Privacy Policy — mari44

This Privacy Policy ("Policy") is issued by mari44 ("we", "us", "our"), the operator of the online casino and sports betting platform located at https://mari44.cam ("Platform"). This Policy describes how we collect, use, store, share, and protect personal data provided by or generated through the use of our Platform by registered users ("Users", "Players", "you") and visitors.

mari44 is committed to processing personal data responsibly and in accordance with applicable international data protection principles, including those underpinning our operating licensing obligations. We recognise the importance of privacy to our users — particularly those based in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and throughout Malaysia — and we have designed our data practices with that responsibility in mind.

By accessing the Platform, registering an account, making a deposit via Touch 'n Go eWallet, DuitNow, FPX, or any other payment method, or otherwise using any service offered by mari44, you acknowledge that you have read and understood this Policy. If you do not agree to any part of this Policy, you must discontinue use of the Platform.

For the purposes of this Policy, the following definitions apply:

• "Personal Data" — any information relating to an identified or identifiable natural person, including but not limited to name, identification number, contact details, financial information, and device identifiers.
• "Processing" — any operation performed on personal data, including collection, storage, use, transmission, deletion, or anonymisation.
• "Data Controller" — mari44, as the entity that determines the purposes and means of processing personal data collected through the Platform.
• "Data Processor" — a third-party service provider that processes personal data on behalf of mari44 in accordance with our documented instructions.
• "KYC Data" — identity and address verification documents submitted by Users, including government-issued IDs (e.g., MyKad, Passport), proof of address, and selfie images.
• "Cookies" — small text files placed on a User's device by the Platform for functionality, session management, or analytical purposes.
• "Sensitive Personal Data" — a sub-category of personal data requiring heightened protection, including financial account details and government identity numbers.

mari44 collects personal data through several channels — directly from you during registration and platform use, automatically from your device and browser, and from payment service providers used to fund your account. The categories of personal data we process are set out in the table below.

We do not collect special categories of sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data) beyond what is incidentally included in identity documents submitted for KYC purposes.

mari44 uses personal data for the following purposes, each of which is supported by a lawful basis described in Section 5:

Every processing activity carried out by mari44 is supported by one or more of the following lawful bases:

• Performance of a Contract: Processing necessary to fulfil our obligations under the User Agreement, including account operation, transaction processing, and customer support.
• Legal Obligation: Processing required to comply with applicable laws and our international gaming licence, including AML screening, KYC verification, and age enforcement.
• Legitimate Interests: Processing for fraud prevention, platform security, abuse detection, and service quality improvement — where these interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for marketing communications and optional analytics tracking — where you have provided clear, freely given, specific, and informed consent. You may withdraw consent at any time.

mari44 does not sell, rent, or trade personal data to any third party for commercial purposes. We may share personal data with the following categories of authorised recipients, strictly on a need-to-know basis:

• Payment Processors: Malaysian e-wallet operators, FPX gateway providers, and banking partners required to execute deposit and withdrawal transactions in MYR.
• KYC & Identity Verification Providers: Third-party identity verification platforms that assist in processing and validating KYC documentation.
• Gaming Software Providers: Platform software and game studio vendors who process technical session data to deliver game functionality.
• Fraud & Security Partners: Specialist fraud detection services that analyse transaction and behavioural data to identify suspicious activity.
• Cloud Infrastructure Providers: Hosting and database providers who store Platform data on encrypted, access-controlled servers.
• Regulatory & Licensing Authorities: Where required by our licence or by lawful request from a competent authority.
• Legal Advisors: External legal counsel, where required for the defence or pursuit of legal claims.

All third-party processors engaged by mari44 are subject to written data processing agreements requiring them to maintain appropriate security standards and to process data only for the specific purposes for which they are engaged.

mari44 operates under international online gaming licensing, and some of our data processors and infrastructure providers are located outside Malaysia. Personal data may therefore be transferred to, and processed in, countries other than your country of residence.

Where such transfers occur, mari44 ensures that appropriate safeguards are in place to protect your data, including contractual obligations imposed on data processors that require them to maintain standards equivalent to those applicable under our licensing jurisdiction.

