MRT888 Privacy Policy

This Privacy Policy (hereinafter "Policy") is published by MRT888 (hereinafter "the Company", "mrt888", "we", "us", or "our"), the operator of the online gaming and sports betting platform accessible at mrt888.cam. This Policy governs the collection, processing, storage, and disclosure of personal data relating to individuals who register, access, or otherwise interact with the mrt888 platform and its associated services.

mrt888 is committed to protecting the personal privacy of every Member, visitor, and user who interacts with our platform. We recognise that the players who trust us with their personal information — particularly those using Malaysian payment methods such as DuitNow, Touch'n Go eWallet, Maybank2u, and FPX — deserve complete transparency about how that information is handled at every stage.

This Policy should be read in conjunction with our Terms & Conditions, which set out the broader legal framework governing your use of the mrt888 platform.

The following definitions apply throughout this Privacy Policy:

• "Personal Data" — Any information that identifies or can reasonably be used to identify a living natural person, directly or indirectly. This includes, but is not limited to, name, identification number, contact details, location data, and online identifiers.
• "Processing" — Any operation or set of operations performed on Personal Data, whether by automated means or otherwise, including collection, recording, organisation, storage, adaptation, retrieval, use, disclosure, combination, restriction, erasure, or destruction.
• "Data Controller" — The Company (mrt888), which determines the purposes and means of processing Personal Data collected through the platform.
• "Data Subject" — Any identified or identifiable natural person whose Personal Data is processed by the Company — in this context, a registered Member, visitor, or user of the mrt888 platform.
• "Third Party" — Any natural or legal person, public authority, agency, or body other than the Data Subject and the Company, including authorised data processors, payment service providers, and compliance partners.
• "Consent" — Any freely given, specific, informed, and unambiguous indication of the Data Subject's agreement to the processing of their Personal Data for one or more specified purposes.
• "KYC" — Know Your Customer procedures, comprising identity and address verification steps required of Members before full account access and withdrawal privileges are granted.

mrt888 collects personal data through several channels: directly from you during registration and account management, automatically through your use of the platform, and from third-party verification and payment partners where necessary. Below is a comprehensive breakdown of the categories of data we collect and the circumstances in which each category arises.

3.1 Data Provided Directly by You

3.2 Data Collected Automatically

mrt888 processes your Personal Data for specific, defined purposes. We do not process data beyond what is necessary for the stated purpose. The primary purposes for which we process your data are as follows:

• Account Creation and Management: To register your account, authenticate your identity, and manage your membership profile, including tier status and loyalty points.
• Service Delivery: To provide access to our gaming products including live casino, slots, sports betting markets (EPL, Liga Super Malaysia, UFC), live football, lottery, and arcade titles.
• Payment Processing: To facilitate deposits via Malaysian payment channels (Maybank2u, CIMB Clicks, Public Bank, Hong Leong Connect, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX) and cryptocurrency options (BTC, ETH, USDT, LTC), and to process MYR withdrawal requests to verified payment methods.
• Identity Verification (KYC): To verify your identity and address as required for compliance purposes prior to enabling withdrawal access.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent transactions, bonus abuse, money laundering, and other illegal or prohibited activities on the platform.
• Regulatory Compliance: To meet legal, regulatory, and anti-money laundering (AML) obligations applicable to the Company's operations.
• Customer Support: To respond to support queries, resolve complaints, and maintain records of support interactions for quality assurance purposes.
• Marketing Communications: To send promotional offers, bonus notifications, and platform updates to Members who have opted in to marketing communications. Members may opt out at any time.
• Responsible Gambling: To enforce self-imposed limits, cooling-off periods, and self-exclusion requests, and to monitor gameplay patterns for indicators of problem gambling behaviour.
• Platform Improvement: To analyse usage patterns, improve platform functionality, and personalise the user experience.

mrt888 processes Personal Data one or more of the following legal bases, depending on the nature and purpose of the processing activity:

• Contractual Necessity: Processing is necessary to perform our contractual obligations to you as a registered Member — including account management, game provision, and payment processing.
• Legal Obligation: Processing is required to comply with applicable legal and regulatory obligations, including KYC requirements, AML obligations, and fraud reporting duties.
• Legitimate Interests: Processing is necessary for the Company's legitimate business interests, including fraud prevention, platform security, and responsible gambling monitoring, provided these interests are not overridden by your fundamental rights and freedoms.
• Consent: Where processing is based on consent — specifically for marketing communications and non-essential cookies — you have the right to withdraw consent at any time without affecting the lawfulness of prior processing.

mrt888 may disclose your Personal Data to third parties only in the limited circumstances described below:

6.1 Service Providers and Data Processors

We engage carefully veted third-party service providers who process Personal Data on our behalf under strict contractual obligations. These include payment processors (responsible for facilitating DuitNow, FPX, e-wallet, and cryptocurrency transactions), KYC and identity verification service providers, game platform and software providers, fraud detection and AML compliance partners, and customer support platform operators.

All service providers are contractually prohibited from using your data for any purpose other than providing services to mrt888, and are required to maintain appropriate technical and organisational security measures.

6.2 Legal and Regulatory Disclosure

mrt888 may disclose Personal Data to regulatory bodies, law enforcement agencies, courts, or other government authorities where we are legally required or compelled to do so, including in connection with AML investigations, fraud enquiries, or court orders.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or a material part of the Company's assets, Personal Data held by mrt888 may be transferred to the successor entity. You will be notified of any such transfer that materially affects the processing of your Personal Data.

mrt888 uses cookies and similar tracking technologies to ensure the proper functioning of the platform, improve user experience, and support our analytics and security operations. Cookies are small text files stored on your browser or device when you visit our platform.

