MrCoin1 Privacy Policy – How We Protect the Personal Data of Malaysian Players

This Privacy Policy ("Policy") is published by mrcoin1 ("Platform", "We", "mrcoin1") and describes how we collect, process, store, and protect the personal information of individuals ("You", "User", "Player") who access or use the mrcoin1 platform via our website or any other device.

This Policy applies to all categories of mrcoin1 players and users, including:

• Registered players with an active mrcoin1 account;
• Visitors browsing the mrcoin1 website without registering;
• Individuals who contact the mrcoin1 customer support team;
• Individuals who participate in mrcoin1 promotions, contests, or referral programmes.

Mrcoin1 is committed to processing all personal data in accordance with the principles set out in Malaysia's Personal Data Protection Act 2010 (PDPA), covering the general principle, notice and choice, disclosure, security, data integrity, access, and data transfer.

This Policy should be read together with Terms & Conditions mrcoin1, which together form the entire agreement between you and our platform. By continuing to use mrcoin1 after this Policy or any amendments to it take effect, you confirm your acceptance of the terms contained herein.

Mrcoin1 collects various categories of personal data depending on how you interact with our platform. Below is a full list of the data categories we may collect:

Mrcoin1 adheres to the principle of data minimisation — we only collect data that is strictly necessary for the stated purposes and do not gather excessive or irrelevant information.

Mrcoin1 collects personal data through several different channels, depending on how you interact with our platform:

• Account Registration: When you register a new account at mrcoin1, you provide basic information such as your Malaysian phone number, email address, and password. This information is collected directly through our registration form.
• Identity Verification (KYC): To process withdrawals or where required for legal compliance, mrcoin1 may request verification documents such as a copy of your MyKad and bank statement. These documents are submitted directly to our verification team.
• Financial Transactions: Every time you make a deposit via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, or FPX, your transaction details are automatically collected for record-keeping and verification purposes.
• Platform Usage: Your activity on the mrcoin1 platform — including the slots you play, the Sports Betting wagers you place on the Malaysia Super League or EPL, and the Live Casino tables you join — is automatically recorded for account and security purposes.
• Device & Technical: Your web browser and device automatically transmit technical information such as your IP address, device type, and browser version whenever you access mrcoin1. This information is used for security verification and to optimise your user experience.
• Communications: When you contact mrcoin1 customer support via live chat or email, the content of those communications is retained for reference and service improvement purposes.

Mrcoin1 uses collected personal data exclusively for the legitimate purposes stated below. We will not use your data for any other purpose without first obtaining your consent:

• Account Management: To create, maintain, and manage your mrcoin1 account, including identity verification, password resets, and profile updates;
• Transaction Processing: To process deposits via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, and FPX, as well as to process your withdrawal requests in Malaysian Ringgit (MYR);
• Security & Fraud Prevention: To detect and prevent fraudulent activity, money laundering, unauthorised access, and other security threats to the platform and your account;
• Legal Compliance: To comply with applicable legal and regulatory requirements, including KYC (Know Your Customer) and AML (Anti-Money Laundering) obligations under Malaysian law;
• Customer Support: To respond to your enquiries, resolve complaints, and provide technical support via live chat and email in Bahasa Melayu;
• Platform Improvement: To analyse usage patterns and feedback for the purpose of improving mrcoin1's interface, games, and overall services;
• Service Communications: To send you important notifications regarding your account, transactions, changes to our terms, or relevant security updates;
• Promotions and Bonuses (with consent): To keep you informed about mrcoin1's promotional offers, deposit bonuses, and VIP programmes that may interest you — only where you have given consent to receive marketing communications.

Mrcoin1 will not use your data to make automated decisions that materially affect you without human intervention, except within automated fraud detection systems that are supported by a manual review process carried out by our security team.

Mrcoin1 does not sell, rent, or disclose players' personal data to third parties for their own marketing purposes. However, in the course of operating the platform, there are limited situations where we may need to share data with certain parties:

• Payment Service Providers: When you make a deposit or withdrawal, the required transaction information is shared with payment service providers such as Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and Malaysian banks that support FPX. This sharing is limited strictly to the information needed to process the transaction.
• Game Provider: To power its slots, Live Casino, and other digital games, mrcoin1 partners with licensed game providers. These providers may receive the technical data required for game functionality, but do not have access to players' full personal information.
• Legal Authorities: mrcoin1 will disclose personal data to Malaysian authorities if required by court order, legislation, or directive from a competent authority. This includes KYC and AML investigations conducted under Malaysian law.
• Technology Providers: Some technical infrastructure services — such as secure cloud storage and platform analytics — are operated by carefully selected third-party providers who are bound by strict data protection agreements.

All third parties granted access to mrcoin1 player data are bound by confidentiality and data protection agreements that require them to safeguard that information to a standard at least equivalent to mrcoin1's own.

