Your privacy is more than a legal formality to us. At mari888, protecting the personal data of our members is a core responsibility of our platform to more than 850,000 users across Malaysia. This policy sets out transparently how we manage your information.
Our Privacy Commitment
Six core data protection principles we uphold every day for all our Malaysian members
Every piece of information you submit to the mari888 platform — from your username to your Touch 'n Go or DuitNow transaction details — is protected by 256-bit SSL encryption. This is the same security technology used by leading banks in Malaysia and around the world to safeguard their customers' financial data.
Mari888 never sells, rents, or shares your personal data with any third party for marketing or commercial purposes. The information you provide us is solely for use within the platform and will not be used for any other purpose without your explicit consent.
All data management practices at mari888 are in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). We have an officially appointed Data Protection Officer to ensure ongoing compliance and to handle all privacy-related enquiries from our members.
Your personal data is stored on servers protected by multiple layers of physical and digital security. Database access is restricted to staff with a role-based need, and all access is logged and periodically audited by our internal security team.
You have full rights to access, correct, and request deletion of any personal data we hold about you. Requests to access or update your account information can be submitted through your account settings or by contacting the mari888 support team, available 24/7 in Bahasa Melayu.
In the event of any security incident involving your personal data, mari888 is committed to notifying you within 72 hours of becoming aware of it – in line with international data protection best practices. We will also explain the steps we are taking to resolve the matter.
Important Note: This Privacy Policy describes our data collection and usage practices. By registering for or using the mari888 platform, you agree to the terms set out in this document. Please read this policy carefully in its entirety. If you have any questions, our support team is available in Bahasa Melayu 24/7.
Mari888 is an online Sports Betting and casino platform operating exclusively for users in Malaysia. We understand that your trust in us depends not only on the quality of our services, but also on how responsibly and transparently we handle your personal information.
This Privacy Policy was drafted in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practices in data protection. It applies to all information collected by mari888 through the website https://mari888.xyz, our mobile app, and all related services operated under the mari888 brand.
We want you to have a full understanding of what we do with your data, why we need it, who may have access to it, and how long we retain it. This transparency is part of mari888's commitment to our more than 850,000 members across Malaysia – from the Klang Valley all the way to Sabah and Sarawak.
Effective from: January 2026. This version supersedes all previous Privacy Policy versions published by mari888.
In the course of providing our services, mari888 collects several categories of personal data. We only collect data that is genuinely necessary for the stated purposes – we do not collect information in excess of what is needed.
Information you provide when registering an account, updating your profile, or contacting our support team includes:
When you use the mari888 platform, our systems automatically record certain technical information required to keep the platform running smoothly and securely:
We retain records of your gaming activity and financial transactions for account management, dispute resolution and regulatory compliance purposes:
| Data Category | Primary Purpose | Legal Basis |
|---|---|---|
| Identity Information | Account registration, age verification | Contract performance |
| Contact Information | Communications, security notifications | Legitimate interests |
| Payment Data | Deposit & withdrawal processing | Contract performance |
| Technical Data | Account security, fraud detection | Legitimate interests |
| Game History | Dispute resolution, compliance | Legal obligation |
| Communication Data | Customer support, service improvement | Legitimate interests |
Mari888 uses collected data solely for legitimate purposes directly related to the provision of our platform services. We do not use your data for any purpose beyond the scope stated here without first obtaining your consent.
The primary purpose of using your data is to properly manage your account — including processing registrations, verifying your identity for withdrawals, processing deposits and withdrawals via Touch 'n Go, DuitNow, GrabPay, FPX, and other Malaysian payment methods, sending account-related notifications, and resolving any disputes that may arise.
Technical data such as IP addresses and device information is used to detect and prevent unauthorised access to your account, identify suspicious fraudulent activity or money laundering, enforce our one-account-per-user policy, and safeguard the overall integrity of the platform against misuse.
Your game activity data is analysed by our Responsible Gaming team to identify playing patterns that may indicate signs of problem gambling, to ensure that the deposit and loss limits you have set are enforced by the system, and to provide helpful resource recommendations to members who may need them. This reflects mari888's commitment that goes beyond the minimum licensing requirements.
Aggregated platform usage data (not individual personal data) is used to understand how users interact with the platform, identify areas for improvement, develop new features relevant to Malaysian users, and ensure the platform maintains optimal technical performance.
With your consent given at registration, we may send you information about relevant promotions, bonuses and platform updates via email or in-app notifications. You may withdraw this consent at any time through your account settings or by contacting our support team.
Mari888 does not sell, rent, or share your personal data with any third party for their own marketing purposes. However, there are limited circumstances in which we need to share data with certain parties in order to provide our services to you:
We work with technical service providers that help us operate the platform – including Live Casino game providers such as Evolution Gaming and Pragmatic Play, payment processors that facilitate transactions via Touch 'n Go, DuitNow and FPX, and cloud computing service providers for data storage. All third-party providers are bound by strict confidentiality agreements and are only permitted to use your data for the specific purposes related to the services they provide to us.
We may be required to disclose your personal data to law enforcement authorities or regulatory bodies when obligated to do so by law or court order, when necessary to prevent, detect, or prosecute financial crimes such as money laundering, or when required to fulfil our licensing obligations.
