Effective Date: 1 January 2026
This Privacy Policy applies to all personal data collected by mr8 through the mr8.one platform, including during account registration, gaming activity, payment processing, customer support interactions, and marketing communications. By using the mr8 Platform, you consent to the data practices described in this Policy.
1. Introduction
mr8 ("we", "us", "our") operates the online gaming platform accessible at mr8.one ("the Platform"). We are committed to protecting the privacy and personal data of all users ("you", "your") who access or use our services. This Privacy Policy ("Policy") sets out in detail how we collect, process, store, share, and protect your personal information, and what rights you have in relation to that data.
This Policy is to be read alongside our Terms & Conditions and Responsible Gaming Policy, both of which are available on mr8.one. By creating an mr8 account or using any part of the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.
mr8 takes its data protection obligations seriously and has implemented technical and organisational measures consistent with applicable data protection standards, including obligations relevant to operators serving users in Malaysia.
2. Personal Data We Collect
We collect personal data from you in the following categories depending on how you interact with the mr8 Platform:
2.1 Registration and Identity Data
- Full legal name as it appears on your identity document
- Date of birth (for age verification purposes — mr8 requires all players to be 21 or older)
- Email address
- Residential address
- Mobile phone number
- Nationality and country of residence
- Government-issued identification document details (for KYC verification purposes)
2.2 Financial and Transaction Data
- Payment method details (e-wallet account identifiers for Touch n Go eWallet, Boost, GrabPay; bank account details for DuitNow and FPX transfers; TRON wallet addresses for USDT TRC20 transactions)
- Transaction history including deposits, withdrawals, and bonus claims
- Account balance history
2.3 Gaming and Behavioural Data
- Game session history including game titles, wager amounts, wins, losses, and session duration
- Sports betting history including markets, stake amounts, and results
- Login activity, including timestamps, IP addresses, and device information
- Responsible gaming tool preferences and activity (deposit limits, cooling-off periods, self-exclusion status)
2.4 Technical and Device Data
- IP address and approximate geographic location derived therefrom
- Browser type, version, and language settings
- Operating system and device type
- Cookies and similar tracking technology data (see Section 5)
- Referring URL and Platform navigation behaviour
2.5 Communications Data
- Records of live chat interactions with mr8 support staff
- Email correspondence with mr8
- Feedback, complaints, and survey responses submitted by you
3. How We Use Your Personal Data
mr8 uses the personal data we collect for the following purposes:
- Account administration: creating and managing your mr8 account, verifying your identity and age, and communicating essential account updates.
- Service delivery: enabling access to games, processing bets and wagers, displaying accurate account balances, and providing a personalised Platform experience.
- Payment processing: facilitating deposits and withdrawals via your chosen payment method, detecting and preventing payment fraud, and complying with financial due diligence requirements.
- Identity and age verification (KYC): verifying that you meet the 21+ eligibility requirement and that account information is accurate and current, in line with international gaming authority obligations.
- Responsible gaming: monitoring gaming activity for indicators of problem gambling, administering responsible gaming tools such as deposit limits and self-exclusion, and referring at-risk players to appropriate support resources.
- Security and fraud prevention: detecting, investigating, and preventing unauthorised access, fraudulent transactions, money laundering, and other illegal or prohibited activity on the Platform.
- Customer support: responding to your enquiries, complaints, and support requests, and maintaining records of interactions for quality and compliance purposes.
- Legal and regulatory compliance: fulfilling obligations under applicable laws, responding to regulatory enquiries, and cooperating with law enforcement or gaming authority investigations as required.
- Marketing communications: where you have provided consent, sending promotional offers, bonus notifications, and platform updates. You may withdraw consent at any time.
- Platform improvement: analysing aggregated, anonymised usage data to improve the Platform's performance, navigation, and game offering.
4. Legal Basis for Processing
mr8 processes your personal data on the following legal grounds:
- Contractual necessity: Processing required to perform the contract between you and mr8 — for example, creating and managing your account, processing deposits, and enabling game access.
- Legal obligation: Processing required to comply with applicable legal requirements, including KYC, anti-money laundering (AML) obligations, and gaming regulatory requirements.
- Legitimate interests: Processing carried out in pursuit of mr8's legitimate interests in fraud prevention, platform security, responsible gaming compliance, and service improvement, where such interests are not overridden by your rights and interests.
- Consent: Processing carried out with your express consent, including marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
5. Cookies and Tracking Technologies
mr8 uses cookies and similar tracking technologies on the Platform for the following purposes:
- Essential cookies: Required for the Platform to function, including maintaining your login session and remembering language and currency preferences. These cannot be disabled without affecting Platform functionality.
- Analytics cookies: Used to collect aggregated information about how users navigate the Platform, which pages are most visited, and how game sessions perform. This data is used in anonymised form only.
- Security cookies: Used to detect fraudulent login attempts and enforce rate limiting on authentication requests.
You may manage cookie preferences through your browser settings. Disabling essential cookies will impair your ability to log in or use core Platform features.
