Mrace8 Privacy Policy – How We Protecting Personal Data Malaysian Users

Mrace8 is an online entertainment platform serving the needs of Malaysian players. In the course of operating the platform, mrace8 collects and processes users' personal data for legitimate purposes that are clearly set out in this policy. We understand that privacy is a sensitive matter, and we take this responsibility very seriously.

This Privacy Policy applies to all mrace8 users, including website visitors, registered members, and any individual who interacts with our platform via our website, mobile app, or official communication channels. It covers all personal data collected through the main mrace8 platform at mrace8.com.

As a responsible data controller under Malaysia's Personal Data Protection Act 2010, mrace8 is committed to ensuring your personal data is processed lawfully, fairly, and transparently. We only collect data that is genuinely necessary to deliver our services effectively, and we never use user data for purposes not stated in this policy without obtaining prior consent.

Mrace8 collects various types of personal data depending on how you interact with our platform. We only collect data that is necessary and relevant to the services you use.

Data You Provide Directly:

Automatically Collected Data:

• Device & Technical Data: IP address, browser type, operating system, device model, and screen resolution
• Platform Activity Data: Games played, session duration, betting history, and usage patterns
• Financial Transaction Data: Deposit and withdrawal history in RM, payment methods used (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX), and transaction records
• Cookie Data: Information stored via cookies and similar tracking technologies to improve user experience
• Location Data: Approximate location information based on IP address for security and access verification purposes

Data from Third-Party Sources:

In certain cases, mrace8 may receive your data from legitimate third-party sources, such as identity verification service providers or payment processors (for example, transaction status verification from DuitNow or FPX systems), for the purposes of verifying your identity or completing a financial transaction.

Mrace8 uses collected personal data only for legitimate purposes that are relevant to the operation of the platform. Below is a full list of the purposes for which your data is used:

• Account Management: Creating and managing your user account, including the registration process, identity verification, and detection of suspicious login activity
• Financial Transaction Processing: Processing deposits and withdrawals in MYR via your preferred payment methods, including Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, Maybank2u, and CIMB Clicks
• Gaming Service Provision: Enabling you to access and enjoy a wide range of games including slots, baccarat, Live Casino, poker, Sports Betting on the Malaysia Super League, EPL, badminton, e-sports, lottery, and match odds
• Security & Fraud Prevention: Detecting and preventing unauthorised access, fraud, bonus abuse, money laundering, and other unlawful activities
• Customer Support: Responding to your enquiries and complaints, providing technical support, and resolving transaction or game disputes
• Marketing Communications: Sending information about mrace8 promotions, bonuses, and exclusive offers – you may opt out of these communications at any time through your account settings
• Analytics & Improvement: Understanding platform usage patterns to improve the user experience, identify technical issues, and develop new features that are more relevant to Malaysian players
• Legal Compliance: To fulfil legal obligations under PDPA 2010, financial reporting requirements, and any directives from lawful authorities
• Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling and providing appropriate self-exclusion tools

Mrace8 does not sell, rent, or transfer your personal data to third parties for their own marketing purposes. However, in the course of operating the platform, there are certain circumstances where we need to share your data with the following parties:

• Payment Service Providers: Transaction information required for payment processing is shared with payment providers such as DuitNow, FPX, and e-wallet operators (Touch 'n Go, GrabPay, Boost, ShopeePay) solely for the purpose of processing your deposits and withdrawals. These providers maintain their own privacy policies and are subject to Malaysian financial regulations.
• Gaming Service Provider: To provide access to third-party games (such as slots or Live Casino from providers partnered with mrace8), basic information such as your username and account ID may be shared with the relevant provider.
• Identity Verification Service Provider: For age and identity verification purposes in compliance with legal requirements, certain information may be shared with accredited verification service providers.
• Legal Authorities: mrace8 will disclose user data to the relevant Malaysian authorities where required by law, court order, or in the course of a legitimate criminal investigation.
• Technical Service Providers: Cloud infrastructure providers, hosting services, and analytics tools used by mrace8 may process some of your data, but they are bound by strict confidentiality agreements and may only use such data in accordance with mrace8's instructions.

All third parties who receive mrace8 user data are required to protect that data to a standard no less than that set out in this Privacy Policy.

Mrace8 applies multiple layers of technical and organisational security controls to protect your personal data against unauthorised access, alteration, disclosure, or accidental deletion.

