Privacy Policy – How mr88 Collects, Uses & Protects Your Data

Last Updated: 11 June 2026. This Privacy Policy replaces all prior versions and applies to all users of mr88.bio.

1. Introduction

This Privacy Policy ("Policy") describes how mr88 ("mr88", "we", "us", "our") collects, processes, stores, and shares personal data obtained from individuals ("User", "you", "your") who access or use the mr88 platform located at mr88.bio, including all associated games, betting services, payment features, and customer support channels.

mr88 is committed to handling personal data responsibly, transparently, and in accordance with applicable data protection law and the requirements of our international gaming authority licensing conditions. By registering an account with mr88 or continuing to use the Platform, you acknowledge that you have read and understood this Policy.

This Policy should be read alongside the mr88 Terms & Conditions, which govern the broader relationship between mr88 and its users. In the event of any conflict between this Policy and the Terms & Conditions specifically in relation to personal data, this Policy shall prevail.

2. Personal Data We Collect

2.1 Registration & Identity Data

When you create an mr88 account, we collect: your full legal name; date of birth; email address; mobile number; country of residence; and a username of your choosing. Where identity verification is required under our Know Your Customer (KYC) obligations, we may additionally collect copies of government-issued identification documents, proof of address documents, and, where applicable, source of funds information.

2.2 Financial Data

To process deposits and withdrawals, mr88 collects transaction reference data associated with your chosen payment method (for example, the masked identifier of your Touch n Go eWallet account, Boost wallet, or bank account number). We do not store full payment card numbers, CVV codes, or online banking credentials on our servers.

2.3 Gameplay & Usage Data

mr88 records data generated by your use of the Platform, including: game sessions played; bet amounts and outcomes; login timestamps and session durations; device type and operating system; browser type and version; and IP address. This data is used primarily for account management, responsible gaming monitoring, fraud prevention, and platform analytics.

2.4 Communications Data

If you contact mr88 support via live chat, email, or any other channel, we retain records of those communications, including the content of your messages and our responses. This data is used for quality assurance, dispute resolution, and training purposes.

2.5 Automatically Collected Data

When you visit mr88.bio, certain technical data is automatically collected by our servers and analytics tools, including page views, referral URLs, session identifiers, and cookie data as described further in Section 9 of this Policy.

3. How We Collect Personal Data

mr88 collects personal data through the following means:

• Directly from you — during registration, KYC verification, deposit and withdrawal requests, support interactions, and promotional opt-ins;
• Automatically — through server logs, session cookies, and analytics tools as you interact with the Platform;
• From third parties — including identity verification service providers, payment processors, and fraud detection agencies, where we engage these parties in connection with our compliance obligations.

4. How We Use Your Personal Data

mr88 uses personal data for the following purposes:

• To create, verify, maintain, and administer your mr88 account;
• To process deposits, withdrawals, and bonus credits, and to maintain accurate financial records;
• To verify your identity and age in accordance with our KYC obligations and international gaming authority licensing requirements;
• To detect, investigate, and prevent fraud, money laundering, and other prohibited conduct;
• To monitor gameplay for responsible gaming purposes, including identifying patterns that may indicate problem gambling, and to administer self-exclusion and limit tools;
• To provide customer support and resolve disputes;
• To send you transactional communications (account alerts, withdrawal confirmations, security notifications) — these are sent regardless of marketing preferences as they relate to the operation of your account;
• To send you marketing communications (promotions, bonus offers, event notifications) — only where you have provided consent or where we have a legitimate interest and you have not opted out;
• To improve Platform performance and user experience through analysis of aggregated, anonymised usage data;
• To comply with applicable law, regulatory requirements, and the conditions of our international gaming authority licence.

5. Legal Basis for Processing

mr88 processes your personal data on the following legal bases:

• Contractual necessity — processing required to fulfil our obligations under the mr88 Terms & Conditions, including account management, payment processing, and game provision;
• Legal obligation — processing required to comply with applicable law and regulatory requirements, including KYC verification, anti-money laundering obligations, and data retention mandates;
• Legitimate interests — processing required for fraud detection, platform security, responsible gaming monitoring, and analytics, where these interests are not overridden by your data protection rights;
• Consent — processing for marketing communications and optional data uses, where we rely on your explicit consent which may be withdrawn at any time.

