mario88 Privacy Policy

This Privacy Policy ("Policy") is published by mario88 ("mario88", "we", "us", "our") and applies to all personal data collected through the mario88 website at mario88.club and any related services, applications, or communications channels operated by mario88 (collectively, the "Platform").

mario88 is committed to protecting the personal data of its members and website visitors in accordance with applicable data protection law. This Policy describes what data we collect, why we collect it, how we use it, with whom we may share it, and the rights you hold in relation to your data.

By accessing the Platform or registering a mario88 account, you acknowledge that you have read and understood this Policy and agree to the data practices described herein. If you do not agree with any part of this Policy, you should not use the Platform.

This Policy is intended to be read alongside mario88's Terms & Conditions, which govern your use of the Platform generally.

mario88 collects personal data in the following categories, depending on how you interact with the Platform:

2.1 Account & Registration Data

When you register a mario88 account, we collect your full legal name, date of birth, email address, username, password (stored in encrypted form), and contact number. This data is necessary to create and maintain your account and verify your eligibility to use the Platform.

2.2 Identity Verification (KYC) Data

To comply with anti-money laundering obligations and responsible gaming requirements, mario88 may request identity verification documents. These may include a copy of your national identity card (MyKad) or passport, proof of residential address (such as a utility bill or bank statement), and proof of payment method. KYC documents are stored securely and accessed only by authorised personnel for the purpose of verification.

2.3 Financial Transaction Data

mario88 collects records of your deposit and withdrawal transactions, including amounts, dates, payment methods, and transaction reference numbers. For eWallet transactions (Touch n Go eWallet, Boost), we store the masked account identifier. For bank transfers, we store the masked account number and bank name. Full payment account numbers are not retained by mario88.

2.4 Gaming Activity Data

mario88 records your gaming activity on the Platform, including games played, bet amounts, win and loss records, session durations, and account balance history. This data is used for account management, responsible gaming monitoring, dispute resolution, and regulatory compliance.

2.5 Technical & Device Data

When you access the Platform, mario88 automatically collects technical data including your IP address, browser type and version, device type, operating system, referring URL, session timestamps, and pages visited. This data is used for security monitoring, fraud detection, platform improvement, and analytics.

2.6 Communications Data

If you contact mario88 customer support via email or live chat, we retain records of those communications including the content of messages and any attachments. These records are used to resolve your enquiry, train support staff, and improve service quality.

2.7 Voluntarily Provided Data

mario88 may collect additional information that you voluntarily provide through surveys, feedback forms, or promotional participation. Participation in such activities is always optional.

mario88 uses the personal data it collects for the following purposes:

• Account Management: Creating and maintaining your mario88 account, processing login requests, and providing access to Platform services;
• Service Delivery: Processing deposits and withdrawals, recording gaming activity, settling wagers, and awarding bonuses in accordance with applicable terms;
• Identity Verification: Conducting KYC checks to verify member identities, confirm age eligibility, and comply with anti-money laundering requirements;
• Security & Fraud Prevention: Monitoring account activity and transaction patterns to detect and prevent fraud, account takeover, money laundering, and other prohibited conduct;
• Responsible Gaming: Monitoring gaming behaviour to identify indicators of problem gambling and to enforce responsible gaming tools including deposit limits, session limits, and self-exclusion;
• Regulatory Compliance: Fulfilling reporting obligations under applicable gaming authority licensing requirements and anti-money laundering legislation;
• Customer Support: Responding to enquiries, resolving disputes, and improving the quality of support interactions;
• Platform Improvement: Analysing usage patterns to improve the Platform's features, performance, and user experience;
• Communications: Sending account-related notifications, security alerts, and service updates. Marketing communications will only be sent where you have opted in to receive them and may be withdrawn at any time.

mario88 processes your personal data on the following legal bases:

• Contract Performance: Processing necessary to fulfil our contractual obligations to you as a mario88 member — including account management, transaction processing, and gaming service delivery;
• Legal Obligation: Processing required to comply with applicable anti-money laundering legislation, gaming authority licensing requirements, and other applicable law;
• Legitimate Interests: Processing carried out for mario88's legitimate business interests, including fraud prevention, platform security, and service improvement, where those interests are not overridden by your privacy rights;
• Consent: Processing based on your explicit consent, such as the sending of marketing communications. Where consent is the legal basis, you may withdraw it at any time without affecting the lawfulness of prior processing.

mario88 uses cookies and similar tracking technologies on the Platform. Cookies are small text files placed on your device that help the Platform function correctly and enable us to analyse usage patterns.

Types of Cookies Used

• Strictly Necessary Cookies: Required for the Platform to function — including session management, login state, and security tokens. These cannot be disabled without impairing Platform functionality.
• Performance Cookies: Collect anonymised data about how visitors use the Platform — pages visited, time spent, error messages — to help mario88 improve Platform performance.
• Functional Cookies: Remember your preferences, such as language settings and game lobby configuration, to provide a more personalised experience.
• Analytics Cookies: Used to understand aggregate usage patterns and Platform performance. Data collected is anonymised and aggregated.