In the event of any corporate restructuring, merger, or acquisition involving mari888, user data may be transferred to the new entity. In such circumstances, we will notify you in advance and ensure that the receiving entity maintains privacy protections at least equivalent to those in this policy.
Our commitment: In all of the above situations, we share only the minimum data necessary for the specific purpose in question. We do not share personal information that is unrelated to the stated need.
Protecting your personal data from unauthorised access, loss or accidental disclosure is our top priority. mari888 implements multiple layers of technical and organisational security controls to ensure comprehensive data protection.
Access to user data within our organisation is governed by the principle of least privilege – staff only have access to the data they need to carry out their specific duties. All database access is logged and audited on a regular basis. Staff who handle user data undergo data protection training and are bound by confidentiality agreements.
Mari888 has a comprehensive incident response plan in place to address any data breaches that may occur. In the event of a security incident involving your personal data, we are committed to notifying you within 72 hours of becoming aware of the incident, explaining the nature of the incident and the data that may be affected, informing you of the steps we are taking to contain and resolve it, and providing recommendations on measures you can take to protect yourself.
The mari888 website and app use cookies and similar tracking technologies to enhance the user experience, ensure the platform functions correctly, and analyse usage patterns on an aggregate basis.
You can manage cookie settings through your web browser. Most modern browsers — including Chrome, Safari, Firefox, and Edge on iOS or Android devices — allow you to view, delete, or block cookies. Please note that blocking essential cookies will affect platform functionality and may prevent you from logging in or completing transactions.
Mari888 does not retain your personal data for longer than is necessary for the stated purposes, or beyond the period required by law and regulatory obligations.
| Data Type | Retention Period | Justification |
|---|---|---|
| Active account information | Duration of active account + 5 years | Regulatory requirements |
| Financial transaction history | 7 years from the transaction date | AMLA legal requirements |
| Support communication records | 3 years from the date of communication | Dispute resolution |
| Technical log data | 90 days | Security and fraud detection |
| Identity verification document | 5 years after account closure | AML/KYC requirements |
| Analytics cookie data | 12 months | Usage pattern analysis |
Once the retention period ends, your data will be securely deleted or fully anonymised so that it can no longer be linked back to you as an individual.
As an individual whose personal data is processed by mari888, you have certain rights under Malaysia's Personal Data Protection Act 2010. We are committed to respecting these rights and making them easy for you to exercise.
You have the right to request a copy of the personal data we hold about you. This request can be made through your account settings or by contacting our support team. We will process your request within 21 working days.
If you find that the personal data we hold about you is inaccurate or out of date, you have the right to request a correction. Basic information can be updated directly through your account profile, while corrections to more sensitive details will require verification through our support team.
You may request the deletion of your personal data under certain circumstances – for example, when an account is closed and there is no legal obligation to retain the data in question. Please note that some data may need to be kept for a specified period to meet regulatory requirements.
You have the right to object to the processing of your personal data for direct marketing purposes. Once you withdraw your consent to receive marketing communications, we will immediately cease using your data for that purpose.
To exercise any of the rights above, please contact our Data Protection Officer by email at support@mari888.xyz clearly stating your request. We will process it within a reasonable timeframe and keep you informed of the action taken.
The mari888 platform is exclusively for individuals aged 18 and above. We do not knowingly collect personal data from minors.
During the registration process, we require verification that the user has reached the minimum age of 18. Should we discover that we have inadvertently collected personal data from an underage individual, we will take immediate steps to delete that information and close the account in question.
To parents and guardians: If you discover that a minor in your care has registered an account with mari888, please contact our support team immediately via live chat or email at support@mari888.xyz. We will promptly close the account and delete all associated data.
The technology landscape and regulatory requirements are constantly evolving, and our Privacy Policy may need to be updated to reflect these changes. We reserve the right to amend this policy at any time.
For any material amendments — meaning changes that significantly affect your privacy rights or how we use your data — we will notify all active members via their registered email and/or in-platform notification at least 30 days before the changes take effect. For minor amendments that do not alter your fundamental rights, we will update this policy and revise the "last updated" date at the top of the page.
Continued use of the mari888 platform after any amendment takes effect will be considered your acceptance of the updated Privacy Policy. If you do not agree with the changes made, you may choose to close your account and request deletion of your data before the amendment comes into effect.
If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact the mari888 Data Protection Officer through the following channels:
We are committed to responding to all privacy-related enquiries within three (3) business days. For complaints requiring further investigation, we will keep you informed of the investigation status within 21 days.
If you feel that we have not handled your complaint to your satisfaction, you have the right to lodge a complaint with Malaysia's Personal Data Protection Commissioner under the Personal Data Protection Act 2010.
Effective Date: This Privacy Policy takes effect from January 2026 and supersedes all previous versions of the Privacy Policy published by mari888. The most recent update date will always be displayed at the top of this page.
Quick answers to the most frequently asked questions about privacy and data protection at mari888
Backed by banking-grade data protection, full compliance with Malaysia's PDPA, and a commitment to complete transparency, you can enjoy the best online Sports Betting and casino experience in Malaysia with total peace of mind. Sign up free in under 2 minutes.
For users aged 18 and above only. Gambling can be addictive. | Responsible Gaming