Privacy Policy
mrat88 Online Casino

This Privacy Policy ("Policy") is issued by mrat88 ("we", "us", "our", "the Platform") and applies to all personal data collected from individuals ("you", "Player", "User") who access or use the mrat88 website at https://mrat88.cam, its associated mobile applications, and any related services (collectively, the "Services").

mrat88 is committed to processing personal data in a fair, transparent, and lawful manner in accordance with applicable data protection and privacy laws, including the Personal Data Protection Act 2010 (PDPA) of Malaysia. By registering an account or using the mrat88 Services, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.

This Policy should be read in conjunction with the mrat88 Terms & Conditions and Responsible Gambling Policy, both of which are incorporated by reference.

For the purposes of this Privacy Policy, the following terms shall have the meanings ascribed to them below:

mrat88 collects the following categories of personal data from players and users of the platform:

Identity & Contact Data

• Full legal name as stated on government-issued identification (MyKad or passport)
• Date of birth (to verify minimum age of 21 years)
• Residential address, including city (e.g., Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam)
• Email address and mobile phone number used for account registration
• Copies of government-issued identification documents submitted during KYC verification

Financial & Transaction Data

• Payment method details (e-wallet identifiers for Touch 'n Go eWallet, Boost, GrabPay; bank account numbers for DuitNow, FPX, Maybank, CIMB, Public Bank, RHB, Hong Leong Bank transfers)
• Deposit and withdrawal transaction history, including amounts, timestamps, and processing status
• Cryptocurrency wallet addresses used for USDT TRC20 or BTC transactions
• Account balance information and bonus credit records

Technical & Usage Data

• IP address and geolocation data at the time of account access
• Device type, operating system, and browser information
• Login timestamps and session duration data
• Game activity logs, betting history, and wagering records
• Platform navigation data and feature interaction logs

Communication Data

• Records of live chat, email, and support ticket interactions with the mrat88 customer service team
• Survey responses and feedback submitted voluntarily by players
• Preferences for marketing communications, where consent has been given

mrat88 collects personal data through the following channels and methods:

• Direct Collection: Information you provide when registering an account, completing KYC verification, submitting deposit or withdrawal requests, contacting our support team, or participating in promotions.
• Automated Technical Collection: Data collected automatically when you access and use the platform, including through cookies, log files, and similar tracking technologies as described in Section 8.
• Payment Processors: Transaction confirmation data received from our integrated Malaysian payment providers, including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and bank transfer systems.
• Identity Verification Providers: Identity confirmation data returned by third-party KYC and anti-fraud verification services used to validate government-issued documents.
• Publicly Available Sources: Where required for compliance or fraud prevention purposes, mrat88 may supplement account data with information from publicly accessible sources.

mrat88 processes your personal data only for specific, stated, and legitimate purposes. The table below sets out the primary purposes for which your data is processed:

mrat88 processes your personal data on the following legal bases, as applicable under the Personal Data Protection Act 2010 (PDPA) of Malaysia and other applicable data protection law:

• Contractual Necessity: Processing required to fulfil our obligations under the agreement established when you register an account and accept the Terms & Conditions — including account operation, payment processing, and service delivery.
• Legal Obligation: Processing necessary to comply with applicable laws and regulations, including AML obligations, age verification requirements, and responses to lawful regulatory or law enforcement requests.
• Legitimate Interests: Processing for fraud prevention, platform security, abuse detection, and service improvement, where these interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for marketing communications and certain cookie categories, where you have provided explicit, freely given, and informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

mrat88 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your data with the following categories of recipients, and only to the extent necessary for the stated purpose:

• Payment Processors: Malaysian payment providers including but not limited to Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX infrastructure providers, and bank partners (Maybank, CIMB, Public Bank, RHB, Hong Leong Bank) — solely for the purpose of processing your deposits and withdrawals.
• KYC & Identity Verification Providers: Accredited third-party identity verification services used to confirm your identity and age as part of mandatory KYC processes.
• Fraud Prevention & Security Services: Specialised anti-fraud and security platforms used to monitor for suspicious activity, account takeovers, and financial crimes.
• Platform Technology Providers: Game studio providers, software infrastructure partners, and cloud hosting services that support the technical operation of the mrat88 platform. All such providers are bound by data processing agreements.
• Regulatory Authorities & Law Enforcement: Government bodies, regulatory agencies, and law enforcement authorities in Malaysia and other applicable jurisdictions, where disclosure is required by applicable law or a valid legal order.
• Professional Advisers: Legal counsel, auditors, and compliance consultants, where access is strictly necessary for professional advisory services and is governed by confidentiality obligations.

mrat88 uses cookies and similar tracking technologies on its platform. Cookies are small data files stored on your device that help us deliver a functional, personalised, and secure experience.

Categories of cookies we use:

• Strictly Necessary Cookies: Essential for the platform to function. These include session management, authentication, and security cookies. These cannot be disabled without significantly impairing your ability to use the Services.
• Functional Cookies: Used to remember your preferences, such as language settings, last visited game, and display options. These improve your experience but are not strictly required.
• Analytics Cookies: Used to collect aggregate data about platform usage, page performance, and user navigation patterns. This data is anonymised and used to improve platform functionality. Require your consent.
• Marketing Cookies: Used to deliver relevant promotional content where you have consented to receive marketing communications. These are not placed without explicit consent.

You may manage your cookie preferences through your browser settings. Disabling certain categories of cookies may affect the functionality of the mrat88 platform. Note that strictly necessary cookies cannot be disabled as they are required for basic platform operation.

mrat88 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and mrat88 servers
• Encryption of sensitive data at rest, including payment information and identity documents
• Two-factor authentication (2FA) available for all player accounts
• Role-based access controls restricting internal staff access to personal data on a need-to-know basis
• Regular penetration testing and security audits conducted by independent third-party security firms
• Secure data centre infrastructure with physical access controls and 24/7 monitoring
• Incident response procedures with defined timelines for breach notification where required by law

mrat88 retains personal data for only as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following general retention principles apply:

• Active Account Data: Retained for the duration of your account relationship with mrat88 and for a defined period following account closure.
• KYC and Identity Documents: Retained for a minimum of five (5) years following account closure, as required by AML and financial regulatory obligations applicable to gaming platforms.
• Transaction Records: Financial transaction records are retained for a minimum of seven (7) years in accordance with standard financial record-keeping requirements.
• Support and Communication Records: Customer service interactions are retained for up to three (3) years following account closure to support dispute resolution and service quality review.
• Marketing Data: Retained only for as long as your consent remains active. Withdrawn consent results in prompt removal from marketing lists, subject to any legally required retention periods.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to an identifiable individual.

As a data subject under the Personal Data Protection Act 2010 (PDPA) of Malaysia, you have the following rights in relation to your personal data held by mrat88. To exercise any of these rights, please contact our support team at [email protected] or via our 24/7 live chat.