Privacy Policy – mari44 Casino

01 Introduction & Scope

mari44 is committed to protecting the privacy and personal data of all individuals who interact with our platform. This Policy applies to all personal data processed by mari44 in connection with the operation of the online casino and sportsbook platform at mari44.com, including all associated subdomains, mobile-optimised pages, and customer support channels.

This Policy is designed to be read together with the mari44 Terms & Conditions, which govern the overall legal relationship between players and the Platform. In the event of any conflict specifically related to data processing matters, this Privacy Policy takes precedence over the Terms & Conditions on those issues.

We recognise that players in Malaysia — including in Kuala Lumpur, Penang, Johor Bahru, and across the broader country — entrust us with sensitive personal and financial information when they register and play on the mari44 platform. This Policy sets out, in clear terms, exactly what we do with that information and what rights you have over it.

02 Data Controller

For the purposes of applicable data protection legislation, mari44 is the data controller in respect of all personal data collected through the Platform. As data controller, mari44 determines the purposes and means of personal data processing and is responsible for ensuring that processing activities are conducted in accordance with applicable legal requirements.

Questions relating to data protection, privacy rights, or the contents of this Policy should be directed to the mari44 data protection contact: [email protected] (plain text — not a clickable link). We aim to acknowledge all data protection enquiries within 5 business days and provide substantive responses within 30 calendar days.

03 Personal Data We Collect

mari44 collects personal data through several channels: information you provide directly during registration and KYC; data generated through your use of the Platform; and certain technical data collected automatically when you access the Platform.

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data (other than self-disclosed responsible gaming tool activations), or biometric data unless specifically required for identity verification under KYC obligations.

04 How We Use Your Personal Data

4.1 Account Administration

We use your identity and contact data to create and maintain your mari44 account, verify your identity in compliance with international gaming authority licensing requirements, process deposit and withdrawal transactions in MYR, send account-related notifications (transaction confirmations, security alerts, KYC status updates), and respond to support enquiries.

4.2 Legal and Regulatory Compliance

Gaming authority licensing conditions require mari44 to maintain records of player identity, transaction history, and gaming activity for anti-money laundering, fraud prevention, and responsible gaming compliance purposes. We process personal data to fulfil these obligations, which may include reporting to relevant authorities where legally required.

4.3 Platform Improvement and Personalisation

Aggregated and anonymised gaming activity data is used to improve the Platform's game lobby, bonus structures, and user interface. Where you have opted in to personalised recommendations, individual activity data may be used to tailor the game suggestions and promotional offers displayed to you. You may opt out of personalisation at any time from your account settings.

4.4 Marketing Communications

With your explicit consent, we may use your contact data to send promotional emails, SMS notifications, or in-platform messages about mari44 bonuses, new game launches, and sportsbook promotions. You may withdraw this consent and unsubscribe at any time via the unsubscribe link in any promotional email or through your account communication preferences. Withdrawal of marketing consent does not affect your ability to use the Platform.

4.5 Responsible Gaming Monitoring

As required under our licensing obligations, we monitor gaming activity patterns to identify players who may be exhibiting signs of problem gambling. This includes analysis of session frequency, deposit escalation patterns, and self-exclusion history. This processing is conducted in the legitimate interests of player welfare and regulatory compliance.

05 Legal Basis for Processing

Each processing activity conducted by mari44 is underpinned by one or more of the following legal bases:

• Contractual necessity: Processing required to fulfil our contractual obligations to you under the Terms & Conditions — including account administration, payment processing, and game provision.
• Legal obligation: Processing required to comply with applicable law and international gaming authority licensing requirements — including KYC, anti-money laundering checks, and regulatory reporting.
• Legitimate interests: Processing conducted for the Platform's legitimate business interests — including fraud detection, security monitoring, Platform improvement, and responsible gaming analysis — provided such interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing conducted on the basis of your explicit opt-in consent — primarily marketing communications and personalisation features. You may withdraw consent at any time without affecting other processing activities.

06 Data Sharing & Third-Party Disclosure

mari44 does not sell, rent, or trade your personal data to any third party for commercial purposes. We share personal data with third parties only in the following circumstances:

• Payment processors: To facilitate deposit and withdrawal transactions through Touch n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, 7-Eleven CLiQQ, and USDT processing services. Payment processors receive only the minimum data required to process the transaction.
• Game software providers: Game providers such as PG Soft, Pragmatic Play, JILI, NetEnt, and others receive session tokens and bet data to operate their games. These providers do not receive identity documents or full financial records.
• KYC and identity verification services: Third-party identity verification services receive the identity documents and personal data required to complete KYC checks as mandated by our gaming licence.
• Regulatory authorities: We may be required by law or by our international gaming authority licensing conditions to disclose player data to regulators, law enforcement agencies, or anti-money laundering bodies. We comply with such requests only where legally required and, where permitted, will notify you of such disclosures.
• Professional advisors: Legal, accounting, and audit professionals may have access to personal data in connection with the ongoing operation and compliance activities of the Platform, subject to professional confidentiality obligations.

All third parties with whom we share personal data are contractually obligated to process that data only for the specified purpose, to maintain appropriate security measures, and to comply with applicable data protection requirements.

07 Cookies & Tracking Technologies

The mari44 platform uses cookies and similar tracking technologies to operate the Platform, maintain your logged-in session, remember your preferences, and analyse Platform usage patterns. The following categories of cookies are used:

• Strictly necessary cookies: Essential for Platform functionality — including session authentication, security tokens, and load balancing. These cannot be disabled without affecting your ability to use the Platform.
• Functional cookies: Remember your preferences such as language settings, display preferences, and game lobby filters. Disabling these may affect your user experience.
• Analytics cookies: Used to understand how players navigate the Platform — including which games are most visited, which pages have high exit rates, and how players move between the casino and sportsbook. This data is aggregated and anonymised.
• Responsible gaming cookies: Used to track session duration and trigger time-reminder notifications where you have activated this feature in your account settings.

You may control cookie preferences through your browser settings. Note that blocking all cookies will prevent you from logging in and using the Platform. Where required by applicable law, we obtain your consent before setting non-essential cookies.

08 Data Retention

We retain personal data for as long as is necessary to fulfil the purposes for which it was collected, including to satisfy our legal, regulatory, and licensing obligations. The following general retention periods apply:

• Account and identity data: Retained for the duration of the active account relationship and for a minimum of 5 years following account closure, to comply with anti-money laundering and gaming authority record-keeping requirements.
• Transaction records: Retained for a minimum of 5 years following the date of transaction, in accordance with financial record-keeping requirements.
• Gaming activity logs: Retained for a minimum of 3 years for regulatory compliance and responsible gaming monitoring purposes.
• Support communications: Retained for 2 years from the date of the last support interaction, or longer if related to an ongoing dispute or legal matter.
• Technical and log data: Retained for up to 12 months for security and fraud detection purposes.

Following the expiry of applicable retention periods, personal data is securely deleted or anonymised such that it can no longer be attributed to any identifiable individual.

09 Data Security

mari44 implements appropriate technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• AES-256 encryption for data stored at rest in Platform databases
• TLS 1.2 or higher for all data transmitted between your device and Platform servers
• Passwords stored using one-way cryptographic hashing — original passwords are never retrievable by Platform staff
• Role-based access controls limiting staff access to personal data to those with a genuine operational need
• Regular security audits and penetration testing by qualified third-party security professionals
• Incident response procedures for the detection, containment, and notification of personal data breaches

In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, we will notify affected individuals without undue delay and in accordance with applicable breach notification requirements.

10 Your Data Rights

Subject to applicable data protection legislation, you have the following rights in respect of your personal data held by mari44:

• Right of access: You may request a copy of the personal data we hold about you, along with information about how it is processed.
• Right to rectification: You may request correction of any inaccurate personal data we hold about you, or completion of incomplete data.
• Right to erasure: You may request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose it was collected. Note that this right is subject to overriding legal retention obligations.
• Right to restriction of processing: You may request that we limit our processing of your personal data in certain circumstances, for example while a rectification request is being assessed.
• Right to data portability: Where processing is based on your consent or contractual necessity, you may request a copy of your personal data in a structured, commonly used, and machine-readable format.
• Right to object: You may object to processing based on legitimate interests, including profiling for personalisation purposes. You have an absolute right to object to processing for direct marketing purposes.
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing conducted prior to withdrawal.

To exercise any of these rights, please contact us at [email protected] (plain text — not a clickable link). We will respond within 30 calendar days of receiving a valid request, and will request identity verification before processing any rights request to protect against unauthorised access to your data.

11 Children & Minors

The mari44 platform is strictly restricted to individuals aged 21 years and above. We do not knowingly collect or process personal data from individuals under 21 years of age. If we become aware that personal data has been collected from a minor, we will immediately suspend the associated account, delete the relevant data, and where appropriate, report the incident to relevant authorities in accordance with our licensing obligations.

If you believe that a minor has created an account on the Platform, please contact us immediately so that we can investigate and take appropriate action. Parents and guardians who are concerned about their dependants' access to online gaming platforms are encouraged to contact our support team to discuss available options.

12 Cross-Border Data Transfers

In the course of operating the Platform and working with international game providers, payment processors, and KYC service providers, personal data may be transferred to and processed in jurisdictions outside Malaysia. Where such transfers occur, we ensure that appropriate safeguards are in place — including standard contractual clauses or equivalent data transfer mechanisms — to maintain an equivalent level of protection to that afforded under applicable Malaysian data protection requirements.

By using the mari44 platform, you acknowledge that your personal data may be transferred to countries outside Malaysia for the purposes described in this Policy, subject to the safeguards described above.

13 Policy Updates

mari44 reserves the right to update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or the services we provide. When material changes are made, we will notify registered players via email to their registered address and/or through a prominent notice on the Platform. The date at the top of this Policy indicates when it was last reviewed and updated.

Continued use of the Platform following the effective date of any updated Policy constitutes acknowledgement of and agreement to the revised terms. The current version of this Policy is always available at mari44.com/privacy-policy.

14 Contact & Complaints

For any questions, concerns, or rights requests relating to this Privacy Policy or the processing of your personal data by mari44, please contact us at: [email protected] (plain text — not a clickable link).

If you are not satisfied with our response to a privacy complaint, you may have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction. We encourage players to contact us first to allow us the opportunity to address your concern directly before escalating to a regulatory body.