MrBayar Privacy Policy
Your privacy matters to us. This policy explains what personal data MrBayar collects, why we collect it, how it is used and protected, and the rights you hold as a player registered on our Platform.
01 Introduction
This Privacy Policy (hereinafter "this Policy" or "the Policy") sets out how MrBayar (hereinafter "MrBayar", "the Company", "we", "us", or "our") collects, processes, stores, transfers, and protects the personal data of individuals who access or use the MrBayar online gaming and sports betting platform accessible at mrbayar.cam (the "Platform" or "Website").
MrBayar is committed to handling your personal information with care, transparency, and respect. This Policy has been prepared with reference to applicable data protection principles, including those reflected in Malaysia's Personal Data Protection Act 2010 (PDPA), and international best-practice standards for the responsible handling of personal data in the online gaming industry.
By registering an Account, accessing the Platform, or otherwise providing your personal information to MrBayar, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. This Policy should be read together with our Terms & Conditions, which govern your use of the Platform generally.
Policy Scope: This Policy applies to all personal data collected through the Platform, including data submitted during registration, during gameplay, through customer support interactions, and through the use of our payment processing services involving Malaysian payment methods such as Touch 'n Go eWallet, DuitNow, FPX, Maybank2u, and CIMB Clicks.
02 Definitions
The following definitions apply throughout this Privacy Policy:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information that identifies or can reasonably be used to identify a living individual, directly or indirectly — including name, identification number, contact details, financial data, IP address, and device identifiers. |
| "Processing" | Any operation performed on personal data, including collection, recording, storage, retrieval, use, disclosure, transfer, erasure, or destruction. |
| "Data Controller" | MrBayar, as the entity that determines the purposes and means of processing your personal data collected through the Platform. |
| "Data Processor" | A third-party service provider that processes personal data on behalf of MrBayar under a binding data processing agreement. |
| "Consent" | A freely given, specific, informed, and unambiguous indication of agreement by which you accept the processing of your personal data for a stated purpose. |
| "Platform" | The MrBayar website at mrbayar.cam and all associated services, mobile interfaces, and integrated gaming products. |
| "PDPA" | The Personal Data Protection Act 2010 of Malaysia, which governs the processing of personal data in commercial transactions in Malaysia. |
03 Data We Collect
MrBayar collects personal data from you in the following categories, depending on the nature of your interaction with the Platform:
3.1 Registration Data
When you create an Account, we collect: full legal name, date of birth, gender, email address, mobile phone number, residential address (including city — e.g., Kuala Lumpur, Petaling Jaya, Penang, Johor Bahru, Shah Alam), and a self-selected username and password.
3.2 Identity Verification (KYC) Data
To comply with our anti-money laundering obligations and to verify your age, we may collect: a copy of your Malaysian identity card (MyKad), passport, or other government-issued photo identification; proof of residential address (utility bill, bank statement); and proof of payment method ownership.
3.3 Financial and Transaction Data
We record all deposits and withdrawals made through the Platform, including: payment method used (e.g., Touch 'n Go eWallet, Boost, GrabPay, Maybank2u, CIMB Clicks, Public Bank, DuitNow, FPX, Bitcoin, USDT TRC20), transaction amounts in MYR or cryptocurrency equivalent, transaction timestamps, and payment reference numbers. We do not store full payment card numbers on our servers.
3.4 Gameplay and Betting Data
We collect records of all gaming sessions conducted on the Platform, including game titles accessed, wager amounts, win/loss outcomes, session duration, and sports betting market selections (e.g., EPL, Liga Super Malaysia, UFC).
3.5 Technical and Device Data
When you access the Platform, our servers automatically collect: IP address, browser type and version, device type and operating system, screen resolution, referral URL, pages visited, time on site, and error logs.
3.6 Communications Data
If you contact our customer support team via live chat, email, or any other channel, we retain records of those communications, including the content of messages, timestamps, and resolution outcomes.
Data Minimisation: MrBayar collects only the personal data that is necessary for the purposes described in this Policy. We do not collect sensitive personal data (such as racial or ethnic origin, religious beliefs, or health data) unless specifically required for responsible gambling assessment purposes and only with your explicit consent.
04 Lawful Basis for Processing
MrBayar processes your personal data on the following lawful bases:
| Basis | When It Applies |
|---|---|
| Contractual Necessity | Processing required to create and manage your Account, process deposits and withdrawals, and deliver gaming services as agreed in our Terms & Conditions. |
| Legal Obligation | Processing required to comply with anti-money laundering (AML) obligations, age verification requirements, fraud prevention duties, and any applicable regulatory requirements. |
| Legitimate Interests | Processing for fraud detection, platform security, responsible gambling monitoring, and improving our services — where our interests do not override your fundamental privacy rights. |
| Consent | Processing for optional marketing communications and the use of non-essential cookies, where you have provided clear and informed consent that you may withdraw at any time. |
05 How We Use Your Data
MrBayar uses the personal data we collect for the following specific purposes:
- Account Administration: Creating, maintaining, and securing your Account; processing login requests; enforcing our single-account policy; and communicating account-related notifications.
