Privacy Policy

This Privacy Policy ("Policy") is issued by mariatogel ("Company", "we", "us", "our") and applies to all personal data collected, processed and stored in connection with your access to and use of the mariatogel website at https://mariatogel.cam (the "Platform"), including all games, services, promotions and features available thereon.

mariatogel operates as an online casino and sports betting platform serving players across Malaysia, including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam and beyond. Given the nature of our services — which involve financial transactions, identity verification and real-money wagering — the responsible handling of personal data is both a legal obligation and a fundamental part of how we operate.

By registering an account on the Platform or otherwise accessing our services, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must discontinue use of the Platform.

This Policy should be read alongside our Terms & Conditions and Responsible Gambling Policy, which together form the full framework governing your relationship with mariatogel.

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" — any information relating to an identified or identifiable natural person, including name, identification number, contact details, financial information, IP address, device identifiers and behavioural data.
• "Processing" — any operation performed on personal data, including collection, recording, storage, retrieval, use, disclosure, transmission, erasure or destruction.
• "Data Controller" — mariatogel, being the entity that determines the purposes and means of processing your personal data.
• "Data Processor" — a third party that processes personal data on behalf of mariatogel, such as a payment gateway provider or cloud hosting service, acting under our documented instructions.
• "KYC" — Know Your Customer; the identity verification process used to confirm a Player's identity and eligibility before processing withdrawals or as otherwise required.
• "Cookies" — small text files placed on your device by the Platform or third-party services embedded in it, used to store session data, preferences and analytical information.
• "Player" / "you" — any individual who accesses, registers on or uses the mariatogel Platform.

mariatogel collects personal data that is necessary and proportionate to the purposes for which it is used. The categories of data we collect are outlined below:

We do not knowingly collect sensitive personal data (such as racial or ethnic origin, religious beliefs, health information or biometric data) unless explicitly required for regulatory compliance and with your clear consent.

We collect your personal data through the following channels:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or participate in a promotion.
• Automatically via the Platform — technical data including your IP address, device identifiers, browser type, pages visited and session duration is collected automatically when you access the Platform, through server logs and cookie technologies.
• From payment processors and e-wallet providers — when you make a deposit or withdrawal via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank or any other supported payment channel, transaction confirmation data is passed to us by the relevant payment service provider.
• From identity verification services — we may use third-party KYC service providers to assist in verifying your identity documents during the verification process.
• From fraud prevention and anti-money laundering systems — we may receive risk signals or flags from specialist third-party fraud detection partners as part of our regulatory compliance obligations.

mariatogel processes your personal data only for specified, explicit and legitimate purposes. The primary purposes for which we process your data are as follows:

• Account management — to create, maintain and administer your player account, including authentication, preferences, VIP tier management and account security.
• Payment processing — to facilitate deposits and withdrawals via Malaysian payment channels, verify transaction legitimacy and maintain accurate financial records.
• Identity verification (KYC) — to comply with our regulatory obligations by confirming the identity, age and eligibility of players before processing withdrawals or as otherwise required.
• Anti-money laundering (AML) compliance — to monitor transaction patterns, identify unusual activity, and fulfil mandatory reporting obligations under applicable AML regulations.
• Game and service delivery — to provide access to casino games, sports betting markets, live dealer tables and all other Platform features in a fair and secure manner.
• Responsible gambling — to identify and support players who may be experiencing gambling-related harm, including the administration of self-exclusion requests, deposit limits and cooling-off periods.
• Customer support — to respond to enquiries, resolve disputes and handle support requests submitted via live chat or email.
• Security and fraud prevention — to detect and prevent unauthorised account access, duplicate accounts, bonus abuse, collusion and other fraudulent activity.
• Promotions and marketing — to communicate relevant promotions to opted-in players. You may opt out of marketing communications at any time by contacting support.
• Legal compliance and regulatory reporting — to fulfil our obligations to regulatory authorities, licensing bodies and law enforcement agencies as required by applicable law.

mariatogel processes personal data under the following legal bases, depending on the specific processing activity:

• Contractual necessity — processing that is necessary to perform the contract between you and mariatogel (i.e. the Terms & Conditions governing your account), including account creation, game delivery and payment processing.
• Legal obligation — processing required to comply with applicable law, including KYC verification, AML monitoring, and regulatory reporting obligations imposed by our gaming licence.
• Legitimate interests — processing that serves our legitimate business interests where those interests are not overridden by your rights, including fraud prevention, platform security, and the improvement of our services.
• Consent — where we rely on your consent, such as for optional marketing communications, you may withdraw that consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

mariatogel retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, taking into account applicable legal, regulatory and contractual retention requirements.

• Active accounts — personal data is retained for the full duration of your account's active status.
• Closed accounts — following account closure, we are required to retain KYC documentation and transaction records for a minimum period in compliance with our gaming licence and AML obligations. This period is typically five to seven years from the date of the last transaction, depending on applicable regulatory requirements.
• Marketing communications data — retained until you withdraw consent or request removal from marketing lists.
• Support correspondence — retained for a reasonable period to allow for dispute resolution and quality assurance purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an identified individual.

mariatogel does not sell, rent or trade your personal data to third parties for their own commercial purposes. We share personal data with third parties only in the following limited circumstances, and only to the extent necessary:

• Payment service providers — transaction data is shared with payment processing partners (including Malaysian e-wallet operators such as Touch 'n Go eWallet, Boost and GrabPay, and bank networks including Maybank, CIMB, Public Bank, Hong Leong and DuitNow/FPX networks) solely for the purpose of processing your deposits and withdrawals.
• Identity verification providers — KYC document data may be shared with specialist third-party identity verification services to assist in validating your identity. These providers act as data processors under contractual obligations to maintain confidentiality and data security.
• Fraud and AML compliance partners — transaction pattern data and risk indicators may be shared with fraud prevention and anti-money laundering specialists for compliance monitoring purposes.
• Game content providers — limited technical identifiers may be shared with our licensed game suppliers to facilitate gameplay and maintain game integrity. No unnecessary personal data is shared with game providers.
• Regulatory authorities and law enforcement — we will disclose personal data to regulatory bodies, licensing authorities, financial intelligence units or law enforcement agencies where required to do so by applicable law, a court order, or a valid regulatory request.
• Group companies — where mariatogel is part of a corporate group, data may be shared with related entities solely for internal administrative and compliance purposes, subject to equivalent data protection standards.

mariatogel uses cookies and similar technologies (collectively, "Cookies") on the Platform. Cookies are small text files stored on your device that help us operate the Platform efficiently and improve your user experience.

The types of Cookies we use include:

• Strictly necessary Cookies — essential for the Platform to function. These include session authentication cookies, security tokens and preference settings. You cannot opt out of strictly necessary cookies without significantly impairing Platform functionality.
• Analytical Cookies — used to understand how players use the Platform, which pages are most visited, and how users navigate between pages. This data helps us improve the Platform experience. Analytical data is aggregated and not linked to identifiable individuals where possible.
• Functional Cookies — used to remember your preferences, such as language settings, and to personalise your experience on return visits.
• Marketing and Targeting Cookies — where you have consented, these cookies are used to deliver relevant promotions and track whether you have engaged with them.

You can manage cookie preferences via your browser settings. Most modern browsers allow you to refuse some or all types of cookies, or to alert you when cookies are being used. Note that disabling certain cookies may affect the functionality of the Platform. Detailed instructions for managing cookies are available in your browser's help documentation.

mariatogel implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction or alteration. Our security framework includes:

• 256-bit SSL/TLS encryption — all data transmitted between your device and our servers is protected with industry-standard encryption in transit.
• Encryption at rest — sensitive data stored in our systems, including KYC documents and financial records, is encrypted using strong cryptographic methods.
• Access controls — access to personal data is restricted to authorised personnel on a strict need-to-know basis. All staff with access to personal data undergo appropriate training.
• Regular security audits — our infrastructure is subject to periodic vulnerability assessments and penetration testing by qualified security professionals.
• Incident response protocols — in the event of a suspected data breach, we have procedures in place to investigate, contain and notify affected parties in accordance with applicable notification obligations.

Notwithstanding these measures, no data transmission over the internet or electronic storage system can be guaranteed to be completely secure. You are responsible for keeping your account credentials confidential and for notifying us immediately if you suspect unauthorised access to your account.

Subject to applicable law and any overriding regulatory obligations, you have the following rights in relation to your personal data held by mariatogel:

To exercise any of the above rights, please contact our support team via live chat or by emailing [email protected]. We will respond to verified requests within a reasonable period and in accordance with applicable law. We may need to verify your identity before processing your request.

The mariatogel Platform is strictly intended for adults. Access is limited to individuals who are 21 years of age or older. We do not knowingly collect, process or store personal data from individuals under the age of 21.

If we become aware that personal data has been collected from an individual below the minimum age threshold, we will take immediate steps to delete that data and close the associated account. We employ both automated age detection checks and manual review processes as part of our account registration and KYC procedures.

If you have reason to believe that a minor has registered an account on the Platform, please contact our support team immediately at [email protected] so that the matter can be investigated and remediated promptly.

As an online platform with an international operational footprint, mariatogel may transfer your personal data to servers or service providers located outside Malaysia. Such transfers occur where our hosting infrastructure, payment processors or specialist service providers operate from jurisdictions other than Malaysia.

Where personal data is transferred internationally, we take steps to ensure that an adequate level of data protection is maintained, including through the use of:

• Contractual data protection clauses in agreements with international data processors, requiring them to handle personal data to standards equivalent to those applied in Malaysia.
• Transfers to jurisdictions that have been assessed as providing an adequate level of data protection.
• Technical security measures (encryption, access controls) that apply regardless of the geographic location of the data.

If you would like further information about international transfer safeguards, please contact our support team.

mariatogel reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, regulatory requirements or operational circumstances. Where changes are material, we will provide reasonable notice to existing account holders via the email address associated with their account, or via a prominent notice displayed on the Platform.

The effective date at the top of this Policy reflects the date of the most recent revision. Your continued use of the Platform following the effective date of any revision constitutes your acceptance of the updated Policy.

We encourage you to review this Policy periodically to stay informed about how we are protecting your personal data. Previous versions of this Policy are available on request.

If you have any questions, concerns or requests regarding this Privacy Policy or the handling of your personal data by mariatogel, please contact our Data Protection team through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week on the Platform. Live chat is the fastest channel for urgent privacy matters.
• Email: [email protected] — for formal privacy requests (access, erasure, rectification), please include "Privacy Request" in your subject line and provide your registered username and a brief description of your request. Allow up to 30 days for a formal response to data subject requests, though we aim to respond sooner.

We take all privacy enquiries seriously and will acknowledge receipt of formal requests promptly. We may need to verify your identity before we can process a data subject rights request, to ensure we are disclosing or modifying data that belongs to you.