Mario888 Privacy Policy – Data Security and Malaysian Players' Privacy Rights

Mario888 takes data protection responsibilities extremely seriously. As a leading online betting platform in Malaysia with over a decade of operation, we understand that player trust is our most valuable asset — and that trust begins with how we handle your personal information.

This Privacy Policy applies to all users of the mario888.ws website, the mario888 mobile app, and all services and features provided through our platform. It explains in detail what information we collect, why we need it, how it is used, and the rights you hold in relation to your personal data.

Mario888 operates in compliance with Malaysia's Personal Data Protection Act (PDPA) 2010 and relevant international data protection standards. We continually strive to ensure our privacy policy reflects current industry best practices and the latest legal developments.

Mario888 collects personal data through several means depending on how you interact with our platform. Below are the main categories of data we collect:

Mario888 uses collected personal data solely for legitimate and reasonable purposes. We do not use your data for any purpose you have not consented to. The following are the primary purposes for which your data is used:

• Account management: Registering and maintaining your mario888 account, verifying your identity, and processing secure logins.
• Transaction processing: Processes deposits and withdrawals via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow and FPX accurately and securely.
• Service delivery: Gives you access to all mario888 games and features, including football betting, live casino baccarat, virtual sports and e-sports.
• Service communications: Sending transaction notifications, account security updates, promotional alerts you have subscribed to, and responses to support enquiries.
• KYC Verification: Conducting the required Know Your Customer checks before processing withdrawals that exceed certain thresholds, in compliance with anti-money laundering regulations.
• Platform updates: Analyses usage patterns in aggregate (not at an individual level) to improve the user experience, usability and performance of the mario888 platform.
• Fraud prevention: Detects and prevents fraudulent activity, multi-account usage and other breaches of our terms to protect all mario888 players.

Mario888 does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. However, in certain limited circumstances, mario888 may need to share specific information:

• Payment processors: Information required to process transactions will be shared with licensed payment providers (Touch 'n Go, GrabPay, DuitNow) who are bound by strict confidentiality agreements with mario888.
• Technical service providers: Companies providing infrastructure, hosting, analytics, and security services to mario888 may access data within a limited scope and strictly for technical purposes only.
• Legal obligations: mario888 may be required to disclose certain data to legitimate legal authorities such as the police or Malaysian government agencies when mandated by a court order or applicable law.
• Protection of mario888's rights: In the event of legal claims, suspected fraud, or serious security threats, relevant information may be disclosed to legal counsel or the relevant authorities.

Mario888 continually invests in the latest security technologies and procedures to protect your personal data from unauthorised access, alteration, disclosure, or destruction. Key security measures we have implemented include:

• 256-bit SSL/TLS Encryption for all data transmitted between your browser/app and mario888's servers.
• Hashed password storage using modern cryptographic algorithms — mario888 never stores your password in plain text.
• Two-factor authentication (2FA) which players can enable for an additional layer of protection on their mario888 account.
• 24/7 account activity monitoring by automated security systems that detect suspicious login patterns or unusual activity.
• Independent security audit conducted by an independent cybersecurity firm at least once a year to identify and address potential vulnerabilities.
• Strict internal access controls — only mario888 staff who genuinely need access to specific data to carry out their duties are permitted to do so.

While mario888 takes comprehensive security measures, no security system can be guaranteed to be 100% secure. We encourage players to play their part in protecting their accounts by using strong passwords, not sharing login credentials, and promptly reporting any suspicious activity.

Mario888 uses cookies and similar tracking technologies to enhance your user experience and enable certain platform features to function correctly. Below are the types of cookies we use:

• Session Cookies (Required): Required for the mario888 platform to function properly — keeps you logged in so you do not have to sign in again each time you navigate to a new page. Cannot be disabled.
• Preference Cookies: Stores your interface preferences such as display language and layout order. Helps mario888 deliver a more personalised experience.
• Analytics Cookies: Helps mario888 understand how players use our platform in aggregate — which pages are most visited, how long sessions last, and so on. This data does not identify you personally.
• Security Cookies: Helps detect and prevent fraudulent activity, bot usage, and other security threats on the mario888 platform.

You can manage cookie settings through your web browser. Please note, however, that disabling essential cookies may affect the functionality of the mario888 platform.

As a mario888 player and as an individual protected under Malaysia's Personal Data Protection Act, you have the following rights regarding your personal data:

To exercise any of the above rights, please contact the mario888 support team via email at privacy@mario888.ws. mario888 is committed to processing privacy rights requests within 30 days of receipt.

Mario888 retains your personal data only for as long as necessary for the purposes stated in this Privacy Policy, or as required by applicable law.

• Active account data: Retained for the duration your mario888 account remains active, and for a reasonable period following account closure.
• Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysia's anti-money laundering and financial reporting legal requirements.
• Customer support communication logs: Retained for 3 years for reference and service improvement purposes.
• Aggregate analytics data: Anonymised and aggregated data may be retained indefinitely as it no longer contains any personally identifiable information.
• KYC Data: Identity verification documents are retained for 5 years after account closure in accordance with applicable legal requirements.

When data is no longer needed and there is no legal obligation to retain it, mario888 will securely delete or anonymise the data using procedures approved by our security team.

Mario888 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our privacy practices, new technologies, legal requirements, or player feedback.

All mario888 active members will be notified of any material changes to this privacy policy through:

• A clear in-platform notification on mario888 at least 14 days before any changes take effect.
• Email the address registered to your mario888 account.
• Update the "Last updated" date at the top of this document.

Your continued use of the mario888 platform after the effective date of any changes constitutes your acceptance of the updated privacy policy. If you do not agree with the changes, you have the right to close your account and request deletion of your data before they take effect.

If you have any questions, concerns, or complaints about how mario888 handles your personal data, or if you wish to exercise any of your privacy rights, please contact our privacy team:

Mario888 is committed to handling all data privacy complaints within a reasonable timeframe in a fair and transparent manner. If you are not satisfied with our response, you have the right to refer your complaint to the Personal Data Protection Commissioner of Malaysia.