MrCoin Privacy Policy – Malaysian Player Data Protection

Last updated: January 2026

1 Privacy Policy Introduction and Scope

Welcome to the mrcoin Privacy Policy. This document is designed to give you a clear and transparent understanding of how we handle your personal information when you use the mrcoin online casino platform at mrcoin.onl.

Mrcoin takes data protection responsibilities extremely seriously. We understand that your trust in us depends largely on the confidence that your personal information is handled with complete integrity and professionalism. To that end, we have established strict and transparent policies governing every aspect of the data you entrust to us.

This Privacy Policy applies to all users who access the MrCoin platform via our website, mobile app, or any other digital channel we operate. By using our platform, you consent to the collection and use of information as described in this document.

2 Information We Collect

Mrcoin collects various types of information for different purposes in order to provide and improve our services to you. The information we collect falls into two main categories:

Information You Provide Directly:

• Full name as it appears on your official identification document.
• Date of birth for age verification purposes.
• Email address and mobile number for account communications.
• Current residential address for KYC and regulatory compliance purposes.
• Copies of identity documents such as MyKad or passport for identity verification purposes.
• Payment method details, including bank account information for processing deposits and withdrawals.
• Any other information you provide when communicating with our support team.

Automatically Collected Information:

• IP address and general geographic location data.
• The type and version of the web browser you use.
• Device type, operating system, and screen resolution.
• Activity log data including pages visited, access times, and in-platform actions.
• Financial transaction records including deposits, withdrawals, and transaction dates.
• Gaming activity records including game type, session duration, and betting outcomes.
• Cookie data and similar tracking technologies.

3 Purpose of Information Use

Every piece of information we collect has a clear and legitimate purpose. mrcoin uses your data solely for the following purposes:

4 Sharing Information with Third Parties

Mrcoin does not sell or rent your personal data to any third party. However, there are limited situations where we need to share your information with the following parties to ensure our services run smoothly:

• Payment Processing Providers: To securely process your deposits and withdrawals. These providers are subject to strict confidentiality agreements and PCI-DSS security standards.
• KYC Service Providers: Trusted third-party identity verification companies that assist us in conducting the required identity checks.
• Game Software Providers: Our game providers receive the transaction data necessary to operate games correctly.
• Regulatory Authority: When required by law or court order, we will disclose the necessary information to the relevant authorities.
• IT Service Providers: Companies that manage our technical infrastructure, subject to strict data processing agreements.

5 Cookies and Tracking Technologies

Mrcoin uses cookies and similar technologies to enhance the user experience on our platform. Cookies are small text files stored on your device when you visit our website.

We use several types of cookies:

• Essential Cookies: Required for core platform functions such as login and session security. These cookies cannot be disabled.
• Performance Cookies: Helps us understand how players interact with the platform so we can make continuous improvements.
• Functional Cookies: Saves your preferences such as language and display settings to deliver a more personalised experience.
• Analytics Cookies: Used to analyse aggregated usage patterns for platform improvement purposes.

You can manage your cookie settings through your web browser at any time. Please note that disabling certain cookies may affect the functionality of the MrCoin platform.

6 Data Security and Protection Measures

Your data security is mrcoin's top priority. We continuously invest in cutting-edge security infrastructure to keep your information protected at all times. Security measures we have in place include:

• Data encryption in transit using TLS 1.3 and 256-bit SSL protocols.
• Data encryption at rest using AES-256 standards.
• Strict role-based access controls — only authorised personnel may access sensitive data.
• 24/7 security monitoring and automated intrusion detection systems.
• Regular security audits conducted by independent cybersecurity experts.
• Two-factor authentication (2FA) for all internal admin accounts.
• Regular data backups and tested disaster recovery plans.

While we take all reasonable precautions, no system can guarantee absolute security. In the event of a data breach involving your information, we will notify you and the relevant authorities within the timeframe required by law.

7 Your Rights as a Data Subject

As a mrcoin player, you have certain rights regarding your personal data under applicable data protection laws. We fully respect these rights and make it easy for you to exercise them.

To exercise any of the above rights, please contact our Data Protection team via live chat or support email. We will process your request within 30 business days.

8 Data Retention Period

Mrcoin does not retain your personal data longer than necessary for the original purpose of collection or as required by law. In general, retention periods are as follows:

• Active account data: Retained for the duration your account is active plus five years after account closure.
• Financial transaction records: Retained for a minimum of seven years in line with Malaysian financial regulatory requirements.
• KYC Documents: Retained for five years after the business relationship ends in line with anti-money laundering requirements.
• Support communication logs: Retained for three years for reference and service improvement purposes.
• Analytics data and technical logs: Retained for twelve months before being deleted or anonymised.

Once the applicable retention period has expired, your data will be securely deleted using methods that comply with international data security standards.

9 International Data Transfers

In some circumstances, your data may be processed or stored on servers located outside Malaysia. When this occurs, MrCoin ensures equivalent protection to that provided in Malaysia through the following mechanisms:

• Binding standard data processing agreements with all international partners.
• A thorough review of data protection laws in the recipient country before any transfer is carried out.
• Use of recognised standard contractual clauses to ensure ongoing protection.

10 Privacy Policy Updates

Mrcoin reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements. When we make significant changes, we will notify you via your registered email or an in-platform notification at least seven days before the changes take effect.

The latest update date is always shown at the top of this document. We encourage you to review this Privacy Policy periodically. Continued use of the mrcoin platform after changes take effect will be considered acceptance of the updated policy.

11 Contact Our Data Protection Officer

Mrcoin has appointed a Data Protection Officer (DPO) responsible for ensuring compliance with this privacy policy across the organisation. If you have any questions, concerns, or complaints regarding your privacy and data protection, please contact us through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, directly within the mrcoin platform.
• Email: [email protected]
• General Support Email: [email protected]

We are committed to responding to all privacy-related enquiries within 14 business days. For more complex complaints, we may require up to 30 days to provide a full and satisfactory response.