Maga88 Privacy Policy – Personal Data Protection for Malaysian Members

1. Personal Data We Collect

Maga88 collects your personal data through various channels as you use our platform. The data collected falls into two main categories: information you provide directly, and data collected automatically during your use of the platform.

Information you provide directly during registration and use:

• Full name as per your Malaysian identity card (MyKad).
• Malaysian identity card number (IC number).
• Date of birth and gender.
• An active Malaysian mobile phone number.
• An active email address.
• Full Malaysian address (required during KYC verification).
• Payment method information — Touch 'n Go, GrabPay, Boost, ShopeePay, or DuitNow account numbers, or FPX bank account details (Maybank2u, CIMB Clicks).
• KYC supporting documents – front and back images of your MyKad, and a selfie if required.

Data collected automatically during platform use:

• The IP address of the device used to access maga88.
• Device type, operating system, and web browser.
• Login history including date, time, and approximate location.
• Records of all bets placed — game, amount, odds, and outcome.
• Records of all financial transactions — deposits and withdrawals.
• Navigation history within the maga88 platform.
• Cookie and session identifier information.

2. How We Use Your Personal Data

Maga88 uses the personal data collected solely for the following purposes, and for no other purpose without your consent:

• Account management: Registering, verifying, and managing your user account, including the KYC process.
• Transaction processing: Processing deposits and withdrawals via Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and FPX — accurately and securely.
• Service provision: Provides full access to all games and features on the maga88 platform, including Sports Betting, live casino, and slots.
• VIP Rewards Programme: Calculating reward points, determining VIP tier, and automatically crediting weekly cashback.
• Customer support: Resolving enquiries and issues more efficiently using your account history as context.
• Platform security: Detecting and preventing fraud, unauthorised access, bonus abuse, and other illegal activity.
• Service communications: Sending account-related emails and notifications, including transaction updates, promotions you qualify for, and terms updates.
• Legal compliance: Fulfils maga88's obligations under Malaysian law, including the Anti-Money Laundering Act (AMLA) and the Personal Data Protection Act 2010 (PDPA).
• Product enhancements: Analyses aggregated usage patterns (not individual data) to improve the overall user experience on the maga88 platform.

3. Sharing Data with Third Parties

Maga88 does not sell, rent, or trade members' personal data to any third party. However, there are limited situations where we need to share certain data with other parties to keep the platform running properly:

• Technical service providers: Hosting companies, cloud service providers, and technical infrastructure suppliers engaged by maga88 may process your data as part of their services. All such providers are bound by strict data protection agreements.
• Payment gateway: Information required to process transactions is shared with licensed payment gateways such as Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and FPX service providers. Such sharing is limited to the minimum information necessary to complete the transaction.
• Game providers: Live casino and slots providers such as Evolution Gaming and Pragmatic Play may receive session identifiers required for game functionality. They do not receive your full name, IC number, or financial information.
• Malaysian authorities: maga88 will disclose required data to relevant Malaysian authorities — such as the Royal Malaysia Police, Bank Negara Malaysia, or the Malaysian Communications and Multimedia Commission — when required by a court order or applicable law.

In all of the above cases, data sharing is limited to the minimum information strictly necessary. We do not share more than is needed, and all third parties we engage with are bound by confidentiality and data protection obligations.

4. Security & Data Protection

Maga88 invests seriously in security infrastructure to protect the personal data of all members. The key security measures we have implemented are as follows:

• Data encryption in transit: SSL/TLS 256-bit secures all communications between your device and maga88's servers.
• Data encryption at rest: Sensitive data such as passwords and financial information is stored in encrypted form using industry-standard hashing algorithms – your password is never stored in a readable format by anyone, including our own staff.
• Role-based access control: Only staff with a legitimate operational need are granted access to systems containing personal data, and that access is restricted solely to the data relevant to their role.
• 24/7 security monitoring: Our cybersecurity team continuously monitors our systems to detect any suspicious activity or intrusion attempts.
• Regular security audits: Our systems are regularly audited by qualified independent third parties to identify and address any security vulnerabilities before they can be exploited.
• Two-factor authentication: Two-factor authentication (2FA) is available for all accounts, and we strongly encourage all members to enable it.

