Privacy Policy

Introduction and Scope

1.1 mrcoin88 is committed to protecting the privacy and personal data of all users of the Platform, including registered account holders and visitors who browse without registering. We take our data protection obligations seriously and maintain appropriate technical and organisational measures to safeguard personal information.

1.2 This Policy applies to all personal data collected through the mrcoin88 website at mrcoin88.one, the mrcoin88 mobile application, customer support communications, and any other mrcoin88-operated digital touchpoint. It does not apply to third-party websites or services that may be referenced from time to time — those services are governed by their own privacy policies.

1.3 mrcoin88 operates in the Malaysian online gaming market and processes personal data in accordance with the obligations imposed by its international gaming licence and applicable data protection principles. We do not sell or rent personal data to third parties for marketing purposes.

Personal Data We Collect

2.1 The categories of personal data mrcoin88 may collect include:

2.2 mrcoin88 does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data unless specifically required for responsible gaming assessments, in which case such data is collected only with explicit consent and is handled with heightened protection.

How We Collect Your Personal Data

3.1 Direct Collection: Data you provide directly to mrcoin88 during account registration, identity verification, payment setup, customer support interactions, promotion opt-ins, and any other form submission or communication directed to mrcoin88.

3.2 Automated Collection: When you access the Platform, mrcoin88 automatically collects technical and behavioural data through cookies, web beacons, server logs, and similar tracking technologies. This data is used to operate and improve the Platform and to detect fraud. See Section 7 for details on cookies.

3.3 Third-Party Sources: mrcoin88 may receive personal data about you from third parties where this is necessary for our services or compliance obligations, including:

• Identity verification service providers used to fulfil KYC requirements;
• Payment processors and financial institutions that process your deposits and withdrawals;
• Fraud prevention and anti-money laundering screening services;
• Game providers for the purpose of resolving disputes involving game outcomes.

How We Use Your Personal Data

4.1 mrcoin88 uses your personal data for the following purposes:

• Service Provision: To create and manage your account, process deposits and withdrawals, provide access to games and betting markets, and administer bonuses and promotions;
• Identity & Age Verification: To verify that you meet the eligibility requirements set out in our Terms and Conditions, including the 21+ age requirement and identity authentication;
• Fraud & Security: To detect, investigate, and prevent fraudulent transactions, money laundering, account takeover, and other security threats;
• Regulatory Compliance: To meet our obligations under our international gaming licence, applicable anti-money laundering regulations, and any other applicable legal requirements, including cooperating with law enforcement or regulatory bodies where required;
• Responsible Gaming: To monitor gaming patterns for signs of problem gambling, to enforce self-exclusion requests, and to apply player-requested limits;
• Customer Support: To respond to your enquiries, investigate complaints, and resolve disputes;
• Marketing & Promotions: To send you relevant promotional offers and platform updates, where you have provided consent or where mrcoin88 has a legitimate interest in doing so. You may opt out of marketing communications at any time;
• Platform Improvement: To analyse usage patterns, improve the Platform's user experience, and test new features.

Legal Basis for Processing

5.1 mrcoin88 processes personal data only where a valid legal basis exists. The primary legal bases on which mrcoin88 relies are:

• Contractual Necessity: Processing required to perform the contract between you and mrcoin88 — including operating your account, processing payments, and providing gaming services;
• Legal Obligation: Processing required to comply with applicable laws, including KYC, AML, and licence conditions;
• Legitimate Interests: Processing for fraud prevention, network and information security, and the improvement of our services — where our interests are not overridden by your data protection rights;
• Consent: For marketing communications and certain non-essential cookies, where we rely on your freely given, specific, and informed consent. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

Data Sharing and Disclosure

6.1 mrcoin88 does not sell, trade, or rent your personal data to third parties for their independent marketing purposes. We may share your personal data with third parties in the following circumstances:

• Service Providers: Companies that provide services to mrcoin88 under data processing agreements, including payment processors (Maybank, CIMB, Public Bank, Touch n Go eWallet, Boost, GrabPay, FPX), KYC verification providers, fraud screening services, hosting and cloud infrastructure providers, and customer support platforms. These parties are permitted to process your data only on mrcoin88's instructions and for no other purpose;
• Game Providers: Licensed game studios providing games on the Platform may receive necessary session and transaction data for the purpose of delivering their services and resolving disputes;
• Regulatory and Legal Authorities: Where mrcoin88 is required by law, court order, or regulatory direction to disclose personal data — including disclosures to anti-money laundering authorities, law enforcement agencies, and gaming regulators;
• Business Transfers: In the event of a merger, acquisition, or sale of substantially all assets of mrcoin88, personal data may be transferred to the successor entity, subject to equivalent data protection commitments.

6.2 All third-party service providers engaged by mrcoin88 are required by contract to implement appropriate technical and organisational security measures and to process personal data strictly in accordance with mrcoin88's instructions.

Cookies and Tracking Technologies

7.1 mrcoin88 uses cookies and similar tracking technologies on the Platform for the following purposes:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication tokens, security cookies, and load-balancing cookies. These cannot be disabled without impairing Platform functionality;
• Functional Cookies: Remember your preferences such as language settings, preferred game categories, and responsible gaming tool configurations;
• Analytics Cookies: Used to understand how players interact with the Platform, which pages are visited most frequently, and where users encounter difficulties — enabling ongoing Platform improvement;
• Security and Fraud Detection Cookies: Assist in identifying suspicious login patterns and fraudulent behaviour by correlating device and session characteristics over time.