You may manage cookie preferences through your browser settings. Blocking strictly necessary cookies will impair your ability to use the Platform. For all other cookie types, you may opt out through your browser or by contacting mario88 support.

mario88 does not sell, rent, or trade your personal data to third parties for commercial purposes. Personal data may be disclosed to the following categories of recipients in the circumstances described:

• Service Providers: mario88 engages third-party service providers to support Platform operations — including payment processors, identity verification services, fraud detection vendors, and infrastructure providers. These providers process data only on mario88's instructions and are contractually bound to maintain appropriate security standards.
• Gaming Authority & Regulators: mario88 may be required to disclose member data to its licensing authority or other regulatory bodies as part of licence compliance obligations, audits, or regulatory investigations.
• Law Enforcement & Legal Proceedings: mario88 will disclose personal data to law enforcement agencies, courts, or other public authorities where required by applicable law, legal process, or where necessary to protect the rights, safety, or property of mario88 or third parties.
• Anti-Fraud & AML Networks: mario88 may share data with industry anti-fraud and anti-money laundering networks or databases to identify and prevent prohibited conduct. Such sharing is conducted in accordance with applicable law.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of mario88's business, member personal data may be transferred to the acquiring entity as part of the transaction, subject to equivalent privacy protections.

mario88's Platform is operated with infrastructure that may be located in jurisdictions outside Malaysia. Where personal data is transferred to servers or service providers located outside your jurisdiction, mario88 ensures that appropriate safeguards are in place — including contractual data protection clauses, adequacy decisions, or equivalent protections — to maintain the same standard of data protection as described in this Policy.

mario88 reviews the data protection standards of third-party service providers and infrastructure partners before engaging them and requires contractual data protection commitments from all processors who handle member personal data.

mario88 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, and for as long as required by applicable legal or regulatory obligations. The following general retention principles apply:

• Account Data: Retained for the duration of the active account and for a period following account closure as required by applicable anti-money laundering and gaming authority record-keeping obligations (typically five to seven years).
• Transaction Records: Retained for the period required by applicable financial record-keeping legislation, which is typically no less than five years from the date of the transaction.
• KYC Documents: Retained in accordance with anti-money laundering legislation requirements, which may extend beyond account closure.
• Communications Records: Support communications are typically retained for three years from the date of the interaction unless a longer period is required for ongoing dispute resolution or legal proceedings.
• Technical & Device Data: Retained for security and fraud prevention purposes for a period not exceeding two years from collection, unless longer retention is required in connection with a specific investigation.

When data is no longer required, mario88 will securely delete or anonymise it in accordance with its data lifecycle management procedures.

Subject to applicable law, you hold the following rights in relation to the personal data mario88 holds about you. To exercise any of these rights, contact mario88 at [email protected]. mario88 will respond to verified requests within a reasonable timeframe, typically within 30 days.

• Right of Access: You may request a copy of the personal data mario88 holds about you, together with information about how that data is processed.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data. Where correction affects data used for regulatory purposes, verification may be required.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to mario88's legal retention obligations. Note that certain data may need to be retained notwithstanding a deletion request where legal obligations require.
• Right to Restrict Processing: You may request that mario88 restrict processing of your personal data in certain circumstances — for example, while the accuracy of data is being verified.
• Right to Object: You may object to processing based on legitimate interests. mario88 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.
• Right to Data Portability: Where processing is based on contract or consent and is carried out by automated means, you may request a copy of your data in a commonly used machine-readable format.

mario88 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the Platform;
• Encryption at rest for sensitive stored data including passwords and payment identifiers;
• Access controls restricting personal data access to authorised personnel on a need-to-know basis;
• Regular security assessments and vulnerability testing;
• Intrusion detection systems and real-time security monitoring;
• Two-factor authentication options for member accounts.

While mario88 takes all reasonable measures to protect your data, no internet-based platform can guarantee absolute security. You are responsible for maintaining the security of your own account credentials. mario88 will notify affected members of any data breach that poses a material risk to their rights and freedoms, as required by applicable law.

mario88 is strictly intended for individuals aged 21 and above. mario88 does not knowingly collect personal data from individuals under 21 years of age. Where mario88 discovers that an account has been created by an individual under 21, the account will be immediately closed, any balance will be reviewed in accordance with applicable responsible gaming and AML procedures, and any personal data collected will be deleted or anonymised as permitted by law.

If you believe that mario88 has inadvertently collected personal data from an individual under 21, please contact us immediately at [email protected] so that appropriate action can be taken.

mario88 reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, Platform operations, or data processing practices. The date of the most recent revision is displayed at the top of this document.

Where changes are material, mario88 will notify registered members by email or by prominent notice on the Platform prior to the changes taking effect. Your continued use of the Platform following notification of a policy update constitutes your acceptance of the revised Policy.

mario88 recommends that members review this Policy periodically to remain informed of any updates.

If you have any questions, concerns, or requests relating to this Privacy Policy or mario88's data processing practices, please contact us through the following channel:

Data & Privacy Enquiries:
[email protected]

Website:
mario88.club

mario88 aims to acknowledge all privacy-related enquiries within 48 hours and to provide a substantive response within 30 days. Complex requests — such as subject access requests involving large volumes of data — may take longer, in which case mario88 will provide an estimated timeline.

This Privacy Policy was last reviewed and updated on 11 June 2026.