6. Sharing of Personal Data
mr8 does not sell or rent your personal data to third parties. We may share your personal data with the following categories of recipients in the circumstances described:
- Payment service providers: E-wallet operators (Touch n Go, Boost, GrabPay), DuitNow processors, Malaysian banks participating in FPX, and USDT TRC20 network infrastructure — strictly for the purpose of processing transactions.
- Identity verification providers: Third-party KYC and AML screening services used to verify your identity and detect financial crime risks, as required by international gaming authority standards.
- Game software providers: Certified game studios supplying the mr8 casino and sportsbook content may receive session data required for game operation, logging, and dispute resolution.
- Technology and infrastructure providers: Cloud hosting, content delivery, and security service providers that process data on mr8's behalf under strict data processing agreements.
- Legal and regulatory authorities: Law enforcement, gaming regulatory authorities, tax authorities, or courts where mr8 is legally obligated or compelled to disclose personal data.
All third-party service providers who process personal data on behalf of mr8 are required to do so under written data processing agreements that impose obligations equivalent to those binding mr8 under this Policy.
7. International Data Transfers
As an internationally operated gaming platform, some of the third-party service providers used by mr8 may be located outside Malaysia. Where personal data is transferred internationally, mr8 takes appropriate measures to ensure that such transfers are conducted in accordance with applicable data protection requirements, including through the use of contractual safeguards where required.
By using the mr8 Platform, you acknowledge that your personal data may be transferred to and processed in jurisdictions outside Malaysia, subject to the protections described in this section.
8. Data Retention
mr8 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or accounting obligations. Indicative retention periods are as follows:
- Account and identity data: Retained for the duration of the account relationship and for a minimum of five (5) years following account closure, in compliance with AML and KYC recordkeeping requirements.
- Financial transaction records: Retained for a minimum of seven (7) years following the date of each transaction.
- Game session and betting history: Retained for a minimum of three (3) years following the date of each session.
- Customer support communications: Retained for two (2) years following resolution of the relevant support interaction.
- Marketing consent records: Retained until consent is withdrawn, plus one (1) year thereafter for evidential purposes.
Following the expiry of applicable retention periods, personal data is securely deleted or anonymised.
9. Data Security
mr8 implements a layered approach to data security. Technical and organisational measures in place include:
- 256-bit SSL/TLS encryption across all Platform connections
- Encrypted storage of passwords using one-way hashing algorithms
- Strict role-based access controls limiting staff access to personal data on a need-to-know basis
- Regular security vulnerability assessments and penetration testing
- Real-time monitoring for unusual login activity, data exfiltration attempts, and network intrusion
- Two-factor authentication available to all mr8 account holders
While mr8 takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your mr8 login credentials and for notifying mr8 support immediately if you suspect any compromise of your account.
10. Your Data Protection Rights
Subject to applicable law, you have the following rights in relation to your personal data held by mr8:
- Right of access: You may request a copy of the personal data mr8 holds about you.
- Right of rectification: You may request correction of inaccurate or incomplete personal data.
- Right of erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations.
- Right to restrict processing: You may request that mr8 restrict the processing of your personal data in certain circumstances, such as where accuracy is contested.
- Right to data portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you may request a copy of your data in a machine-readable format.
- Right to object: You may object to processing based on legitimate interests, including profiling for marketing purposes.
- Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, please contact mr8 support via in-platform live chat. We will respond to verifiable requests within thirty (30) days. In some cases, mr8 may be required to retain certain data notwithstanding an erasure request, where legal, regulatory, or contractual obligations apply.
11. Children's Data and the 21+ Policy
The mr8 Platform is strictly intended for persons aged 21 years and over. mr8 does not knowingly collect personal data from persons under the age of 21. If we become aware that personal data has been submitted by or on behalf of a person under 21, we will take immediate steps to delete that data and close the associated account.
If you are a parent or guardian and believe that a person under 21 has created an mr8 account or submitted personal data to the Platform, please contact mr8 support immediately via in-platform live chat or at [email protected].
12. Third-Party Links
The mr8 Platform does not contain links to third-party websites other than those strictly necessary for payment processing. This Policy applies solely to personal data collected through the mr8.one domain and does not govern the privacy practices of any external party. mr8 is not responsible for the privacy practices or content of any third-party service.
13. Changes to This Privacy Policy
mr8 reserves the right to update this Privacy Policy at any time. Where changes are material, we will notify registered players via email or via a prominent in-Platform notification prior to the changes taking effect. The "Effective Date" displayed at the top of this Policy indicates when the current version was last updated.
Continued use of the mr8 Platform following any update to this Policy constitutes acceptance of the revised Policy. If you do not agree to the revised Policy, you should cease use of the Platform and close your account.
14. Contact and Data Enquiries
For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by mr8, please contact us through the following channels:
- Live Chat Support: Available 24/7 from within your mr8 account dashboard after signing in.
- Email: [email protected] (displayed as plain text — not a clickable link)
This Privacy Policy was last updated on 1 January 2026. mr8 reserves all rights not expressly granted under this Policy.