7.2 You may configure your browser settings to reject non-essential cookies. Note that disabling certain categories of cookies may affect Platform functionality, particularly features that rely on session persistence.

Data Retention

8.1 mrcoin88 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including satisfying legal, regulatory, tax, and reporting requirements. Specific retention periods include:

• Active Account Data: Retained for the duration of the account relationship and for a period of five (5) years following account closure, to satisfy AML record-keeping requirements;
• KYC and Identity Documents: Retained for a minimum of five (5) years from the date of verification or account closure, whichever is later, in compliance with international gaming licence obligations;
• Transaction and Gaming Records: Retained for five (5) years following each transaction, consistent with standard financial record-keeping practice;
• Marketing Preferences: Retained until you withdraw consent or opt out, plus a reasonable period to process the opt-out;
• Support Correspondence: Retained for three (3) years from the date of the last interaction.

8.2 Where data is retained beyond the periods above due to ongoing legal proceedings, regulatory investigations, or disputes, it will be retained until those proceedings are concluded. Upon expiry of the applicable retention period, personal data is securely deleted or anonymised.

Security Measures

9.1 mrcoin88 implements industry-standard technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• TLS 1.3 encryption for all data in transit between your device and mrcoin88 servers;
• Encryption of personal data at rest using AES-256 or equivalent standards;
• Bcrypt hashing of all stored account passwords — plaintext passwords are never stored;
• Role-based access control ensuring that mrcoin88 personnel can only access personal data necessary for their specific function;
• Multi-factor authentication requirements for internal systems handling personal data;
• Regular third-party penetration testing and vulnerability assessments;
• Intrusion detection systems and 24/7 security monitoring;
• Data breach incident response procedures with defined notification timelines.

9.2 Notwithstanding the above, no security system is impenetrable. mrcoin88 cannot guarantee absolute security of your personal data against all threats. You are responsible for maintaining the confidentiality of your account credentials and for reporting any suspected unauthorised access promptly.

Your Data Rights

10.1 Subject to applicable law and the terms of mrcoin88's regulatory obligations, you have the following rights in relation to your personal data held by mrcoin88:

• Right of Access: You may request a copy of the personal data mrcoin88 holds about you;
• Right to Rectification: You may request correction of inaccurate or incomplete personal data;
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes it was collected, subject to mrcoin88's legal retention obligations;
• Right to Restriction: You may request that mrcoin88 restrict processing of your data in certain circumstances, such as while a correction request is pending;
• Right to Object: You may object to processing of your personal data for marketing purposes. You may also object to processing based on legitimate interests, though this right is not absolute;
• Right to Data Portability: Where processing is based on consent or contractual necessity, you may request that mrcoin88 provide your personal data in a structured, commonly used, machine-readable format;
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of prior processing.

10.2 To exercise any of the above rights, contact mrcoin88's data team at [email protected]. We will respond to verified requests within thirty (30) calendar days. We may need to verify your identity before processing a request.

10.3 Some rights are subject to limitations where mrcoin88 has overriding legal obligations — in particular, the right to erasure cannot override AML record-keeping requirements imposed by our gaming licence.

Children's Privacy and Age Restrictions

11.1 The mrcoin88 Platform is strictly for adults aged 21 and above. mrcoin88 does not knowingly collect, process, or store personal data from individuals under the age of 21. If mrcoin88 discovers that personal data has been collected from a person under 21, that account will be immediately suspended and all associated personal data will be deleted.

11.2 If you believe a minor has registered an account or provided personal data to mrcoin88, please contact us immediately at [email protected] so that we can investigate and take appropriate action promptly.

International Data Transfers

12.1 mrcoin88 may transfer personal data to countries outside Malaysia in the course of operating the Platform — for example, where service providers or game studios operate servers in other jurisdictions. Any such international transfer will only occur where:

• The recipient country provides an adequate level of data protection as recognised by applicable standards; or
• Appropriate safeguards are in place through contractual data transfer mechanisms binding the recipient to data protection standards equivalent to those applied by mrcoin88; or
• The transfer is necessary for the performance of the contract between you and mrcoin88 (such as processing an international payment).

12.2 Where personal data is transferred internationally, mrcoin88 requires all recipients to maintain data security standards no less rigorous than those applied by mrcoin88.

Changes to This Privacy Policy

13.1 mrcoin88 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or operational requirements. When material changes are made, the updated Policy will be published on the Platform with a revised "last updated" date, and registered players will be notified via their registered email address where practicable.

13.2 Your continued use of the Platform following publication of an updated Privacy Policy constitutes acceptance of the updated terms. If you do not accept the updated Policy, you should cease using the Platform and may close your account in accordance with the mrcoin88 Terms and Conditions.

Contact Us

14.1 For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by mrcoin88, please contact our data team through the following channel:

14.2 mrcoin88 is committed to resolving privacy concerns promptly and transparently. If you are not satisfied with the outcome of a privacy complaint, you may escalate the matter to the relevant supervisory authority under your applicable jurisdiction's data protection laws.