Privacy Policy — MRT88

This Privacy Policy ("Policy") issued by MRT88 ("the Company", "we", "us", "our"), operator of the online gaming platform accessible at mrt88.cam ("the Platform"). This Policy governs how we collect, receive, hold, use, store, transfer, disclose, and otherwise process the personal data of all individuals ("you", "your", "the Member") who interact with the Platform or our support channels.

We are committed to handling personal data responsibly, transparently, and in full accordance with applicable data protection and privacy laws, including the Personal Data Protection Act 2010 (PDPA) of Malaysia and any other applicable regulations where they apply to our operations.

By accessing the mrt88 Platform, creating an account, or submitting personal information to us in any context, you confirm that you have read and understood this Policy and consent to the data processing practices described herein. If you do not agree with any aspect of this Policy, please do not use the Platform.

For the purposes of this Policy, the following terms have the meanings set out below:

mrt88 collects personal data through several channels and in several categories. The following table outlines the categories of data we collect, the circumstances in which collection occurs, and indicative examples:

We do not intentionally collect special categories of sensitive personal data (such as health information, racial or ethnic origin, religious beliefs, or biometric data) unless strictly required for legal compliance purposes, in which case explicit consent will be sought.

mrt88 processes personal data only where a valid legal basis exists. The primary legal bases on which we rely are as follows:

• Contractual Necessity: Processing required to perform our contract with you, including account management, processing deposits and withdrawals in MYR, and delivering gaming services.
• Legal Obligation: Processing required to comply with applicable laws — including KYC identity verification, anti-money laundering (AML) obligations, and regulatory reporting requirements.
• Legitimate Interests: Processing necessary for mrt88's legitimate business interests, including fraud prevention, platform security, responsible gambling monitoring, and service improvement, provided these interests are not overridden by your fundamental rights and freedoms.
• Consent: Where we rely on consent as the legal basis — for example, for marketing communications or optional profiling features — we will obtain your explicit, informed agreement. You may withdraw consent at any time without affecting the lawfulness of prior processing.

mrt88 uses the personal data we collect for the following purposes:

1. Account Management: Creating and maintaining your member account, verifying your identity, and managing your login credentials and account preferences.
2. Payment Processing: Processing deposits and withdrawals via approved payment channels including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, Visa, Mastercard, BTC, and USDT.
3. Service Delivery: Providing access to casino games, sportsbook markets (including Liga Super Malaysia, EPL, UFC, and other events), live dealer tables, and all other Platform features.
4. Regulatory Compliance: Fulfilling KYC verification requirements, AML monitoring obligations, age verification (21+ requirement), and any regulatory reporting duties under applicable law.
5. Fraud Prevention and Security: Detecting, investigating, and preventing fraudulent activity, unauthorised access, money laundering, and other prohibited conduct.
6. Responsible Gambling: Monitoring gaming patterns to identify potential problem gambling behaviour and applying responsible gaming tools including deposit limits, self-exclusion, and session reminders where appropriate.
7. Customer Support: Responding to enquiries, resolving disputes, processing complaints, and maintaining records of support interactions.
8. Platform Improvement: Analysing aggregated usage data to improve Platform performance, user experience, and game offerings.
9. Marketing Communications: Sending promotional communications where you have given explicit consent. You may opt out at any time via account settings or by contacting support.

mrt88 does not sell your personal data. We share personal data only in the following limited circumstances, and only to the extent strictly necessary:

• Payment Processors: Financial data is shared with licensed payment service providers (including e-wallet operators and banking partners) solely to facilitate transaction processing. These providers are contractually bound to process data only as instructed by mrt88.
• KYC and Identity Verification Providers: Identity documents are shared with authorised third-party KYC verification specialists to confirm your identity and age in compliance with our legal obligations.
• Regulatory and Law Enforcement Authorities: We may disclose personal data to relevant governmental or regulatory bodies, law enforcement agencies, or courts where required by applicable law, court order, or regulatory direction — including AML reporting obligations.
• Group Companies: Personal data may be shared within the mrt88 corporate group for internal administrative purposes and consolidated risk management, subject to equivalent data protection standards.
• Professional Advisers: Lawyers, auditors, insurers, and other professional advisers acting under duties of confidentiality may receive limited personal data where necessary for the provision of professional services.
• Business Transfers: In the event of a merger, acquisition, or sale of the business or its assets, personal data may be transferred to the relevant party as part of that transaction, subject to equivalent privacy protections.

