Marikl Privacy Policy – Your Personal Data Protection

1Introduction & Privacy Commitment

Marikl ("we", "platform", or "marikl.com") values the privacy of every member and user on our platform. This Privacy Policy transparently explains how we handle your personal data when you register, use, or interact with the marikl online betting platform.

This Privacy Policy is prepared in accordance with Personal Data Protection Act 2010 (PDPA) Malaysia and the regulations made under it. As a platform operating for Malaysian users, we are committed to ensuring your personal data is managed transparently, securely, and responsibly.

By registering an account on marikl or using any of our services, you are deemed to have read and understood this Privacy Policy. If you disagree with how we handle your personal data as described here, please do not register or continue using the marikl platform.

2Types of Personal Data We Collect

Marikl collects your personal data through several channels: during account registration, while using the platform, when making financial transactions, and through your communications with our support team. Below are the categories of data we collect:

A. Identity & Registration Data

B. Financial & Transaction Data

C. Technical & Usage Data

3Purposes of Personal Data Use

Marikl uses your personal data solely for legitimate purposes related to the operation of the platform. We will not use your data for any other purpose without notifying you in advance.

If you have given consent to receive marketing communications from marikl — such as the latest bonus offers, slots promotions, or EPL football deals — you may withdraw that consent at any time through your account settings or by contacting our support team.

4Disclosure of Data to Third Parties

Marikl recognises that your trust is our most valuable asset. We only share your personal data with third parties under limited circumstances and for legitimate purposes only:

• Payment service providers: The payment gateways we use — such as DuitNow, FPX (Maybank2u, CIMB Clicks, Hong Leong Connect), Touch 'n Go eWallet, GrabPay, Boost, and ShopeePay — require certain information to process your financial transactions. They are subject to their own privacy policies and strict security standards.
• Regulatory authority: marikl may be required to disclose certain data to Malaysian authorities such as the PDRM, MACC, or Bank Negara Malaysia when mandated by law or a valid court order.
• Technical service providers: Companies providing IT infrastructure, hosting, and cybersecurity services to marikl may have limited access to data for operational purposes only. They are bound by strict confidentiality agreements.
• Audit & compliance: Independent auditors or legal advisors appointed by marikl may access certain data within the scope of their duties, subject to professional confidentiality obligations.

5Data Security Measures

The security of your personal data is a responsibility we take very seriously. marikl implements multiple layers of technical and organisational safeguards to ensure your data is always protected against unauthorised access, loss, or misuse:

• 256-bit SSL encryption: All data transmitted between your device and marikl's servers is encrypted using TLS 1.3 with 256-bit encryption — the same security standard used by leading banking institutions in Malaysia.
• Data encryption at rest: Sensitive data such as passwords and financial information is stored in encrypted form using strong hashing algorithms. No marikl staff member can view your original password.
• Two-factor authentication (2FA): Members are encouraged to enable 2FA for an added layer of security when logging in to their account.
• 24/7 Monitoring: Our security monitoring system operates around the clock to detect and block any suspicious access attempts or cyberattacks.
• Internal access controls: Access to member personal data within marikl is restricted to employees who require it to perform their duties only (principle of least privilege).
• Regular security audits: marikl conducts regular security assessments and penetration testing to identify and address any system vulnerabilities.

While we take all reasonable precautions, no system can be guaranteed 100% secure. In the event of any data security breach affecting members, marikl will notify the affected members and relevant authorities within the timeframe required by the PDPA.

6Cookies & Tracking Technologies

Marikl uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you browse our website.

You can manage or disable cookies through your web browser settings at any time. However, disabling essential cookies may affect core marikl platform functions such as login and session security.

7Data Retention & Deletion Period

Marikl retains your personal data for as long as necessary to fulfil the purpose for which it was collected, or as required under applicable Malaysian law.

• Active account data: Retained for as long as your account remains active on the marikl platform.
• Financial transaction records: Stored for a minimum of 7 years from the transaction date, as required by Malaysia's anti-money laundering laws and financial regulations.
• Support communication logs: Stored for 3 years for reference and dispute resolution purposes.
• Technical data & activity logs: Stored for a maximum of 12 months before being deleted or anonymised.
• After account closure: Identity and financial data is retained for the period required by law, then securely deleted or anonymised.

When your personal data is no longer required, marikl will securely delete it using methods that ensure it cannot be recovered.

8Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you as a data subject have the following rights regarding your personal data held by marikl:

To exercise any of the above rights, please contact marikl's Data Privacy Officer by email at privacy@marikl.com. We will process your request within the timeframe specified by the PDPA.

9Children's & Minors' Privacy

The marikl platform is strictly not intended to individuals under the age of 21. We do not knowingly collect personal data from children or underage individuals.

If we discover that personal data has been collected from a minor without proper verification, we will promptly delete such data and close the account in question. Parents or guardians who suspect their child has registered on the marikl platform should contact us immediately at support@marikl.com.

Marikl enforces a strict age verification process during registration and reserves the right to request additional documents such as a copy of MyKad to verify a member's age at any time.

10Amendments to the Privacy Policy

Marikl reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, legal requirements, or platform improvements. The "Last Updated" date at the top of this page will be revised each time an amendment is made.

For amendments deemed material or significant, marikl will notify members via their registered email or an in-platform notification at least 14 days before the amendments take effect. This gives you sufficient time to read and consider the changes.

Continued use of the marikl platform after the amendment's effective date constitutes your acceptance of the updated Privacy Policy. If you do not agree, you have the right to close your account and request data deletion in accordance with the prescribed procedures.

11Contact Our Data Privacy Officer

If you have any questions, concerns, or wish to exercise your rights under the PDPA regarding personal data held by marikl, please contact us through the following channels:

• Data Privacy Email: privacy@marikl.com — response within 3 business days
• General Support Email: support@marikl.com — response within 1 business day
• Live Chat: Available 24/7 directly on the marikl platform
• FAQ: Visit page FAQ for a faster response

For formal complaints relating to personal data protection that cannot be resolved by marikl, you may submit a complaint to Personal Data Protection Commissioner of Malaysia through the official portal of the Malaysian Ministry of Communications and Digital.