Malaysian users should be aware that the Personal Data Protection Act 2010 (PDPA) of Malaysia may have limited application to the processing activities of an international online gaming platform operating under an overseas licence. We nonetheless commit to honouring the data rights set out in Section 11 of this Policy for all users, regardless of jurisdiction.

mari44 retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, or for as long as required by our international licensing obligations, whichever is longer. The following general retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where data is anonymised, the resulting information no longer constitutes personal data and may be retained for statistical purposes indefinitely.

mari44 uses cookies and similar tracking technologies on the Platform. These technologies help us provide essential Platform functionality, maintain your session, and understand how the Platform is used in aggregate.

We use the following categories of cookies:

• Essential Cookies: Strictly necessary for the Platform to function. These include session cookies, authentication tokens, and security cookies. These cannot be disabled without breaking core Platform functionality.
• Functional Cookies: Remember your preferences, language settings, and account-level display options to improve your experience on return visits.
• Analytics Cookies: Collect aggregated, anonymised data about how visitors navigate the Platform to help us identify performance issues and improve user experience. Individual users are not identified from this data.

We do not use third-party advertising cookies, behavioural tracking cookies, or any cookie that tracks your activity across websites other than mari44.

mari44 implements a range of technical and organisational security measures to protect personal data against unauthorised access, loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform;
• Encryption of personal and financial data stored on Platform servers at rest;
• Role-based access controls ensuring staff can only access data necessary for their specific function;
• Two-factor authentication (2FA) available to all registered Users and mandatory for Platform administrators;
• Regular penetration testing and security audits conducted by qualified third-party security specialists;
• Intrusion detection systems and real-time monitoring for anomalous access patterns;
• Segregation of Player Funds from operational company funds at the account level.

Despite these measures, no online platform can guarantee absolute security. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify affected Users without undue delay and in accordance with our licensing obligations.

As a registered user of mari44, you hold the data rights summarised earlier in this Policy (access, rectification, erasure, portability, objection, restriction, and consent withdrawal). To exercise any of these rights, please contact us using the methods described in Section 14.

When submitting a data rights request, please provide:

• Your registered email address and account username;
• A clear description of the right you wish to exercise and the specific data concerned; and
• Sufficient identification to allow us to verify that the request is being made by the account holder.

We will acknowledge your request within five (5) business days and provide a substantive response within thirty (30) calendar days of receipt of a complete and verifiable request. Where a request is complex or where multiple requests have been received, we may extend this period by a further thirty (30) days, with prior notice to you.

Where we are unable to fulfil a request — for example, where deletion is prevented by our licensing retention obligations — we will explain the specific reason in writing.

The mari44 Platform is strictly restricted to individuals aged 21 years and above. We do not knowingly collect personal data from any person under the age of 21.

Age verification is enforced as part of the KYC process. Where we reasonably suspect that a registered account belongs to a person under 21, we will immediately suspend the account, decline all pending withdrawals, and initiate an age verification review. If a User is confirmed to be under 21, the account will be permanently closed and all associated funds returned to the originating payment method after verification of ownership.

If you become aware that a person under the age of 21 has registered an account with mari44, please contact our support team immediately so that we may take appropriate action.

mari44 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable laws, or Platform functionality. Where amendments are material — meaning they meaningfully affect your privacy rights or our obligations — we will notify registered Users by email to the address on file no fewer than fourteen (14) days prior to the revised Policy taking effect.

Non-material amendments will be reflected in an updated "Last Updated" date at the top of this page. Continued use of the Platform following the effective date of any revised Policy constitutes your acceptance of that revision.

We encourage you to review this Policy periodically, particularly before submitting any new personal data through the Platform.

For any enquiries, requests, or complaints relating to this Privacy Policy or to the processing of your personal data by mari44, please use the following contact channels:

• Live Chat: Available 24/7 via the Platform interface. This is the fastest channel for routine account data queries. Average response time under 5 minutes.
• Email: [email protected] (plain text — not a clickable link). Please use the subject line "Privacy Enquiry — [Your Account Username]" to ensure prompt routing to our data team. We aim to respond to privacy-related email enquiries within 2 business days.

Our support and compliance teams are available in English, Bahasa Melayu, and Chinese. Players from all cities and regions of Malaysia — including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, and Shah Alam — are equally served by these channels.