Privacy Policy marjan898 – Personal Data Protection for Malaysian Players

Introduction & Scope of the Privacy Policy

This Privacy Policy is published by marjan898 and applies to all individuals who access or use the marjan898 platform at marjan898.asia — including unregistered visitors, registered members, and former members whose accounts have been closed but whose data remains within the specified retention period.

As an online entertainment platform serving players across Malaysia, marjan898 processes a certain amount of personal data in the course of normal operations. We understand that privacy is a fundamental right, not merely a compliance requirement — it is the foundation of trust between marjan898 and each of our members.

This Privacy Policy is drafted to comply with Malaysia's Personal Data Protection Act 2010 (PDPA), which governs how organisations in Malaysia collect, use, disclose and store individuals' personal data. In the event of any conflict between the Bahasa Melayu version and any translation of this document, the Bahasa Melayu version shall prevail.

Categories of Personal Data We Collect

Marjan898 collects personal data from various sources as you interact with our platform. Below are the categories of data we collect and their sources:

Marjan898 does not collect sensitive data such as health information, religious beliefs, political affiliations or biometric data, except where required by applicable Malaysian law and with clear prior notice to you.

How marjan898 Uses Your Personal Data

The personal data we collect is used solely for the following purposes:

• Account management — to create, verify and manage your marjan898 account, including the login process, password resets and profile updates.
• Payment processing — processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX, as well as withdrawals to your Malaysian bank account or e-wallet.
• Provision of gaming services — enabling you to play slots, Live Casino, poker, badminton betting, virtual sports and all other games available on marjan898.
• Legal compliance — to fulfil AML (anti-money laundering), KYC (Know Your Customer) and other reporting obligations required under Malaysian law.
• Platform security — detect and prevent fraud, bot usage, collusion, and activities that violate marjan898's Terms & Conditions.
• Customer support — handling enquiries, complaints, and assistance requests submitted to the marjan898 support team.
• Service communications — sending important notifications about your account, transactions, security updates, and policy changes that directly affect you.
• Service improvement — analysing usage patterns in aggregate (without identifying individuals) to understand how to improve the user experience on marjan898.
• Responsible gambling — monitor gameplay patterns to identify signs of problem gambling and reach out to members who may need support.

Legal Basis for Data Processing

Under Malaysia's Personal Data Protection Act 2010 (PDPA), marjan898 only processes your personal data on the basis of one or more of the following lawful grounds:

• Consent — you have given marjan898 your explicit consent to process your data for specific purposes, such as marketing communications. This consent may be withdrawn at any time.
• Performance of contract — processing is necessary to perform the service contract between you and marjan898 (Terms & Conditions), including payment processing and the provision of access to games.
• Legal obligations — processing is required to comply with Malaysian legal obligations, including applicable AML, KYC and tax reporting requirements.
• Legitimate interests — processing is required for marjan898's legitimate interests, such as fraud prevention, platform security and service improvement, provided these interests do not override your fundamental rights and freedoms.

For each major data processing activity at marjan898, the applicable legal basis can be requested in writing by emailing our privacy team at support@marjan898.asia.

Data Sharing with Third Parties

Marjan898 does not sell your personal data to any party. However, in the course of normal operations, marjan898 shares data with the following limited categories of third parties, only to the extent necessary:

• Payment service providers — payment processors handling transactions via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow and FPX are required to receive the transaction information necessary to process your payment. These providers are bound by strict data protection agreements.
• Game providers — game software providers such as Pragmatic Play, PG Soft, and others may receive anonymised player identifiers for technical purposes. Personal identification data is not shared with game providers.
• Legal authorities — marjan898 will disclose personal data to Malaysian law enforcement agencies (police, MACC, BNM) when required by a valid court order or applicable legal obligation.
• Technology infrastructure providers — cloud computing service providers and technical infrastructure providers supporting marjan898's operations may have limited access to data in the course of delivering their services. All such providers are bound by confidentiality and data protection agreements.

Marjan898's Data Security Measures

Marjan898 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction:

• Data encryption in transit — all communication between your browser and the marjan898 platform is encrypted using TLS protocol with 256-bit SSL encryption. This is the same standard used by Maybank, CIMB and Malaysia's major banks to secure online banking transactions.
• Data encryption at rest — sensitive data such as passwords (stored as irreversible hashes), MyKad numbers and bank account details are encrypted at the database level.
• Tiered access controls — only marjan898 staff with a legitimate operational need may access members' personal data. All such access is logged and audited on a regular basis.
• Two-factor authentication — for internal administrative access, two-factor authentication (2FA) is enforced for all staff with access to systems containing members' personal data.
• Regular vulnerability scanning — marjan898's security team conducts regular penetration testing and vulnerability scanning to identify and address potential security weaknesses before they can be exploited.
• Incident response plan — marjan898 has clear cybersecurity incident response procedures in place. In the event of a material data breach, affected members will be notified within the timeframe stipulated by Malaysia's PDPA.

