Privacy Policy

Section 1

Introduction

mrtm88 ("We", "Us", "Our", "the Company") operates the online gaming and sports betting platform accessible at https://mrtm88.cam ("Platform"). This Privacy Policy ("Policy") describes how mrtm88 collects, processes, stores, and protects personal data in connection with your use of the Platform and any related services.

This Policy applies to all registered users ("User", "You", "Your") of the mrtm88 Platform, including players who reside in Malaysia and access the Platform from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and elsewhere across the country. It also applies to visitors who browse the Platform without registering an account.

By accessing or using the Platform in any capacity, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you must discontinue use of the Platform immediately.

                
                Our Core Privacy Commitment: mrtm88 does not sell, rent, or trade your personal data to third parties for their independent marketing purposes. Your information is used only to operate the Platform, process transactions, comply with legal obligations, and improve your experience as an mrtm88 player.
              

This Policy should be read alongside our Terms & Conditions and our Responsible Gambling Policy, both of which form part of the binding agreement between you and mrtm88.

Section 2

Definitions

The following defined terms are used throughout this Privacy Policy:

Term	Definition
Personal Data	Any information that identifies or could reasonably be used to identify a natural person, directly or indirectly, including name, email address, device identifiers, payment details, and account activity records.
Processing	Any operation performed on personal data, including collection, storage, organisation, structuring, use, disclosure, transmission, erasure, or destruction.
Data Controller	mrtm88, as the entity that determines the purposes and means by which personal data is processed in connection with the Platform.
Data Processor	A third-party service provider engaged by mrtm88 to process personal data on its behalf, subject to contractual data processing obligations.
Consent	A freely given, specific, informed, and unambiguous indication of your agreement to the processing of your personal data for a stated purpose.
Cookies	Small text files stored on your device by your web browser when you visit the Platform, used to enable or improve the functionality of the Service.
KYC Data	Identity and age-verification documents submitted as part of the Know Your Customer process, including government-issued photo identification and proof of address.

Section 3

Personal Data We Collect

mrtm88 collects personal data through several channels: information you provide directly when registering or updating your account, information generated automatically through your use of the Platform, and information received from third-party payment processors and identity verification services. The categories of data collected include the following:

3.1 Registration and Account Data

Full legal name and date of birth;
Residential address (including city and postcode — relevant for Malaysian users in KL, Penang, JB, PJ, and elsewhere);
Email address and, where provided, mobile phone number;
Username and encrypted password credentials;
Nationality and country of residence.

3.2 KYC and Verification Data

Government-issued photo identification (e.g., Malaysian National Identity Card (MyKAD), passport, or driving licence);
Proof of residential address (utility bill, bank statement, or equivalent);
Proof of payment method ownership where required;
Selfie or liveness-check images for biometric verification where applicable.

3.3 Financial and Transaction Data

Deposit and withdrawal transaction records, including amounts (denominated in MYR), timestamps, and payment reference numbers;
Payment method type (e.g., Touch 'n Go eWallet, Boost, GrabPay, Maybank FPX, CIMB, Public Bank, DuitNow, USDT TRC20);
Masked payment identifiers (we do not store full card numbers or full e-wallet credentials);
Bonus credits received, wagering activity, and balance history.

3.4 Technical and Usage Data

IP address, device type, operating system, and browser version;
Session duration, page views, and navigation patterns on the Platform;
Geolocation data (country-level) derived from IP address;
Login timestamps and account access logs;
Error logs and crash reports for technical troubleshooting.

3.5 Communication Data

Content of live chat transcripts and email correspondence with the mrtm88 support team;
Survey responses, feedback submissions, and promotional communications opt-in status.

mrtm88 applies a principle of data minimisation: we collect only the personal data necessary for the specific purpose identified at the point of collection. We do not collect sensitive categories of data (such as health information or political opinions) unless strictly required by legal obligations.

Section 4

How We Process Your Data

mrtm88 processes your personal data for the following specific purposes. Each purpose is matched to its lawful basis in Section 5 below.

Purpose of Processing	Data Categories Used
Account creation and management	Registration data, contact details, KYC data
Processing deposits and withdrawals	Financial data, KYC data, account data
Age and identity verification (KYC)	KYC documents, biometric data where applicable
Fraud prevention and anti-money laundering compliance	All categories of data listed in Section 3
Delivering customer support	Account data, communication data, transaction data
Personalising your gaming experience	Usage data, account data, transaction history
Sending promotional communications (with consent)	Contact details, account preferences
Platform security and technical maintenance	Technical and usage data, login logs
Responsible gambling monitoring and intervention	Transaction data, usage data, account data
Legal and regulatory compliance	All categories as required by applicable law