7.1 Types of Cookies We Use

• Strictly Necessary Cookies: Required for the platform to operate correctly — including session management, login authentication, and security functions. These cannot be disabled without affecting platform functionality.
• Performance and Analytics Cookies: Used to collect anonymous statistical data about how Members interact with the platform — such as pages visited, session duration, and games accessed — to help us improve performance and usability.
• Functional Cookies: Store your preferences such as language settings, display options, and responsible gambling limit selections, enabling a personalised experience across sessions.
• Marketing Cookies: Used, with your consent, to deliver relevant promotional content and track the effectiveness of our marketing campaigns. These may be set by trusted advertising partners.

You may configure your browser settings to refuse or delete cookies at any time. Note that disabling certain cookie categories may affect the performance or availability of platform features.

mrt888 retains Personal Data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. Our general retention principles are as follows:

• Account Data: Retained for the duration of your active membership, plus a minimum of five (5) years following account closure, in compliance with standard AML and financial record-keeping obligations.
• KYC and Identity Documents: Retained for a minimum of five (5) years following the completion of verification, or longer where required by applicable law or ongoing investigations.
• Transaction Records: Deposits, withdrawals, and gaming transaction records are retained for a minimum of five (5) years for audit and regulatory compliance purposes.
• Support Communications: Live chat transcripts and support ticket records are retained for up to two (2) years for quality assurance and dispute resolution purposes.
• Marketing Data: Retained until you withdraw your consent or opt out of marketing communications, after which your marketing preferences are updated within 14 days.

mrt888 implements a comprehensive set of technical and organisational measures to protect your Personal Data against unauthorised access, disclosure, alteration, loss, or destruction. Our security infrastructure includes:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the mrt888 platform is protected by industry-standard SSL encryption, preventing interception in transit.
• Encrypted Data Storage: Personal Data and KYC documents stored on our servers are encrypted at rest using AES-256 encryption standards.
• Access Controls: Access to Personal Data within our organisation is restricted to authorised personnel on a strict need-to-know basis, enforced through role-based access controls and multi-factor authentication.
• Fraud and Intrusion Monitoring: Continuous automated monitoring of all platform activity for anomalous patterns, unauthorised access attempts, and fraudulent transactions, with immediate escalation protocols.
• Regular Security Assessments: Periodic penetration testing, vulnerability assessments, and security audits conducted by independent third-party specialists to identify and remediate potential weaknesses.
• Incident Response: A documented data breach response plan that includes assessment, containment, notification to affected Members, and regulatory reporting where legally required.

While mrt888 takes all reasonable steps to protect your Personal Data, no system of security is impenetrable. We encourage Members to maintain strong, unique passwords and to enable two-factor authentication on their accounts.

As a user of the mrt888 platform, you hold specific rights in relation to the Personal Data we process about you. mrt888 is committed to facilitating the exercise of these rights in a timely and transparent manner.

To exercise any of the above rights, please contact our support team via the live chat on the mrt888 platform or by emailing us at the address provided in Section 15. We will acknowledge your request within 5 business days and aim to fulfil all valid requests within 30 days.

mrt888 enforces age verification through our KYC process. Any account found to have been registered by a person under the age of 21 will be immediately closed and all associated data will be processed in accordance with applicable legal requirements. Where deposits have been made to such an account, they will be returned subject to verification of payment method ownership.

If you are the parent or guardian of a minor and believe they may have accessed or registered on the mrt888 platform, please contact our customer support team immediately via live chat so that we may investigate and take appropriate action.

The mrt888 platform integrates with third-party service providers including payment processors, game software providers, and analytics platforms in order to deliver our services. While these providers are carefully veted and bound by contractual data protection obligations, their own privacy practices are governed by their respective privacy policies.

mrt888 accepts no responsibility or liability for the privacy practices of third-party services or platforms not directly operated by the Company. Members are encouraged to review the privacy policies of any third-party services they interact with in connection with their use of the mrt888 platform.

In the course of operating the mrt888 platform and delivering our services to Members across Malaysia — including cities such as Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, and Shah Alam — certain Personal Data may be transferred to, or accessed from, servers and service providers located outside of Malaysia.

Where such transfers occur, mrt888 ensures that appropriate safeguards are in place to protect your Personal Data in accordance with applicable data protection standards. Safeguards include contractual clauses requiring recipient entities to provide an equivalent level of data protection, and the use of service providers who maintain internationally recognised security certifications.

mrt888 reserves the right to update or amend this Privacy Policy at any time. Where changes are material — including changes to the categories of data collected, the purposes of processing, or your rights as a Data Subject — we will notify registered Members via the email address associated with their account, or through a prominent notification displayed within the platform, at least 14 days prior to the changes taking effect.

The "Last updated" date at the top of this Policy reflects the date on which the most recent version came into effect. Continued use of the mrt888 platform following notification of changes constitutes acceptance of the updated Policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the processing of your Personal Data by mrt888, please contact us through the following channels. We are committed to providing a prompt, helpful, and transparent response to all privacy-related enquiries.

For data subject rights requests (access, rectification, erasure, portability, objection), please include your registered email address and a clear description of the right you are seeking to exercise. We may be required to verify your identity before fulfilling the request.