Privacy Policy

mario88 ("the Company", "we", "us", "our") operates the online gaming platform accessible at https://mario88.cam ("the Platform"). We are committed to handling the personal data of all Players, visitors, and prospective members with the utmost care, transparency, and in full compliance with applicable international data protection standards.

This Privacy Policy ("Policy") describes the categories of personal information we collect when you use the Platform, the purposes for which that information is processed, the legal bases that justify such processing, how long we retain it, who we share it with, and the rights you hold over your own data.

This Policy applies to all users of the Platform, including players based in Malaysia — including those accessing the Platform from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, and Shah Alam — as well as users in other jurisdictions where mario88 is lawfully accessible.

For the purposes of this Privacy Policy, the following terms shall have the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including name, identification number, contact details, financial information, and online identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, transmission, erasure, or destruction.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data — in this case, mario88.
• "Data Processor" means any third party that processes Personal Data on behalf of mario88 under a formal data processing agreement.
• "Consent" means any freely given, specific, informed, and unambiguous indication of agreement to the processing of Personal Data for a stated purpose.
• "KYC" (Know Your Customer) means the identity and document verification process required by mario88's licensing and AML obligations before certain account actions can be completed.
• "Platform" means the mario88 website, mobile interface, associated software, and all services made available thereon at https://mario88.cam.

mario88 acts as the Data Controller in respect of all Personal Data collected and processed through the Platform. As Data Controller, mario88 is responsible for establishing the purposes for which personal information is processed, ensuring appropriate safeguards are applied, and facilitating the exercise of data subject rights.

For all data protection enquiries, rights requests, or complaints relating to the processing of your personal information, please contact our designated data protection contact using the details provided in Section 16 of this Policy.

mario88 collects personal data from you directly (data you provide), automatically (data generated by your use of the Platform), and in limited circumstances from third-party sources. The categories of data we collect are set out in the table below:

mario88 processes your Personal Data only where a valid legal basis exists. The applicable legal bases are:

• Contractual Necessity: Processing required to create and manage your Account, process deposits and withdrawals via DuitNow, FPX, and Malaysian bank transfers, settle wagers, and deliver the gaming services you have contracted for.
• Legal Obligation: Processing required to comply with our KYC and AML obligations under international gaming licence conditions, anti-money laundering frameworks, and applicable financial crime prevention laws.
• Legitimate Interests: Processing carried out in the legitimate interests of mario88, including fraud prevention, platform security, responsible gambling compliance, service improvement, and internal analytics — where such interests are not overridden by your privacy rights.
• Consent: Processing for optional marketing communications (email newsletters, promotional offers, personalised bonus alerts) where you have expressly opted in. You may withdraw consent at any time by contacting us or adjusting your communication preferences within your Account.

mario88 uses the personal data we collect for the following specific purposes:

6.1 Account Management

To create, verify, maintain, and administer your mario88 Account, including processing changes to your account details and communicating important account notifications.

6.2 Payment Processing

To process deposits and withdrawal requests submitted through Malaysian payment methods including Maybank, CIMB Bank, Public Bank, Hong Leong Bank, DuitNow QR, FPX, Touch 'n Go eWallet, Boost, GrabPay, Visa/Mastercard, and cryptocurrency methods (USDT, BTC).

6.3 KYC & Compliance

To verify your identity in accordance with our international gaming licence obligations, conduct AML screening, assess financial crime risk, and comply with applicable regulatory reporting requirements.

6.4 Customer Support

To respond to your enquiries, resolve disputes, process complaints, and maintain records of communications in accordance with our support quality and compliance standards.

6.5 Responsible Gambling

To administer the responsible gambling tools available within your Account — including deposit limits, loss limits, session reminders, cooling-off periods, and self-exclusion — and to identify patterns of play that may indicate problem gambling behaviour requiring intervention.

6.6 Platform Security & Fraud Prevention

To monitor for fraudulent account activity, multiple account creation, bonus abuse, money laundering, and other prohibited activities as defined in our Terms and Conditions.

6.7 Service Improvement & Analytics

To analyse usage patterns, game performance data, and technical platform metrics to improve the quality, reliability, and user experience of the mario88 Platform. Analytics data is processed in aggregated or pseudonymised form wherever possible.

6.8 Marketing Communications (Consent-Based)

Where you have consented, to send you promotional emails about new games, bonus offers, VIP tier updates, and platform news relevant to your interests as a Malaysian player. You may opt out of marketing communications at any time.

mario88 does not sell or rent your Personal Data to third parties. We share your data only in the following limited circumstances and only to the extent strictly necessary:

• Payment Processors & Banking Partners: To facilitate deposits and withdrawals, we share necessary financial data with our payment service providers, including Malaysian banking partners (Maybank, CIMB, Public Bank, Hong Leong), e-wallet operators (Touch 'n Go, Boost, GrabPay), and cryptocurrency infrastructure providers. All such partners process data only as Data Processors under contractual obligations consistent with this Policy.
• KYC & Identity Verification Providers: To fulfil our identity verification obligations, we may share document data with specialist third-party KYC verification service providers under strict data processing agreements.
• Game Content Providers: Game suppliers licensed to provide content on the Platform may receive anonymised or pseudonymised usage data necessary to support game operation, technical fault resolution, and RNG certification. Real-name or financial data is not shared with game content providers.
• Regulatory Authorities & Law Enforcement: We may disclose Personal Data to our licensing authority, relevant financial intelligence units, or law enforcement agencies where required by applicable law or in response to a lawful request. mario88 will not notify players of such disclosures where prohibited from doing so by law.
• Legal Advisors: Where necessary to obtain legal advice or to establish, exercise, or defend legal claims, Personal Data may be shared with our legal counsel under professional privilege obligations.
• Business Transfers: In the event of a merger, acquisition, restructuring, or sale of all or part of mario88's business, Personal Data held by the Company may be transferred to the acquiring entity, subject to the same privacy protections as described in this Policy. Affected users will be notified of any such transfer.

mario88 operates under an international gaming licence and engages service providers in multiple jurisdictions. As a result, your Personal Data may be transferred to and processed in countries outside Malaysia. Where such transfers occur, mario88 ensures that appropriate safeguards are in place to protect your data, including:

• Transfers to jurisdictions that provide an adequate level of data protection as recognised by applicable international data protection standards.
• Use of contractual clauses that impose equivalent data protection obligations on the recipient as apply under this Policy.
• Ensuring that all third-party Data Processors located outside Malaysia have implemented technical and organisational security measures consistent with those described in Section 12 of this Policy.