Section 5

Legal Basis for Processing

mrtm88 relies on the following lawful bases to process your personal data, in accordance with applicable data protection law:

Contractual Necessity: Processing is necessary to perform the contract between you and mrtm88 — specifically, to create and manage your account, process deposits and withdrawals, deliver gaming services, and provide customer support.
Legal Obligation: Processing is required to comply with applicable laws, including anti-money laundering obligations, KYC regulations imposed by our licensing authority, and record-keeping requirements.
Legitimate Interests: Processing is necessary for mrtm88's legitimate interests, including fraud prevention, platform security, technical improvements, and responsible gambling monitoring, provided that such interests are not overridden by your fundamental rights and freedoms.
Consent: Where you have given explicit consent — for example, to receive marketing communications or to participate in optional data collection activities — we process data on the basis of that consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

Section 6

Data Sharing & Third Parties

mrtm88 does not sell, rent, or trade personal data. We share personal data with third parties only to the extent necessary for the operation of the Platform, fulfilment of legal obligations, or with your explicit consent. The categories of third parties who may receive your data include:

6.1 Payment Service Providers

To process your deposit and withdrawal transactions, we share relevant financial and identity data with payment providers, including but not limited to FPX network operators, DuitNow, e-wallet platforms (Touch 'n Go, Boost, GrabPay), and cryptocurrency processing partners. These providers are bound by their own privacy policies and contractual data processing obligations with mrtm88.

6.2 Identity Verification Services

KYC documents are processed via accredited third-party identity verification providers. These providers verify document authenticity and age compliance on our behalf. They are not permitted to use your data for independent purposes outside the scope of verification.

6.3 Game Content Providers

In the course of delivering live dealer, slot, and sports betting services, certain non-identifiable usage data (such as game session identifiers and bet amounts) may be shared with licensed game studio partners for the purpose of game delivery, RTP monitoring, and technical troubleshooting.

6.4 Regulatory and Law Enforcement Authorities

mrtm88 may disclose personal data to competent regulatory bodies, law enforcement agencies, or judicial authorities where required by law, court order, or where we have a good-faith belief that disclosure is necessary to prevent fraud, protect the rights of mrtm88 or third parties, or ensure public safety.

                
                All third-party Data Processors engaged by mrtm88 are required to sign data processing agreements that impose obligations consistent with applicable data protection standards. We conduct due diligence on all service providers before engaging them.
              

Section 7

Cookies & Tracking Technologies

The mrtm88 Platform uses cookies and similar tracking technologies (such as pixel tags, session tokens, and local storage objects) to enable Platform functionality, maintain session state, and improve user experience. The categories of cookies used are as follows:

Cookie Type	Purpose	Duration
Essential	Required for core Platform functions including login state, session management, and security tokens. Cannot be disabled without impairing functionality.	Session
Functional	Remember your language and display preferences, game history settings, and chat window state across sessions.	Up to 12 months
Analytics	Collect anonymised usage data to understand how users navigate the Platform and identify areas for improvement. Data is aggregated and non-identifiable.	Up to 24 months
Marketing	Track whether you arrived at the Platform via a promotional link or affiliate referral, to attribute bonuses correctly. Only activated with your consent.	Up to 30 days

You may manage your cookie preferences through your browser settings. Disabling essential cookies will impair your ability to log in and use the Platform. Disabling analytics and marketing cookies will not affect gameplay functionality.

Section 8

Data Retention

mrtm88 retains personal data only for as long as necessary to fulfil the purposes set out in this Policy, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

Account and KYC Data: Retained for the duration of your account relationship with mrtm88 and for a minimum of five (5) years following permanent account closure, in compliance with anti-money laundering record-keeping obligations.
Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, as required by financial compliance obligations applicable to our licensing jurisdiction.
Communication Records: Support transcripts and email correspondence retained for two (2) years following the resolution of the relevant inquiry.
Usage and Technical Logs: Retained for up to twelve (12) months, after which they are anonymised or deleted.
Consent Records: Records of your consent to marketing communications retained until you withdraw consent, plus one (1) year following withdrawal for audit purposes.

Where data is no longer required for operational or legal purposes, mrtm88 securely destroys or anonymises it using industry-standard methods so that it can no longer be attributed to any individual.

Section 9

Your Data Rights

Subject to applicable law and any overriding legal obligations, you hold the following rights in respect of your personal data held by mrtm88. Requests to exercise these rights should be submitted in writing to our data team at [email protected].

Right of Access

You may request a copy of all personal data we hold about you, along with information on how it is being processed and with whom it has been shared.

Right to Rectification

If any personal data we hold is inaccurate or incomplete, you have the right to request that it be corrected or updated without undue delay.

Right to Erasure

You may request the deletion of your personal data where it is no longer necessary for the purposes it was collected, subject to legal retention obligations.