The mrt88 Platform uses cookies and similar tracking technologies to enhance your user experience, ensure Platform security, and gather analytics data. The categories of cookies we use are as follows:

You may configure your browser settings to block or delete cookies; however, disabling strictly necessary cookies may impair Platform functionality including login capability and session security. Analytics and functional cookies may be declined without affecting core Platform access.

mrt88 retains personal data for no longer than is necessary for the purposes for which it was collected, unless a longer retention period is required or permitted by applicable law. Our standard retention schedules are as follows:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in manner that prevents recovery. Where anonymisation is applied, the resulting anonymised data set is no longer subject to this Policy.

mrt88 implements a comprehensive, multi-layered security framework to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. Our technical and organisational security measures include:

• Transport Layer Security: All data transmitted between your device and our servers is encrypted using TLS 1.2 or higher.
• Encryption at Rest: Sensitive stored data — including KYC documents, financial records, and authentication credentials — is encrypted using AES-256 or equivalent standards.
• Access Controls: Access to systems containing personal data is restricted to authorised personnel on a strict need-to-know basis, enforced through role-based access control (RBAC) and multi-factor authentication (MFA).
• Regular Security Audits: We conduct periodic internal audits and external penetration tests to identify and remediate vulnerabilities in our data infrastructure.
• Incident Response: We maintain a documented data breach response procedure. In the event of a breach affecting your personal data, we will notify you and the relevant regulatory authority within the timeframes required by applicable law.
• Staff Training: All personnel with access to personal data receive regular data protection and information security training.

While we take all reasonable precautions, no method of electronic transmission or storage is 100% secure. We therefore cannot guarantee absolute security; however, we are committed to continuously improving our security posture and responding promptly to any identified threats.

Subject to applicable data protection law, you have the following rights with respect to your personal data held by mrt88:

To exercise any of these rights, please contact our Data Protection team at [email protected] (plain text — not a clickable link). We will acknowledge your request within 5 business days and respond substantively within 30 calendar days. In complex cases, we may extend this period by a further 30 days with notice.

The mrt88 Platform is strictly intended for use by adults aged21 years and above. We do not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory component of our registration and KYC process.

If we become aware that personal data has been collected from an individual under the age of 21 without appropriate parental or guardian consent, we will take immediate steps to delete that data and close the associated account. If you have reason to believe that a minor may have accessed the Platform, please contact our support team at [email protected] immediately.

The mrt88 Platform may incorporate or interface with third-party services — including payment processors, identity verification providers, gaming content providers, and analytics tools. These third parties operate under their own privacy policies, which are separate from and independent of this Policy.

mrt88 conducts due diligence on all third-party data processors to ensure they maintain data protection standards consistent with our own obligations. All third-party processors are required to enter into data processing agreements with mrt88 stipulating that they process personal data only on our documented instructions and in accordance with applicable data protection law.

mrt88 is not responsible for the data practices of independent third-party services that may be accessible from our Platform. We encourage you to review the privacy policies of any third-party services you interact with independently of mrt88.

mrt88 operates an international platform and may, in the course of providing its services, transfer personal data to servers, processors, or business partners located outside of Malaysia. Where such transfers occur, we take appropriate steps to ensure that the transferred data receives a level of protection consistent with this Policy and applicable Malaysian data protection law, including the use of:

• Standard contractual clauses recognised under applicable data protection frameworks;
• Transfer to jurisdictions with an equivalent level of data protection as determined by relevant authorities; or
• Other appropriate safeguards as required by the Personal Data Protection Act 2010 or its successor legislation.

Players based in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and other Malaysian cities may request details of the specific safeguards applied to any cross-border transfers by contacting our Data Protection team.

mrt88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, regulatory guidance, or Platform features. The "Last Updated" date at the top of this page will be revised whenever material changes are made.

Where changes are material — meaning they significantly alter your rights or our obligations with respect to your personal data — we will notify you via your registered email address or through a prominent notice within the Platform prior to the changes taking effect.

Your continued use of the mrt88 Platform following the effective date of any revised Policy constitutes your acceptance of the updated terms. If you do not agree with any amendments, you must discontinue use of the Platform and may request account closure.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by mrt88, please contact our Data Protection team using the details below. We are available24 hours a day, 7 days a week.

For responsible gambling concerns, self-exclusion requests, or player protection matters, please visit our dedicatedResponsible Gambling page. For full terms governing your use of the Platform, please review our Terms & Conditions.