mrt88 Privacy Policy

1 Data Controller

1.1  mrt88 ("the Platform", "we", "us", "our") is the data controller responsible for personal data collected from Players ("you", "your") in connection with your registration and use of the mrt88 online gaming platform accessible at mrt88.co.

1.2  As data controller, mrt88 determines the purposes and means of processing personal data submitted to or collected by the Platform. For any queries relating to this Privacy Policy or your personal data, the primary point of contact is the mrt88 Data Protection function, reachable via the contact details set out in Section 15.

2 Personal Data We Collect

2.1  mrt88 collects the following categories of personal data in connection with the operation of the Platform and the provision of gaming services to Malaysian players and international users:

2.2  mrt88 does not collect or store full payment card numbers, CVV codes, or banking credentials. Payment transactions are processed through third-party payment processors, and mrt88 receives only tokenised or masked reference identifiers for audit and reconciliation purposes.

3 How We Collect Personal Data

3.1  mrt88 collects personal data through the following channels:

• Direct submission: Information you provide when registering an mrt88 account, completing KYC, making deposits or withdrawals, contacting support, or participating in promotions.
• Automated collection: Technical and usage data collected automatically when you access the Platform, including via cookies, web beacons, server logs, and session tracking technology.
• Third-party sources: Identity verification data obtained from KYC service providers and fraud screening partners where necessary to verify your identity or assess risk.
• Payment processors: Transaction confirmation data received from payment processors (including Touch 'n Go eWallet, Boost, DuitNow FPX, and bank transfer partners) to reconcile deposits and withdrawals.

4 Legal Basis for Processing

4.1  mrt88 processes personal data on one or more of the following legal bases, depending on the nature of the processing activity:

• Contractual necessity: Processing required to fulfil the Player Account agreement — including account management, payment processing, game provision, and customer support.
• Legal obligation: Processing required to comply with applicable gaming licence conditions, anti-money laundering (AML) regulations, know-your-customer (KYC) requirements, and other applicable legal obligations.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming enforcement, internal analytics, and marketing communications to existing Players — where these interests are not overridden by your fundamental rights.
• Consent: Where required by applicable law, mrt88 will seek your explicit consent before processing personal data for specific purposes, such as certain marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5 How We Use Your Personal Data

5.1  mrt88 uses personal data collected from Players for the following purposes:

• Creating, managing, and maintaining your mrt88 Account and enabling mrt88 Login access;
• Processing deposits and withdrawals via supported Malaysian payment methods including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank2u, CIMB Clicks, and Public Bank;
• Verifying your identity and age (21+) as required by our responsible gaming and licensing obligations;
• Detecting and preventing fraud, money laundering, and other prohibited conduct as described in the mrt88 Terms & Conditions;
• Enforcing responsible gaming tools — including deposit limits, session timers, and self-exclusion — where activated by you or required by the Platform's safeguarding obligations;
• Providing customer support via live chat, WhatsApp, and email;
• Communicating platform updates, promotional offers, and service notifications to your registered contact details;
• Conducting internal analytics to improve Platform performance, game selection, and user experience;
• Complying with applicable law, regulatory requirements, and gaming licence obligations.

6 Data Sharing & Disclosure

6.1  mrt88 does not sell your personal data to third parties. We share personal data only in the following circumstances and with the following categories of recipient:

• Payment processors: Personal data necessary to process deposit and withdrawal transactions via Touch 'n Go eWallet, Boost, DuitNow, FPX, and bank transfer partners.
• KYC and identity verification providers: Identity data and document copies submitted during KYC, shared with third-party verification service providers retained by mrt88.
• Game technology providers: Limited session and account identifiers shared with licensed game studios and live dealer platform operators to enable game access and audit game outcomes.
• Fraud and risk management services: Technical data (IP address, device fingerprint, session data) shared with fraud screening partners to detect and prevent financial crime.
• Regulatory and law enforcement authorities: Personal data disclosed in response to lawful requests, court orders, or regulatory obligations under applicable gaming or financial crime legislation.
• Professional advisors: Lawyers, auditors, and insurers under obligations of confidentiality, where necessary for the conduct of mrt88's business.

6.2  All third-party data processors engaged by mrt88 are required to process personal data only for the specific purpose for which it was shared, under written contractual terms that include appropriate data protection obligations.

7 International Data Transfers

7.1  mrt88's Platform infrastructure and some of its third-party service providers operate across multiple jurisdictions. Personal data collected from Malaysian Players may be transferred to and processed in countries outside Malaysia, including jurisdictions where the applicable data protection regime may differ from Malaysian law.

7.2  Where personal data is transferred internationally, mrt88 takes appropriate safeguards to ensure that the transfer is conducted in compliance with applicable data protection requirements, including by implementing contractual protections with receiving parties where required.

