Privacy Policy

This Privacy Policy (the "Policy") describes how Mario888 ("Mario888", "We", "Us", or "the Company"), the operator of the online gaming and sports betting platform located at mario888.cam (the "Platform"), collects, processes, stores, and protects the personal data of individuals ("You", "User", or "Player") who register for, access, or otherwise interact with the Platform.

Mario888 serves players primarily across Malaysia — including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, and Shah Alam — and operates as an English-language platform with all transactions conducted in Malaysian Ringgit (MYR). This Policy applies to all personal data processed in connection with your use of the Platform, regardless of whether you are a registered player, a visitor to the Site, or a party corresponding with our support team.

We take your privacy seriously. This Policy is written in plain, accessible English — not impenetrable legalese — because we believe you deserve to understand exactly how your data is handled. If you have questions about any part of this Policy, our support team is available 24/7 via live chat or at [email protected].

By creating a Player Account on mario888, depositing funds, or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree with this Policy, you should discontinue use of the Platform.

The following terms carry the meanings set out below throughout this Privacy Policy unless the context requires otherwise:

Mario888 collects Personal Data through several channels: directly from you when you register or use the Platform, automatically via technical systems, and occasionally from authorised third-party verification providers. The categories of data we collect are detailed below.

3.1 Registration and Account Data

• Full legal name as it appears on your identity document
• Date of birth (to verify the 21+ age requirement)
• Residential address, including city and postcode
• Email address and mobile phone number
• Chosen username and encrypted account password
• Security questions and answers (where applicable)

3.2 Identity Verification (KYC) Data

• Copy of Malaysian National Identity Card (MyKad / NRIC) or valid passport
• Selfie photograph for liveness verification
• Proof of address documentation (where required by our KYC procedures)

3.3 Financial and Payment Data

• Deposit and withdrawal transaction records in MYR
• Payment method type (e.g., Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, cryptocurrency wallet addresses)
• Bank account number or e-wallet identifier associated with transactions (stored in tokenised form — full financial credentials are never held on mario888 servers)

3.4 Gaming and Betting Activity Data

• Game sessions, bet histories, and wager amounts
• Bonus and promotional activity logs
• Sports markets accessed (e.g., Liga Super Malaysia, EPL, UFC)
• Session duration and frequency data
• Responsible gambling tool usage (deposit limits, self-exclusion records)

3.5 Technical and Device Data

• IP address and approximate geographic location derived from it
• Device type, operating system, and browser version
• Session timestamps and login/logout records
• Cookies and similar tracking technologies (see Section 7)

3.6 Communications Data

• Records of support interactions via live chat and email
• Correspondence submitted through any contact channel to [email protected]
• Complaint and dispute records

Mario888 processes your Personal Data only for the purposes set out below. We do not process Personal Data for purposes incompatible with those for which it was originally collected.

Mario888 processes your Personal Data under one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing required to fulfil our obligations under the Player Account agreement — including account management, payment processing, and the delivery of gaming services.
• Legal Obligation: Processing required to comply with applicable regulatory, anti-money laundering (AML), counter-financing of terrorism (CFT), and age verification obligations. This includes KYC checks and transaction monitoring.
• Legitimate Interests: Processing carried out for fraud prevention, platform security, and responsible gambling monitoring, where those interests are not overridden by your fundamental rights and freedoms.
• Consent: Where processing is based on your freely given, specific, and informed consent — such as for optional marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Mario888 does not sell, rent, or trade your Personal Data with third parties for their own commercial purposes. We share Personal Data only in the following limited circumstances:

• Authorised Third-Party Processors: We engage vetted service providers — including payment processors (e.g., FPX operators, e-wallet platforms such as Touch 'n Go and Boost), identity verification providers, and platform infrastructure providers — to process data on our behalf under binding data processing agreements that restrict their use of your data to the defined purpose only.
• Regulatory and Law Enforcement Authorities: We may disclose Personal Data to competent governmental or regulatory authorities where required by applicable law, court order, or lawful governmental request — for example, in the context of AML investigations.
• Fraud Prevention Networks: In cases of suspected fraud, account abuse, or collusion, limited account and transaction data may be shared with industry fraud prevention bodies to protect the integrity of the Platform and its Players.
• Business Transfers: In the event of a merger, acquisition, or sale of the Company or its assets, your Personal Data may be transferred to the successor entity, subject to equivalent privacy protections.

In all cases involving data sharing, Mario888 applies the principle of data minimisation — sharing only the Personal Data that is strictly necessary for the disclosed purpose.

Mario888 uses cookies and similar tracking technologies to ensure the Platform functions correctly, to maintain your session while logged in, to remember your preferences, and to collect anonymised analytics data that helps us improve the Platform experience.

