maga88 Privacy Policy

1. Introduction

maga88 is committed to protecting the privacy and personal data of all Players and visitors to the Platform. This Policy explains how we handle personal information in compliance with applicable data protection principles, including the Personal Data Protection Act 2010 (PDPA) of Malaysia and internationally recognised data protection standards.

This Policy applies to all personal data collected through your use of the maga88 Platform, including data collected during registration, KYC verification, financial transactions, customer support interactions, and Platform browsing activity. It should be read alongside the maga88 Terms & Conditions, which govern your overall use of the Platform.

If you have questions about this Policy or how maga88 handles your personal data, please contact us at [email protected] or via live chat at maga88.asia.

2. Personal Data We Collect

2.1 Registration Data

When you create a maga88 account, we collect the following information that you provide directly:

• Full legal name (as appearing on your Malaysian IC or passport)
• Date of birth
• Malaysian IC number or passport number
• Residential address (including city, state, and postcode)
• Email address
• Mobile phone number (Malaysian format)
• Username and encrypted password

2.2 KYC Verification Data

To activate your account for real-money play and to process withdrawals, maga88 requires:

• Photographic copy or scan of your Malaysian IC (front and rear) or valid passport
• Proof of address documentation where required (such as a recent utility bill or bank statement)
• Proof of ownership of payment methods registered to your account

2.3 Financial Transaction Data

In connection with deposits and withdrawals, maga88 collects and retains:

• Payment method identifiers (e-wallet account references, FPX bank transaction IDs, or cryptocurrency wallet addresses where applicable)
• Transaction amounts, timestamps, and processing statuses
• Deposit and withdrawal history associated with your account

2.4 Gaming Activity Data

maga88 records all gaming activity associated with your account, including bet history, game results, session durations, responsible gaming tool activations, and promotional bonus transactions. This data is retained for regulatory compliance and dispute resolution purposes.

2.5 Technical & Usage Data

When you access the Platform, maga88 automatically collects certain technical data, including:

• IP address and geolocation data (country and region level)
• Device type, operating system, and browser version
• Session timestamps and duration
• Pages visited, features accessed, and navigation patterns within the Platform
• Referral source (where applicable)

2.6 Customer Support Communications

All communications between you and the maga88 support team — whether via live chat, email, or any other channel — are recorded and retained. This includes the content of your communications, timestamps, and any information you provide to assist in resolving your query or complaint.

3. How We Collect Your Data

maga88 collects personal data through the following means:

• Directly from you — through account registration forms, KYC submission, payment method linking, support interactions, and voluntary communications with maga88.
• Automatically — through cookies, server logs, and analytics tools as you browse and use the Platform.
• From third parties — from KYC and identity verification service providers, payment processors and e-wallet operators (including Touch 'n Go eWallet, Boost, DuitNow, and FPX participating banks such as Maybank and CIMB), and fraud prevention and anti-money laundering screening services.

4. How We Use Your Personal Data

maga88 uses the personal data we collect for the following purposes:

• To create, maintain, and administer your maga88 account
• To verify your identity and age in compliance with KYC requirements
• To process deposits, withdrawals, and all financial transactions on the Platform
• To provide, operate, and improve the maga88 Platform and all services offered thereon
• To detect, investigate, and prevent fraud, money laundering, and other prohibited activities
• To enforce the maga88 Terms & Conditions and other applicable policies
• To provide customer support and to respond to queries, complaints, and dispute resolution requests
• To send transactional communications, including account notifications, security alerts, and withdrawal confirmations
• To send promotional and marketing communications where you have provided consent (you may opt out at any time)
• To analyse Platform usage patterns and improve user experience
• To comply with applicable legal obligations, regulatory requirements, and the directions of competent authorities
• To operate responsible gaming tools and to identify account behaviour that may indicate problem gambling

5. Legal Basis for Processing

maga88 processes your personal data on the following legal bases:

• Contractual necessity: Processing is necessary for the performance of the account agreement between you and maga88, including account management, transaction processing, and service delivery.
• Legal obligation: Processing is required to comply with applicable laws, including anti-money laundering (AML) requirements, KYC obligations, and tax reporting requirements.
• Legitimate interests: Processing is conducted for the legitimate interests of maga88, including fraud prevention, platform security, and service improvement, where these interests are not overridden by your data protection rights.
• Consent: Where processing is based on consent (such as for direct marketing communications), you may withdraw your consent at any time without affecting the lawfulness of processing prior to withdrawal.

6. Data Sharing & Disclosure

maga88 does not sell, rent, or commercially trade your personal data to any third party. We may share personal data with the following categories of recipients only to the extent necessary for the stated purpose:

• Payment service providers — to process deposits and withdrawals, including e-wallet operators and FPX-participating Malaysian banks
• KYC and identity verification providers — to fulfil age verification and anti-money laundering compliance obligations
• Fraud prevention and security services — to detect and prevent fraudulent activity on the Platform
• Technology and infrastructure providers — cloud hosting, database management, and platform monitoring services that process data on maga88's behalf under binding data processing agreements
• Regulatory and law enforcement authorities — where required by applicable law, court order, or at the direction of a competent regulatory authority
• Professional advisors — legal, accounting, and auditing professionals under professional confidentiality obligations

All third parties with whom maga88 shares personal data are required to process that data in accordance with applicable data protection standards and solely for the purposes for which it was shared.

7. Data Retention

maga88 retains personal data for as long as your account is active and for such additional period as is necessary to fulfil legal, regulatory, and compliance obligations. Specifically:

• Account registration and KYC data is retained for a minimum of five (5) years following account closure, in accordance with anti-money laundering record-keeping requirements.
• Financial transaction records are retained for a minimum of seven (7) years following the transaction date.
• Gaming activity records are retained for a minimum of three (3) years following the date of activity.
• Customer support communications are retained for three (3) years from the date of the communication.
• Technical and usage data is retained for up to twenty-four (24) months.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with maga88's data disposal procedures.

8. Data Security

maga88 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• TLS 1.3 encryption for all data transmitted between your device and the Platform
• AES-256 encryption for personal and financial data at rest
• Role-based access controls limiting internal staff access to personal data on a strict need-to-know basis
• Multi-factor authentication requirements for staff accessing production systems containing personal data
• Regular third-party penetration testing and security audits of the Platform and infrastructure
• Segregated storage of Player funds and personal data
• Automated monitoring and alerting systems for unusual access patterns or data exfiltration attempts

Notwithstanding these measures, no data transmission over the internet or data storage system can be guaranteed to be 100% secure. maga88 will notify affected Players and relevant authorities promptly in the event of a data breach that poses a material risk to your rights and interests.

9. Cookies & Tracking Technologies

maga88 uses cookies and similar technologies on the Platform for the following purposes:

• Essential cookies: Necessary for the Platform to function, including session management and authentication. These cannot be disabled without impairing Platform functionality.
• Preference cookies: Used to remember your settings and preferences, such as language selection and notification preferences.
• Analytics cookies: Used to collect aggregated, anonymised data about how Players use the Platform, enabling maga88 to improve the user experience. Analytics data is processed by maga88's internal analytics infrastructure and is not shared with third-party advertising networks.

maga88 does not deploy third-party advertising, retargeting, or cross-site tracking cookies. You may manage cookie preferences through your browser settings. Disabling essential cookies may affect your ability to access and use certain features of the Platform.

10. Your Data Protection Rights

Subject to applicable law, you have the following rights in respect of your personal data held by maga88:

• Right of access: You may request a copy of the personal data maga88 holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: In certain circumstances, you may request deletion of your personal data. Note that erasure requests may be declined where retention is required by applicable law or regulation.
• Right to restriction of processing: You may request that we restrict processing of your data in certain circumstances.
• Right to data portability: Where processing is based on consent or contractual necessity, you may request a copy of your data in a structured, machine-readable format.
• Right to withdraw consent: Where processing is based on your consent (including consent to receive marketing communications), you may withdraw consent at any time by contacting support or updating your account preferences.
• Right to object: You may object to processing based on legitimate interests where your particular circumstances warrant such objection.

To exercise any of these rights, please contact the maga88 Data Protection team at [email protected]. We will respond to verified requests within 30 days. Identity verification will be required before processing access, rectification, or erasure requests.

11. Children's Privacy

The maga88 Platform is strictly for adults aged 21 and above. maga88 does not knowingly collect personal data from individuals under 21 years of age. If maga88 becomes aware that personal data has been collected from a person under 21 without valid parental consent, such data will be deleted immediately and the associated account suspended. If you believe a minor has registered on the Platform, please contact maga88 support immediately.

12. International Data Transfers

maga88 may transfer your personal data to service providers located outside Malaysia where this is necessary to deliver the Platform's services — for example, to cloud infrastructure providers or KYC verification services. Where such transfers occur, maga88 ensures that appropriate safeguards are in place, including contractual clauses that require the recipient to protect your data to a standard equivalent to that required under Malaysian law.

13. Changes to This Privacy Policy

maga88 reserves the right to amend this Privacy Policy at any time. Where amendments are material — meaning they significantly affect how we collect, use, or share your personal data — we will provide advance notice via your registered email address or via a prominent notice on the Platform at least 14 days before the changes take effect. Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Policy.

We encourage you to review this page periodically to stay informed about how maga88 protects your personal data. The "Last updated" date at the top of this page indicates when the Policy was most recently revised.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or maga88's handling of your personal data, please contact us through any of the following channels:

• Live Chat: Available 24/7 at maga88.asia — average first response under 2 minutes
• Email: [email protected] — average response within 4–6 hours

For formal data protection requests (access, rectification, erasure), please use the subject line "Data Protection Request" when contacting us by email, and include your registered account username and a description of your request. Identity verification will be required before any request is processed.