Privacy Policy

This Privacy Policy ("Policy") issued by mrds666 (the "Company", "we", "us", or "our"), the operator of the online gambling platform accessible at mrds666.cam and all associated sub-domains and interfaces (collectively, the "Platform").

This Policy describes how mrds666 collects, processes, stores, and protects personal data belonging to registered users ("Users", "you", or "your") and visitors to the Platform. It also describes the rights available to you in respect of your personal data and the mechanisms by which you may exercise those rights.

mrds666 operates as an English-language online gambling platform serving users across the Malaysian market, including players in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and throughout Malaysia. All monetary transactions on the Platform are conducted in Malaysian Ringgit (MYR / RM).

By registering an account on the Platform or otherwise providing us with your personal data, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. This Policy forms part of the binding agreement between you and mrds666 as described in our Terms & Conditions.

For the purposes of this Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information that identifies or can reasonably be used to identify a living individual, directly or in combination with other available data.
• "Processing" means any operation performed on personal data, including collection, recording, storage, modification, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" means mrds666, the entity that determines the purposes and means of processing personal data.
• "Data Processor" means any third party that processes personal data on behalf of and under the instructions of the Data Controller.
• "KYC" means Know Your Customer — the regulatory identity verification process that the Company is required to conduct prior to processing withdrawal transactions.
• "Cookies" means small data files placed on your device by the Platform to facilitate functionality, analytics, and personalisation.
• "MYR" means Malaysian Ringgit, the official currency of Malaysia and the primary transaction currency of the Platform.
• "Platform" means the mrds666 website, sub-domains, and any associated software interfaces through which gambling services are delivered.

The categories of personal data that mrds666 collects and processes are described in the table below. We collect only what is necessary for the purposes stated.

mrds666 collects personal data through the following methods:

• Direct Submission: When you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or submit any form on the Platform, you directly provide us with personal data.
• Automated Technical Collection: The Platform automatically collects certain technical and usage data when you access and navigate the Platform, including IP address, device identifiers, browser type, and session behaviour — via server logs, cookies, and similar tracking technologies.
• Third-Party Payment Processors: When you transact via DuitNow, FPX, Maybank, CIMB, Public Bank, Touch 'n Go eWallet, Boost, GrabPay, Hong Leong Connect, or cryptocurrency networks, transaction confirmation data is returned to us by the payment processor to record and reconcile your account balance.
• KYC Service Providers: Where we use third-party identity verification services to assist with KYC processing, those providers may return verification results and associated document data to us.
• Fraud Detection Systems: Our fraud and AML monitoring systems process technical and behavioural data patterns across user sessions to identify potential risk indicators.

mrds666 processes your personal data for the following specific purposes:

1. Account Creation and Management: To register and maintain your account, authenticate your login, and provide access to Platform services.
2. Identity Verification (KYC): To verify your identity and age in compliance with regulatory requirements before processing withdrawal transactions or upon request by our compliance team.
3. Payment Processing: To process your MYR deposits and withdrawals via supported Malaysian payment methods, including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and direct bank channels.
4. Fraud Prevention and Anti-Money Laundering (AML): To detect, investigate, and prevent fraudulent activity money laundering, and other unlawful financial conduct on the Platform.
5. Regulatory Compliance: To fulfil our obligations under applicable data protection, anti-money laundering, and gambling regulation frameworks.
6. Responsible Gambling Monitoring: To identify patterns of play that may indicate problem gambling behaviour and to provide timely interventions including automated notifications, account cooling-off prompts, and support referals.
7. Customer Support: To process and respond to your enquiries, complaints, and support requests efficiently and accurately.
8. Platform Analytics and Improvement: To analyse how the Platform is used, identify technical issues, optimise user experience, and develop new features.
9. Marketing Communications: To send you promotional offers, bonus announcements, and news about Platform features — subject to your communication preferences and applicable opt-out rights.

mrds666 processes your personal data one or more of the following legal bases, depending on the purpose of processing:

• Contractual Necessity: Processing required to perform the contract between you and mrds666 — including account management, payment processing, and service delivery.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including KYC, AML, and age verification obligations.
• Legitimate Interests: Processing conducted in pursuit of our legitimate business interests — including fraud prevention, platform security, and analytics — where those interests do not override your fundamental privacy rights.
• Consent: Processing based on your freely given, specific, and informed consent — particularly in relation to optional marketing communications. You may withdraw your consent at any time without affecting the lawfulness of prior processing.

mrds666 does not sell, rent, or commercially transfer your personal data to any third party for their own marketing or advertising purposes. We may share your data with third parties only in the following limited circumstances:

• Payment Processors: We share transaction data with Malaysian payment infrastructure providers — including DuitNow, FPX, and licensed e-wallet operators — to the extent necessary to process your deposits and withdrawals.
• KYC and Identity Verification Providers: We engage third-party KYC service providers to assist in the verification of your identity documents. These providers operate under strict data processing agreements and are not authorised to use your data for any purpose beyond verification.
• Fraud Detection and AML Partners: We may share technical and transactional data with specialist fraud prevention and AML screening partners where necessary to protect the Platform and its users.
• Regulatory and Legal Authorities: We may disclose your personal data to government agencies, regulators, law enforcement bodies, or courts where we are legally required or compelled to do so by a valid order request.
• Corporate Group: Personal data may be shared within the mrds666 corporate group where operationally necessary for account management, compliance, or service delivery, subject to equivalent data protection standards.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of our business assets, personal data held by the Company may be transferred to the acquiring entity, subject to that entity providing equivalent data protection commitments.

