Privacy Policy MRY66 — Your Data Protection & Information Security

Welcome to the mry66 Privacy Policy page. This document outlines our responsibilities and commitment to handling the personal information you provide when registering, using the platform, and interacting with any services offered at mry66.com.

This Privacy Policy applies to all registered members and visitors accessing the mry66 platform, covering the online casino, live games, sports betting, bingo, and all related support services. By using any part of our platform, you acknowledge that you have read and understood this policy.

If you disagree with any part of this Privacy Policy, we encourage you to stop using the platform and contact us for further clarification or to close your account.

Mry66 only collects personal information that is strictly necessary to provide the services you request and to ensure compliance with applicable legal requirements. The following are the types of information we collect:

We do not collect sensitive information such as biometric data, health information, or political views unless specifically required by applicable law. All data collection is carried out transparently and with your knowledge.

The personal data you provide to mry66 is used responsibly and solely for legitimate purposes. The following are the primary purposes for which your data is used:

• Account Management: To create, maintain, and secure your account on the mry66 platform.
• Transaction Processing: To process deposits, withdrawals, and fund transfers safely and efficiently.
• Identity Verification (KYC): To fulfill anti-money laundering legal requirements and ensure the platform is free from misuse.
• Customer Support: To provide assistance and resolve account queries or issues more effectively.
• Platform Security: To detect and prevent fraudulent activity, unauthorized access, and other security threats.
• Service Communications: To send account-related notifications, platform updates, and other important information.
• Continuous Improvement: To analyze aggregated usage patterns and improve service quality and user experience.

Mry66 will not use your data for third-party marketing purposes or sell it to advertisers without your explicit consent. Any use of data beyond the scope stated above requires your prior authorisation.

Mry66 takes a very strict approach to sharing members' personal data. As a principle, we do not share your information with external parties without a reasonable and lawful basis. The permitted exceptions are as follows:

• Payment Providers: Required financial information is shared solely with trusted payment gateways (FPX, DuitNow, Touch 'n Go eWallet) to process your transactions.
• Legal Requirements: Data may be disclosed to relevant authorities when required by court order, official investigation, or applicable law.
• Technical Service Providers: Third parties providing technical infrastructure (such as cloud services) may have limited access to data strictly within the scope of their duties and are bound by strict confidentiality agreements.
• KYC Verification: Identity information may be verified through approved third-party verification services to meet compliance requirements.

All third parties involved in processing mry66 data are required to uphold security and privacy standards equivalent to our own. Legally binding data protection agreements are signed with all our data processing partners.

Mry66 makes serious investments in security infrastructure to ensure your data is always protected against unauthorised access, loss, misuse, or alteration. The security measures we implement include:

• Data in transit is encrypted using the latest 256-bit TLS/SSL protocol.
• Data stored in databases is encrypted using the AES-256 encryption algorithm.
• Role-based access control (RBAC) ensuring only authorized personnel can access sensitive data.
• 24/7 security monitoring through automated threat detection systems and an in-house security team.
• Regular penetration testing conducted by independent security firms.
• Encrypted data backups are performed on a regular basis to ensure data recovery in the event of a system failure.
• Mandatory cybersecurity awareness training programme for all mry66 staff.

Mry66 only retains your personal data for as long as necessary to fulfil the purpose of collection and to meet legal compliance requirements. Our data retention guidelines are as follows:

• Active Account Data: Retained for the duration of the active account and continuously updated.
• Post-Account Closure Data: Retained for a minimum of 7 years after account closure to comply with anti-money laundering and tax legal requirements.
• Financial Transaction Records: Retained for 7 years in accordance with Malaysian financial reporting requirements.
• Security Logs: Retained for 12 months for security investigation purposes if required.
• KYC Verification Data: Retained for the period required by applicable compliance regulations.

Once data is no longer needed and the retention period has expired, mry66 will securely delete or anonymise it using industry-recognised methods to ensure it cannot be recovered.

Mry66 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small data files stored on your device when you visit our website.

Types of cookies we use:

• Essential Cookies: Required for core platform functions such as login session verification and security settings. These cookies cannot be disabled.
• Preference Cookies: To save your personal preferences such as language, theme, and display settings for a more comfortable experience.
• Analytics Cookies: Used internally to understand usage patterns and improve platform performance. Analytics data is processed in aggregate and is not linked to individual identities.
• Security Cookies: Helps detect unusual activity and protect your account from unauthorized access.

You can manage cookie settings through your web browser. However, disabling certain cookies may affect the functionality of the mry66 platform. We do not use third-party cookies for targeted advertising purposes.

As a mry66 member, you have rights protected under Malaysia's PDPA 2010 regarding your personal data. mry66 is committed to making it easy for you to exercise these rights through a simple and transparent process:

To exercise any of the rights above, please contact the mry66 Data Protection team via our support email. We will respond to your request within 21 business days as required by the PDPA.

In certain circumstances, your personal data may be processed or stored outside Malaysia, particularly in relation to cloud server infrastructure and global technical support services. mry66 ensures that any such international data transfers meet data protection standards equivalent to or higher than those required by Malaysia's PDPA.

Measures we take for safe international data transfers include legally binding data processing agreements, recognized standard contractual clauses, and data protection impact assessments prior to approving any new transfer.

The mry66 platform is exclusively for adults aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18. If you believe we may have collected data from a minor, please contact us immediately so we can take appropriate action, including deletion of that data.

Any account found to have been registered by a minor will be closed immediately and all associated data will be deleted upon completion of a brief investigation.

If you have any questions, concerns, or complaints regarding how mry66 handles your personal data, you may reach us through the following channels:

• Support Email: [email protected] (as plain text only)
• Live Chat: Available 24/7 via the mry66 platform
• Response Time: Within 3–5 business days for general enquiries; 21 business days for formal rights requests under PDPA

Mry66 has appointed an internal Data Protection Officer (DPO) responsible for ensuring ongoing compliance with PDPA 2010 and international best-practice privacy standards. Any complaint that cannot be resolved internally may be escalated to the Malaysia Department of Personal Data Protection.