Maga88 Privacy Policy – Personal Data Protection for Malaysian Players

1. Introduction & Scope of This Privacy Policy

This Privacy Policy describes how maga88 ("we", "platform") manages personal information provided by you ("member", "user") when registering for and using maga88 platform services. It applies to all registered members and visitors who interact with the maga88 platform through our website or any of our official channels.

Maga88 takes our responsibility as custodians of your personal data seriously. We operate on the principle that your personal data belongs to you — we only hold and use it for specific purposes, with your consent, and for as long as necessary. No data is ever sold, rented, or shared with third-party advertisers.

By registering an account with maga88 or continuing to use the platform after this policy is updated, you agree to the data protection practices described herein. If you do not agree with any part of this policy, you are advised to discontinue use of the maga88 platform and may contact us to close your account and request deletion of your data.

2. Types of Personal Data We Collect

Maga88 collects several categories of personal data from members during the registration process and throughout ongoing use of the platform. Below are the types of data we collect and the purposes for which they are used:

For the KYC (Know Your Customer) process required for withdrawals above certain limits or in accordance with compliance requirements, maga88 may request a copy of your MyKad (Malaysian identity card), proof of address such as a recent utility bill, and screenshots of the relevant payment transactions. All such documents are stored in an encrypted environment and deleted once the verification purpose has been fulfilled.

3. How We Use Your Data

Maga88 uses collected personal data solely for the purposes stated below. We do not use your data for any other purpose without first obtaining your renewed consent:

• Account Management: Creating and maintaining your member account, verifying your identity, processing password reset requests, and managing your account settings according to your preferences.
• Financial Transaction Processing: Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX (Maybank2u, CIMB Clicks), as well as withdrawal of winnings to the same payment methods.
• Identity Verification (KYC): Fulfilling anti-money laundering (AML) compliance and know-your-customer obligations required under our platform's operating licence.
• Customer Support: Resolving complaints, responding to enquiries, and providing technical support to members. Communication records are retained for quality assurance and dispute resolution purposes.
• Platform Security: Detecting and preventing fraudulent activity, multi-account usage, bot activity, money laundering, and other security threats targeting the maga88 platform and its members.
• Service Improvement: Analyses platform usage patterns in aggregate and non-identifiable form to improve the design, navigation, and features of maga88.
• Service Communications: Sends important notifications related to your account, security, terms changes, and transaction information. This is separate from marketing communications, which require separate consent.

4. Sharing Data with Third Parties

Maga88 does not sell, rent, or trade members' personal data to any third party for marketing or commercial purposes. However, there are limited circumstances where data sharing is necessary to provide maga88 platform services:

• Payment Service Providers: Transaction information required to process payments is shared with payment processors (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, FPX) solely to complete your deposit and withdrawal transactions. These providers are bound by strict data confidentiality agreements.
• Game Providers: Data required to run game sessions is shared with game providers (such as PG Soft, Evolution Gaming, Microgaming, NetEnt, Playtech) in a limited and encrypted format. These providers do not receive members' full personal identification information.
• Legal Authorities: maga88 will disclose personal data to government authorities or law enforcement when required by a valid court order or applicable legal obligation. We will notify the member concerned of any such request unless prohibited from doing so by law.
• Identity Verification Services: During the KYC process, documents you submit may be reviewed by a third-party identity verification service that is bound by a strict data protection agreement with maga88.

5. Data Security & Technical Safeguards

Maga88 implements comprehensive technical and organisational security measures to protect members' personal data from unauthorised access, disclosure, alteration, or loss. These protective measures include:

• 256-bit SSL Encryption: All communications between your web browser and maga88 servers are encrypted using TLS 1.3 protocol with 256-bit keys. This means data in transit — including login credentials and transaction details — cannot be read by any party attempting to intercept those communications.
• Data-at-Rest Encryption: Sensitive data stored in maga88 databases — including passwords (stored as non-reversible hashes) and financial information — is encrypted using AES-256 standard.
• Two-Factor Authentication (2FA): maga88 provides two-factor authentication for all member accounts. We strongly encourage all members to enable 2FA as an additional layer of account protection.
• 24/7 Security Monitoring: Our automated monitoring system detects suspicious login attempts, unusual transaction patterns, and other indicators of unauthorised activity in real time.
• Internal Access Controls: Only maga88 staff who require data access to perform their specific duties are granted permission — and every instance of access is logged and audited.
• Regular Security Testing: The maga88 platform undergoes regular penetration testing and security reviews by independent parties to identify and address vulnerabilities.