6. Sharing Personal Data with Third Parties

mr88 does not sell, rent, or trade your personal data to third parties for their independent commercial use. We share personal data only in the following limited circumstances:

• Payment processors — to facilitate deposit and withdrawal transactions via Touch n Go eWallet, Boost, Maybank, CIMB, and Public Bank;
• Identity and age verification providers — to conduct KYC checks as required by our licensing conditions;
• Fraud prevention agencies — to detect and prevent financial crime and platform abuse;
• Game software providers — who may receive session and gameplay data necessary to operate and audit their certified game titles on the mr88 platform;
• Regulatory and law enforcement authorities — where disclosure is required by applicable law, court order, or regulatory direction;
• Professional advisers — including legal counsel, auditors, and accountants, where necessary in connection with the operation of mr88's business, subject to strict confidentiality obligations.

All third parties with whom mr88 shares personal data are required to process that data only for the specified purpose and in accordance with applicable data protection standards.

7. International Data Transfers

As mr88 operates under international gaming authority licensing, some personal data may be transferred to, processed in, or stored in jurisdictions outside Malaysia. Where such transfers occur, mr88 implements appropriate contractual safeguards to ensure that your data receives a standard of protection consistent with applicable data protection principles. By using the mr88 Platform, you acknowledge and consent to such transfers where required for the operation of your account.

8. Data Retention

mr88 retains personal data for as long as necessary to fulfil the purposes for which it was collected, including regulatory and legal retention obligations. In practice, account data and transaction records are typically retained for a minimum of five (5) years following account closure, in line with anti-money laundering record-keeping requirements. Communication records are generally retained for three (3) years.

Where personal data is no longer required for any retained purpose, it is securely deleted or anonymised. Requests for early deletion are considered subject to mr88's ability to comply with applicable regulatory obligations.

9. Cookies & Tracking Technologies

mr88.bio uses cookies and similar tracking technologies to operate the Platform effectively. The cookies we use fall into the following categories:

• Essential cookies — required for core Platform functionality including session management, login state, and security. These cannot be disabled without impairing Platform operation;
• Performance cookies — used to collect anonymised analytics data about how users navigate the Platform, helping us identify areas for improvement;
• Preference cookies — used to remember your Platform settings and preferences across sessions.

mr88 does not place third-party advertising or tracking cookies. You may manage cookie preferences through your browser settings; however, disabling essential cookies may affect your ability to use the Platform. For most Malaysian users accessing mr88 via Chrome on Android or Safari on iOS, cookie management is available in the browser's privacy settings.

10. Your Data Rights

Subject to applicable law and regulatory constraints, you have the following rights in relation to your personal data held by mr88:

• Right of access — to obtain a copy of the personal data mr88 holds about you;
• Right of rectification — to request correction of inaccurate or incomplete personal data;
• Right of erasure — to request deletion of your personal data, subject to regulatory retention obligations that may prevent full deletion;
• Right to restrict processing — to request that mr88 limits the processing of your data in certain circumstances;
• Right to data portability — to receive a copy of data you have provided to mr88 in a structured, machine-readable format, where technically feasible;
• Right to withdraw consent — to withdraw any consent you have given for marketing communications or other consent-based processing at any time, without affecting the lawfulness of prior processing.

To exercise any of these rights, contact mr88 support via live chat or at [email protected] (plain text only). We will respond to verified requests within thirty (30) days. We may require identity verification before processing data access or deletion requests.

11. Security Measures

mr88 implements technical and organisational measures appropriate to the risk profile of the personal data we process. These include: encryption of data in transit using TLS; encryption of sensitive data at rest; access controls limiting system access to authorised personnel; regular security audits; and incident response procedures. Despite these measures, no transmission over the internet or method of electronic storage is completely secure. mr88 will notify affected users and relevant authorities in the event of a data breach as required by applicable law.

12. Children and Age Restrictions

The mr88 Platform is strictly for users aged 21 and above. 21+ mr88 does not knowingly collect personal data from individuals under 21 years of age. If we become aware that personal data has been collected from a person under 21, we will take immediate steps to delete that data and close the associated account. If you believe a person under 21 has registered with mr88, please contact support immediately.

13. Changes to This Policy

mr88 may update this Privacy Policy from time to time to reflect changes in our data practices, regulatory requirements, or Platform features. Material changes will be communicated via email to your registered address or by prominent notice on the Platform at least seven (7) days before they take effect. Your continued use of the Platform after the effective date constitutes acceptance of the updated Policy. We encourage you to review this Policy periodically.

14. Contact & Complaints

For any privacy-related enquiries, requests to exercise your data rights, or complaints about our data handling practices, please contact the mr88 Data Protection team via live chat support available on the Platform 24/7, or in writing at: [email protected]

If you are not satisfied with our response to a complaint, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.