mario888 Privacy Policy

1. Data Controller Information

mario888.club is the data controller responsible for the personal data processed under this Policy. mario888 determines the purposes and means by which personal data is processed in connection with the Platform. For privacy-related queries, please contact our support team via the live chat available within the mario888 Platform, or by email at [email protected].

2. Personal Data We Collect

mario888 collects the following categories of personal data, depending on how you interact with the Platform:

2.1 Registration and Identity Data:

• Full legal name as it appears on your identity document;
• Date of birth (for age verification — players must be 21 or older);
• Gender (where provided voluntarily);
• Nationality and country of residence;
• Government-issued identity document number (Malaysian MyKad, passport, or equivalent);
• Copies of identity documents submitted during KYC verification.

2.2 Contact Data:

• Email address;
• Mobile telephone number;
• Residential address (for KYC and correspondence purposes).

2.3 Financial Data:

• Payment method details (e-wallet account identifiers, bank account numbers used for withdrawals — stored only as necessary for transaction processing);
• Deposit and withdrawal transaction history;
• Account balance records.

2.4 Platform Usage Data:

• Login timestamps and session durations;
• Games played, bets placed, and outcomes;
• Bonus uptake and wagering history;
• Customer support communication records.

2.5 Technical Data:

• IP address and approximate geolocation (country/city level);
• Device type, operating system, and browser version;
• Cookie identifiers and session tokens.

3. How We Collect Your Data

mario888 collects personal data through the following means:

• Directly from you: when you register an account, complete KYC, make a deposit or withdrawal, contact customer support, or participate in a promotion;
• Automatically: through cookies, server logs, and analytics tools when you navigate the mario888 Platform;
• From third parties: from payment processors (such as Touch n Go eWallet, Boost, or banking partners) during transaction processing; and from identity verification service providers used in our KYC process.

4. Purposes and Legal Bases for Processing

mario888 processes personal data for the following purposes and on the following legal bases:

• Account creation and management — necessary for the performance of our contract with you as a registered Player;
• Age and identity verification (KYC) — necessary for compliance with our legal and regulatory obligations, and to protect the Platform from underage access;
• Processing deposits and withdrawals — necessary for the performance of our contract with you;
• Fraud prevention and security monitoring — necessary for our legitimate interests in protecting the integrity of mario888 and its players from fraudulent activity;
• Customer support communications — necessary for the performance of our contract and our legitimate interest in providing player support;
• Responsible gaming compliance — necessary for compliance with responsible gaming obligations and in the legitimate interests of protecting vulnerable players;
• Marketing communications — only where you have provided explicit consent, which may be withdrawn at any time via your account settings or by contacting support;
• Platform analytics and improvement — based on our legitimate interest in maintaining and improving the mario888 Platform experience.

5. Sharing and Disclosure of Personal Data

5.1 mario888 does not sell, rent, or trade personal data to third-party advertisers or data brokers.

5.2 We may share your personal data with the following categories of third parties, strictly to the extent necessary for the stated purpose:

• Payment service providers (e.g. Touch n Go eWallet, Boost, GrabPay, Malaysian banks, USDT payment processors) — for processing deposits and withdrawals;
• Identity verification providers — for conducting KYC checks on our behalf;
• Game providers (e.g. Pragmatic Play, PG Soft, Evolution Gaming) — who may receive anonymised session identifiers necessary to deliver their games via the mario888 Platform;
• IT infrastructure and hosting providers — who process data on mario888's behalf under data processing agreements;
• Legal and regulatory authorities — where mario888 is required by law, court order, or regulatory direction to disclose information;
• Professional advisors — including lawyers, auditors, and compliance consultants, under obligations of confidentiality.

5.3 All third-party service providers who handle personal data on behalf of mario888 are subject to contractual data protection obligations consistent with the standards set out in this Policy.

6. International Data Transfers

6.1 mario888 operates with infrastructure and service providers that may be located outside Malaysia. Personal data may therefore be transferred to, stored, and processed in countries other than Malaysia.