- Payment Processing: Facilitating deposits and withdrawals via your selected payment method, whether that is Touch 'n Go eWallet, DuitNow, FPX bank transfer (Maybank, CIMB, Public Bank, Hong Leong), GrabPay, Boost, or cryptocurrency.
- Identity and Age Verification: Confirming that you meet our 21+ minimum age requirement and verifying your identity in accordance with our KYC obligations.
- Fraud Prevention and AML Compliance: Monitoring transactions and account activity for indicators of fraudulent behaviour, money laundering, or other prohibited conduct.
- Responsible Gambling: Monitoring gameplay patterns that may indicate problem gambling behaviour, applying self-imposed deposit limits, session reminders, and processing self-exclusion requests.
- Customer Support: Responding to your enquiries, resolving complaints, and maintaining records of our communications for quality and dispute resolution purposes.
- Platform Improvement: Analysing aggregated and anonymised usage data to improve the Platform's features, performance, and user experience.
- Legal Compliance: Fulfilling our obligations under applicable law, including responding to lawful requests from regulatory authorities.
- Marketing Communications: Sending promotional offers, bonus notifications, and product updates — only where you have provided consent or where permitted under applicable law. You may unsubscribe at any time.
06 Data Sharing & Disclosure
MrBayar does not sell, rent, or trade your personal data to any third party for their independent marketing or commercial purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis:
- Payment Service Providers: To process deposits and withdrawals, we share necessary transaction data with licensed payment processors and e-wallet operators, including those facilitating Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, DuitNow, and FPX transactions. These providers are bound by their own regulatory obligations and data protection frameworks.
- Identity Verification Providers: Third-party KYC service providers who assist with identity document verification and age checks, under binding data processing agreements.
- Game Technology Providers: Software providers who supply the casino games and live dealer content available on the Platform may receive limited gameplay session data for fairness audit and technical support purposes.
- Fraud Prevention and AML Services: Third-party fraud detection and anti-money laundering screening services that process transactional data to identify suspicious activity.
- Regulatory Authorities and Law Enforcement: We will disclose personal data to competent authorities where required to do so by applicable law, court order, or lawful regulatory direction.
- Professional Advisers: Lawyers, auditors, and compliance consultants acting on MrBayar's behalf, subject to professional confidentiality obligations.
International Transfers: Some of our third-party service providers are located outside Malaysia. Where personal data is transferred internationally, MrBayar ensures that appropriate safeguards are in place to protect your data, including the use of standard contractual clauses and binding data processing agreements.
07 Data Retention
MrBayar retains personal data for as long as necessary to fulfil the purposes described in this Policy, and in accordance with our legal obligations. The following general retention periods apply:
| Data Category | Retention Period |
|---|---|
| Account Registration Data | For the duration of the Account plus 7 years following permanent Account closure, to comply with AML recordkeeping obligations. |
| KYC Identity Documents | 7 years from the date of verification, in accordance with applicable AML regulatory requirements. |
| Transaction and Financial Records | 7 years from the date of each transaction, for audit, dispute resolution, and regulatory compliance purposes. |
| Gameplay and Betting Logs | 3 years from the date of each gaming session, retained for fairness audit and dispute resolution. |
| Customer Support Communications | 3 years from the date of the last communication in a support thread. |
| Technical and Device Logs | 13 months from collection, after which they are anonymised or deleted. |
| Marketing Consent Records | Retained until consent is withdrawn, plus 3 years for proof of consent purposes. |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of any individually identifiable information.
08 Cookies & Tracking Technologies
MrBayar uses cookies and similar tracking technologies (collectively "Cookies") on the Platform to enhance your user experience and to collect analytics data. Cookies are small text files stored on your device by your browser when you visit a website.
Types of Cookies We Use:
- Strictly Necessary Cookies: Essential for the Platform to function. These include session management cookies that keep you logged into your Account and security cookies that detect and prevent fraudulent activity. These cannot be disabled without affecting Platform functionality.
- Performance and Analytics Cookies: Used to collect anonymised data about how visitors use the Platform — which pages are visited most frequently, how long sessions last, and where errors occur. This data is aggregated and does not identify individual users.
- Functional Cookies: Enable personalised features such as remembering your preferred language settings, region preferences, and responsible gambling tool configurations.
- Marketing and Targeting Cookies: Used to deliver relevant promotional content on the Platform. These are only deployed with your consent and may be disabled via your cookie preferences settings.
You may manage your Cookie preferences through your browser settings. Please note that disabling certain Cookies may impair the functionality of some Platform features. For comprehensive Cookie management, refer to your browser's help documentation.
09 Security Measures
MrBayar implements technical and organisational security measures appropriate to the risk posed by the processing of your personal data. These measures include, but are not limited to:
- 256-Bit SSL/TLS Encryption: All data transmitted between your device and MrBayar's servers is encrypted using industry-standard SSL/TLS protocols, preventing interception by unauthorised parties.
