Mrwira Privacy Policy — Member Personal Data Protection

Introduction

Mrwira ("we", "our platform") respects the privacy rights of every individual who uses our services. This Privacy Policy is designed to clearly and transparently explain how we handle your personal data when you register, log in, and use the mrwira online gaming platform.

As a platform serving exclusively Malaysian users, we comply with Malaysia's Personal Data Protection Act (PDPA) 2010 and international best practices in data protection. We believe your trust is our most valuable asset, and we take this responsibility seriously.

This Privacy Policy applies to all services offered by mrwira, including the official website, Android and iOS mobile apps, and all related communication channels. If you disagree with any part of this policy, please stop using our platform.

Personal Data We Collect

Mrwira collects your personal data through various touchpoints as you interact with our platform. Below are the categories of data we collect and the purposes for collecting them:

Data You Provide Directly

• Identity information: Full name, identity card number (MyKad), date of birth, and gender.
• Contact information: Email address, mobile number, and residential address.
• Financial information: Bank account number, bank name, and e-wallet details (Touch 'n Go, GrabPay) for deposit and withdrawal purposes.
• Verification documents: A copy of your identity card, passport, or other KYC documents requested for identity verification purposes.

Automatically Collected Data

• Device data: Device type, operating system, phone model, and unique device identifier.
• Network data: IP address, web browser type, and language settings.
• Activity data: Pages visited, session duration, games played, and betting history.
• Transaction data: Deposit history, withdrawals, total wagering amounts, and wins.

How We Use Your Data

The personal data we collect is used solely for legitimate purposes directly related to the provision of mrwira services. We do not use your data for purposes not stated in this policy without first obtaining your additional consent.

Core Operational Purposes

• Securely registering and managing your member account.
• Verifying your identity through the KYC process to meet legal requirements.
• Processing deposit and withdrawal transactions to your bank account or e-wallet.
• Providing access to all games and services within the mrwira platform.
• Sending important notifications related to your account, transactions, and security updates.

Security & Compliance Purposes

• Detecting and preventing fraud, money laundering, and other illegal activities.
• Meeting reporting obligations to the relevant regulatory authorities.
• Resolving disputes and investigating complaints submitted by members.
• Ensuring the platform is used in accordance with the minimum age requirement (18 and above).

Service Improvement Purposes

• Analyzing usage patterns to improve platform performance and user experience.
• Personalizing content, offers, and promotions based on your gaming preferences.
• Conducting research and statistical analysis (in anonymized form) for product development.

Legal Basis for Data Processing

Mrwira processes your personal data on a solid legal basis in accordance with Malaysia's PDPA 2010. We rely on several bases depending on the type of processing carried out:

• Contract performance: Processing required to fulfill the service agreement between you and mrwira, including account registration and payment processing.
• Consent: For certain processing activities such as marketing communications, we require your explicit consent, which may be withdrawn at any time.
• Legitimate interest: Processing we carry out based on the platform's legitimate interests, such as fraud prevention and security enhancement.
• Legal obligation: Processing required to fulfill the legal and regulatory obligations binding on us.

Sharing Data with Third Parties

Mrwira does not sell, rent, or disclose your personal data to third parties for commercial purposes. However, in certain limited situations, we may share your information with the following parties:

Trusted Service Providers

We work with carefully selected third-party service providers to operate the platform — including payment processors, game software providers, email delivery platforms, and cloud storage services. All providers are bound by strict data protection agreements and are only permitted to use your data for purposes we have specified.

Legal Authority

Mrwira will disclose your personal data to government authorities, law enforcement, or regulatory bodies when required by law, court order, or valid legal process. We will notify you of such disclosures where permitted by law.

Data Security Measures

Protecting your personal data from unauthorized access, loss, misuse, or disclosure is an absolute priority for mrwira. We implement multiple layers of technical and organizational security to achieve the highest level of protection.

Technical Security

• 256-bit SSL/TLS Encryption: All data communication between your device and our servers is encrypted using industry-standard SSL/TLS protocols.
• Encrypted password storage: Your account password is never stored in plain text — we use strong hashing algorithms to protect it.
• Two-Factor Authentication (2FA): An extra layer of security is available for all member accounts via OTP verification.
• Firewall & threat detection systems: Our infrastructure is protected by multi-layered firewalls and a 24/7 real-time threat monitoring system.
• Regular security audits: We conduct regular penetration testing and independent security audits.

Organizational Security

• Mandatory data protection training for all staff handling member information.
• Role-based access control (RBAC) to ensure only authorized personnel can access sensitive data.
• A clear incident response procedure in the event of a data breach.

Cookie Policy

Mrwira uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

Types of Cookies We Use

• Essential Cookies: Required for core platform functions such as login sessions and security. These cookies cannot be disabled.
• User Preference Cookies: Saving your preferences such as language and display theme for a smoother experience.
• Analytics Cookies: Helping us understand how the platform is used through anonymous statistical data for improvement purposes.
• Performance Cookies: Monitoring platform performance to identify and resolve technical issues faster.

You can control and manage cookie settings through your web browser. Please note that disabling certain cookies may affect the functionality of the mrwira platform.

Data Retention Period & Deletion

Mrwira retains your personal data only for as long as necessary to fulfil the original purpose of collection or as required by law. We practise data minimisation and do not keep information longer than necessary.

Retention Period by Category

• Active account data: Retained for the duration your account is active, plus 7 years after account closure for legal compliance purposes.
• Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysian financial legal requirements.
• KYC documents: Retained for 5 years after the business relationship ends.
• Activity & security log: Retained for 2 years for investigation and dispute resolution purposes.
• Marketing data (with consent): Retained until you withdraw your consent.

Once the retention period expires, your data will be securely deleted or converted to an anonymised format that cannot be identified. Data deletion is carried out using methods that meet recognised security standards.

Your Rights as a Member

Under Malaysia's PDPA 2010, you have certain rights regarding the personal data held by mrwira. We fully respect and facilitate the exercise of these rights.

Your Rights

• Right of Access: You have the right to obtain a copy of the personal data we hold about you.
• Right to Rectification: You may request that we correct any inaccurate or incomplete data.
• Right to Erasure: In certain circumstances, you may request the deletion of your personal data, subject to our legal obligations.
• Right to Withdraw Consent: You may withdraw consent given for specific processing at any time without affecting the validity of prior processing.
• Right to Object: You have the right to object to the processing of your data for direct marketing purposes.
• Right to Data Portability: You may request a copy of your data in a machine-readable format.

Privacy Policy Amendments

Mrwira reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. Any material amendments will be communicated to you via your registered email or a prominent in-platform notification at least 14 days before the changes take effect.

We encourage you to review this Privacy Policy page periodically to stay informed about how we protect your information. The "Updated" date at the top of this page reflects the latest version of this policy.

Continued use of the mrwira platform after any amendments take effect constitutes your acceptance of the revised terms. If you do not agree with the changes, please contact us to discuss your options.