While marjan898 takes all reasonable precautions, no security system can guarantee absolute protection. You also play an important role in keeping your account safe — never share your password with anyone, and contact us immediately if you suspect any suspicious activity.

Data Retention Period

Marjan898 retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy, or as required by applicable Malaysian law:

• Active account data — retained for as long as your account is active at marjan898, plus the post-closure retention period specified below.
• Financial records and transaction data — retained for a minimum of seven (7) years from the transaction date, in line with Malaysia's accounting and AML legal requirements.
• KYC and identity verification data — retained for the lifetime of the account and for a minimum of five (5) years after account closure, in line with Malaysia's AML requirements.
• Customer support communication log data — retained for two (2) years from the date of the last interaction.
• Technical log data (IP address, access records) — retained for one (1) year from the date of generation.
• Game and betting data — retained for three (3) years for compliance and fraud analysis purposes.

Once the relevant retention period has expired, data will be securely deleted or anonymised so that it can no longer be linked to any specific individual. The data deletion and anonymisation process is carried out in accordance with approved procedures to ensure data cannot be recovered after completion.

Cookies & Tracking Technologies

The marjan898 platform uses cookies and similar tracking technologies to enhance your experience and enable essential platform functions. Below are the types of cookies we use:

You can manage your cookie preferences through your web browser settings. Please note that disabling certain cookies may affect the functionality or your experience on the marjan898 platform. Optional cookies can be disabled without impacting the platform's core functions.

Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding personal data that marjan898 holds about you:

• Right of access — you have the right to request a copy of the personal data we hold about you. marjan898 will respond within 21 days of receiving a complete request.
• Right to rectification — if the data we hold about you is inaccurate or incomplete, you have the right to request a correction. Some information can be updated directly through your marjan898 account profile settings.
• Right to request deletion — in certain circumstances, you have the right to request the deletion of your personal data. Please note that this right is not absolute — we may need to retain certain data to fulfil legal obligations such as AML and accounting requirements.
• Right to object to processing — you have the right to object to the processing of your data for marketing purposes at any time. For other purposes, the right to object is subject to the legal basis applicable to the processing in question.
• Right to withdraw consent — if the processing of your data is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the validity of any processing carried out prior to the withdrawal.

To exercise any of the rights listed above, please contact the marjan898 privacy team by email at support@marjan898.asia, clearly stating your request and providing sufficient information to verify your identity. marjan898 will assess each request individually and respond in writing within the timeframe required by law.

Financial & Payment Data Protection

Your financial data — including bank account information, e-wallet account details, and transaction records — is the category of data that receives the strictest protection at marjan898. Here are the specific measures we have in place:

• Full bank account details and card numbers are never stored directly by marjan898's systems — transactions are processed through payment providers that comply with PCI-DSS standards.
• Deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow and FPX are processed through encrypted channels, and only the information required for transaction reconciliation is recorded by marjan898.
• Withdrawals to Malaysian bank accounts or e-wallets are processed only to accounts held in the same name as your marjan898 account — this measure protects you against unauthorised fund transfers.
• Financial transaction records are stored with encryption and retained for seven years in accordance with Malaysia's financial legal requirements.

Changes to the Privacy Policy

Marjan898 reserves the right to update this Privacy Policy from time to time to reflect changes in privacy practices, legal requirements, or platform developments. Where material changes occur, marjan898 will:

• Displaying an in-account notification on your marjan898 account when you log in after changes take effect.
• Sending notification emails to the registered address for changes deemed material by marjan898.
• Updates the "Last Updated" date at the top of this page and in the document hero section.
• Provides a minimum notice period of 14 days before any material changes take effect, unless the changes are required immediately for legal or security reasons.

Your continued use of the marjan898 platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. If you do not agree with the changes, you have the right to close your account before the effective date and request the deletion of any data eligible for removal.

Contact Us – marjan898 Privacy Officer

If you have any questions, concerns or requests relating to this Privacy Policy or the way marjan898 processes your personal data, please contact us through the following channels:

• Email: support@marjan898.asia — please indicate "Privacy Enquiry" in the subject line. Our privacy team will respond within 5 business days.
• Live Chat: Available 24 hours a day, 7 days a week via the chat icon on the marjan898 platform. For data rights requests, you may be required to submit a written request by email for a more secure identity verification process.

For official requests relating to data access, correction, or deletion, please include the following in your email: your marjan898 account number, the type of request being made, a detailed description, and where applicable, a copy of the relevant identification document for identity verification purposes.

Marjan898 is committed to addressing every privacy enquiry with seriousness and transparency. If you are not satisfied with the response provided, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia in accordance with the procedures set out under PDPA 2010.