Mrcoin1 continually invests in technology and processes to ensure player personal data is protected to the highest standard. The key security measures we have implemented include:

• Data Encryption During Transmission: All communications between your device and mrcoin1 servers are protected by Transport Layer Security (TLS) 1.3 encryption — the highest security standard currently available;
• Data Encryption at Rest: Sensitive data stored in mrcoin1's databases — including financial information and verification documents — is encrypted using AES-256 algorithms;
• Role-Based Access Control: Access to player data is granted only to mrcoin1 staff with a legitimate operational need, and only at the level of access required for their specific role;
• 24/7 Security Monitoring: An automated monitoring system tracks all platform activity in real time to detect unauthorised access attempts, suspicious patterns, and security threats;
• Two-Factor Authentication (2FA): Two-factor authentication is available for all mrcoin1 accounts, providing an additional layer of protection against unauthorised access;
• Regular Security Audits: mrcoin1 conducts regular security assessments and penetration testing by independent security experts to identify and address any vulnerabilities before they can be exploited.

While mrcoin1 takes all reasonable steps to protect your data, no system is 100% immune to every threat. In the event of a security incident involving your personal data, mrcoin1 will notify you and the relevant authorities within the timeframe prescribed by law.

Mrcoin1 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit a website. They help us recognise you, remember your preferences, and provide a safer, more seamless experience.

Types of cookies used by mrcoin1:

• Essential / Session Cookies: Required for the core functionality of the mrcoin1 platform — such as maintaining your login session, saving items in your betting slip, and managing language preferences. These cookies cannot be disabled without affecting platform functionality.
• Preference Cookies: Allows mrcoin1 to remember your preferences, such as your interface language, favourite sports for betting, and display settings. These cookies improve your overall experience on the platform from one session to the next.
• Analytics Cookies: Helps mrcoin1 understand how players use the platform — which pages are visited most frequently, how long gaming sessions typically last, and where users encounter difficulties. This information is used solely for platform improvement purposes and contains no personally identifiable information.
• Security Cookies: Used to detect suspicious activity, prevent fraud, and ensure the security of your account. This includes cookies that identify new devices used to log in.

You can control and manage cookies through your web browser settings. However, disabling certain cookies may affect the functionality of the mrcoin1 platform. For more information on managing cookies, refer to the "Help" section of your web browser.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by mrcoin1. We are committed to respecting and facilitating the exercise of all these rights:

To exercise any of the rights described above, please contact the mrcoin1 Privacy Officer by email at support@mrcoin1.com, clearly stating the right you wish to exercise and providing the information required to verify your identity. mrcoin1 will acknowledge receipt of your request within 3 business days and process it within the timeframe stipulated by law.

Mrcoin1 retains your personal data only for as long as necessary for the purposes stated in this Policy, or as required by applicable law. The following are general guidelines on retention periods:

• Active Account Data: For as long as your mrcoin1 account remains active, and for a reasonable period after account closure to allow for the resolution of any outstanding transactions or disputes;
• Financial Transaction Records: A minimum of 7 years from the date of the transaction, in line with Malaysia's financial and tax legal requirements;
• KYC Documents: For the duration of the active account and a minimum of 5 years after account closure, in line with Malaysia's AML legal requirements;
• Support Communication Data: 2 years from the date of communication, to allow for reference in the event of recurring disputes;
• Cookie & Session Data: Depending on the type of cookie — session cookies are deleted when you close your browser, while persistent cookies remain stored until their set expiry date or until you manually delete them.

Once the designated retention period has ended, your personal data will be securely deleted or anonymised so that it can no longer be linked back to you personally.

Mrcoin1 strictly prohibits participation by any individual under the age of 18 on our platform. The mrcoin1 platform is not designed, marketed, or intended for minors, and we do not knowingly collect personal data from individuals under age.

Should mrcoin1 discover that personal data belonging to an individual under the age of 18 has been collected inadvertently, we will immediately take the following steps:

• Closing the account in question immediately;
• Deleting all data associated with that individual;
• Reporting the incident to the relevant authorities where required.

The mrcoin1 platform may contain links to third-party websites or services — for example, links to payment service provider websites such as Touch 'n Go or GrabPay for transaction purposes. This Privacy Policy applies solely to the mrcoin1 platform.

Mrcoin1 is not responsible for the privacy practices or content of third-party websites accessed via links on our platform. We encourage you to read the privacy policies of those third-party websites before providing any personal information to them.

By clicking any link that takes you away from the mrcoin1 platform, you acknowledge that you are entering a third-party website with its own privacy policy and terms of use, which are separate from those of mrcoin1.

Mrcoin1 reserves the right to amend, update, or supplement this Privacy Policy at any time to reflect changes in our data processing practices, new legal requirements, or changes in the way we operate. Any amendments will be posted on this page with a revised "Last updated" date.

For material amendments — meaning changes that significantly affect how we use your data or your rights — mrcoin1 will provide clearer notice, which includes:

• In-platform notifications when you log in to your mrcoin1 account;
• Email to the address registered to your account;
• At least 14 days' notice before any material amendments take effect.

Your continued use of the mrcoin1 platform after any amendments take effect will be considered your acceptance of the revised Privacy Policy. If you do not agree with any changes, you have the right to close your account and request deletion of your data before the amendments come into effect.

For any enquiries, concerns, or requests relating to this Privacy Policy or your personal data, please contact the mrcoin1 Privacy Officer through the channels below. We are committed to taking every enquiry seriously and responding within a reasonable timeframe: