Privacy Policy

1. Introduction

This Privacy Policy ("Policy") explains how mr8 ("the Platform", "we", "us", "our") collects, uses, stores, discloses, and protects the personal data of individuals ("you", "Player", "User") who access or use the mr8 website at https://mr8.bio and all related gaming services, including the sportsbook, live casino, slots, jackpot games, account portal, and customer support functions (collectively, "the Services").

mr8 is committed to handling your personal data responsibly and in accordance with applicable data protection principles, including those imposed by the international gaming authority under whose licence mr8 operates. By registering an account and using the Services, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.

This Policy should be read alongside the mr8 Terms and Conditions, which govern the overall relationship between you and the Platform.

2. Data We Collect

2.1 Registration Data

When you create an mr8 account, we collect the personal information you provide during registration, which includes: full legal name, date of birth (for age verification — mr8 is a 21+ platform), email address, mobile phone number, and chosen username and password.

2.2 Identity Verification (KYC) Data

In order to comply with the Know Your Customer (KYC) requirements imposed by mr8's international gaming licence, we may request and collect copies of government-issued photo identification (e.g., MyKad, passport), proof of residential address (e.g., a utility bill or bank statement not more than 3 months old), and in certain cases, source of funds documentation. This information is used exclusively for identity verification, fraud prevention, and regulatory compliance purposes.

2.3 Financial Transaction Data

We collect records of all financial transactions on the Platform, including deposit amounts, withdrawal amounts, payment method identifiers (e.g., e-wallet account references, masked bank account numbers), transaction timestamps, and transaction statuses. Complete financial account numbers, full card numbers, or full bank account details are not stored on mr8 servers — these are handled by our certified payment processing partners.

2.4 Gaming Activity Data

We collect detailed records of your gaming activity on the Platform, including bets placed, game selections, session durations, wins, losses, bonus usage, and wagering history. This data is used for account management, responsible gaming monitoring, dispute resolution, regulatory compliance, and to personalise your experience on mr8.

2.5 Technical and Device Data

When you access mr8, we automatically collect certain technical data, including: IP address, browser type and version, operating system, device type and model, referring URL, pages visited, session duration, and clickstream data. This information is collected via server logs and analytics tools and is used to maintain platform security, detect fraudulent activity, and improve the performance of the Services.

2.6 Communications Data

We retain records of communications between you and mr8, including live chat transcripts, support ticket content, and email correspondence. These records are maintained for quality assurance, dispute resolution, and regulatory purposes.

3. How We Use Your Data

mr8 processes your personal data for the following purposes:

• Account Management: To create, maintain, and administer your mr8 account, including processing deposits and withdrawals and verifying your identity.
• Service Delivery: To provide you with access to all gaming products and features available on the Platform, including the sportsbook, live casino, slots, and jackpot games.
• Regulatory Compliance: To meet the obligations imposed on mr8 by its international gaming licence, including anti-money laundering (AML) checks, KYC verification, responsible gaming monitoring, and mandatory record retention.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, unauthorised account access, multi-accounting, and abuse of promotional offers.
• Responsible Gaming: To monitor player behaviour for indicators of problem gambling and to administer responsible gaming tools including deposit limits, session reminders, and self-exclusion, as set out in the mr8 Terms and Conditions.
• Customer Support: To respond to your enquiries, resolve disputes, and provide assistance with account and payment issues.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates, where you have consented to receive such communications. You may opt out of marketing communications at any time via your account settings or by contacting support.
• Platform Improvement: To analyse aggregated usage data and improve the design, performance, and content of the mr8 platform.

4. Legal Basis for Processing

mr8 processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform the contract between you and mr8 — specifically, to provide the gaming services you have registered to use, process transactions, and manage your account.
• Legal Obligation: Processing required to comply with AML regulations, KYC obligations, responsible gaming requirements, and other duties imposed by mr8's gaming licence and applicable law.
• Legitimate Interests: Processing carried out in mr8's legitimate interests — including fraud detection, platform security, and service improvement — provided these interests are not overridden by your rights and interests.
• Consent: Processing for marketing communications, where your explicit consent has been obtained. You may withdraw this consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

5. Data Sharing and Disclosure

mr8 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, solely to the extent necessary for the purposes described in this Policy:

• Payment Service Providers: E-wallet operators (Touch n Go, Boost), FPX banking partners, and other payment processors require sufficient transaction data to process your deposits and withdrawals.
• Gaming Platform Providers: Game studios and live casino operators that supply games within the mr8 platform receive limited session and wagering data necessary to operate their certified game systems.
• Identity Verification Services: Third-party KYC verification providers that assist in confirming the identity and age of players for regulatory compliance.
• Regulatory and Law Enforcement Authorities: We may disclose personal data to relevant authorities where required by law, court order, or gaming licence obligations — including disclosures relating to AML investigations.
• IT and Security Service Providers: Cloud hosting, security monitoring, and analytics providers who process data on our behalf under data processing agreements and are contractually obligated to protect it.

All third-party processors engaged by mr8 are required to implement appropriate data security measures and to process personal data only in accordance with mr8's instructions and applicable data protection law.

6. Cookies and Tracking Technologies

The mr8 platform uses cookies and similar tracking technologies to operate core platform functionality, maintain session security, and analyse usage patterns. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for the platform to function — including session authentication cookies that keep you logged in to your mr8 account. These cannot be disabled without impairing platform functionality.
• Functional Cookies: Cookies that remember your preferences and settings on the Platform, such as language and display preferences.
• Analytics Cookies: Cookies that collect aggregated, anonymised data about how players use the Platform — which pages are visited, where users come from, and how long sessions last. This data helps mr8 improve the platform experience.

You can manage or disable non-essential cookies through your browser settings. Note that disabling cookies may affect some features of the mr8 platform. For specific cookie management instructions, refer to the help documentation for your browser.

7. Data Retention

mr8 retains your personal data for as long as your account remains active and for a period thereafter as required by our gaming licence and applicable regulatory obligations. Specifically:

• Account registration data and KYC documentation is retained for a minimum of 5 years following account closure, in accordance with AML record-keeping requirements.
• Financial transaction records are retained for a minimum of 5 years from the date of the transaction.
• Gaming activity logs are retained for a minimum of 3 years for dispute resolution and regulatory audit purposes.
• Marketing consent records are retained for 3 years from the date of consent or opt-out.
• Support communications are retained for 2 years from the date of resolution.

Data is securely deleted or anonymised once the applicable retention period has expired and there is no other legal basis for continued retention.

8. Data Security

mr8 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and mr8 servers.
• Encryption of sensitive data at rest, including identity documents and financial records.
• Role-based access controls that restrict internal access to personal data to authorised personnel with a documented business need.
• Two-factor authentication (2FA) requirements for access to administrative systems.
• Regular security assessments, penetration testing, and vulnerability scanning of the mr8 platform infrastructure.
• Incident response procedures for detecting, investigating, and notifying affected parties in the event of a data breach.

While mr8 takes all reasonable precautions, no system is completely immune to security risks. You are responsible for maintaining the security of your own mr8 account credentials and for notifying support immediately if you suspect unauthorised access.

9. International Data Transfers

As an international online gaming platform, mr8 may process and store your personal data on servers located outside Malaysia. Where personal data is transferred to countries that may not provide the same level of data protection as Malaysia, mr8 takes steps to ensure that appropriate safeguards are in place — including contractual data protection clauses with service providers and ensuring that any receiving parties are bound by equivalent data protection standards as a condition of the mr8 gaming licence.

10. Your Privacy Rights

As a player on the mr8 platform, you have the following rights in relation to your personal data, subject to applicable law and regulatory exceptions:

• Right of Access: You may request a copy of the personal data mr8 holds about you.
• Right of Rectification: You may request that inaccurate or incomplete personal data be corrected. You may update most account information directly from your mr8 account dashboard.
• Right to Erasure: You may request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purposes for which it was collected. Note that mr8 may be unable to erase certain data where retention is required by gaming licence or AML obligations.
• Right to Restrict Processing: You may request that mr8 restrict the processing of your personal data in certain circumstances while a complaint is being investigated.
• Right to Object: You may object to the processing of your personal data for direct marketing purposes at any time. This includes opting out of email promotions and SMS marketing.
• Right to Data Portability: You may request a copy of the personal data you provided to mr8 in a structured, commonly used, machine-readable format.

To exercise any of these rights, contact mr8 support via live chat or the email address below. mr8 will respond to verified requests within 30 days. We may request proof of identity before processing a data subject rights request.

11. Children's Privacy

mr8 is strictly a 21+ platform. We do not knowingly collect personal data from individuals under the age of 21. If you are under 21 years of age, you are not permitted to register an account or use the Services. If mr8 becomes aware that personal data has been collected from a person under the age of 21, the account will be immediately closed and any personal data collected will be securely deleted in accordance with our data retention procedures. If you are a parent or guardian and believe your child has registered on mr8, please contact support immediately.

12. Changes to This Privacy Policy

mr8 may update this Privacy Policy from time to time to reflect changes in our data practices, regulatory requirements, or platform features. When material changes are made, we will notify registered players via the email address on file or through a notice posted prominently on the Platform prior to the changes taking effect. The effective date of the current version of this Policy is displayed at the top of this page. Continued use of the Services after the revised Policy takes effect constitutes acceptance of the updated Policy. We encourage you to review this Policy periodically.

13. Contact Us

If you have questions, concerns, or requests relating to this Privacy Policy or mr8's handling of your personal data, please contact us via:

• Live Chat: Available 24/7 through the mr8 platform after login — fastest response channel.
• Email: [email protected] (plain text — not a clickable link)

mr8 aims to respond to all privacy-related enquiries within 30 days. For urgent account security matters, please use live chat for immediate assistance.