maga88 Privacy Policy

1. Introduction & Data Controller Identity

maga88 ("we", "us", "our", "the Platform") operates the online gaming platform accessible at maga88.win. maga88 is the data controller responsible for the personal data of players and visitors collected through the platform.

This Privacy Policy ("Policy") governs how maga88 collects, processes, stores, shares, and protects personal data in connection with the provision of its gaming services, including live casino, slots, sportsbook, 4D lottery, and roulette, to users in Malaysia and internationally.

This Policy should be read together with the maga88 Terms & Conditions, available at maga88.win/terms-conditions. By registering a maga88 account or otherwise using the platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

2. Personal Data We Collect

maga88 collects personal data from you directly (data you provide during registration and platform use) and automatically (data generated by your interaction with the platform). The categories of personal data collected are as follows:

2.1 Registration & Identity Data

• Full legal name;
• Date of birth (for age verification purposes — must confirm 21+);
• Malaysian identity card number (MyKad) or passport number, where identity verification is required;
• Email address;
• Malaysian mobile number (used for OTP-based two-factor authentication and account verification);
• Residential address (required for enhanced due diligence and as part of anti-money laundering compliance).

2.2 Financial & Transaction Data

• Deposit and withdrawal transaction records, including amounts, timestamps, and payment method identifiers;
• e-Wallet account identifiers (e.g. Touch n Go eWallet, Boost, GrabPay account references — not full account credentials);
• Bank account details (account name and last four digits) where bank transfer is used;
• Source-of-funds information where required under anti-money laundering procedures.

2.3 Gaming Activity Data

• Game history, including bets placed, outcomes, wager amounts, and game session durations;
• Sportsbook bet records and open bet positions;
• Bonus and promotion eligibility status and wagering progress;
• Responsible gaming tool settings (deposit limits, self-exclusion status, session reminders).

2.4 Technical & Device Data

• IP address and geolocation data (country and city level);
• Device type, operating system, and browser type and version;
• Device fingerprint identifiers (used for fraud prevention and duplicate account detection);
• Session logs, including login timestamps, session durations, and navigation patterns within the platform.

2.5 Communications Data

• Records of live chat, email, and other support interactions between you and maga88;
• Feedback and complaint records;
• Survey responses where voluntarily submitted.

3. How We Use Your Personal Data

maga88 uses the personal data collected for the following purposes:

maga88 does not use your personal data for automated decision-making that produces legal or similarly significant effects on you, other than for fraud and duplicate account detection — processes that are subject to human review upon request.

4. Legal Basis for Processing

maga88 processes your personal data under the following legal bases, consistent with applicable data protection legislation:

• Contractual necessity: Processing required to perform the contract between you and maga88 — including account operation, payment processing, and game provision — is carried out on the basis of contractual necessity;
• Legal obligation: Processing required for maga88 to comply with anti-money laundering regulations, age verification requirements, gaming authority obligations, and law enforcement requests is carried out on the basis of legal obligation;
• Legitimate interests: Processing for fraud prevention, platform security, duplicate account detection, and platform analytics is carried out on the basis of maga88's legitimate interests, balanced against your interests and fundamental rights;
• Consent: Processing for optional promotional communications is carried out on the basis of your explicit consent, which may be withdrawn at any time by contacting maga88 support or updating your account communication preferences.

5. Data Sharing & Third-Party Disclosure

maga88 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. maga88 may share your personal data with the following categories of recipients where necessary for the purposes described in this Policy:

• Payment service providers: Including Touch n Go eWallet, Boost, GrabPay, and Malaysian banking institutions, for the sole purpose of processing deposits and withdrawals;
• Identity verification providers: Third-party Know Your Customer (KYC) and age verification services used to confirm player identity and age compliance;
• Game technology providers: Licensed game developers and live studio operators whose games are available on the maga88 platform, where game history data must be transmitted to facilitate gameplay;
• Fraud prevention and anti-money laundering services: Third-party services that assist in detecting and preventing fraudulent activity and money laundering on the platform;
• Regulatory and law enforcement authorities: maga88 will disclose personal data to gaming regulators, anti-money laundering authorities, and law enforcement agencies where required by law or valid legal process;
• Professional advisors: Legal, accounting, and auditing firms acting as processors or controllers where required for compliance, dispute resolution, or business administration purposes.

All third-party recipients of maga88 player data are required to process that data in accordance with applicable data protection requirements and solely for the purpose for which it was shared.

6. Cookies & Tracking Technologies

maga88 uses cookies and similar tracking technologies on the platform to ensure proper functionality, enhance the user experience, and support fraud prevention. The categories of cookies used are:

• Strictly necessary cookies: Required for core platform functions including login session management, security token storage, and payment flow continuity. These cannot be disabled without impairing platform functionality;
• Functional cookies: Store your platform preferences such as language settings, remembered username, and game lobby configuration;
• Analytics cookies: Collect aggregated, anonymised data about how players navigate and use the platform, used to identify usability improvements. No individual player is identified through analytics data;
• Fraud prevention cookies: Used as part of device fingerprinting to detect duplicate accounts, unauthorised access attempts, and other prohibited conduct.