8 Data Retention

8.1  mrt88 retains personal data for as long as is necessary for the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following general retention guidelines apply:

• Account and identity data: Retained for the duration of the Player's active Account relationship with mrt88, and for a minimum of five (5) years following Account closure — in compliance with applicable AML and gaming licence record-keeping requirements.
• Financial transaction records: Retained for a minimum of seven (7) years from the date of each transaction.
• KYC documents: Retained for the duration of the Account relationship plus five (5) years, or longer where required by law.
• Support communications: Retained for three (3) years from the date of last interaction, or longer where relevant to an ongoing dispute.
• Technical and usage data: Retained for up to two (2) years in identifiable form, after which it may be anonymised and retained for aggregated analytics purposes indefinitely.

9 Cookies & Tracking Technologies

9.1  mrt88 uses cookies and similar tracking technologies on the Platform. Cookies are small data files stored on your device that help us recognise returning users, maintain login sessions, analyse Platform usage, and personalise your experience.

9.2  The following categories of cookies are used on mrt88:

• Strictly necessary cookies: Essential for the operation of the Platform — including maintaining your mrt88 Login session and preserving security state. These cannot be disabled without preventing your use of the Platform.
• Functional cookies: Remember your preferences such as language settings, game lobby filters, and responsible gaming limit confirmations.
• Analytics cookies: Collect anonymised data on how Players interact with the Platform — including pages visited, session duration, and navigation paths — to help mrt88 improve the user experience.

9.3  You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair the functionality of the mrt88 Platform, including the ability to maintain a logged-in session.

10 Your Data Rights

10.1  Subject to applicable law and the exceptions permitted thereunder, you have the following rights in relation to personal data held by mrt88 about you:

• Right of access: Request a copy of the personal data mrt88 holds about you.
• Right to rectification: Request correction of inaccurate or incomplete personal data.
• Right to erasure: Request deletion of personal data where retention is no longer necessary, subject to overriding legal obligations (including AML and gaming licence retention requirements).
• Right to restriction: Request that mrt88 restrict the processing of your personal data in certain circumstances.
• Right to data portability: Request that personal data provided by you be transferred to you or to another data controller in a structured, commonly used, machine-readable format, where technically feasible.
• Right to object: Object to processing based on legitimate interests or for direct marketing purposes.
• Right to withdraw consent: Where processing is based on your consent, withdraw that consent at any time without affecting the lawfulness of prior processing.

10.2  To exercise any of the above rights, contact mrt88 using the details in Section 15. Requests will be responded to within thirty (30) days. Verification of identity may be required before a request is actioned.

11 Children & Minors

11.1  The mrt88 Platform is strictly intended for adults aged 21 years and above. mrt88 does not knowingly collect personal data from persons under this age threshold. Registration is conditional on confirmation that the applicant meets the minimum age requirement.

11.2  Where mrt88 becomes aware that personal data has been collected from a person under 21 years of age, the relevant Account will be closed immediately, personal data will be deleted to the extent not required to be retained by applicable law, and any deposited funds will be returned to the payment source.

11.3  If you have reason to believe that a minor has registered an mrt88 Account, please contact us immediately using the details in Section 15.

12 Security Measures

12.1  mrt88 implements technical and organisational security measures designed to protect personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the mrt88 Platform;
• Encrypted storage of sensitive personal data at rest;
• Access controls restricting personal data access to authorised personnel on a need-to-know basis;
• Regular security assessments and penetration testing of the Platform infrastructure;
• Two-factor authentication available to all Players for mrt88 Login protection.

12.2  While mrt88 takes all reasonable measures to protect your personal data, no internet-based platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your mrt88 Login credentials and for notifying mrt88 promptly of any suspected unauthorised access to your Account.

13 Third-Party Links

13.1  The mrt88 Platform may contain references to game studios, payment partners, or other third-party services. This Privacy Policy applies solely to data processing conducted by mrt88. mrt88 is not responsible for the privacy practices of any third-party service provider accessed through the Platform, and Players should review the relevant third-party privacy notices independently.

14 Policy Amendments

14.1  mrt88 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform functionality. The date of the most recent update is shown at the top of this page.

14.2  Material changes to this Privacy Policy will be notified to registered Players via the email address on file or via a prominent notice on the Platform. Where required by applicable law, mrt88 will seek fresh consent before processing your data under materially revised terms. Continued use of the Platform following notification of a material change constitutes acceptance of the revised Privacy Policy.

15 Contact & Complaints

15.1  For all privacy-related enquiries, data subject rights requests, or concerns about mrt88's handling of your personal data, please contact the mrt88 Data Protection function:

• Live Chat: Available 24/7 within the Platform following mrt88 Login
• WhatsApp: Via the support channel displayed in your Account dashboard
• Email: [email protected] — mark your message "Privacy / Data Request"

15.2  mrt88 will acknowledge data subject rights requests within five (5) business days and respond substantively within thirty (30) calendar days. Where a request is complex or involves a large volume of data, the response period may be extended by a further thirty (30) days, and you will be notified accordingly.

15.3  If you are not satisfied with mrt88's handling of your personal data or response to a data subject rights request, you have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction.