Privacy Policy — mabar189

4 How We Collect Personal Data

mabar189 collects personal data through the following primary channels:

• Account Registration: When you create a Player Account on the Platform, you provide identity, contact, and demographic information directly to us.
• KYC Verification: When you submit identity documents (such as your MyKad, passport, or utility bill) to complete the Know Your Customer verification process prior to processing withdrawals.
• Financial Transactions: When you make deposits or withdrawals using Malaysian payment methods including DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank2u, CIMB Clicks, Public Bank, or Hong Leong Connect, transactional metadata is recorded.
• Platform Usage: Automatically, through cookies, log files, and analytics tools, when you access and navigate the Platform. See Section 9 for details on cookies.
• Support Interactions: When you contact our 24/7 customer support team via live chat or email, the content of those communications is recorded and stored.
• Third-Party Verification Services: Where necessary for fraud prevention, age verification, or payment processing, data may be cross-referenced with authorised third-party identity verification services.

5 Data Processing & Use

mabar189 processes personal data only for the purposes described in this Policy and where a lawful basis for processing exists. The lawful bases on which we rely include: performance of a contract (providing our services to you), compliance with legal obligations, legitimate interests, and, where required, consent.

The specific purposes for which we use your personal data include:

• Establishing and managing your Player Account, including account authentication and security.
• Processing and recording deposits and withdrawals in MYR and other accepted currencies.
• Conducting KYC identity and age verification to confirm eligibility (21+ requirement) and to comply with anti-money laundering obligations.
• Providing and improving the casino, sports betting, and live dealer services on the Platform.
• Administering bonuses, promotions, and VIP loyalty programme rewards, including the mabar189 6-tier VIP programme.
• Detecting, investigating, and preventing fraudulent activity bonus abuse, multi-accounting, and other prohibited conduct.
• Complying with applicable legal and regulatory requirements, including anti-money laundering (AML) and counter-terrorism financing (CTF) obligations.
• Communicating with you in relation to your account, transactions, responsible gambling tools, and platform changes.
• Sending promotional and marketing communications, where you have consented or where a legitimate interest applies, and subject to your right to opt out.
• Conducting analytics and research to understand platform usage patterns and improve the player experience.

6 Disclosure to Third Parties

mabar189 does not sell, rent, or transfer personal data to third parties for their own marketing purposes. We may share personal data with third parties only in the limited circumstances described below, and only to the extent necessary for the stated purpose:

• Payment Service Providers: Transaction data is shared with payment processors and financial institutions required to process your deposits and withdrawals, including operators of DuitNow, FPX, and Malaysian e-wallet platforms. These parties act as independent data controllers or as our data processors under appropriate data processing agreements.
• Identity Verification Services: KYC data, including identity document images, may be shared with licensed identity verification service providers for the purpose of age and identity verification.
• Fraud Prevention & Security: Data may be shared with fraud prevention agencies and security service providers where necessary to detect or prevent fraudulent activity, money laundering, or other criminal conduct.
• Game Studio Partners: Gameplay data (game ID, stake, outcome) may be shared with licensed game studio partners for the purpose of game operation, dispute resolution, and RNG audit compliance. No personally identifiable information beyond a pseudonymous player identifier is shared for gameplay purposes.
• Regulatory & Law Enforcement Authorities: We may disclose personal data to competent regulatory bodies, law enforcement agencies, or courts where required to do so by applicable law, court order, or regulatory direction.
• Business Transfers: In the event of a merger, acquisition, or transfer of the Platform's business assets, personal data may be transferred to the acquiring entity as part of that transaction, subject to equivalent privacy protections being maintained.

7 Data Retention

mabar189 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected and to comply with applicable legal, regulatory, and contractual obligations. The following retention principles apply:

• Active Player Accounts: Personal data associated with an active Player Account is retained for the duration of the account's active status plus a minimum of five (5) years following account closure, in accordance with anti-money laundering record-keeping requirements.
• Transaction Records: Financial transaction data, including deposit and withdrawal records denominated in MYR, is retained for a minimum of seven (7) years from the date of the transaction.
• KYC Documents: Identity verification documents are retained for a minimum of five (5) years from the date of verification or account closure, whichever is later.
• Support Communications: Records of customer support interactions are retained for up to three (3) years from the date of the most recent interaction.
• Dormant Accounts: Where a Player Account has been inactive for 12 consecutive months, the account may be flaged as dormant. Players will be notified by email before any data deletion or archiving process is initiated.

Upon expiry of applicable retention periods, personal data is securely deleted or anonymised in accordance with our internal data disposal procedures.

8 Your Rights as a Data Subject

Subject to applicable data protection law, including the Personal Data Protection Act 2010 (PDPA) where applicable to Malaysian data subjects, you have the following rights in relation to your personal data held by mabar189:

To exercise any of the above rights, please contact our support team using the contact details in Section 15. We will respond to all valid requests within a reasonable timeframe and in any event within 30 days unless an extension is justified by the complexity of the request, in which case you will be notified.

9 Cookies & Tracking Technologies

mabar189 uses cookies and similar tracking technologies to operate the Platform, enhance the player experience, and support analytics and fraud prevention functions. By continuing to use the Platform, you consent to our use of cookies as described below.

• Strictly Necessary Cookies: These cookies are essential for the Platform to function and cannot be disabled. They include session authentication cookies, security tokens, and cookies that remember your language or preferences during a session.
• Analytics Cookies: We use analytics tools to understand how players interact with the Platform — which games are most popular, how long sessions last, and where players encounter friction. This data is aggregated and anonymised where possible.
• Fraud Prevention Cookies: Certain cookies assist our security systems in identifying unusual access patterns, detecting duplicate accounts, and flaging suspicious activity consistent with prohibited conduct.
• Preference Cookies: These cookies remember your settings and preferences — such as display preferences and responsible gambling tool settings — to provide a more personalised experience.

You may control cookie settings through your browser. Please note that disabling strictly necessary cookies will impair the functionality of the Platform and may prevent you from accessing certain features or completing transactions. Instructions for managing cookies are available in the help documentation of all major browsers.

10 Payment Data & Financial Information

mabar189 processes financial data in connection with MYR-denominated deposit and withdrawal transactions conducted through Malaysian payment channels including Maybank2u, CIMB Clicks, Public Bank, Hong Leong Connect, DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, and cryptocurrency platforms.

The following principles govern our handling of payment data:

• We do not store complete payment card numbers (PANs) or bank account credentials on our systems. Payment processing is handled by compliant third-party payment service providers who maintain their own security certifications.
• Transaction records — including amounts, timestamps, payment method references, and transaction IDs — are retained in accordance with the retention periods described in Section 7.
• Payment data is used only for the purposes of processing transactions, preventing fraud, complying with AML obligations, and responding to payment disputes.
• Where a dispute arises regarding deposit or withdrawal, transaction logs and payment metadata may be shared with the relevant payment service provider to facilitate resolution.

11 Data Security

mabar189 employs a range of technical and organisational security measures designed to protect personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between players and the Platform.
• Access controls limiting internal access to personal data to authorised personnel only, on a need-to-know basis.
• Secure server infrastructure with firewall protection, intrusion detection systems, and regular security audits.
• Multi-factor authentication requirements for administrative access to systems holding personal data.
• Regular employee training on data protection obligations and security best practices.
• Documented data breach response procedures, including notification protocols consistent with applicable regulatory requirements.

Despite these measures, no method of transmission over the internet is completely secure. mabar189 cannot guarantee absolute security of data transmitted to or from the Platform. Players are encouraged to maintain strong, unique passwords for their Player Accounts and to contact support immediately if they suspect any unauthorised account activity.

12 Minors & Age Verification

mabar189 strictly prohibits access to or use of the Platform by persons under the age of 21. We do not knowingly collect personal data from minors. Age verification is a mandatory step in the account registration and KYC process. Where mabar189 becomes aware that a Player Account is held by a person under 21, the account will be closed immediately and all associated data handled in accordance with applicable child data protection requirements.

13 International Data Transfers

In the course of providing services on the Platform, personal data may be transferred to and processed in countries outside Malaysia where mabar189 or its third-party service providers (including game studio partners and identity verification providers) are located. Such countries may have data protection laws that differ from those in Malaysia.

Where personal data is transferred internationally, mabar189 takes appropriate steps to ensure that such transfers are subject to adequate safeguards — including contractual data processing agreements that impose data protection obligations on the receiving party that are equivalent to those applicable in the originating jurisdiction.

14 Amendments to This Privacy Policy

mabar189 reserves the right to update or amend this Privacy Policy at any time in response to changes in applicable law, regulatory guidance, or our operational practices. Where material changes are made, we will notify registered players via email and/or through a prominent notice on the Platform at next login.

The "Last updated" date at the top of this Policy reflects the date of the most recent revision. Continued use of the Platform following notification of any amendment constitutes acceptance of the revised Privacy Policy. If you do not agree to the amended Policy, you must discontinue use of the Platform and contact us to close your account.

15 Contact Us

For any questions, concerns, or formal requests relating to this Privacy Policy or the processing of your personal data by mabar189, please contact our support team through the following channels: