Privacy Policy

1. Introduction

mari888 ("the Platform", "we", "us", "our") is committed to protecting the privacy and personal data of every individual who visits, registers on, or uses our online casino and sports betting platform at https://mari888.cam. This Privacy Policy ("Policy") has been prepared to inform you clearly and transparently about our data practices.

This Policy applies to all personal data collected in connection with your use of the Platform, including data collected during account registration, identity verification, deposit and withdrawal transactions, customer support interactions, and general browsing of the website. It applies to users accessing the Platform from Malaysia and all other jurisdictions in which the Platform is accessible.

By creating a mari888 account or by continuing to use the Platform after this Policy has been made available to you, you acknowledge that you have read and understood this Policy and consent to the data practices described herein. This Policy should be read alongside our Terms & Conditions, which govern the overall relationship between you and mari888.

2. Definitions

For the purposes of this Privacy Policy, the following terms shall have the meanings set out below:

• "Personal Data" — Any information relating to an identified or identifiable natural person. This includes your name, email address, phone number, payment details, IP address, device identifiers, and any combination of data that could reasonably identify you as an individual.
• "Data Controller" — mari888, the entity that determines the purposes and means of processing your personal data. As the operator of the Platform, mari888 acts as the data controller for all personal data processed in connection with your account and use of Services.
• "Data Processor" — A third party that processes personal data on behalf of mari888, pursuant to a contractual arrangement and in accordance with our instructions. Examples include payment processors and identity verification service providers.
• "Processing" — Any operation or set of operations performed on personal data, including collection, recording, storage, retrieval, use, disclosure, erasure, or destruction.
• "Consent" — A freely given, specific, informed, and unambiguous indication of your agreement to the processing of your personal data for a stated purpose.
• "User" / "Data Subject" — Any natural person who accesses or uses the Platform and whose personal data is processed by mari888.
• "Cookies" — Small text files placed on your device by the Platform when you visit, used to recognise your browser, remember preferences, and analyse usage patterns.

3. Data We Collect

mari888 collects personal data in several categories, depending on your interactions with the Platform. The categories of data we may collect, and the context in which each is collected, are set out in the table below:

We do not knowingly collect special category data (as defined under applicable data protection frameworks), such as data revealing racial or ethnic origin, political opinions, religious beliefs, biometric data used for identification purposes beyond what is required for KYC, or health data, unless you voluntarily disclose such information in the context of a responsible gambling self-assessment.

4. How We Collect Your Data

4.1 Directly from You

The majority of personal data we hold is provided directly by you during your use of the Platform. This includes information you provide when registering an account, completing identity verification, making a deposit or withdrawal, updating account settings, submitting a support request, or communicating with the mari888 team via live chat or email.

4.2 Automatically through Platform Use

When you access the Platform, certain technical data is collected automatically by our servers and analytics tools. This includes your IP address, browser type, device identifiers, referring URLs, and behavioural data such as pages visited and features used. This data is collected using standard web server logs, cookies, and similar tracking technologies as described in Section 8 of this Policy.

4.3 From Third-Party Service Providers

In certain circumstances, we may receive personal data about you from third-party service providers engaged to assist with the operation of the Platform. These include:

• Identity verification providers — who may confirm the authenticity of identity documents you submit;
• Payment processors — including operators of Maybank2u, CIMB Clicks, Touch 'n Go eWallet, DuitNow, FPX, and other payment rails — who may provide transaction confirmation data and account verification information;
• Fraud detection and anti-money laundering (AML) screening services — who may provide risk scores or flagged indicators associated with an account or transaction;
• Analytics providers — who process aggregated or pseudonymised data about Platform usage patterns.

5. Legal Basis for Processing

mari888 processes your personal data on one or more of the following legal bases, depending on the nature and purpose of the processing activity:

• Contractual Necessity: Processing is necessary to perform the contract between you and mari888 — specifically, to create and manage your account, process deposits and withdrawals, operate your gaming activity, and provide customer support.
• Legal Obligation: Processing is required to comply with applicable legal obligations, including anti-money laundering (AML) laws, Know Your Customer (KYC) requirements, and international gaming regulatory standards applicable under our operating licence.
• Legitimate Interests: Processing is necessary for the legitimate interests of mari888, including fraud prevention, platform security, abuse detection, and the responsible operation of online gaming services — provided those interests are not overridden by your data protection rights.
• Consent: Where we rely on consent as a legal basis (for example, for optional marketing communications), we will obtain your consent explicitly and separately. You may withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

6. How We Use Your Personal Data

mari888 uses personal data collected from Users for the following specific purposes:

6.1 Account Management & Service Delivery

To create, operate, and maintain your mari888 account; to process deposits and withdrawals via supported Malaysian payment methods (including Maybank2u, DuitNow, Touch 'n Go eWallet, CIMB Clicks, GrabPay, FPX, and others); to deliver gaming and betting services; and to communicate with you regarding your account status, transactions, and promotions you have opted into.

