Privacy Policy mag888 – Malaysian Member Personal Data Protection

This Privacy Policy is published by mag888 and applies to all users who access or use the mag888.ws platform, including the website, mobile application (if any), and all services offered under the mag888 brand.

We understand that entrusting a platform with your personal data — especially a financial platform like mag888 — requires a high level of confidence. That is why we have written this document in plain, straightforward language that anyone can understand, rather than dense legal jargon designed merely to satisfy regulatory requirements.

By using the mag888 platform, you agree to the terms of this Privacy Policy. If you do not agree with any part of this policy, you are advised not to proceed with registration or use of our platform.

Mag888 only collects data that is necessary to operate the service safely and efficiently. Below are the categories of data we collect:

Mag888 collects personal data through the following methods:

• Account Registration: When you register a mag888 account, you provide basic information such as your name, email address, and phone number directly.
• Platform Usage: Technical and behavioural data is collected automatically as you use the mag888 website or app, including the types of games you play, sporting events you follow (EPL, Malaysia Super League, badminton, e-sports, and more), and your betting patterns.
• Financial Transactions: When you make a deposit or withdrawal via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX — transaction details are collected for compliance and security purposes.
• Identity Verification (KYC): During the account verification process, you may be asked to upload identity documents.
• Support Communications: All interactions with the mag888 customer support team are recorded for training and service improvement purposes.
• Cookies & Tracking Technologies: mag888 uses cookies and similar technologies to collect technical data and improve the user experience. (See Section 9 for more information.)

Mag888 uses the personal data collected solely for the following purposes:

• Managing member accounts — account registration, login, and profile management.
• Processing financial transactions — deposits and withdrawals you request through supported Malaysian payment methods.
• Legal compliance (KYC/AML) — to verify member identities and prevent money laundering in accordance with Malaysian legal requirements.
• Customer support — helping you troubleshoot issues, answering enquiries, and processing complaints.
• Platform security — detecting and preventing fraud, unauthorised access, and suspicious activity.
• Service improvement — analysing usage patterns to improve mag888's products, interface, and overall user experience.
• Marketing communications — sending information about promotions, new bonuses, or platform updates — only to members who have consented to receive such communications.
• Legal compliance — to fulfil legal obligations under Malaysian law, including the PDPA 2010.

Mag888 does not sell or rent members' personal data to any third party. However, in the following limited circumstances, data may be shared:

• Payment Service Providers: Transaction details are shared with the relevant payment processors (such as eWallet providers or banks) solely for the purpose of processing the transactions you request.
• Technology Service Provider: IT infrastructure, cloud services, and cybersecurity providers contracted by mag888 may access certain data in the course of their duties — subject to strict confidentiality agreements.
• Regulatory Authority: mag888 will disclose data when required to do so by court order, Malaysian law, or a lawful request from the relevant authorities.
• Fraud Prevention: In cases of suspected fraud, relevant data may be shared with fraud prevention agencies or law enforcement authorities.

All third parties who receive mag888 members' personal data are bound by strict data confidentiality agreements and are required to comply with PDPA Malaysia 2010 in all data handling carried out on our behalf.

Protecting your personal data is mag888's highest technical and operational priority. We implement multiple layers of protection:

• 256-bit SSL Encryption for all data transmitted between users' devices and mag888's servers.
• Encryption of data at rest — all personal data stored in our databases is encrypted using AES-256 standards.
• Two-factor authentication (2FA) — available to all members as an additional layer of protection during login.
• Internal access controls — only staff who require access to data in order to perform their duties are permitted to do so, and all access is logged and monitored.
• Regular security audits — mag888's technical infrastructure is regularly audited by independent cybersecurity experts to identify and address any vulnerabilities.
• Incident response plan — mag888 has a tested incident response procedure in place to handle any data breach swiftly and effectively.

Mag888 retains members' personal data only for as long as necessary for the purposes stated in this policy, or as required under Malaysian law:

• Active account data: Retained for the duration your account remains active and for 5 years after account closure — in line with Malaysian financial regulatory requirements.
• Transaction records: Retained for 7 years in accordance with accounting and anti-money laundering (AML) requirements.
• Support communication logs: Retained for 2 years from the date of last interaction.
• Technical data & logs: Retained for 12 months for security and troubleshooting purposes.
• KYC data: Retained for the duration of the active account plus 7 years after account closure.

Once the applicable retention period has expired, data will be securely deleted or anonymised so that it can no longer be linked to any specific individual.

As a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by mag888:

To exercise any of the above rights, please contact our Data Privacy Officer (DPO) by email privacy@mag888.ws or via live chat within the platform. We will respond to your request within 21 business days.

Mag888 uses cookies and similar tracking technologies to enhance the user experience and understand how our platform is used. The following are the types of cookies we use:

You can manage your cookie settings through your web browser at any time. However, disabling certain cookies may affect the functionality of the mag888 platform.

Mag888 is a betting platform restricted to individuals aged 18 and above. We do not knowingly collect, process, or store the personal data of anyone under the age of 18.

Should mag888 discover that personal data belonging to individuals under 18 has been inadvertently collected — whether through false registration or any other means — we will take immediate steps to delete that data and close the account in question.

Mag888 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, legal requirements, or relevant technological developments.

When material changes occur, mag888 will notify members through:

• In-platform notification upon next login.
• Email to the address registered on your account (for significant changes).
• Update the "Last Updated" date at the top of this document.

Continued use of the mag888 platform after notification of any amendments constitutes your acceptance of the updated policy. If you do not agree with the changes, you have the right to close your account.

If you have any questions, concerns, or complaints regarding how mag888 handles your personal data, you may contact our Data Privacy Officer (DPO) through the following channels:

• DPO Email: privacy@mag888.ws
• General Support Email: support@mag888.ws
• Live Chat: Available 24/7 within the mag888 platform

We are committed to responding to all privacy-related enquiries within 5 working days and resolve complaints within 21 working days from the date of receipt.

If you are dissatisfied with how mag888 has handled your privacy complaint, you have the right to lodge a complaint with Malaysia's Department of Personal Data Protection under the Ministry of Communications and Digital.