Right to Restrict Processing

You may request that we restrict the processing of your data in certain circumstances, for example while a complaint is being investigated.

Right to Portability

Where processing is based on consent or contract, you may request a structured, machine-readable copy of your personal data to transfer to another service.

Right to Object

You may object to processing based on legitimate interests or for direct marketing purposes. Marketing objections take effect immediately upon receipt.

mrtm88 will respond to verified data rights requests within 30 calendar days. In cases of complexity or volume, we may extend this period by a further 60 days with notification. Requests may be refused only where permitted by applicable law, in which case we will provide written reasons.

Section 10

Data Security

mrtm88 implements a comprehensive suite of technical and organisational security measures designed to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

Transport Layer Encryption: All data transmitted between your device and the mrtm88 Platform is protected using 256-bit TLS/SSL encryption, ensuring that information in transit cannot be intercepted.
Data at Rest Encryption: Sensitive personal data stored in our databases — including KYC documents and payment records — is encrypted at rest using AES-256 or equivalent standards.
Access Controls: Access to personal data by mrtm88 personnel is granted on a strict need-to-know basis, enforced through role-based access controls and audit logging.
Two-Factor Authentication: Internal systems handling personal data require multi-factor authentication for all authorised personnel.
Vulnerability Management: Regular penetration testing, automated vulnerability scanning, and security patch management programmes are in place to identify and remediate threats proactively.
Incident Response: mrtm88 maintains a documented data breach response plan. In the event of a qualifying data breach, affected users will be notified within the timeframes required by applicable law.

                
                Despite our robust security infrastructure, no online system can guarantee absolute security. We strongly encourage all users to choose strong, unique passwords, enable two-factor authentication on their mrtm88 account, and notify us immediately if they suspect any unauthorised access.
              

Section 11

Minors and Age Restriction

The mrtm88 Platform is strictly restricted to persons aged 21 years and above. We do not knowingly collect, process, or retain personal data belonging to individuals under the age of 21.

Age verification is a mandatory step in the account registration and withdrawal process. Where we discover, through KYC review or other means, that an account is registered to a person under the age of 21, we will immediately suspend the account, forfeit any bonus credits, and take steps to return verified deposited funds to the original payment source after completing applicable compliance procedures.

If you believe that a minor has registered an account on the mrtm88 Platform, we ask you to notify us immediately at [email protected] so that we can investigate and take swift corrective action. Parental controls and internet filtering tools are recommended for households where persons under 21 may have unsupervised internet access.

Section 12

International Data Transfers

As an internationally licensed online gaming operator, mrtm88 may process and store personal data on servers located outside of Malaysia. Transfers of personal data to jurisdictions outside your country of residence will only take place where:

The transfer is to a jurisdiction that provides an adequate level of personal data protection as recognised by applicable standards;
The receiving party has entered into appropriate contractual safeguards (such as standard contractual clauses) with mrtm88 that impose equivalent data protection obligations;
The transfer is necessary for the performance of a contract with you (for example, processing a payment via an international payment gateway); or
You have given explicit consent to the specific transfer.

Malaysian users are advised that Malaysia's Personal Data Protection Act 2010 (PDPA) governs the processing of personal data by data processors operating within Malaysia. Where mrtm88's processing activities fall within the scope of the PDPA, we process data in a manner consistent with its requirements.

Section 13

Policy Amendments

mrtm88 reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in our data processing practices, legal requirements, or Platform features. Material changes that significantly affect your rights or our processing activities will be communicated to registered users by email or by a prominent notice posted on the Platform, at least 14 days prior to the effective date of the change.

Minor or non-substantive updates (such as typographical corrections or clarifications that do not alter the substance of this Policy) may be implemented without specific notification. The current version of the Privacy Policy is always available at https://mrtm88.cam/privacy-policy, identified by the "Last Updated" date at the top of this document.

Your continued use of the Platform after the effective date of any amendment to this Policy constitutes your acceptance of the updated terms. If you do not agree with any revised terms, you should discontinue use of the Platform and contact support to request account closure.

Section 14

Contact Us

If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to report a potential data protection concern, please contact the mrtm88 data team through the following channels:

Email: [email protected]
Live Chat: Available 24 hours a day, 7 days a week via the Platform
Support Languages: English, Bahasa Melayu, Mandarin Chinese
Response Time: Live Chat — under 5 minutes; Email — within 4 hours (peak) / 12 hours (off-peak)

All formal data rights requests must be submitted in writing (via email or live chat transcript) and include sufficient information to verify your identity before we can process your request. We will acknowledge receipt of your request within 3 business days.

This Privacy Policy was last reviewed and updated on 1 January 2026. Previous versions are available upon written request.