You may control non-essential cookies through your browser settings. Disabling strictly necessary cookies will impair your ability to log in and use the maga88 platform. maga88 does not use third-party advertising or behavioural tracking cookies.

7. Data Retention

maga88 retains personal data for the period necessary to fulfil the purposes for which it was collected, subject to overriding legal and regulatory retention obligations. The general retention periods applicable to each data category are:

• Account and identity data: Retained for the duration of your active account and for a minimum of five years following account closure, in accordance with anti-money laundering record-keeping requirements;
• Financial and transaction data: Retained for a minimum of five years from the date of the transaction, consistent with financial record-keeping obligations;
• Gaming activity data: Retained for the duration of your active account and for three years following account closure;
• Communications data: Retained for three years from the date of the communication, or longer where the communication relates to an open dispute or regulatory inquiry;
• Technical and device data: Retained for twelve months from collection, unless required for longer in connection with a fraud or security investigation.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any individual. Where data is anonymised rather than deleted, it may be retained indefinitely for aggregated analytics purposes.

8. Security Measures

maga88 implements a range of technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• 256-bit SSL/TLS encryption on all data transmissions between your device and maga88 servers — the same encryption standard used by major Malaysian banks including Maybank and CIMB;
• Password hashing and salting — your maga88 account password is never stored in plain text and cannot be retrieved by platform staff;
• Access controls — internal access to player personal data is restricted on a strict need-to-know basis, with all internal access logged and subject to periodic audit;
• Two-factor authentication (2FA) — SMS OTP verification for account login from new devices reduces the risk of unauthorised access even in the event of credential compromise;
• Automated fraud monitoring — real-time transaction and behaviour monitoring systems flag anomalous activity for immediate investigation;
• Regular security assessments — the maga88 platform undergoes periodic security testing to identify and remediate vulnerabilities.

9. Your Data Rights

Subject to applicable data protection law and the legal basis on which your data is processed, you have the following rights in relation to your personal data held by maga88:

• Right of access: You may request a copy of the personal data maga88 holds about you, along with information about how it is used;
• Right to rectification: You may request correction of inaccurate or incomplete personal data. You may update most account details directly through your maga88 account settings;
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to maga88's legal retention obligations (particularly anti-money laundering record-keeping requirements, which may override erasure requests);
• Right to restriction: You may request that maga88 restrict the processing of your personal data in certain circumstances, such as while a dispute about accuracy is being resolved;
• Right to data portability: Where processing is based on consent or contract and carried out by automated means, you may request a machine-readable copy of your personal data;
• Right to withdraw consent: Where processing is based on consent (e.g. promotional communications), you may withdraw consent at any time without affecting the lawfulness of prior processing;
• Right to object: You may object to processing based on legitimate interests, including profiling, where you have grounds relating to your particular situation.

To exercise any of the above rights, contact maga88 support via live chat or email at [email protected]. maga88 will respond to data rights requests within 30 calendar days of receipt. Identity verification will be required before any data is released or deleted.

10. Children & Minors

Age verification is a mandatory step in the maga88 registration process and is repeated at the point of first withdrawal. If maga88 discovers that personal data has been collected from a person under the age of 21, that account will be immediately suspended, all associated data will be deleted except where required for anti-fraud records, and any deposits held will be returned to the payment method from which they originated.

If you believe that an underage person has registered a maga88 account, please contact maga88 support immediately at [email protected] so that the matter can be investigated and resolved without delay.

11. International Data Transfers

maga88's primary servers and data infrastructure are operated in accordance with the platform's international gaming authority licensing requirements. Some personal data may be transferred to and processed in jurisdictions outside Malaysia in connection with the provision of platform services — for example, by game technology providers or fraud prevention services operating globally.

Where personal data is transferred internationally, maga88 takes steps to ensure that appropriate safeguards are in place, including contractual protections with third-party processors and data transfer mechanisms recognised under applicable data protection law. maga88 does not transfer personal data to any jurisdiction without ensuring adequate data protection standards apply to that transfer.

12. Changes to This Privacy Policy

maga88 may update this Privacy Policy from time to time to reflect changes in applicable law, platform features, or data processing practices. Material changes will be communicated to registered players via the email address associated with their account and/or via a prominent notice on the maga88 platform prior to the change taking effect.

The "Last updated" date at the top of this Policy indicates when it was most recently revised. Continued use of the maga88 platform following notification of a material change to this Policy constitutes acceptance of the revised Policy. If you do not accept the revised Policy, you should cease using the platform and request account closure.

13. Contact & Complaints

For all privacy-related enquiries, data rights requests, or complaints about the handling of your personal data by maga88, please contact:

maga88 takes all privacy complaints seriously and will acknowledge receipt of your complaint within 5 business days. If you are not satisfied with the outcome of your complaint, you may escalate the matter to the relevant data protection authority or gaming regulator in the jurisdiction applicable to your account.

Players located across Malaysia — whether in Kuala Lumpur, Penang, Johor Bahru, Ipoh, Kota Kinabalu, or Kuching — are entitled to the same data rights and the same response quality from the maga88 privacy team, regardless of location or account activity level.