Privacy Policy mr group —
Our Commitment to Your Personal Data

Mr group ("we", "Platform", or "mr group") respects the privacy rights of every individual who uses our services. This Privacy Policy explains in detail how we collect, process, store, use, and protect your personal information when you use our online entertainment platform.

This document is written in English for the understanding of all our members in Malaysia. This Policy complies with Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable international data protection standards.

The scope of this policy covers:

• The official mr group website at mrgroup.onl and all related subdomains.
• The mr group mobile app is available on iOS and Android platforms.
• All services, games, and features offered through the mr group platform.
• Communications between members and the mr group team through any official channel.

By registering a mr group account or continuing to use our platform after the effective date of this policy, you confirm that you have read and agreed to all terms stated herein.

Mr group only collects personal data that is strictly necessary to provide our services safely and efficiently. Below are the data categories we collect along with their specific purposes:

We do not collect any sensitive data such as health information, religious beliefs, or political views unless required by law.

Mr group processes your personal data on valid legal grounds. We use your data only for the following purposes:

• Contract Performance: Process account registration, deposits, withdrawals, and all other financial transactions necessary to deliver the services you request.
• Legal Compliance: Meet KYC (Know Your Customer), AML (Anti-Money Laundering), and regulatory reporting obligations required under Malaysian law.
• Legitimate Interest: Detect and prevent fraud, protect the security of our platform and members, and monitor compliance with Terms and Conditions.
• Consent: Send marketing communications, promotional notifications, and platform updates — only to members who have given their consent.
• Service Improvement: Analyse usage patterns in aggregate (not individually) to improve platform quality, user experience, and game selection.
• Responsible Gaming: Monitor wagering patterns to identify members who may need assistance or support related to responsible gaming.

Mr group does not sell, rent, or transfer your personal data to third parties for their own marketing or commercial purposes. Your data is only shared in the following limited situations:

• Service Providers: Technical and operational partners who help us deliver our services — including payment providers, game providers, and cloud computing infrastructure. All such parties are bound by strict data protection agreements.
• Legal Requirement: When required by law, court order, law enforcement agencies, or legitimate Malaysian regulatory authorities.
• Security Protection: In cases where sharing information is necessary to protect the rights, property, or safety of mr group, our members, or the public.
• Business Restructuring: In the event of a merger, acquisition, or asset sale, user data may be transferred to a successor entity bound by a privacy policy of equivalent or stricter standard.

All third parties that receive mr group member data are required to uphold data protection standards equivalent to this policy and are not permitted to use such data for any purpose beyond the agreed scope.

Mr group implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, alteration, disclosure, or destruction. Our security systems include:

• 256-bit SSL Encryption: All data transmitted between your browser and mr group servers is protected by 256-bit SSL/TLS encryption — the same standard used by global banking institutions.
• Stored Data Encryption: Sensitive data including financial information and identification documents is stored in encrypted form using AES-256 standards.
• Two-Factor Authentication (2FA): Mandatory additional security layer for all withdrawal transactions and critical account information changes.
• 24/7 Monitoring: A real-time security monitoring system that automatically detects and responds to suspicious activity.
• Data Segregation: Member funds are held in accounts separate from the company's operational funds, protected by additional layers of security.
• Security Audit: Regular security assessments by independent third parties to ensure our systems consistently meet or exceed industry standards.

Mr group uses cookies and similar tracking technologies to enhance the user experience, maintain login session security, and understand how our platform is used. Cookies are small text files stored on your device when you visit our website or use our app.

Types of cookies we use:

• Essential Cookies: Required for core platform functions — login, game sessions, security, and language preferences. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collect aggregated, anonymised information on how users interact with our platform to help us improve performance and user experience.
• Functional Cookies: Store your personal preferences such as display settings, betting limits you have set, and language preferences.
• Analytics Cookies: Help us understand which games and features are most popular so we can continue improving our offerings.

You can manage cookie settings through your web browser preferences. However, disabling certain cookies may affect the functionality and user experience of the mr group platform.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by mr group:

Mr group retains your personal data only for as long as necessary to fulfil the purposes stated in this policy, or as required by applicable laws and regulations in Malaysia.

• Active Account Data: Retained for the duration your account is active and for a reasonable period thereafter to facilitate reactivation if required.
• Financial & Transaction Records: Retained for a minimum of 7 years after a transaction is made, in compliance with Malaysia's legal requirements on financial records and AML.
• KYC & Identity Verification Records: Retained for a minimum of 5 years after the termination of the business relationship, in accordance with PDPA requirements and financial regulations.
• Communication Logs: Customer support communication records are retained for 2 years for quality control and dispute resolution purposes.
• Marketing Data: Data collected based on consent for marketing purposes will be deleted within 30 days after you withdraw your consent.

When your personal data is no longer required, we will securely delete it or render it permanently unidentifiable using safe, irreversible methods.

The mr group platform is exclusively for individuals aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18.

If we find that we have collected personal data from a minor without valid parental or guardian consent verification, we will take immediate steps to:

• Suspend or close the relevant account immediately.
• Delete all data associated with that individual from our systems.
• Refund any funds that may have been deposited, where applicable.

If you are a parent or guardian and believe your child under the age of 18 has registered an account with mr group, please contact us immediately at [email protected] so we can take the appropriate action.

Mr group reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the technologies we use. The "Last Updated" date at the top of this document will always indicate the latest version in effect.

For significant changes to how we handle your personal data, we will notify you via:

• In-app or mr group website notifications.
• Email sent to your registered email address.
• A prominent notice on our website's main page.

Your continued use of the mr group platform after any changes to this Privacy Policy take effect will be considered as your acceptance of those changes. If you do not agree with the changes made, you should stop using the platform and contact us to close your account.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how mr group handles your personal data, please contact our Data Protection Officer through the following channels:

• Data Protection Email: [email protected]
• General Support: [email protected]
• Live Chat: Available 24/7 via the mr group mobile app or website.

We aim to respond to all privacy-related enquiries within 5 business days. For more complex issues requiring thorough investigation, we will provide you with a status update within 14 business days.