where you have provided consent, to send you information about mry88 promotions, bonuses, and relevant platform updates. You may withdraw consent at any time.

5. Legal Basis for Processing

mry88 processes personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and mry88 (i.e., the Terms & Conditions) — including account registration, game delivery, and payment processing.
• Legal obligation: Processing required to comply with applicable legal obligations including AML regulations, gaming licence conditions, and tax reporting requirements.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement, where mry88's legitimate interests are not overridden by your fundamental rights.
• Consent: Processing for direct marketing communications, where you have explicitly opted in. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

6. Sharing Your Personal Data

mry88 does not sell your personal data to third parties. mry88 shares personal data only in the following circumstances and only to the extent necessary:

• Payment processors: Transaction data is shared with FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, and USDT processing partners solely to facilitate deposits and withdrawals.
• KYC service providers: Identity documents are processed by third-party identity verification providers engaged by mry88 to fulfil its KYC and AML compliance obligations.
• Game providers: Limited technical data (session tokens, bet data) is shared with licensed third-party game providers (e.g., Pragmatic Play, PG Soft, Habanero, Spadegaming) to deliver game functionality. These providers are contractually prohibited from using this data for any purpose other than game delivery.
• Fraud prevention services: Technical identifiers and transaction patterns may be shared with fraud prevention service providers to protect the integrity of the Platform.
• Regulatory authorities: mry88 may disclose personal data to its gaming licensing authority, law enforcement agencies, or other competent authorities where required by law or a lawful order.
• Corporate transactions: In the event of a merger, acquisition, or sale of the mry88 business, personal data may be transferred to the acquiring entity subject to equivalent privacy protections.

7. Cookies & Tracking Technologies

mry88 uses cookies and similar tracking technologies to operate the Platform and improve your experience. The following categories of cookies are used:

• Essential cookies: Required for the Platform to function — including session management, authentication, and security. These cannot be disabled without impairing your ability to use the Platform.
• Functional cookies: Remember your preferences (e.g., language settings, last game played) to personalise your experience.
• Analytics cookies: Collect anonymised data about how the Platform is used (pages visited, session duration, error events) to help mry88 improve the service.
• Security cookies: Used to detect suspicious login behaviour and to support the Platform's fraud detection systems.

You may manage cookie preferences through your browser settings. Disabling essential cookies may prevent you from using the Platform. mry88 does not use third-party advertising cookies or share cookie data with advertising networks.

8. Data Retention

mry88 retains personal data for as long as is necessary to fulfil the purpose for which it was collected, subject to the following retention principles:

• Account and identity data is retained for the duration of your account relationship with mry88 and for a minimum of five (5) years following account closure, in compliance with AML record-keeping obligations.
• Financial transaction records are retained for a minimum of seven (7) years following the date of the transaction, in accordance with applicable financial record-keeping requirements.
• Gaming activity data is retained for a minimum of five (5) years following the date of the gaming session.
• Support and complaint correspondence is retained for three (3) years following resolution of the matter.
• Marketing consent records are retained for as long as the consent is active and for three (3) years following withdrawal of consent.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with mry88's data destruction procedures.

9. Data Security

mry88 implements technical and organisational security measures to protect personal data against unauthorised access, loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption of all data transmitted between your browser and the mry88 servers
• Encryption of sensitive data at rest within mry88's database systems
• Role-based access controls limiting staff access to personal data to those with a legitimate operational need
• Multi-factor authentication requirements for staff access to systems processing personal data
• Regular security assessments and penetration testing of the Platform infrastructure
• Incident response procedures for the detection, containment, and notification of data security incidents

Notwithstanding these measures, no data transmission over the internet or electronic storage system can be guaranteed to be 100% secure. In the event of a data breach that poses a risk to your rights, mry88 will notify affected players without undue delay in accordance with applicable notification obligations.

10. Your Data Rights

Subject to applicable law and the terms of mry88's gaming licence, you hold the following rights in respect of your personal data:

To exercise any of these rights, please contact mry88 support via live chat on the Platform or by email at [email protected]. mry88 will respond to data rights requests within 30 days of receipt. Where a request is complex or numerous, mry88 may extend this period by a further two months, with notice provided to you.

11. International Data Transfers

mry88 may transfer personal data to service providers and infrastructure systems located outside Malaysia. Where such transfers occur, mry88 ensures that appropriate safeguards are in place — including contractual data protection clauses equivalent to applicable data protection standards — to protect the personal data of Malaysian players. mry88 does not transfer personal data to jurisdictions that do not provide an adequate level of data protection without implementing appropriate supplementary measures.

12. Children's Privacy

The mry88 platform is strictly for adults aged 21 and above. mry88 does not knowingly collect personal data from any individual under the age of 21. Age verification is conducted at registration and at other points during the account lifecycle. If mry88 becomes aware that personal data has been collected from a person under 21, it will delete that data and close the associated account immediately. If you believe a person under 21 has registered on the Platform, please notify mry88 support immediately.

13. Changes to This Privacy Policy

mry88 may update this Privacy Policy from time to time to reflect changes in applicable law, regulatory requirements, or Platform operations. The date of the most recent update is stated at the top of this Policy. Where a material change is made, mry88 will use reasonable efforts to notify registered players via the Platform or by email. Continued use of the Platform following the effective date of any updated Policy constitutes your acknowledgement of the changes. mry88 recommends that you review this Policy periodically.

14. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or mry88's processing of your personal data, please contact the mry88 Data Protection team through the following channels:

• Live Chat: Available 24/7 via the mry88 platform after logging in — the fastest channel for data rights requests.
• Email: [email protected]
• Response Time: Typically within 1 hour during Malaysia Standard Time (MYT) peak hours; data rights requests responded to within 30 days.