The categories of cookies used on mario888 are as follows:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies that keep you logged in and security tokens that protect your account from cross-site request forgery (CSRF). These cannot be disabled.
• Functional Cookies: Used to remember your preferences such as language setting and display preferences. Disabling these may affect the functionality of certain Platform features.
• Analytics Cookies: Collect anonymised, aggregated data about how Players navigate the Platform — including pages visited, session duration, and feature usage. This data does not identify you individually and is used solely for Platform improvement purposes.

You may manage or disable non-essential cookies through your browser settings. Please note that disabling cookies may impair certain features of the Platform. Mario888 does not use third-party advertising cookies or behavioural tracking cookies for commercial advertising purposes.

Mario888 retains your Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, to comply with our legal and regulatory obligations, and to resolve any disputes or enforce our agreements.

The following general retention periods apply:

• Active Account Data: Retained for the duration of your active Player Account, plus a minimum of five (5) years following permanent account closure, to meet regulatory audit and AML record-keeping requirements.
• KYC and Identity Documents: Retained for a minimum of five (5) years from the date of collection or from the date of account closure, whichever is later, in accordance with applicable AML regulations.
• Transaction Records: Retained for a minimum of five (5) years following each transaction date.
• Support Communications: Retained for a period of three (3) years following the closure of the relevant support interaction.
• Marketing Consent Records: Retained for as long as you remain opted in, plus a reasonable period thereafter to evidence that consent was properly obtained and withdrawn.

On expiry of applicable retention periods, Personal Data is securely deleted or anonymised so that it can no longer be associated with you as an individual.

Mario888 implements technical and organisational security measures appropriate to the risk level of the data we process. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers.
• Encrypted storage of sensitive Personal Data, including identity documents and KYC records, on access-controlled infrastructure.
• Payment credentials processed exclusively by certified third-party payment processors — full financial details are never stored on mario888 servers.
• Two-factor authentication (2FA) available for all Player Accounts to protect against unauthorised access.
• Regular internal security reviews and access logging to detect and investigate any anomalous activity.
• Strict access controls: only authorised personnel with a legitimate need are permitted to access Personal Data, and all such access is logged.

In the event of a Personal Data breach that poses a risk to your rights and freedoms, Mario888 will notify affected Players without undue delay and will take immediate remediation steps. You can report any suspected data security incident directly to our team at [email protected].

As a Player on mario888, you hold the following rights with respect to your Personal Data. To exercise any of these rights, please contact our support team via live chat or at [email protected]. We will respond to all valid rights requests within a reasonable period.

Please note that certain rights are subject to limitations where processing is required by law — for example, we cannot delete transaction records during the mandatory AML retention period even upon request.

The mario888 Platform is strictly for individuals aged 21 years and above. We do not knowingly collect Personal Data from, or provide services to, any person under the age of 21.

As part of our KYC procedures, Mario888 verifies the age and identity of all Players prior to authorising their first withdrawal. Where we have reasonable grounds to suspect that a Player is under 21 years of age, we will immediately suspend the Account, freeze all funds pending investigation, and conduct an expedited verification review.

If you believe that a minor has created an Account on mario888, please notify us immediately at [email protected] so that we can take appropriate action without delay.

The mario888 Platform integrates with a number of third-party service providers to deliver payment processing, identity verification, platform analytics, and gaming content. Each of these providers maintains its own privacy policy governing the handling of data it receives.

Key categories of third-party services we engage, and the data they may receive, include:

• Payment Processors: Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, and cryptocurrency network providers receive transaction reference data and payment method identifiers sufficient to process your deposit or withdrawal.
• Identity Verification Providers: Third-party KYC service providers may receive copies of identity documents and liveness verification data for the sole purpose of confirming your identity and age.
• Platform Infrastructure Providers: Our hosting, security, and CDN providers process technical data (IP addresses, session logs) in the course of providing infrastructure services.

Mario888 conducts due diligence on all third-party processors to ensure they maintain appropriate security standards. All processors are engaged under binding data processing agreements that prohibit them from using your Personal Data for any purpose other than the contracted service.

The mario888 Platform does not contain links to external third-party websites. This Policy applies only to data processed by Mario888 and its engaged processors in connection with the mario888 Platform.

Mario888 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The date of the most recent revision is displayed at the top of this page.

Where changes are material — meaning they significantly affect how we handle your Personal Data or alter your rights — we will endeavour to provide advance notice by posting a prominent notice on the Platform or by direct communication to your registered email address.

Continued use of the mario888 Platform following the publication of an updated Privacy Policy constitutes your acknowledgement of and agreement to the amended terms. If you do not accept the updated Policy, you should cease using the Platform and contact us to request account closure.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the processing of your Personal Data by Mario888, please contact us through either of the following channels:

• Live Chat: Available 24 hours a day, 7 days a week directly on the mario888 Platform. This is the fastest route for urgent data or security concerns.
• Email: [email protected] — privacy and data rights requests receive a response within 5 business days.

When submitting a rights request by email, please include your registered account username and a description of your request so that we can locate your records and respond efficiently. We may need to verify your identity before processing certain requests.