As part of our regulatory compliance obligations, mrds666 is required to verify the identity and age of all users before processing withdrawal transactions. This process — known as Know Your Customer (KYC) — involves the collection and review of identity documents and proof of address.

Documents submitted for KYC purposes — including images of your Malaysian IC (MyKad), driver's licence, passport, utility bills, and selfie photographs — are stored securely in encrypted form and are accessible only to authorised compliance personnel. KYC documents are not shared with third parties except where strictly required for verification processing.

KYC data is retained for a minimum period of five (5) years from account closure, as required by applicable AML and record-keeping regulations. After the mandatory retention period, KYC documents are securely deleted from our systems.

When you make a deposit or withdrawal via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank2u, CIMB Clicks, Public Bank Online, Hong Leong Connect, or cryptocurrency networks, the following data is processed:

• Transaction reference numbers and confirmation codes returned by the payment processor.
• Transaction amounts in MYR (or cryptocurrency value converted to MYR equivalent).
• Timestamps of transaction initiation and completion.
• Partial or masked identifiers of the payment instrument used (e.g., last four digits of a bank account, masked e-wallet identifier).

mrds666 does not store full card numbers, CVV codes, or online banking login credentials. All sensitive payment credentials are entered directly on the secure interfaces of the relevant payment provider and are never transmitted to or stored on mrds666 servers.

mrds666 uses cookies and similar tracking technologies to operate and improve the Platform. The categories of cookies we use are as follows:

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary or security cookies may significantly impair your ability to use the Platform. We do not use third-party advertising or retargeting cookies.

mrds666 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following indicative retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any identifiable individual.

mrds666 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the Platform is encrypted using industry-standard TLS protocols.
• Encryption at Rest: Sensitive personal data, including KYC documents and financial records, are encrypted in storage using AES-256 encryption.
• Two-Factor Authentication (2FA): Account login supports2FA to prevent unauthorised access even in cases of credential compromise.
• Access Controls: Access to personal data within our organisation is restricted on a strict need-to-know basis. All staff with data access undergo background verification and regular data protection training.
• Penetration Testing: The Platform undergoes regular third-party security assessments and penetration testing to identify and remediate vulnerabilities.
• Incident Response: In the event of a confirmed data security incident, affected users will be notified within the timeframes required by applicable regulation.

While we employ robust security measures, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your own account credentials and should contact our support team immediately if you suspect any unauthorised use of your account.

Subject to applicable law and verification of your identity, you hold the following rights in relation to your personal data held by mrds666:

To exercise any of the above rights, please contact our data protection team via the contact details in Section 17 of this Policy. We will verify your identity before processing any data rights request. All verified requests will receive a substantive response within thirty (30) days.

The Platform is strictly operated for individuals aged21 years and above. mrds666 does not knowingly collect personal data from individuals under the age of 21. Any account found to belong to a person under 21 at the time of registration will be immediately and permanently closed, all associated funds will be withheld pending investigation, and any winings will be voided.

Where we have reasonable grounds to believe that personal data belonging to a person under 21 has been collected, we will take immediate steps to delete that data and close the associated account. If you believe that a person under 21 has registered on the Platform, please notify us immediately at the contact details provided in Section 17.

In order to operate the Platform efficiently, some personal data may be processed by our service providers in countries outside of Malaysia. Where such international transfers occur, mrds666 ensures that appropriate safeguards are in place to protect your personal data to standards equivalent to those applicable in Malaysia.

Safeguards used for international transfers include contractual data processing agreements with service providers, binding corporate rules where applicable, and use of service providers certified under recognised data protection frameworks. We do not transfer personal data to jurisdictions that do not provide adequate data protection standards without additional safeguards in place.

mrds666 reserves the right to update or amend this Privacy Policy at any time. Material changes to this Policy will be communicated to registered Users by email notification to the address on file, by on-screen notification upon next login, or by posting a prominent notice on the Platform homepage.

The date of the most recent revision is indicated in the "Last Updated" field at the top of this Policy. Your continued use of the Platform following notification of a material change constitutes your acceptance of the updated Policy. If you do not agree to the revised Policy, you should discontinue use of the Platform and contact our support team to arrange Account closure.

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact the mrds666 Data Protection team through the following channels:

mrds666 serves players across Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and throughout Malaysia. Our support team is available around the clock to assist with any privacy-related concern in clear, professional English.