Technical Protection:

• 256-bit SSL Encryption: All data transmitted between your device and mrace8 servers is encrypted using the latest TLS/SSL protocols
• Stored Data Encryption: Sensitive data such as payment information and passwords are stored in encrypted form — your password cannot be read by anyone, including mrace8 staff
• Two-Factor Authentication (2FA): 2FA options are available for all accounts to provide an added layer of security
• 24/7 Security Monitoring: A continuous threat detection system monitors suspicious activity and unauthorised access to our servers
• Environment Segregation: User data is stored in an isolated environment with strict internal access controls

Organisational Safeguards:

• Access to user data is restricted to staff with a legitimate business need, based on a strict need-to-know principle
• All staff with access to user data are required to sign a confidentiality agreement and complete regular privacy training
• Internal and external security audits are conducted regularly to identify and address any vulnerabilities

Mrace8 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

Types of Cookies We Use:

• Essential Cookies: Required for the platform to function properly – including maintaining your login session, processing transactions, and keeping your account secure. These cookies cannot be disabled.
• Performance Cookies: We collect information on how you use the platform (e.g., most frequently visited pages, time spent on each game) to help us improve the user experience.
• Functional Cookies: Remembers your preferences such as selected language, favourite games, and display settings to deliver a more personalised experience.
• Analytics Cookies: Helps us understand platform traffic and usage patterns in aggregate for service improvement purposes.

You can control or delete cookies through your browser settings. Please note that disabling essential cookies may affect certain functions of the mrace8 platform. For detailed guidance on managing cookies in your browser, refer to the relevant browser help documentation.

Mrace8 retains your personal data only for as long as necessary for the purposes stated in this policy, or as required by applicable Malaysian law. The following are our data retention guidelines:

• Active Account Data: Retained for as long as your account is active and for 6 months after account closure, to allow for the resolution of any outstanding claims or disputes
• Financial Transaction Records: Retained for a minimum of 7 years from the transaction date to comply with Malaysia's financial and tax legal requirements
• Security Logs: Retained for 12 months for security investigation and fraud prevention purposes
• Customer Support Communication Records: Retained for 2 years for reference and dispute resolution purposes
• Aggregate Analytics Data: Data that has been anonymised may be retained for longer periods for business analytics purposes without compromising individual privacy

When data is no longer needed, mrace8 will securely delete or anonymise it in accordance with established procedures. You may request early deletion of your data by contacting our support team; however, such requests are subject to minimum legal retention requirements.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by mrace8:

To exercise any of the rights above, please contact the mrace8 support team via Live Chat or email at support@mrace8.com. We may need to verify your identity before processing any data-related requests.

The mrace8 platform is strictly for adults aged 18 and above. mrace8 does not knowingly collect or process personal data from individuals under the age of 18.

Should we discover that a child's personal data has been collected without our knowledge – for example, through registration using false age information – we will promptly take the following steps:

• Immediately terminating the account in question
• Deleting all personal data associated with the account
• Processing the refund of any remaining credit balance in accordance with established procedures

Parents or guardians who believe their child under the age of 18 has registered on mrace8 without permission are urged to contact us immediately at support@mrace8.com for immediate action.

The mrace8 platform may contain links or references to third-party websites or services in certain contexts. This Privacy Policy applies solely to the mrace8 platform and does not cover those third-party websites or services.

Mrace8 is not responsible for the privacy practices or content of any third-party websites that may be referenced in connection with our platform. We encourage you to read the privacy policy of each website you visit independently. Any interaction you have with third-party websites is entirely at your own risk.

Payment service providers including DuitNow, FPX, Touch 'n Go eWallet, GrabPay, Boost, and ShopeePay each maintain their own privacy policies governing how they handle your data when financial transactions are processed through their platforms.

Mrace8 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, legislative developments, or platform improvements. When significant amendments are made, we will:

• Updating the "Last Updated" date shown at the top of this document
• Displaying clear notices within the mrace8 platform to inform active users of any such changes
• Sending notification emails to all users with active accounts and valid email addresses

We encourage you to revisit this Privacy Policy page periodically to stay informed about how we protect your data. Continued use of the mrace8 platform after any amendments take effect will be considered your acceptance of the revised policy.

If you have any questions, concerns, or complaints about how mrace8 handles your personal data, we encourage you to contact us directly. Our team is ready to help and will work to resolve any privacy issues transparently and within a reasonable timeframe.

• Live Chat: Available 24/7 directly within the platform – the fastest way to get a response
• Privacy Email: support@mrace8.com – include "Privacy Enquiry" in your email subject line
• Frequently Asked Questions: Visit the page FAQ us for answers to the most frequently asked privacy questions

For formal complaints regarding PDPA violations, you also have the right to submit a complaint to Malaysia's Department of Personal Data Protection (under the Ministry of Communications and Digital).