Privacy Policy mari888 — How We Protect Your Personal Data

This Privacy Policy ("Policy") describes how mari888 ("we", "Platform") collects, uses, stores, discloses and protects the personal information you provide or that we collect when you use the mari888 platform, accessible via mari888.click.

We understand that entrusting your personal information to any online platform is a big decision. That's why we take this responsibility very seriously. This policy is written in plain, easy-to-understand language — not dry legal jargon — so you always know exactly what happens to your data.

This policy applies to all users of the mari888 platform regardless of how they access it — whether via a web browser on your computer, a mobile app, or any other device. It covers all services we offer, including Sports Betting, Live Casino, roulette, badminton, lottery, and all other sections of the platform.

Mari888 collects two main categories of data: information you provide to us directly, and data collected automatically as you use the platform.

Data You Provide Directly:

• Registration Information: Full name, date of birth, Malaysian phone number, email address, and password (stored in encrypted form).
• Identity Verification Information: MyKad number or passport number, a selfie with identity document, and proof of address — collected only when required for KYC verification.
• Financial Information: Bank account number, bank name, and the Touch 'n Go, GrabPay, Boost, ShopeePay, or DuitNow e-wallet numbers used for deposits and withdrawals. We do not directly store credit or debit card information.
• Communications: Live chat conversation records, emails you send to us, and feedback submitted through surveys or in-platform forms.

Automatically Collected Data:

• Usage Data: Login and logout records, pages visited, games played, bets placed, session duration, and frequency of use.
• Technical Data: IP address, device type, operating system, web browser type, screen resolution, and language settings.
• Location Data: General geographic location derived from your IP address — we do not collect your precise GPS location.
• Cookie Data: Session information, platform preferences, and analytics data collected through cookies and similar tracking technologies.

The data we collect is used solely for legitimate, stated purposes. mari888 does not use your data for any purpose beyond those listed here without first obtaining your consent.

For marketing communications such as promotional notifications or special offers, we will only send you notifications if you have opted in during registration or through your account notification settings. You may withdraw this consent at any time.

Every instance of personal data processing we carry out has a valid legal basis under Malaysia's Personal Data Protection Act 2010 (PDPA). These bases are:

• Consent: You provide explicit consent when registering an account and when using certain services. You may withdraw consent for non-mandatory processing at any time.
• Contract Performance: Processing required to deliver the services you have requested — such as handling deposits, withdrawals, and account management — is necessary to fulfil the agreement between you and mari888.
• Legal Obligations: Certain data processing is required under applicable Malaysian law, including AML (Anti-Money Laundering), KYC (Know Your Customer), and regulatory reporting obligations.
• Legitimate Interests: Processing required for legitimate operational interests such as fraud prevention, platform security, and service improvement — provided this does not override your fundamental rights.

Mari888 does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. However, there are limited situations where we need to share your data with certain parties for operational reasons:

• Payment Service Providers: To process your deposits and withdrawals, the required transaction information is shared with service providers such as FPX processors, DuitNow gateways, and the Malaysian e-wallet platforms you use. This sharing is kept to a minimum and involves only the data needed to complete the transaction.
• Technical Service Providers: We work with carefully selected third-party providers for services such as server hosting, usage analytics, and technical support. All providers are bound by strict data protection agreements and are not permitted to use your data for any purpose beyond what has been specified.
• Legal Authorities: mari888 will disclose personal data to the relevant Malaysian authorities when required by law, court order, or official directive from a regulatory body — and only to the extent required.
• Fraud Prevention: In cases involving serious fraud, money laundering, or security threats, we may share relevant information with other platforms in the industry or with law enforcement authorities.

Mari888 retains your personal data only for as long as necessary to fulfil the purposes set out in this Policy or as required by applicable law.

• Active Account: While your account remains active, we retain all data necessary for account management and service delivery.
• After Account Closure: After account closure, we retain financial transaction records and identity verification data for 5 years to meet Malaysia's AML legal requirements and tax reporting obligations.
• Communication Records: Live chat records and customer support emails are retained for 2 years from the date of communication for reference and dispute resolution purposes.
• Cookie Data: This depends on the type of cookie — session cookies are deleted when you close your browser, while persistent cookies are stored for the duration set in your cookie settings.
• Analytics Data: Anonymised usage data is retained for a longer period for trend analysis and platform improvement purposes.

