Privacy Policy

This Privacy Policy ("Policy") is published by mrace88 ("we", "us", "our", or "the Platform"), the operator of the online casino and sports betting platform accessible at https://mrace88.lat/. mrace88 is committed to protecting the personal data of all individuals who interact with our Platform, including registered players, prospective users, and visitors.

This Policy explains how mrace88 collects, processes, stores, shares, and protects personal data in connection with the use of our Platform, and sets out the rights available to individuals whose data we process. It applies to all players located in Malaysia and other jurisdictions from which the Platform is accessible, subject to applicable local data protection laws.

By registering an account on mrace88, making a deposit, or otherwise using any features of the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must not access or use the mrace88 Platform.

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person — including but not limited to name, identification number, contact details, financial data, device identifiers, and behavioural data.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, deletion, or any combination thereof.
• "Data Controller" means mrace88, which determines the purposes and means of processing Personal Data collected through the Platform.
• "Data Subject" means any identified or identifiable natural person whose Personal Data is processed by mrace88 — in most cases, a registered player or visitor to the Platform.
• "Third Party" means any natural or legal person other than the Data Subject, mrace88, or persons authorised to process Personal Data under mrace88's direct supervision.
• "Cookies" means small text files placed on a user's device by a website, used to store session information, preferences, and usage data.
• "KYC" means Know Your Customer — the identity and document verification process required under applicable anti-money laundering and responsible gambling obligations.

mrace88 collects Personal Data across several categories depending on your interaction with the Platform. The categories and examples of data collected are set out in the table below:

mrace88 collects Personal Data through the following mechanisms:

• Direct submission: Information you provide when registering an account, completing KYC verification, submitting support requests, or communicating with our team via live chat or email;
• Automated collection: Technical and usage data collected automatically when you access and interact with the Platform, including via cookies, web beacons, server logs, and analytics tools;
• Transaction records: Financial data generated when you make deposits or withdrawals through integrated payment systems including DuitNow, FPX, Touch 'n Go eWallet, and banking partners;
• Third-party verification services: Identity verification data obtained through KYC service providers engaged by mrace88 to meet anti-money laundering and responsible gambling regulatory obligations;
• Publicly available sources: In limited circumstances, mrace88 may supplement account information with data from publicly available sources to assist in fraud detection or compliance screening.

mrace88 processes Personal Data only where a valid legal basis exists. The legal bases upon which we rely are as follows:

1. Contractual necessity: Processing required to fulfil our contractual obligations to you as a registered player — including operating your account, processing deposits and withdrawals, and providing platform services;
2. Legal obligation: Processing required to comply with applicable laws and regulatory requirements, including KYC and anti-money laundering legislation, responsible gambling frameworks, and data protection law;
3. Legitimate interests: Processing carried out to pursue mrace88's legitimate business interests where these do not override your fundamental rights and freedoms — including fraud detection, platform security, and service improvement;
4. Consent: Where you have provided explicit consent to specific processing activities — for example, receipt of marketing communications or participation in optional data sharing programmes. Consent may be withdrawn at any time without affecting the lawfulness of processing carried out prior to withdrawal.

mrace88 uses the Personal Data we collect for the following purposes:

• Account management: Creating, verifying, and maintaining your player account; processing login and authentication; managing account preferences and settings;
• Payment processing: Facilitating deposits and withdrawals via Malaysian payment methods (Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, Visa, Mastercard) and cryptocurrency channels (BTC, ETH, USDT, LTC);
• Identity verification and KYC: Confirming your identity, age, and eligibility to use the Platform in accordance with our regulatory and responsible gambling obligations;
• Platform operation and personalisation: Delivering, maintaining, and improving Platform features; personalising your gaming and betting experience based on your usage patterns;
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, money laundering, account takeover, and other security threats;
• Responsible gambling: Monitoring betting behaviour for signs of problem gambling; enforcing deposit limits and self-exclusion requests; contacting players proactively where welfare concerns are identified;
• Customer support: Responding to your queries, complaints, and dispute submissions; maintaining records of support interactions;
• Legal compliance: Fulfilling regulatory reporting obligations and responding to lawful requests from competent authorities;
• Marketing (where consented): Sending promotional communications about relevant mrace88 offers, bonuses, and platform updates. You may opt out of marketing communications at any time.

mrace88 does not sell, rent, or commercially transfer your Personal Data to third parties for their own marketing purposes. We disclose Personal Data only in the circumstances described below:

