Privacy Policy mrgrop — Malaysia User Data Protection

Mrgrop ("we", "Platform") is an online sports betting and casino gaming platform operating for users in Malaysia. We understand that privacy matters deeply to our users, and we take this responsibility seriously.

This Privacy Policy explains the types of information we collect when you use the mrgrop platform, how that information is used, who it may be shared with, and what choices you have regarding your own data. This policy applies to all users of the mrgrop platform, including those who access it via the website or mobile app.

We do not sell, rent, or transfer your personal data to third parties for marketing purposes without your explicit consent. Your privacy is our priority, and every data-related decision is made with users' best interests in mind.

Mrgrop collects various types of information depending on how you interact with our platform. The following are the main categories of data we collect:

A. Information You Provide Directly

• Full name as shown on your identity card or passport
• Date of birth and gender
• Email address and phone number
• Current residential address
• Registered bank account details or payment method information
• Copies of identity documents for the KYC verification process

B. Information Collected Automatically

• IP address and general location information
• Device type, operating system, and web browser version
• Login records and in-platform activity
• Wagering history and financial transactions
• Usage data such as pages visited and time spent on the platform

C. Information from Third Parties

• Identity verification through approved KYC service providers
• Fraud prevention information from financial security agencies
• Financial blacklist screening data required by law

Mrgrop uses collected personal data solely for legitimate and necessary purposes. The following outlines how your data is used:

• Identity Verification & KYC: To verify that you meet the age and eligibility requirements before using the platform.
• Account Management: To create, maintain, and protect your account on the mrgrop platform.
• Transaction Processing: To process deposits, withdrawals, and all financial transactions accurately and securely.
• Platform Security: To detect, investigate, and prevent fraud, money laundering, and other unlawful activity.
• Customer Support: To respond to enquiries, resolve issues, and provide the assistance you need.
• Service Communications: To send important notifications related to your account, security, and policy updates.
• Platform Improvements: To analyse usage patterns and improve the overall user experience.
• Legal Compliance: To fulfil the regulatory and legal obligations applicable to our platform's operations.

Mrgrop only shares your personal data in limited and controlled situations. We do not sell or rent your data. Sharing occurs only under the following circumstances:

• Trusted Service Providers: Companies that help us operate the platform — including payment processing providers, KYC services, and technical infrastructure — are all bound by strict data protection agreements.
• Legal Obligations: When required by law, court order, or a government enforcement agency with valid jurisdiction.
• Fraud Prevention: With fraud prevention agencies and gambling exclusion lists to protect the safety of the platform and other users.
• Business Transfers: In the event of a platform merger, acquisition, or asset transfer, the receiving party will be bound by this privacy policy.

Protecting your personal data is a top technical priority at mrgrop. We implement multiple layers of security to keep your information safe at all times:

• 256-bit SSL Encryption: All data transmitted between your device and mrgrop servers is protected by industry-standard 256-bit SSL encryption.
• Stored Data Encryption: Sensitive data stored in our systems, including financial information and identification documents, is encrypted using AES-256 technology.
• Strict Access Controls: Only authorised personnel with a legitimate business need may access user personal data, and every access is logged.
• Two-Factor Authentication (2FA): mrgrop's internal systems require multi-factor authentication to access sensitive user data.
• Continuous Monitoring: Our security systems monitor for suspicious activity 24/7 and respond immediately to any detected threats.
• Regular Security Testing: Our platform undergoes regular penetration testing and independent security audits.

The mrgrop platform uses cookies and similar tracking technologies to enhance user experience and platform security. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login, session security, and language preferences. These cookies cannot be disabled.
• Performance Cookies: Collecting information on how you use the platform to help us improve functionality and user experience.
• Functional Cookies: Remembering your preferences such as display settings and preferred language for a smoother experience.
• Analytics Cookies: Used internally to understand platform usage patterns for continuous improvement purposes.

You can manage cookie settings through your web browser. However, disabling certain cookies may affect the functionality of some areas of the mrgrop platform.

Mrgrop retains your personal data only for as long as necessary for the purposes stated in this policy or as required by applicable law.

In general:

• Active account data is retained for as long as your account remains active on the mrgrop platform.
• Following account closure, data is retained for five (5) years to comply with regulatory and legal requirements.
• Financial transaction records are retained for seven (7) years as required by Malaysia's financial laws.
• Technical logs and general usage data are deleted after twelve (12) months.

Upon expiry of the retention period, your data will be securely deleted or anonymised so it can no longer be linked to your identity.

As a mrgrop platform user, you have the following rights regarding your personal data:

To exercise any of the above rights, contact the mrgrop support team via Live Chat or email. We will process your request within thirty (30) business days.

The mrgrop platform is not intended for individuals under the age of 18. We do not knowingly collect personal data from minors. Should we discover that personal data of an underage individual has been collected without proper age verification, we will take immediate steps to delete that data and close the relevant account.

If you believe a minor has registered an account on our platform, please contact the mrgrop support team immediately so that appropriate action can be taken without delay.

Mrgrop reserves the right to update or modify this Privacy Policy from time to time to reflect changes in data handling practices, legal requirements, or new platform features.

When significant changes are made, we will notify you via:

• In-platform notifications on mrgrop upon your next login
• Email to the address registered in your account
• Update the "Updated" date shown at the top of this page

Your continued use of the mrgrop platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. If you disagree with any changes, you have the right to close your account before the effective date.

For any enquiries, requests, or concerns regarding this Privacy Policy or the handling of your personal data, you may contact the mrgrop privacy team through the following channels:

• Live Chat: Available 24/7 through the mrgrop platform — the fastest way to get an immediate response.
• Email: [email protected] — for privacy enquiries requiring written documentation.
• Help Centre: Visit page FAQ us for answers to frequently asked privacy questions.

We are committed to responding to all privacy-related enquiries within forty-eight (48) business hours. For formal requests such as data access or deletion, the processing period is thirty (30) business days.