Once the relevant retention period has ended, data is securely deleted or anonymised using procedures that ensure it cannot be recovered.

The security of your personal data is our top priority. mari888 implements multiple layers of technical and organisational safeguards to keep your data protected:

• Encryption in Transit: All data transmitted between your device and our servers is protected by TLS 1.3 and 256-bit SSL encryption — ensuring no third party can intercept or read your data in transit.
• Encryption at Rest: Sensitive data such as financial information and identity documents is stored in encrypted form within our databases. Passwords are never stored as plain text — only strong hashes are retained.
• Access Controls: The principle of least privilege applies — staff are only granted access to the data necessary for their specific role. All access to member data is logged and regularly audited.
• Threat Monitoring: Intrusion detection systems (IDS) and automated security tools monitor platform traffic around the clock to identify suspicious activity.
• Security Testing: Penetration testing and vulnerability assessments are conducted regularly by independent third parties to identify and address any weaknesses before they can be exploited.
• Staff Training: All staff who handle personal data undergo mandatory data protection training and are bound by strict confidentiality agreements.

While we take all reasonable steps to protect your data, no system is 100% secure. You also play an important role in your account's security — use a strong password, enable 2FA, and never share your login credentials with anyone.

Cookies are small text files stored on your device when you visit mari888. We use cookies and similar technologies to ensure the platform functions properly and to provide you with a better experience.

The following are the types of cookies we use:

You can manage your cookie settings in your web browser at any time. However, disabling essential cookies may affect platform functionality and your user experience. For more information on managing cookies in popular browsers, refer to your browser's help documentation.

The mari888 platform may contain links or references to third-party websites not operated by us. These may include payment provider websites such as FPX or DuitNow portals when you carry out a transaction.

This Privacy Policy applies solely to the mari888 platform. When you click links to third-party websites, we recommend reading their respective privacy policies, as we have no control over how they collect or use your data.

Mari888 is not responsible for the privacy practices or content of third-party websites, even where we have provided links to them within our platform.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and the privacy principles we uphold, you have the following rights regarding the personal data we hold about you:

To exercise any of the above rights, contact us by email at support@mari888.click or via the in-platform live chat with the subject line "Privacy Rights Request". We will process your request within 14 working days at no charge. In complex cases, this period may be extended to 30 days, and we will notify you of the delay.

The mari888 platform is intended strictly for individuals aged 18 and above. We do not knowingly collect or intend to collect personal data from anyone under the age of 18.

If you are a parent or guardian who has discovered that your minor child has registered an account on mari888 or provided us with their personal information without your knowledge, please contact us immediately at support@mari888.click. We will act promptly to investigate, close the account in question, and delete all associated data without delay.

Mari888 reserves the right to amend or update this Privacy Policy at any time to reflect changes in our practices, new legal requirements, or improvements to how we handle user data.

When we make material changes to this Policy, we will take the following steps:

• Updating the "Last Updated" date displayed at the top of this page.
• Displaying a clear notice within the mari888 platform about upcoming changes.
• For significant changes, we will send an email notification to all registered members at least 7 days before the changes take effect.

We encourage you to review this page periodically to stay informed about how we protect your information. Your continued use of the mari888 platform after any changes to this Policy take effect constitutes your acceptance of the updated version.

If you have any questions, concerns, or complaints about how mari888 handles your personal data, or if you wish to exercise any of your privacy rights, please reach out to us through the following channels:

• Privacy Email: support@mari888.click — include "Privacy Enquiry" or "Data Request" in your email subject line for faster processing.
• Live Chat: Available 24/7 directly within the mari888 platform for general enquiries. For formal requests involving data rights, email is the preferred channel as it provides a written record.

We are committed to handling all privacy enquiries seriously and within the stipulated timeframe. If you are not satisfied with the response you receive, you have the right to lodge a complaint with the Department of Personal Data Protection under Malaysia's Ministry of Communications and Digital.