• Payment service providers: We share necessary financial and identity data with payment processors — including e-wallet operators (Touch 'n Go eWallet, Boost, GrabPay), banking partners (Maybank, CIMB, Public Bank, Hong Leong Bank), FPX and DuitNow infrastructure providers, and cryptocurrency exchange interfaces — solely to process your transactions;
• KYC and identity verification providers: We share relevant identity documents and data with third-party KYC service providers engaged specifically to perform identity and age verification in accordance with our regulatory obligations;
• Game content providers: To operate live casino games and third-party slots, limited session and wager data is transmitted to the relevant game studios and platform providers. These providers are bound by data processing agreements;
• IT and infrastructure providers: Hosting, cloud storage, cybersecurity, and analytics service providers may access Personal Data in the course of providing services to mrace88. All such providers are required to handle data in accordance with our instructions and applicable data protection standards;
• Regulatory and law enforcement authorities: We may disclose Personal Data to regulatory bodies, law enforcement agencies, or courts where we are required to do so by applicable law, court order, or lawful authority request. We will notify affected players of such disclosures where legally permitted to do so;
• Professional advisors: Legal counsel, auditors, and compliance consultants may access Personal Data on a need-to-know basis, subject to professional confidentiality obligations.

mrace88 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device by your browser. They allow us to recognise you across sessions, maintain login state, and gather usage analytics.

The types of cookies used on the mrace88 Platform include:

• Strictly necessary cookies: Essential for core Platform functionality — including session management, login state, and payment processing flows. These cookies cannot be disabled without impairing Platform operation;
• Performance and analytics cookies: Used to understand how players navigate the Platform, which features are most used, and where performance improvements can be made. Data collected is aggregated and anonymised where possible;
• Functional cookies: Used to remember your preferences — such as language settings, display preferences, and recently visited sections — to provide a more personalised experience;
• Security cookies: Used to detect fraudulent activity, identify suspicious login patterns, and protect account integrity.

You may manage cookie preferences through your browser settings. Please note that disabling certain categories of cookies may affect the functionality of the Platform. A cookie consent notice is displayed to new visitors and provides granular control over non-essential cookie categories.

mrace88 retains Personal Data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following general retention guidelines apply:

• Active account data: Retained for the duration of the account's active status plus a post-closure period to satisfy regulatory and fraud-prevention requirements;
• Transaction and financial records: Retained for a minimum of six (6) years from the date of each transaction in accordance with applicable financial record-keeping obligations;
• KYC and identity documents: Retained for a minimum of five (5) years following account closure or the completion of the relevant transaction, in line with anti-money laundering regulatory requirements;
• Support communications: Retained for up to three (3) years from the date of closure of the relevant support case;
• Marketing consent records: Retained for the duration of the consent plus two (2) years following withdrawal of consent, to maintain evidence of the consent history.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised so that it can no longer be attributed to an identifiable individual.

Subject to applicable data protection laws, you have the following rights in relation to your Personal Data held by mrace88. You may exercise any of these rights by contacting our support team as detailed in Section 14.

mrace88 will respond to all data rights requests within 30 calendar days of receipt. Where a request is complex or we receive a large volume of requests simultaneously, this period may be extended by a further 60 days, in which case we will notify you of the extension and the reason for it within the initial 30-day window.

mrace88 implements a comprehensive suite of technical and organisational security measures designed to protect your Personal Data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data in transit between user devices and our servers;
• AES-256 encryption for sensitive data at rest, including payment credentials and identity documents;
• Role-based access controls ensuring that employee access to Personal Data is limited strictly to those with a legitimate need;
• Regular independent security audits and penetration testing of Platform infrastructure;
• Two-factor authentication (2FA) available to all players and mandatory for administrative access;
• Real-time fraud detection and anomaly monitoring systems;
• Regular staff training on data protection obligations and security best practices.

Despite these measures, no internet-based platform can guarantee absolute security. In the event of a data breach that is likely to result in a significant risk to your rights and freedoms, mrace88 will notify affected individuals without undue delay in accordance with applicable data breach notification requirements.

The mrace88 Platform is strictly intended for persons who are 21 years of age or older. We do not knowingly collect, process, or store Personal Data from individuals under the age of 21. mrace88 employs robust age verification procedures during account registration to enforce this restriction.

If mrace88 discovers or is notified that Personal Data has been collected from an individual under the age of 21, we will immediately suspend the relevant account, delete all associated Personal Data, and refund any deposited funds to the original payment method. Any winnings generated by an underage account will be forfeited in full.

mrace88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform operations. The "Last Reviewed" date at the top of this page will be updated accordingly whenever changes are made.

For material changes that significantly affect your rights or how we process your Personal Data, mrace88 will provide advance notice via the email address registered to your account where reasonably practicable, or through a prominent notice on the Platform prior to the change taking effect.

Your continued use of the mrace88 Platform following the effective date of any amended Privacy Policy constitutes your acknowledgement of and agreement to the revised terms. We encourage you to review this Policy periodically to remain informed of how your data is protected.

For any questions, concerns, or requests relating to this Privacy Policy, or to exercise any of your data rights as described in Section 10, please contact the mrace88 support team through the following channels:

• Email: [email protected] — please include "Privacy Request" in your subject line for efficient routing
• Live Chat: Available 24/7 via the in-platform chat function, accessible after logging in to your account
• Response Commitment: All privacy-related queries will receive an initial acknowledgement within 24 hours and a substantive response within 30 calendar days

For general support, account queries, and payment assistance, our full support team is available around the clock. For responsible gambling support tools and resources, please visit our Responsible Gambling page.