6. Your Rights Regarding Personal Data

As a maga88 member, you have certain rights over the personal data we hold about you. We fully respect these rights and provide straightforward mechanisms for you to exercise them:

To exercise any of the rights above, please submit a written request to the maga88 privacy team at support@maga88.biz, stating your account number and the specific right you wish to exercise. We will acknowledge receipt of your request within 3 business days and fulfil it within 14 to 30 business days, depending on the complexity of the request.

7. Cookies & Tracking Technologies

The maga88 platform uses cookies and similar technologies to enhance your experience, ensure the platform runs smoothly, and analyse usage patterns on an aggregate basis. Cookies are small text files stored in your web browser when you visit the maga88 platform.

• Essential Cookies: Required for the platform's core functions — including keeping you logged in and maintaining session security. These cookies cannot be disabled as they are essential for the platform to operate.
• Functional Cookies: Stores your preferences such as selected language, display settings, and last played games to deliver a more personalised experience on every visit.
• Analytics Cookies: Helps us understand how members use the platform — the most frequently visited pages, time spent, and navigation flow. This data is collected in aggregate and does not identify individuals.

You can manage and delete cookies through your web browser settings. However, disabling essential cookies may affect the functionality of the maga88 platform and prevent you from logging in or using certain features.

8. Cross-Border Data Transfers

To deliver a seamless experience for Malaysian players, some third-party service providers that maga88 works with — such as international game providers and payment processing platforms — may operate outside Malaysia. This means that in certain circumstances, some data may be processed beyond Malaysian borders.

Maga88 ensures that any cross-border data transfers are protected by adequate data protection agreements, and that the relevant providers are held to the same or higher security and privacy standards as those applicable in Malaysia. We do not permit data transfers to any destination that lacks adequate privacy protections.

9. Data Breach Notification

In the event of a data security breach affecting the personal data of maga88 members, we are committed to responding swiftly and transparently. Our data breach response process is as follows:

1. Maga88's security team will identify and contain any breach immediately upon detection.
2. A risk assessment will be conducted within 24 hours to determine the scope and impact of the breach on member data.
3. Affected members will be notified via their registered email within 72 hours of a breach being identified — sooner where practicable.
4. The notification to members will include details of the breach, the types of data potentially affected, the steps we have taken, and the recommended actions members can take to protect themselves.
5. Post-mortem reports and preventive measures will be implemented to avoid similar incidents in the future.

If you notice or suspect any unauthorised activity involving your maga88 account or data, please contact our security team immediately via live chat or email at support@maga88.biz. Early reports from members often help us act faster to protect the entire maga88 community.

10. Changes to This Privacy Policy

Maga88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data handling practices, new legal requirements, or platform improvements. The date at the top of this document indicates when it was last updated.

For material changes to how we use personal data, maga88 will notify members via an in-platform notice or registered email at least 7 days before the changes take effect. For minor changes that do not materially affect members' privacy rights, updates may be made without separate notice.

11. Contact Us About Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or how maga88 handles your personal data, our team is ready to assist through the following channels:

• Email: support@maga88.biz — Include "Privacy Enquiry" in the subject line to ensure your message reaches the right team. All privacy enquiries will be responded to within 5 business days.
• Live Chat: Available directly on the maga88 platform, 24 hours a day, 7 days a week, in Bahasa Malaysia. For general privacy questions, live chat is the fastest way to get an answer.
• Formal Written Request: For formal requests such as data access, correction, or deletion, please submit via email, including your account number and clear details of your request.

Maga88 takes every privacy-related enquiry and complaint seriously. We are committed to providing meaningful responses and resolving all privacy issues transparently and fairly. Member trust is the foundation of the maga88 platform, and we do not take this responsibility lightly.