Mr888 Privacy Policy – Malaysia User Data Protection

This Privacy Policy applies to all services provided by mr888 through the official website at mr888.vin, mobile app and any other digital channels operating under the mr888 brand. This policy describes:

• The types of personal data we collect from you.
• The purpose for which the data is collected and processed.
• Parties that may have access to your data.
• The protective measures we take to keep your data safe.
• Your rights regarding your personal data.

Mr888 is committed to compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). Any processing of personal data by us is carried out in accordance with the principles set out in the Act — including the General Principle, Notice and Choice Principle, Disclosure Principle, Security Principle, Retention Principle, Data Integrity Principle, and Access Principle.

Mr888 collects various types of personal data necessary to provide a secure, fair, and personalized service. Data collection occurs through three main channels: data you provide directly, data collected automatically, and data from third-party sources.

The personal data we collect is used for specific and legitimate purposes. We do not process your data for any other purpose without first obtaining your consent.

• Account Management: Creating and managing your account, verifying your identity, and processing requests you submit.
• Transaction Processing: Processing deposits, withdrawals, and all financial transactions on the platform securely and accurately.
• Security & Fraud Prevention: Detecting, investigating, and preventing fraudulent activity, money laundering, and platform abuse.
• Legal Compliance: Meeting legal obligations including KYC and AML requirements and reporting to relevant authorities.
• Service Improvement: Analyzing usage patterns to improve user experience, add new features, and resolve technical issues.
• Communications: Sending important account-related notifications, platform updates, and promotional information (with your consent).
• Customer Support: Helping you resolve issues or inquiries more efficiently using your account context.

Mr888 does not sell or rent your personal data to third parties. However, there are certain situations where we may share your data with the following parties:

• Service Providers: Payment processing companies, identity verification providers, and cloud service providers that help us deliver our services. All such providers are bound by strict confidentiality agreements.
• Game Providers: Non-identifying statistical game data may be shared with licensed game providers for technical and compliance purposes.
• Legal Authorities: Where required by law, court order or legitimate investigative necessity, we will disclose the required data to the relevant authorities.
• Business Transfers: In the event of a merger, acquisition, or asset sale, user data may be transferred to the successor entity with appropriate notice given to users.

Your data security is mr888's top priority. We implement a range of technical and organizational measures to protect your personal data from unauthorized access, loss, or disclosure.

• SSL/TLS Encryption: All data in transit is protected by 256-bit SSL encryption, ensuring your information cannot be read by unauthorized parties.
• Data-at-Rest Encryption: Sensitive data stored in our databases, including financial information and verification documents, is stored in encrypted form.
• Two-Factor Authentication (2FA): You are encouraged to enable two-factor authentication on your account for an additional layer of protection.
• Access Control: Access to user data by mr888 staff is restricted on a need-to-know basis. No staff member has unrestricted access to all data.
• Continuous Monitoring: Our security monitoring system operates 24/7 to detect and respond to any suspicious activity.
• Security Audit: We conduct regular security audits and penetration testing by independent third parties to identify and address any vulnerabilities.

Mr888 retains your personal data for as long as your account is active or as long as necessary to provide services to you. In addition, we may retain data for a longer period in the following situations:

• To comply with legal obligations – financial records and transaction data are typically retained for a minimum of 7 years in accordance with Malaysia's legal requirements.
• To resolve any pending disputes or claims.
• To enforce our agreements.

Once the relevant retention period has expired, your personal data will be securely deleted or anonymized so that it can no longer be personally associated with you.

As an mr888 user and data subject under Malaysia's PDPA, you have the following rights regarding your personal data:

To exercise any of the above rights, contact the mr888 support team via live chat or email. We will respond to your request within 30 business days. Some requests may require identity verification beforehand to protect your account security.

Mr888 uses cookies and similar tracking technologies to enhance your experience on the platform. Cookies are small text files stored on your device when you browse our website.

• Essential Cookies: Required for core platform functions such as login, session verification and security. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Helping us understand how users interact with the platform for technical improvement purposes.
• Functional Cookies: Saving your preferences such as language and display settings for a more personalized experience.
• Analytics Cookies: Collecting aggregated statistical data on usage patterns to help us make better development decisions.

You can manage or disable cookies through your browser settings. However, disabling certain cookies may affect the functionality of some features on the mr888 platform.

Mr888 is a platform intended exclusively for individuals aged 18 years and above only. We do not knowingly collect personal data from minors.

If we discover that personal data of a minor under the age of 18 has been collected without our knowledge, we will take immediate steps to delete that data and close the account in question. If you have reason to believe that someone under 18 has registered an account at mr888, please contact us immediately.

Mr888 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other legitimate reasons. When we make significant changes, we will:

• Updating the "Last Updated" date at the top of this document.
• Displaying clear notices on the platform about any changes made.
• Sending notifications to your registered email address for changes that materially affect your rights.

Continued use of the mr888 platform after notification of changes constitutes your acceptance of the updated Privacy Policy. If you do not agree with the changes, please stop using the platform and contact us to close your account.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact us via:

• Live Chat: Available 24/7 directly within the mr888 platform. This is the fastest way to get help.
• Privacy Email: [email protected] – for specific inquiries related to privacy and data protection, please include "Privacy Inquiry" in the subject line of your email.
• FAQ Page: Browse FAQ page us for frequently asked questions related to privacy and account security.

We are committed to responding to all privacy-related enquiries within 3 business days. For more serious complaints involving data breaches, we aim to respond within 24 hours.