mrwira Privacy Policy for Malaysian Users

1. Introduction

mrwira is an English-language online gaming information and entertainment platform designed for Malaysian adults. This Privacy Policy governs the collection, use, storage and disclosure of personal data by mrwira in connection with the website available at mrwira.cam and any related services.

By accessing mrwira, creating an account or using any service feature, you acknowledge this Privacy Policy. Where mrwira requires consent to process certain categories of data, that consent will be sought at the relevant step rather than implied by general website use alone.

2. Definitions

• "Personal data" means any information that identifies or could reasonably be used to identify a living individual, such as a name, email address, payment reference, device identifier or session log.
• "Processing" means any operation performed on personal data, including collection, storage, use, disclosure, retention and deletion.
• "Data controller" means mrwira, in its capacity as the entity that determines the purposes and means of processing personal data described in this policy.
• "User" or "you" means any individual who accesses mrwira, whether or not a registered account has been created.
• "MYR" means Malaysian Ringgit, the currency used for transactions described in this policy.
• "Third-party processor" means an external provider engaged by mrwira to perform a specific operational service under a data-processing arrangement.

3. Personal Data We Collect

mrwira may collect the categories of information outlined in the following table, depending on the service feature used:

mrwira does not intentionally collect sensitive categories of personal data such as racial or ethnic origin, religious beliefs, political opinions, health records or biometric identification data outside of a specific, disclosed verification step.

4. Legal Basis for Processing

Each mrwira processing activity is carried out on one or more of the following legal grounds:

• Contractual necessity: Processing required to provide the account, transaction or support service you requested.
• Legal obligation: Processing required to comply with applicable regulations, including identity verification, anti-money-laundering checks and responsible-gambling obligations.
• Legitimate interests: Processing for fraud prevention, security monitoring, service improvement and business analytics, where those interests are not overridden by your fundamental rights.
• Consent: Where no other legal basis applies, mrwira will seek explicit opt-in consent before processing. Consent may be withdrawn at any time without affecting the lawfulness of earlier processing.

5. How mrwira Uses Your Data

5.1 Account and Service Delivery

Identity, contact and verification data is used to create and maintain your mrwira account, authenticate your sessions, process MYR deposits and withdrawals and communicate account-related information. Malaysian players using Maybank, CIMB, Public Bank, Hong Leong, Touch 'n Go eWallet, Boost, GrabPay, DuitNow or FPX should expect that transaction references associated with those channels are processed for settlement and reconciliation.

5.2 Identity Verification and Compliance

mrwira may process identity documents, address evidence and payment-method references to satisfy age verification, anti-fraud and anti-money-laundering requirements. Verification checks may be completed with the assistance of a third-party verification provider operating under a data-processing arrangement.

5.3 Responsible Gambling Controls

Where a user sets a deposit limit, activates a cooling-off period or requests self-exclusion, mrwira retains the relevant instruction and associated account data for the duration of the restriction. This retention is necessary to honour the restriction reliably and cannot be shortened on request during the active period.

5.4 Analytics and Service Improvement

Aggregated and anonymised usage data helps mrwira understand which content, payment guidance or sports sections are most useful to Malaysian users across Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya and Shah Alam. Individual identities are not extracted from aggregated analytics reports.

5.5 Marketing Communications

mrwira will only send promotional messages where you have given explicit consent or where a relevant existing service relationship exists and you have not opted out. Every promotional communication will include a clear mechanism to unsubscribe.

6. Payment Data and Financial Information

MYR payment data is treated with additional safeguards. Full payment card numbers, bank account credentials and e-wallet login details are not stored on mrwira servers. Payment processing is facilitated by compliant third-party payment providers who operate under their own regulated security standards.

mrwira retains masked transaction references, MYR amounts, timestamps and payment-method type labels for operational records, reconciliation, dispute resolution and responsible-gambling monitoring. This data is accessible only to authorised team members with a specific operational need.

7. Cookies and Similar Technologies

mrwira uses cookies and comparable session-tracking technologies for the following purposes:

• Essential cookies: Maintain your session, preserve login state and support security checks. These cannot be disabled without affecting core functionality.
• Analytics cookies: Collect anonymised data on page visits, navigation paths and feature interactions to improve mrwira content and layout.
• Preference cookies: Remember display or language preferences across visits where such functionality is offered.

Cookie consent, where required, is sought through an in-page notice. Non-essential cookies will not be activated until consent is given. Most browsers can be configured to limit, block or delete cookies; however, disabling essential cookies may prevent certain mrwira features from functioning correctly.

8. Sharing and Disclosure of Personal Data

mrwira does not sell personal data. Data may be disclosed to the following categories of recipient where necessary:

• Payment processors: To facilitate MYR deposits, withdrawals and payment verification across channels including DuitNow, FPX and supported Malaysian e-wallets;
• Identity verification providers: To complete KYC checks, age verification and document authentication;
• Fraud and security specialists: To detect, investigate and prevent account misuse, unauthorised access or financial crime;
• IT and infrastructure providers: For hosting, storage, communications and security monitoring under appropriate data-processing agreements;
• Legal and regulatory authorities: Where disclosure is required by applicable law, a court order, regulatory instruction or anti-money-laundering obligation; and
• Professional advisers: Solicitors, auditors and insurers under confidentiality obligations, where required for mrwira business operations.

Third parties engaged by mrwira for data processing are contractually required to process personal data only for the specified purpose and to apply security standards consistent with applicable data protection principles.

9. International Data Transfers

Where personal data is transferred to a country outside Malaysia for processing — for example, through a cloud infrastructure provider or an international payment network — mrwira applies appropriate safeguards. These may include contractual data-transfer clauses, security certifications or equivalent protections accepted under applicable law.

Users who require more specific information about the safeguards applied to a particular type of international transfer may submit a written request to the mrwira support team.

10. Retention Periods

mrwira retains personal data for as long as required to fulfil the purpose for which it was collected, subject to the following general guidelines:

• Account data: Retained for the duration of the account relationship and for a defined period after closure, as required by applicable regulations and dispute-resolution needs.
• Transaction records: Retained for up to seven years where required by anti-money-laundering or financial-record obligations.
• Identity verification documents: Retained for the period required by applicable KYC regulations, typically five to seven years from the date of the last relevant activity.
• Responsible-gambling records: Retained for the duration of any active restriction plus the applicable post-restriction period required to honour re-registration assessments.
• Marketing consent records: Retained until consent is withdrawn and for a reasonable period thereafter as evidence of compliance.

Where data is no longer required and no legal retention obligation applies, it will be deleted or anonymised in a manner that prevents re-identification.

11. User Rights

Malaysian mrwira users may exercise the following rights in relation to their personal data, subject to applicable law and any overriding legal obligation:

12. Children and Age Restrictions

mrwira's casino-style content and any related account or payment features are intended exclusively for adults aged 21 and above. mrwira does not knowingly collect personal data from individuals under 21. If there is reason to believe that a user under 21 has provided personal data, that data will be deleted and access to the account closed promptly.

Parents and guardians concerned about a minor's access to gambling-related content should enable parental controls on shared devices and browsers. mrwira supports age-verification measures and will apply additional checks where there is reasonable doubt about a user's stated age.

13. Security Measures

mrwira applies the following technical and organisational security measures to protect personal data:

• Transport Layer Security (TLS) encryption for data in transit between user devices and mrwira services;
• Access control policies limiting data access to personnel with a defined operational need;
• Password hashing and secure credential-storage practices for account authentication data;
• Regular review of third-party processor security arrangements;
• Incident response procedures to identify, contain and report data security events within applicable timeframes; and
• Session management controls, including automatic timeout and anomalous-activity detection.

No security measure is absolute. Users should also take responsibility for device security, use strong unique passwords and report suspected unauthorised access to mrwira without delay.

14. Changes to This Privacy Policy

mrwira may update this Privacy Policy to reflect changes in applicable law, service functionality, payment methods or operational practice. When material changes are made, the revised version will be published on this page with an updated effective date.

Users are encouraged to review this page periodically. Continued use of mrwira after a revised policy is published constitutes acceptance of the updated terms to the extent permitted by law. Where a change significantly affects how mrwira processes existing account data, a more prominent notice may be displayed.

15. Contact Us

For questions, rights requests, or concerns about how mrwira handles personal data, users may contact the support team. The mrwira website email is provided as plain text only:

[email protected]

When contacting mrwira about a privacy matter, please describe the specific clause or data type your query relates to, and confirm the email address or account reference associated with your query. Do not include passwords, full payment card numbers or one-time verification codes in any message.