maga888 Privacy Policy — How We Handle Your Personal Data

1. Introduction and Scope

This Privacy Policy ("Policy") is issued by maga888 ("the Company", "we", "us", "our"), the operator of the online gaming platform accessible at maga888.win ("the Platform"). This Policy describes how maga888 collects, processes, stores, shares, and protects personal data relating to users of the Platform ("you", "your").

This Policy applies to all personal data obtained through your registration and use of the maga888 Platform, including through the maga888 website, account management functions, customer support interactions, and any other interaction with maga888's services. It does not apply to third-party websites or services that may be linked to or accessible from the Platform — such third parties operate under their own privacy policies.

By registering an account on maga888 or by continuing to use the Platform, you acknowledge that you have read this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must cease using the maga888 Platform.

2. Data Controller

maga888 is the data controller in respect of personal data collected through the Platform. As data controller, maga888 determines the purposes and means by which your personal data is processed. maga888 operates under internationally recognised gaming authority licensing with data handling obligations commensurate with those licensing requirements.

For all privacy-related enquiries, data access requests, and complaints regarding maga888's data handling practices, you may contact the Data Protection Officer via the contact information provided in Section 14 of this Policy.

3. Personal Data We Collect

3.1 Registration Data

When you create a maga888 account, we collect the following information:

• Full legal name as it appears on your government-issued identification document.
• Date of birth (used to verify that you meet the 21+ age requirement).
• Email address (used as your primary account identifier and communication channel).
• Mobile telephone number.
• Residential address.
• Preferred currency (Malaysian Ringgit / MYR is the default for Malaysian users).

3.2 KYC Verification Data

Before processing withdrawals, maga888 requires identity verification. This involves the collection of:

• Copy of your Malaysian Identity Card (MyKad), passport, or other government-issued photo identification.
• Proof of residential address (utility bill, bank statement, or similar document dated within 3 months).
• Payment method verification documentation where required (e.g., screenshot of your Touch 'n Go, Boost, or bank account confirming ownership).

3.3 Transaction Data

maga888 records all financial transactions associated with your account, including deposits, withdrawals, bonus credits, wager records, and winnings. This data is retained for legal compliance, audit, and dispute resolution purposes.

3.4 Technical and Usage Data

When you access the maga888 Platform, we automatically collect certain technical data including:

• IP address and approximate geolocation derived from IP.
• Device type, operating system, and browser version.
• Session duration, pages visited, and in-game interactions.
• Cookies and similar tracking identifiers (see Section 6).

3.5 Customer Support Data

When you contact maga888 support via live chat or email, we record the content of the interaction including any personal data you provide in the course of seeking assistance. These records are used for quality assurance, training, and dispute resolution.

4. How We Use Your Personal Data

maga888 uses your personal data for the following purposes:

• Account Management: Creating, verifying, and maintaining your maga888 account; authenticating your identity at login; enabling account security features including two-factor authentication.
• Service Delivery: Processing deposits and withdrawals via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and USDT TRC20; facilitating gameplay; crediting bonuses and winnings.
• Regulatory Compliance: Fulfilling know-your-customer (KYC) obligations; anti-money laundering (AML) screening; age verification enforcement; responsible gaming monitoring; reporting to gaming licensing authorities as required.
• Fraud Prevention and Security: Detecting, investigating, and preventing fraudulent activity, account misuse, and prohibited conduct as defined in the maga888 Terms & Conditions.
• Customer Support: Responding to enquiries, resolving disputes, and providing technical assistance.
• Platform Improvement: Analysing aggregated usage data to improve the functionality, content, and performance of the maga888 Platform.
• Marketing Communications: Sending promotional offers, bonus notifications, and relevant gaming news to opted-in users. You may opt out of marketing communications at any time through your account notification settings or by contacting support.

5. Legal Basis for Processing

maga888 processes personal data on the following legal bases:

• Contractual Necessity: Processing required to perform the contract between you and maga888 — including account creation, payment processing, and game provision.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including AML legislation, gaming licence conditions, and tax reporting obligations.
• Legitimate Interests: Processing carried out for maga888's legitimate business interests where those interests are not overridden by your rights — including fraud prevention, platform security, and service improvement.
• Consent: Processing carried out on the basis of your explicit consent — principally in respect of optional marketing communications. You have the right to withdraw consent at any time without affecting the lawfulness of prior processing.

6. Cookies and Tracking Technologies

maga888 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files placed on your device that allow maga888 to recognise returning users, maintain login sessions, and analyse Platform usage.

6.1 Essential Cookies

These cookies are strictly necessary for the maga888 Platform to function. They enable core features such as session management, login state persistence, and security validation. Disabling essential cookies will prevent the Platform from operating correctly.

6.2 Analytics Cookies

maga888 uses analytics cookies to collect aggregated information about how users interact with the Platform. This data is used to identify areas for improvement and to measure the effectiveness of Platform features. Analytics data is processed in anonymised or pseudonymised form.

6.3 Preference Cookies

Preference cookies remember your settings and choices — such as your preferred game category, language selection, and display preferences — so that you do not need to re-configure them on each visit.

