Privacy Policy Maga88 – Malaysian Player Personal Data Protection

Maga88 is an online betting and casino gaming platform operating under a valid international licence. We recognise that privacy is a fundamental right, and we are committed to protecting the personal information of all Malaysian players who entrust their data to us.

This policy applies to all information collected through the maga88 website at maga88.click, mobile applications (where available), customer support services, and any other interactions between players and the maga88 platform. It also applies to all registered players regardless of their geographic location.

As a platform built specifically for Malaysian players, we ensure our data practices reflect the trust that local players place in us. Your personal information is more than just data — it is a responsibility we take seriously at maga88.

Maga88 collects various types of information depending on how you interact with the platform. Below are the categories of data we collect and the purposes for which they are used:

Data You Provide Directly:

• Full name as it appears on official identity documents.
• An active Malaysian phone number for OTP verification and account communications.
• Email address for transaction notifications, promotions, and official communications.
• Date of birth for age verification (18 years and above).
• Identity documents (MyKad or passport) during the KYC process.
• Payment account information such as your Touch 'n Go, GrabPay, Boost, ShopeePay, or DuitNow eWallet account numbers used for deposits and withdrawals.

Automatically Collected Data:

• IP address and general geographic location (state within Malaysia).
• Device type, operating system and web browser version used.
• In-platform activity history – games played, bets placed, active time.
• Session log data including login times, logout times, and key account actions.
• Cookie data and tracking technologies as described in Section 6.

Maga88 uses collected data solely for legitimate purposes directly related to platform operations. Below is a summary of how data is used by purpose:

For marketing communications such as promotional emails and bonus notifications, maga88 will only send such communications if you have given your consent at registration or subsequently via the communication preferences in your account settings. You may withdraw this consent at any time by updating your communication preferences in your maga88 account settings.

Maga88 does not sell players' personal data to any party. However, in the course of legitimate platform operations, we may share certain information with the following categories of third parties:

• Payment Service Providers: Payment gateways processing Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and FPX transactions receive only the information necessary to verify and complete financial transactions.
• Game Providers: Gaming software companies such as Evolution Gaming and Pragmatic Play may receive anonymised player identifiers for the purpose of game session tracking and technical resolution.
• Identity Verification Service Providers: Third-party KYC companies that assist in verifying players' identity documents and age receive copies of the identity documents submitted during the verification process.
• Regulatory Bodies & Statutory Authorities: maga88 will disclose player information to law enforcement agencies, regulatory bodies or licensing authorities when required by law or a valid court order.
• Technology Service Providers: Cloud infrastructure and cybersecurity providers that assist maga88 in operating the platform securely may have limited access to data in a strictly contracted technical capacity.

All third parties working with maga88 are required to sign data protection agreements that prohibit them from using player information outside the scope of contracted services and oblige them to maintain security standards comparable to those of maga88.

Maga88 continually invests in security infrastructure to protect Malaysian players' data. The key security measures we employ include:

• Data Encryption in Transit: TLS 1.3 and 256-bit SSL protocols ensure that all communications between a player's device and maga88 servers are fully encrypted.
• Data Encryption at Rest: Sensitive data such as passwords is stored in a hashed format that cannot be decrypted — even by maga88 staff.
• Role-Based Access Control: Every maga88 staff member has access only to the data required for their role – the principle of least privilege is applied at all levels.
• Real-Time Threat Monitoring: Our SIEM (Security Information and Event Management) system monitors all network and account activity 24/7 to detect anomalies and intrusion attempts.
• Regular Security Audits: Regular independent penetration testing and security audits are conducted to identify and address vulnerabilities before they can be exploited.
• Two-Factor Authentication (2FA): Players are encouraged to enable 2FA in their account settings for an additional layer of login protection beyond just a password.

In the unlikely event of a data breach that materially affects players, maga88 is committed to notifying affected players within a reasonable timeframe via email or platform notification, along with the steps they should take to protect their accounts.

Maga88 uses cookies and similar tracking technologies to enhance the player experience and understand how the platform is used. Cookies are small text files stored on your device when you visit the maga88 website.

Types of Cookies We Use:

• Essential Cookies: Required for core platform functionality – including login authentication, session management, and security. These cookies cannot be disabled without affecting the functionality of the maga88 platform.
• Preference Cookies: Saves your preferences such as language, table limits, and display settings so you do not need to reconfigure them each time you log in to maga88.
• Analytics Cookies: Helps us understand which pages and games are most popular, average session duration, and navigation patterns within the platform. This data is collected anonymously and used to improve the user experience.
• Security Cookies: Helps detect suspicious login attempts, bot activity, and fraudulent patterns based on session data and in-platform behaviour.

As a maga88 player, you have the following rights regarding your personal data. We are committed to fulfilling all legitimate requests within a reasonable timeframe:

Maga88 retains players' personal data only for as long as necessary for the purposes outlined in this policy or as required by law. The following are general data retention guidelines:

• Active account data: Retained for the duration the account remains active and for 5 years after account closure — in line with AML compliance and financial audit requirements.
• Financial transaction records: Retained for a minimum of 7 years in accordance with standard financial compliance requirements – this includes deposit history, withdrawals, and betting records made via methods such as Touch 'n Go, GrabPay, and FPX.
• KYC Documents: Retained for the duration of active membership and 5 years after account closure for anti-money laundering (AML) legal compliance purposes.
• Support communication logs: Retained for 2 years from the date of communication for reference and dispute resolution purposes.
• Anonymised analytics data: May be retained indefinitely as it contains no personally identifiable information.

Once the relevant retention period has expired, data will be securely deleted or converted into an anonymised format that cannot be linked to any individual player. The deletion process uses methods that ensure data cannot be recovered.

Maga88 does not permit individuals under the age of 18 to register or use the platform in any capacity. This platform is not designed for or targeted at minors.

If maga88 discovers that personal data belonging to an individual under 18 has been collected without our knowledge, we will take immediate steps to:

• Closing the account in question immediately.
• Delete all personal data associated with the account.
• Returning any deposited funds in accordance with the applicable procedures.

If you know or suspect that someone under the age of 18 has registered an account on maga88, please contact us immediately at support@maga88.click so that prompt action can be taken.

Maga88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, legal requirements or new service features introduced to the platform.

When we make material changes to this policy, we will notify all active players via:

• An email to the address registered on your maga88 account at least 14 days before the changes take effect.
• In-platform notification when you log in after changes are published.
• Updates the "Last Updated" date shown at the top of this policy.

We encourage you to review this Privacy Policy periodically. Continued use of the maga88 platform after a policy change takes effect will be considered acceptance of the updated terms. If you do not agree with the changes, you have the right to close your account and request a withdrawal of your balance before they come into effect.

If you have any questions, concerns or requests regarding this Privacy Policy or the way maga88 handles your personal data, you may reach us through the following channels:

• Privacy Email: support@maga88.click – Please mark the email subject as "Data Privacy Request" to help expedite processing.
• Live Chat: Available 24/7 within the maga88 platform — ideal for general privacy enquiries.
• FAQs: Browse FAQ page us for answers to the most frequently asked privacy questions.

We take all privacy enquiries and complaints seriously and are committed to providing a transparent and meaningful response within the stated timeframe. For requests relating to data access, rectification, or deletion, please provide sufficient proof of identity to ensure we only disclose or modify data for the rightful individual.