6.2 Where personal data is transferred internationally, mario888 ensures that appropriate safeguards are in place, including contractual data protection clauses with receiving parties, to ensure that the transferred data continues to receive an adequate level of protection consistent with this Policy.

7. Data Retention

7.1 mario888 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention period required or permitted by applicable law.

7.2 As a general guide:

• Account and identity data is retained for the duration of the account relationship and for a minimum of five (5) years following account closure, to meet anti-money laundering and compliance record-keeping obligations;
• Transaction records are retained for a minimum of five (5) years following each transaction;
• Customer support records are retained for two (2) years following resolution of the query;
• Marketing consent records are retained until consent is withdrawn, plus a reasonable period thereafter for audit purposes.

7.3 Upon expiry of the applicable retention period, personal data is securely deleted or anonymised.

8. Cookies and Tracking Technologies

8.1 mario888 uses cookies and similar technologies (including local storage and session tokens) to operate the Platform, maintain your login session, and gather aggregated analytics data on Platform usage patterns.

8.2 The categories of cookies used on mario888 are:

• Strictly necessary cookies: essential for Platform functionality, including authentication and security tokens — these cannot be disabled;
• Functional cookies: remember your preferences (such as language settings and game lobby layout);
• Analytics cookies: collect aggregated, anonymised data on how players navigate and use the Platform, used solely by mario888 for internal improvement purposes.

8.3 mario888 does not use third-party behavioural advertising cookies or cross-site tracking technologies.

8.4 You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies may prevent the Platform from functioning correctly.

9. Your Data Rights

9.1 Subject to applicable law, you have the following rights in respect of your personal data held by mario888:

• Right of access: to request a copy of the personal data mario888 holds about you;
• Right to rectification: to request correction of inaccurate or incomplete personal data;
• Right to erasure: to request deletion of your personal data, subject to legal retention obligations that may require mario888 to retain certain data;
• Right to restriction: to request that mario888 restricts the processing of your data in certain circumstances;
• Right to data portability: to receive your personal data in a structured, commonly used, machine-readable format, where processing is based on consent or contract;
• Right to withdraw consent: where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing;
• Right to object: to object to processing based on legitimate interests, including processing for direct marketing.

9.2 To exercise any of these rights, please contact mario888 customer support via live chat within the Platform or by email at [email protected]. mario888 will respond to all rights requests within a reasonable timeframe and in any event within 30 days of receipt.

9.3 mario888 may need to verify your identity before processing a data rights request to ensure we do not disclose personal data to an unauthorised person.

10. Children's Privacy

10.1 mario888 is strictly an adult platform. We do not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step during the registration process.

10.2 If mario888 becomes aware that personal data has been collected from a person under the age of 21, the associated account will be closed immediately and all collected data will be deleted, except where retention is required for legal compliance or fraud investigation purposes.

11. Security Measures

11.1 mario888 implements technical and organisational security measures designed to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and mario888 servers;
• Encryption of sensitive data at rest, including identity documents and financial records;
• Role-based access controls limiting staff access to personal data on a need-to-know basis;
• Regular security audits and vulnerability assessments of Platform infrastructure;
• Multi-factor authentication requirements for all staff with access to player data systems.

11.2 Notwithstanding the above, no security system is impenetrable. mario888 cannot guarantee absolute security and encourages Players to use strong, unique passwords for their mario888 account and to enable any additional security features available within account settings.

12. Changes to This Policy

12.1 mario888 may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. Material changes will be communicated to registered Players by email or via a notice on the Platform at least 14 days before the change takes effect, where practicable.

12.2 Your continued use of mario888 following any update to this Policy constitutes your acknowledgment of the updated terms. If you do not agree with any changes, you should cease use of the Platform and contact support to close your account.

13. Contact Us

For questions, concerns, or requests relating to this Privacy Policy or mario888's data practices, please contact us:

• Live Chat: Available 24/7 within the mario888 Platform
• Email: [email protected]

This Privacy Policy was last reviewed and updated on 1 June 2026.