- Data Encryption at Rest: Sensitive personal data stored on MrBayar's infrastructure, including KYC documents and financial records, is encrypted at rest using AES-256 encryption standards.
- Access Controls: Access to personal data is restricted on a strict need-to-know basis. Staff with access to personal data undergo regular data protection training and are bound by confidentiality obligations.
- Two-Factor Authentication: MrBayar strongly recommends and supports two-factor authentication (2FA) for all player accounts.
- Regular Security Audits: Our systems are subject to periodic penetration testing and vulnerability assessments by independent security professionals.
- Incident Response: MrBayar maintains a documented data breach response plan. In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify you and the relevant authorities as required by applicable law.
While MrBayar employs robust security measures, no digital system is completely immune to risk. You are responsible for maintaining the security of your Account credentials. If you suspect unauthorised access to your Account, please contact our support team immediately.
10 Your Rights
Subject to applicable law and the specific circumstances of your request, you have the following rights in relation to the personal data we hold about you:
Request a copy of the personal data MrBayar holds about you.
Request correction of inaccurate or incomplete personal data.
Request deletion of your data where it is no longer necessary for its stated purpose.
Object to processing carried out under our legitimate interests, including direct marketing.
Request that we restrict processing of your data in certain circumstances.
Receive a machine-readable copy of your data for transfer to another service provider.
To exercise any of the above rights, please contact our Data Protection team using the details in Section 14 of this Policy. We will respond to all valid requests within thirty (30) calendar days of receipt. Requests will be processed free of charge for reasonable, non-repetitive submissions.
Please note that certain rights may be limited where processing is required for legal compliance, fraud prevention, or the exercise and defence of legal claims. Where a limitation applies, we will inform you of the reason at the time of our response.
11 Minors & Age Gating
The MrBayar Platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect or process personal data from individuals below the age of 21. Age verification is a mandatory step in our registration and KYC process, and we require documentary proof of age before processing any withdrawal.
If MrBayar becomes aware that personal data has been collected from an individual below the minimum age, we will immediately suspend the Account, freeze any associated balance pending investigation, and securely delete the personal data of the underage individual as promptly as practicable.
If you have reason to believe that an individual under the age of 21 has registered an Account on MrBayar, we encourage you to notify us immediately via our customer support channels.
12 Third-Party Services & Links
The MrBayar Platform integrates with a number of third-party service providers to deliver its full range of services. These include game content providers, payment processing networks (including those underpinning Touch 'n Go eWallet, Boost, GrabPay, Maybank2u, CIMB Clicks, FPX, and DuitNow), identity verification services, and analytics platforms.
Each third-party provider operates under its own privacy policy and data protection framework. Where MrBayar acts as a controller and engages a third party as a processor, we require that a binding data processing agreement is in place confirming the processor's obligations in respect of your personal data.
MrBayar is not responsible for the privacy practices of any third-party website or service that you may access independently outside of the Platform. We recommend that you review the privacy policies of any third-party services you use in connection with your gaming activities.
13 Policy Updates
MrBayar reserves the right to update or modify this Privacy Policy at any time, to reflect changes in applicable law, our data processing practices, or the services we offer. Where a change is material, we will provide advance notice by publishing the updated Policy on the Platform and, where reasonably practicable, by sending a notification to your registered email address.
The "Last Updated" date at the top of this Policy reflects the date of the most recent revision. We encourage you to review this Policy periodically to remain informed about how we protect your personal data.
Your continued use of the Platform following the effective date of any updated Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you should discontinue use of the Platform and close your Account.
14 Contact Us
If you have any questions, concerns, or requests in relation to this Privacy Policy or the processing of your personal data by MrBayar, please contact our Data Protection team using the details below. All privacy-related enquiries will be handled confidentially and in accordance with our internal data protection procedures.
How We Protect Your Data
All data in transit between your browser and MrBayar's servers is encrypted with bank-grade SSL/TLS. Your payment details, login credentials, and personal information travel securely at all times.
MrBayar does not sell, rent, or trade your personal information to third parties for independent marketing or commercial use. Your data is used solely to operate your account and improve your platform experience.
Our data practices are designed in alignment with Malaysia's Personal Data Protection Act 2010 (PDPA), ensuring that your rights as a Malaysian resident are respected at every stage of data processing.
You may request deletion of your personal data at any time. Where retention is not required by law, we will action erasure requests within 30 days and confirm completion in writing.
We apply a data minimisation principle — collecting only what is genuinely necessary to operate your account, verify your identity, process payments, and comply with legal obligations.
Sensitive data — KYC documents, financial records, and account credentials — is stored with AES-256 encryption at rest on infrastructure with strictly controlled access policies and regular security audits.
Play with Confidence on MrBayar
Your privacy is protected every step of the way. Deposit via Touch 'n Go, DuitNow, or your bank, and enjoy Malaysia's fastest-paying online casino. For players aged 21 and above only.
🔞 For players aged 21 and above only. Please gamble responsibly. For data enquiries: [email protected]