6.2 Identity Verification (KYC)

To verify your identity, confirm your age (minimum 21 years), and authenticate ownership of the payment methods associated with your account, as required by applicable licensing conditions and anti-money laundering obligations.

6.3 Fraud Prevention & Security

To detect, investigate, and prevent fraudulent activity, account takeover attempts, money laundering, bonus abuse, multi-accounting, and other prohibited conduct as defined in our Terms & Conditions. Technical data including IP addresses and device fingerprints are used in automated fraud risk assessments.

6.4 Responsible Gambling Compliance

To monitor gameplay patterns for indicators of problem gambling behaviour, to enforce deposit limits and self-exclusion settings you have activated, to send responsible gambling notifications where appropriate, and to comply with responsible gaming obligations under our international operating licence.

6.5 Customer Support

To respond to enquiries, complaints, and requests submitted via live chat or email; to maintain records of support interactions for quality assurance and dispute resolution purposes; and to provide you with updates on issues you have raised.

6.6 Platform Improvement & Analytics

To analyse aggregated and anonymised usage data for the purposes of improving Platform performance, user experience, game offerings, and technical infrastructure. Individual user behaviour data used for analytics purposes is pseudonymised where technically feasible.

6.7 Marketing Communications (Consent-Based)

Where you have given explicit consent, to send you promotional communications regarding bonuses, new game releases, and platform updates. You may withdraw this consent at any time by updating your account communication preferences or by contacting the support team. Withdrawal of marketing consent does not affect your ability to use the Platform or the processing of data for other purposes.

7. Data Sharing & Third-Party Disclosure

mari888 does not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. Personal data is shared with third parties only in the following defined circumstances:

7.1 Service Providers (Data Processors)

We engage third-party service providers who process personal data on our behalf and under our instructions. These include payment processing companies, identity verification providers, IT infrastructure and cloud hosting services, and analytics tools. All such providers are contractually bound to process data only as instructed by mari888 and to maintain appropriate security standards.

7.2 Payment Processors

To facilitate deposits and withdrawals, certain financial data (including transaction reference numbers and account holder details) is necessarily shared with the relevant payment service operator — for example, Maybank2u, CIMB Clicks, Hong Leong Connect, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, or FPX. This sharing is strictly limited to what is technically required to process your transaction.

7.3 Legal & Regulatory Disclosure

mari888 may be required to disclose personal data to regulatory authorities, law enforcement agencies, or courts where required to do so by applicable law, pursuant to a valid legal order, or in connection with the detection, investigation, or prosecution of criminal activity including fraud and money laundering. In such cases, we will disclose only the minimum personal data required to comply with the legal obligation.

7.4 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of the business of the Platform operator, personal data held by mari888 may be transferred to the acquiring entity as part of the transaction. In such circumstances, Users will be notified of any change in data controller and given the opportunity to exercise their rights prior to the transfer taking effect.

8. Cookies & Tracking Technologies

8.1 What Are Cookies?

Cookies are small data files placed on your device when you visit a website. They enable the website to recognise your browser across sessions, remember your preferences, maintain login states, and collect usage statistics. The mari888 Platform uses cookies and similar technologies including local storage and session storage.

8.2 Types of Cookies We Use

• Strictly Necessary Cookies: Required for the Platform to function. These include session cookies that maintain your login state and secure your account session. These cannot be disabled without impairing core Platform functionality.
• Functional Cookies: Remember your preferences such as language settings, display options, and responsible gambling tool configurations. Disabling these may result in reduced personalisation of your experience.
• Performance & Analytics Cookies: Collect anonymised or pseudonymised data about how Users interact with the Platform — pages visited, features used, session durations. This data is used to improve Platform performance and user experience.
• Security Cookies: Support fraud detection and platform security functions, including the identification of unusual login patterns or suspicious transaction behaviour.

8.3 Managing Cookies

You may control cookie settings through your browser's privacy settings. Most modern browsers allow you to block or delete cookies. Please note that disabling strictly necessary cookies will impair your ability to log in and use the Platform. For guidance on managing cookies in your specific browser, refer to your browser's official documentation.

