Privacy Policy mratm8 – Protecting Your Personal Data

1Introduction & Scope of the mratm8 Privacy Policy

Mratm8 ("we", "Platform", "mratm8") is the data controller responsible for the personal information you provide when using our Sports Betting and casino platform at mratm8.best and the mratm8 mobile app. This Privacy Policy transparently explains how we handle your personal data from the moment you first visit our site through to the period after your account is closed.

This Privacy Policy applies to all registered mratm8 members, unregistered website visitors, and any individual who interacts with mratm8 through our communication channels, including email, live chat, and WhatsApp. We take our responsibilities as a data controller seriously and operate in accordance with globally accepted data protection principles.

For mratm8, privacy is more than a legal document — it is a core value that reflects our respect for every member who trusts us with their personal information. We believe trust is built through transparency, and transparency starts with being honest about what we do with your data.

2Types of Personal Data Collected by mratm8

Mratm8 collects several categories of personal data depending on how you interact with our platform. Below is a full breakdown of the data we collect and the purposes it serves:

The data you provide during registration and KYC verification is mandatory for full access to the mratm8 platform. Failure to provide the required data may limit your ability to use certain services or cause delays in the processing of financial transactions.

3How mratm8 Uses Your Personal Data

Mratm8 uses the personal data collected for lawful and specific purposes only. We do not use your data for purposes you would not reasonably expect or that are unrelated to the services you use. Below is a detailed breakdown of how your data is used:

• Service Provision: Creating and managing your account, processing deposits and withdrawals via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX, and enabling access to all mratm8 platform features.
• Identity Verification (KYC): Verifying that you are a legitimate individual aged 18 or above and that the information you provide is accurate — this is an unavoidable operational requirement for a licensed betting platform.
• Security & Fraud Prevention: Monitoring account activity to detect any signs of unauthorised access, payment fraud, or money laundering attempts.
• Legal Compliance: Meeting the reporting and record-keeping obligations required by the relevant regulatory bodies and law enforcement authorities.
• Customer Support: Enabling mratm8's Malay-speaking support team to effectively resolve inquiries, technical issues, and disputes.
• Platform Improvements: Analyzing usage patterns in aggregate (not at the individual level) to improve mratm8's platform design, speed, and features.
• Service Communications: Sending important notifications related to your account, security, terms updates, and promotional information you have consented to receive.

4mratm8 Data Storage & Security

Mratm8 employs a multi-layered security infrastructure to ensure your personal data is always protected against unauthorised access, loss, destruction, or accidental disclosure. The key security measures we have in place are:

• Data Encryption in Transit: All data transmitted between your device and mratm8's servers is protected with TLS 1.3 protocol and 256-bit SSL encryption.
• Encryption of Data at Rest: Sensitive data stored in mratm8's databases is encrypted using the AES-256 algorithm, which is the industry standard for data security.
• Role-Based Access Control: Only staff with verified operational needs can access specific data categories. Every access is automatically logged for audit purposes.
• Regular Security Audits: mratm8 conducts internal security audits every quarter and independent third-party audits at least once a year.
• Intrusion Detection: An active 24/7 monitoring system that detects and blocks any unauthorised access attempts to mratm8's infrastructure.
• Two-Factor Authentication (2FA): Available to all mratm8 member accounts as an additional security layer to protect access to your account.

Mratm8 member data is stored in physically secured data centres with biometric access controls, redundant cooling systems, and power backup to ensure continuous availability. All infrastructure providers we work with are bound by strict data protection agreements.

5Data Sharing with Third Parties

Mratm8 does not sell, rent, or trade members' personal data to any third party for marketing or commercial purposes. However, in the course of operating the platform, we may share your personal data with a limited and specific set of third parties in the following circumstances:

• Payment Processors: Data required to process deposits and withdrawals via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX is shared solely with the relevant payment service providers for the purpose of processing those transactions.
• Game Service Providers: Minimal game session information may be shared with the casino game software providers we use for technical and RNG compliance purposes.
• Identity Verification Service Providers: Identity document data may be shared with licensed and registered third-party KYC services to verify the authenticity of the documents you submit.
• Legal Authorities: mratm8 will disclose personal data to the relevant authorities when required by law, court order, or a valid official investigation.
• Professional Advisors: mratm8's legal counsel, auditors, and financial advisors may access certain personal data within the bounds of strict confidentiality agreements for legitimate business purposes.

All third parties that receive mratm8 member personal data are bound by data processing agreements that require them to protect that data to a security standard at least equivalent to our own, and prohibit them from using it for any purpose other than those explicitly stated.