You can manage your cookie preferences through your browser settings. Note that disabling non-essential cookies may affect Platform functionality and your user experience.

7. Disclosure of Personal Data

maga888 does not sell your personal data. We disclose personal data to third parties only in the following circumstances:

• Payment Processors: We share transaction-related data with payment service providers (including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX partner banks, and cryptocurrency processing services) solely to the extent necessary to process deposits and withdrawals on your behalf.
• Game Providers: To facilitate gameplay, certain session and account identifiers are shared with third-party game providers whose titles are hosted on the maga888 Platform. Game providers operate under data processing agreements with maga888.
• KYC and AML Service Providers: maga888 uses accredited third-party identity verification and AML screening services to fulfil regulatory obligations. These providers process identity documentation under strict data protection agreements.
• Regulatory and Legal Authorities: maga888 will disclose personal data to gaming licensing authorities, law enforcement agencies, financial intelligence units, and courts where required by applicable law or where disclosure is necessary to prevent or investigate crime.
• Corporate Transactions: In the event of a merger, acquisition, or sale of the maga888 business, personal data may be transferred to the acquiring entity as part of that transaction. Users will be notified of any such change in data controller.

8. International Data Transfers

maga888 may transfer your personal data to countries outside Malaysia in connection with the delivery of its services — for example, where game providers or payment processors operate infrastructure in other jurisdictions. Where such transfers occur, maga888 ensures that appropriate safeguards are in place to protect your data, including contractual data protection clauses equivalent to those applicable in Malaysia.

9. Data Security

maga888 implements appropriate technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and maga888 servers.
• Encryption at rest for sensitive stored data including KYC documents and financial records.
• Role-based access controls limiting internal access to personal data to authorised personnel with a demonstrated operational need.
• Regular security assessments and penetration testing of Platform infrastructure.
• Two-factor authentication available for all maga888 user accounts to mitigate the risk of unauthorised access.

Notwithstanding these measures, no data transmission over the internet or electronic storage system can be guaranteed to be 100% secure. maga888 will notify affected users promptly in the event of a data breach that is likely to result in a risk to the rights and freedoms of individuals.

10. Data Retention

maga888 retains personal data for as long as is necessary for the purposes described in this Policy, subject to the following:

• Account data and transaction records are retained for a minimum of 5 years following account closure to comply with anti-money laundering and gaming licence record-keeping obligations.
• KYC documentation is retained for a minimum of 5 years following the conclusion of the business relationship, or longer where required by applicable law.
• Customer support interaction records are retained for 3 years from the date of the interaction.
• Marketing preferences and consent records are retained for as long as the account remains active, plus 3 years following account closure.

Upon expiry of the applicable retention period, data is securely deleted or anonymised such that it can no longer be attributed to an identifiable individual.

11. Your Rights

Subject to applicable law, you have the following rights in respect of your personal data held by maga888:

• Right of Access: You have the right to request a copy of the personal data maga888 holds about you and information about how it is processed.
• Right to Rectification: You have the right to request that inaccurate or incomplete personal data be corrected or completed.
• Right to Erasure: In certain circumstances, you may request the deletion of your personal data. Note that erasure requests may be declined where retention is required by legal obligation — for example, AML record-keeping requirements.
• Right to Restrict Processing: You may request that maga888 restrict the processing of your personal data in certain circumstances, for example while the accuracy of the data is being contested.
• Right to Data Portability: Where processing is based on your consent or on a contract, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing carried out on the basis of maga888's legitimate interests, including direct marketing.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact maga888 using the details in Section 14. maga888 will respond to verifiable requests within 30 days. We may require you to verify your identity before processing a rights request.

12. Children and Minors

The maga888 Platform is strictly for adults aged 21 and above. maga888 does not knowingly collect personal data from persons under the age of 21. Age verification is conducted as part of the registration and KYC processes. If maga888 becomes aware that personal data has been collected from a minor without parental consent, that data will be deleted immediately and the associated account closed.

If you have reason to believe that a minor has registered on or is using the maga888 Platform, please contact support immediately at [email protected] so that we can investigate and take appropriate action.

13. Changes to This Policy

maga888 may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal requirements, or Platform features. Material changes will be communicated to registered users via the email address on file at least 14 days before the change takes effect. Minor or clarificatory amendments may be made without advance notice.

The effective date of the current version of this Policy is stated at the top of this document. Your continued use of the maga888 Platform after any amendment constitutes your acceptance of the updated Policy. If you do not accept the changes, you may request account closure in accordance with the Terms & Conditions.

14. Contact and Complaints

For all privacy-related enquiries, data subject rights requests, or complaints regarding maga888's handling of your personal data, please contact us via:

• Live Chat: Available 24/7 via your logged-in maga888 account.
• Email: [email protected]

maga888 acknowledges privacy-related communications within 5 business days and aims to provide a substantive resolution within 30 days. If you are not satisfied with maga888's response to your complaint, you may escalate the matter to the relevant data protection authority or gaming regulator in the jurisdiction applicable to your circumstances.