9. Data Retention

mari888 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by applicable legal or regulatory obligations. The following general retention periods apply:

• Account and Identity Data: Retained for the duration of your active account plus a minimum of five (5) years following account closure, in compliance with anti-money laundering record-keeping obligations.
• Transaction and Financial Data: Retained for a minimum of seven (7) years following the date of the relevant transaction, as required by applicable financial regulations.
• KYC Documents: Retained for a minimum of five (5) years following account closure or the conclusion of any regulatory investigation, whichever is later.
• Support Communication Records: Retained for a minimum of three (3) years following the resolution of the support interaction, for quality assurance and dispute resolution purposes.
• Gameplay and Betting Records: Retained for the duration of the active account plus three (3) years, for responsible gambling monitoring and dispute resolution purposes.
• Technical and Device Data (Logs): Typically retained for ninety (90) days unless retained longer in connection with a security incident or fraud investigation.

Following the expiry of applicable retention periods, personal data is securely deleted or irreversibly anonymised in accordance with our internal data disposal procedures.

10. Data Security

The security of your personal data is a technical and operational priority at mari888. We have implemented, and continue to maintain, a range of security measures appropriate to the sensitivity of the data we process:

• Encryption in Transit: All data transmitted between your device and the Platform is encrypted using Transport Layer Security (TLS) with 256-bit encryption, preventing interception of data in transit.
• Encryption at Rest: Sensitive personal data stored on our systems — including identity verification documents and financial details — is encrypted using industry-standard encryption algorithms.
• Access Controls: Access to personal data within our organisation is restricted to personnel with a legitimate operational need. All internal access is logged and subject to regular audit.
• Two-Factor Authentication (2FA): Optional 2FA is available to all Platform users to protect account access. We strongly recommend enabling 2FA.
• Penetration Testing and Vulnerability Assessments: The Platform undergoes regular security assessments by internal and external security teams.
• Incident Response: In the event of a personal data breach that poses a risk to your rights and freedoms, mari888 maintains documented incident response procedures, including notification obligations where required by applicable law.

11. Your Rights as a Data Subject

Subject to applicable data protection law and any overriding legal obligations on our part, you hold the following rights in relation to your personal data held by mari888. You may exercise any of these rights by contacting our support team via the details provided in Section 15.

We will respond to all verified data subject requests within thirty (30) calendar days of receipt. In complex cases, this period may be extended by a further 60 days, in which case we will inform you of the extension and its reasons within the initial 30-day window. We do not charge a fee for exercising any of these rights unless the request is manifestly unfounded or excessive.

12. Children, Minors & Age Restrictions

The mari888 Platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect, use, or retain personal data from persons under the age of 21. Age verification is a mandatory component of the account registration and KYC process, and we employ automated and manual checks to enforce this requirement.

If we become aware that personal data has been collected from a person under the age of 21, we will promptly take steps to permanently delete that data and close the associated account. Winnings associated with underage accounts will be forfeited in accordance with our Terms & Conditions.

Parents and guardians who believe that a minor may have registered on the Platform are encouraged to contact our support team immediately so that the matter can be investigated and the account closed without delay.

13. International Data Transfers

As an internationally licensed online gaming platform, mari888 may transfer personal data to countries outside of Malaysia in connection with the operation of the Platform, including to the jurisdiction in which our server infrastructure is hosted and to the countries of operation of third-party service providers (such as identity verification providers and payment processors).

Where personal data is transferred internationally, mari888 takes steps to ensure that the transfer is subject to appropriate safeguards. These may include: contractual obligations (standard contractual clauses) between mari888 and the receiving entity; the adequacy of the data protection framework in the destination country; or other legally recognised transfer mechanisms applicable under the data protection laws relevant to our operating jurisdiction.

Malaysian users should be aware that Malaysian data protection legislation (the Personal Data Protection Act 2010, PDPA) may apply to the processing of your personal data, and that by using the Platform, you consent to the transfer of your personal data in accordance with this Policy.

14. Amendments to This Privacy Policy

mari888 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or the services we provide. The effective date at the top of this Policy will be updated whenever material changes are made.

Where changes are material — meaning they could significantly affect your rights or the way your personal data is processed — we will notify registered Users by email to the address associated with their account and/or by a prominent notice on the Platform at least fourteen (14) calendar days before the changes take effect.

Your continued use of the Platform following the effective date of any updated Privacy Policy constitutes your acknowledgment of and agreement to the updated terms. If you do not agree with the revised Policy, you should cease use of the Platform and close your account prior to the effective date of the change.

15. Contact Us & Data Enquiries

For any enquiries, requests, or complaints relating to this Privacy Policy or the processing of your personal data by mari888, please contact us through the following channel:

This Privacy Policy was last reviewed and updated on 1 January 2026. All prior versions of this Policy are superseded by this document.