While we take all reasonable steps to protect your data, no online security system can be guaranteed 100% safe from all cyber threats. We encourage you to play your part in securing your account by using a strong password, enabling 2FA, and never sharing your login details with anyone.

5. Cookies & Tracking Technologies

Maga88 uses cookies and similar tracking technologies to enhance your platform experience. Cookies are small text files stored on your device by your web browser when you visit a website. We use the following types of cookies:

• Essential session cookies: Required for core platform functions such as login verification, session management, and security. These cookies cannot be disabled without affecting platform functionality.
• Preference cookies: Saving your preferences such as language, display layout, and other settings so you don't have to reconfigure them each time you log in.
• Analytics cookies: Collects aggregated, anonymised data on how members use the maga88 platform to help us understand usage patterns and improve our services. This data is not linked to individual accounts.
• Security cookies: Helps detect and prevent fraud, account misuse, and unauthorised access by identifying suspicious usage patterns.

You can manage your cookie preferences through your web browser settings. Disabling certain cookies may affect the functionality of the maga88 platform. Continued use of the platform after the cookie notice is displayed will be considered your consent to the use of cookies as described in this policy.

6. Your Rights as a maga88 User

Under Malaysia's Personal Data Protection Act 2010, you as the data subject have the following rights regarding the personal data we hold about you:

• Right of access: You have the right to request a copy of the personal data we hold about you. Such requests will be processed within 21 working days.
• Right to rectification: If the personal data we hold about you is inaccurate or out of date, you have the right to request a correction. Some information can be updated directly from your account settings.
• Right to withdraw consent: You may withdraw consent for data processing for specific purposes (such as marketing communications) at any time by contacting us or using the unsubscribe function in our emails.
• Right to request deletion: Under certain circumstances permitted by law, you may request the deletion of your personal data. Please note that maga88 may be required to retain certain data to fulfil legal obligations even after account closure.
• Right to lodge a complaint: If you believe your privacy rights have been violated, you have the right to lodge a complaint with us and with the Personal Data Protection Commissioner of Malaysia.

To exercise any of the above rights, please contact the maga88 Privacy Officer by email at support@maga88.xyz with the subject line "Privacy Rights Request", or via the 24/7 in-platform live chat. We will verify your identity before processing any data-related request to protect the security of your account.

7. Data Retention Period

Maga88 retains members' personal data for as long as necessary for the purposes it was collected, subject to the minimum legal retention requirements prescribed under Malaysian law. The general guidelines for our retention periods are as follows:

• Active account data: Retained for the duration of your active maga88 account plus 7 years after account closure (for anti-money laundering compliance purposes).
• Financial transaction records: Retained for a minimum of 7 years from the transaction date, in line with Malaysian accounting and anti-money laundering legal requirements.
• Customer support communication records: Retained for 3 years from the date of the last interaction, for reference and complaint resolution purposes.
• Security logs: Retained for 1 year for security incident investigation purposes if required.
• KYC data: Retained for the duration of the active account plus 7 years after account closure, in line with legal compliance requirements.

Once the applicable retention period has expired, your personal data will be securely deleted or permanently anonymised so that it can no longer be linked to you as an individual. maga88 conducts regular data retention reviews to ensure data that is no longer required is deleted promptly.

8. Contact maga88's Privacy Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or your personal data at maga88, please contact our privacy team through the following channels:

• Email: support@maga88.xyz (please state "Privacy Enquiry" in the subject line)
• Live Chat: Available 24/7 within the maga88 platform — select the "Privacy & Data" category when starting a chat session

We aim to respond to privacy-related enquiries within 3 business days. For more complex data access or deletion requests, the process may take up to 21 business days in accordance with Malaysia's PDPA requirements. You will receive a confirmation of receipt within 24 hours.

This Privacy Policy is governed by and construed in accordance with Malaysian law, including the provisions of the Personal Data Protection Act 2010. Any changes to this Privacy Policy will be communicated to members via registered email or in-platform notification at least 14 days before the changes take effect. Continued use of the platform after the changes take effect will be deemed acceptance of the updated policy.