By using the mario88 Platform, you acknowledge and consent to the international transfer of your Personal Data as described in this Section, subject always to the protections detailed herein.

mario88 retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or licensing obligations. The following retention periods apply as a general guide:

Upon expiry of the applicable retention period, Personal Data will be securely deleted or irreversibly anonymised in accordance with our internal data disposal procedures.

mario88 uses cookies and similar tracking technologies to operate the Platform, maintain session security, and understand how players interact with our services.

10.1 Essential Cookies

These cookies are strictly necessary for the Platform to function. They enable core functionality such as session authentication, fraud prevention, and load balancing. Essential cookies cannot be disabled without significantly impairing Platform functionality.

10.2 Analytics Cookies

We use privacy-respecting analytics tools to collect aggregated data on page visits, game engagement, and session flows. This data helps us identify technical issues and improve the Platform experience for all Malaysian players. Analytics cookies are set only where permitted.

10.3 Preference Cookies

These cookies remember your settings and preferences — such as your chosen language, display preferences, and notification configurations — so you do not need to reconfigure them on each visit.

10.4 Managing Cookies

You can control and delete non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the mario88 Platform. For guidance on managing cookies in popular browsers, refer to your browser's help documentation.

Subject to applicable law and certain limited exceptions (such as where data must be retained for regulatory compliance), you have the following rights in respect of your Personal Data held by mario88:

• Right of Access: You may request a copy of all Personal Data we hold about you. We will provide this in a readable format within 14 calendar days of a valid request.
• Right to Rectification: If your Personal Data is inaccurate or incomplete, you have the right to request correction. For account-level data, you may update certain information directly within your Account settings.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your Personal Data where we no longer have a lawful basis to retain it. Note that certain data must be retained for regulatory and licensing compliance reasons as described in Section 9.
• Right to Restriction of Processing: You may request that we temporarily pause processing of your data while a rectification or objection request is assessed.
• Right to Data Portability: You may request a machine-readable export of Personal Data that you have provided to us and that is processed on the basis of consent or contract.
• Right to Object: You may object to processing carried out on the basis of legitimate interests, including direct marketing. Where you object to direct marketing, we will cease such processing immediately.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of the rights listed above, contact us at [email protected] with the subject line "Data Rights Request". We will acknowledge receipt within 48 hours and provide a substantive response within 14 calendar days. We may request proof of identity before processing rights requests in order to protect your data from unauthorised access.

mario88 implements a comprehensive suite of technical and organisational security measures designed to protect your Personal Data against unauthorised access, accidental loss, alteration, or destruction. These measures include:

• AES-256 encryption applied to all stored Personal Data.
• 256-bit TLS encryption for all data transmitted between your device and our servers.
• Multi-factor authentication requirements for administrative access to systems containing personal data.
• Role-based access controls limiting staff access to Personal Data to those with a demonstrated operational need.
• Regular penetration testing and vulnerability assessments conducted by qualified third-party security specialists.
• Incident response procedures enabling rapid identification, containment, and reporting of any data security incidents.
• Staff training on data protection obligations and security awareness on an annual basis.

Notwithstanding the above, no method of electronic transmission or data storage is completely secure. In the unlikely event of a data breach that poses a risk to your rights and freedoms, mario88 will notify affected individuals and applicable regulatory authorities as required by applicable law.

You also bear responsibility for maintaining the security of your Account credentials. Do not share your password with any third party and contact [email protected] immediately if you suspect unauthorised access to your Account.

The mario88 Platform is strictly for individuals aged 21 and above. We do not knowingly collect, solicit, or process Personal Data from any person under the age of 21. Our registration process includes age verification steps, and KYC documentation requirements are designed to confirm legal minimum age eligibility.

If mario88 becomes aware that Personal Data has been collected from an individual under the age of 21 — whether through misrepresentation during registration or any other means — we will take immediate steps to delete that information, close the associated Account, and void any associated transactions.

If you have reason to believe that a minor has created an Account on mario88 or provided us with their personal information, please contact us immediately at [email protected].

The mario88 Platform may from time to time contain references or links to third-party websites, services, or content. This Privacy Policy applies exclusively to the mario88 Platform and does not extend to any third-party websites or services. mario88 has no control over and accepts no responsibility for the privacy practices, data handling, or content of such third-party services.

We encourage you to review the privacy policies of any third-party services you access independently of the mario88 Platform before providing them with your Personal Data.

mario88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, our data processing activities, or operational requirements. Material changes to this Policy will be communicated to registered Players by email notification and/or by prominent notice on the Platform, with at least seven (7) days' advance notice wherever practicable.

The "Last Updated" date displayed at the top of this page indicates when this version of the Privacy Policy became effective. We recommend reviewing this Policy periodically to stay informed of how mario88 handles your personal information.

Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not agree with any changes, you should cease using the Platform and contact us to request account closure in accordance with our Terms and Conditions.