6Cookies & Tracking Technologies on the mratm8 Platform

Mratm8 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored in your web browser when you visit mratm8.best. The following are the categories of cookies we use:

• Essential Cookies: Required for core mratm8 platform functions such as login, active betting sessions, and account security. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collecting statistical information on how users interact with the mratm8 platform — this data is used in aggregate form to improve platform speed and usability.
• Functional Cookies: Saving your preferences such as display language, odds display settings, and sports market selections so you don't have to reconfigure them every time you log in.
• Analytics Cookies: Helping us understand which pages are visited most frequently and where users encounter difficulties, enabling us to make meaningful improvements.

You can control and manage cookies through your web browser settings. Please note that disabling certain cookies may affect the functionality of the mratm8 platform. For more information on managing cookies, refer to your web browser's help documentation.

7Your Rights as the Owner of Your Personal Data

As a mratm8 member, you have the following rights regarding the personal data we hold about you. All requests will be processed within 30 business days upon verification of your identity:

8Children's Data & Minor User Protection

The mratm8 platform is strictly for individuals aged 18 and above. We do not knowingly collect, store, or process personal data of individuals under 18. If you are a parent or guardian who believes your child has registered an account on mratm8, please contact us immediately at support@mratm8.best so we can investigate, close the account, and delete all related data as promptly as possible.

Mratm8 applies strict age verification procedures during the registration process and throughout the more detailed KYC process. However, we rely on users to honestly declare their actual age. If an underage registration is detected, the account will be closed immediately, all associated data deleted, and, where applicable, the matter reported to the appropriate authorities.

9Cross-Border Data Transfers

In the course of operating the mratm8 platform, your personal data may be transferred to and stored on servers located outside Malaysia. These cross-border data transfers may occur when we use cloud infrastructure services, international payment service providers, or gaming software providers operating from different locations.

In all cases of cross-border data transfers, mratm8 ensures adequate protection through recognised mechanisms — including data processing agreements containing standard data protection clauses — to ensure that data recipients in the destination country provide a level of data protection at least equivalent to what we provide in Malaysia.

10Personal Data Retention Periods

Mratm8 retains your personal data only for as long as necessary for the purposes stated in this Privacy Policy, or for as long as required by applicable legal obligations. General retention period guidelines are as follows:

• Active Account Data: Retained for the duration your mratm8 account remains active, plus a 5-year period following account closure to meet anti-money laundering compliance requirements.
• Financial Transaction Records: Retained for a minimum of 7 years following each transaction, in line with internationally recognised financial compliance requirements.
• Support Communication Records: Retained for 3 years after a support ticket is closed, for dispute resolution and service improvement purposes.
• Cookie & Technical Data: Session data and temporary cookies are automatically deleted when a session ends. Functional cookies expire according to their set duration (typically 30 days to 1 year).
• KYC Documents: Retained for 5 years following account closure, or longer if required by regulators.

Once the specified retention period has elapsed, your personal data will be securely deleted or fully anonymised so that it can no longer be linked to your identity. The deletion process uses methods that ensure data cannot be recovered.

11Amendments to the mratm8 Privacy Policy

Mratm8 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or changes to the services we offer. Any material amendments will be communicated to you via your registered email or an in-platform notification on mratm8 at least 14 days before the changes take effect.

Non-material amendments (such as spelling corrections, language clarifications, or the addition of explanatory information that does not change how we process your data) may be implemented without prior notice but will be reflected through an updated "Last Updated" date at the top of this document.

We encourage you to review this Privacy Policy periodically so you remain informed about how mratm8 handles your personal data. Continued use of the mratm8 platform after any amendment takes effect constitutes implied acceptance of the updated policy.

12Contact the mratm8 Data Protection Officer

If you have any questions, concerns, or complaints regarding how mratm8 handles your personal data, you can reach us through the following channels:

• Email: support@mratm8.best — for written inquiries and formal data rights requests. Use the subject line "Data Privacy Inquiry – [Full Name]" for a faster response.
• Live Chat: Available 24 hours a day, 7 days a week via the chat icon within the mratm8 platform — for general privacy-related inquiries.
• WhatsApp: For urgent queries requiring verbal clarification — the number is available after logging in to your mratm8 account.

Mratm8's Malay-speaking support team, well-versed in data privacy matters, is available to assist you at any time. Our target response time for privacy-related enquiries is under 48 hours for email and under 15 minutes for live chat.