Privacy Policy

This Privacy Policy ("Policy") is published by mag888 ("mag888", "we", "us", "our"), the operator of the online casino and sports betting platform accessible at https://mag888.cam. This Policy applies to all individuals who visit, register on, or otherwise interact with the mag888 platform, whether via desktop browser or mobile device.

mag888 respects the privacy of its users and is committed to handling personal data responsibly and in accordance with applicable data protection standards. This Policy sets out the types of personal data we collect, the purposes for which it is processed, the circumstances under which it may be shared with third parties, and the rights available to you in respect of your personal data.

By accessing the mag888 platform, creating an account, or submitting personal data to us in any form, you acknowledge that you have read and understood this Policy. If you do not agree with any part of this Policy, please discontinue use of the platform and contact our support team to arrange account closure.

For the purposes of this Policy, the following definitions apply:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, identification number, contact details, financial information, and online identifiers.
• "Processing" means any operation performed on personal data, including collection, recording, storage, adaptation, retrieval, use, disclosure, or deletion.
• "Data Controller" refers to mag888 in its capacity as the entity that determines the purposes and means of processing personal data collected through the platform.
• "Data Processor" refers to any third party that processes personal data on behalf of mag888 pursuant to a written agreement.
• "User" refers to any natural person who registers an account on the mag888 platform.
• "KYC Data" refers to identity and age verification documentation submitted as part of the Know Your Customer verification process.
• "Cookies" refers to small text files placed on your device by the mag888 platform for purposes described in Section 7 of this Policy.
• "MYR" refers to Malaysian Ringgit, the currency in which all financial transactions on the platform are denominated.

mag888 collects the following categories of personal data in connection with the operation of its platform and the delivery of services to registered users:

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or biometric data beyond what is strictly necessary for identity verification purposes.

mag888 collects personal data through the following means:

• Direct submission: Data you voluntarily provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or updating your account profile.
• Automated technical collection: Data collected automatically as you navigate and use the platform, including through cookies, server logs, and session tracking technologies. See Section 7 for full details on cookies.
• Payment providers: Transaction confirmation data received from Malaysian payment providers including DuitNow, Touch 'n Go eWallet, Boost, GrabPay, FPX, Maybank2u, CIMB Clicks, Public Bank Online Banking, and Hong Leong Connect strictly limited to what is necessary to verify and record your transactions.
• Third-party identity verification services: Where we engage a third-party KYC provider to assist with age and identity verification, we may receive confirmation and risk signals from that provider in relation to your submitted documents.
• Publicly available sources: In limited circumstances related to fraud prevention or regulatory compliance, we may consult publicly available records.

mag888 processes your personal data for the following purposes, each supported by a defined lawful basis:

• Account creation and management: To register your account, verify your identity and age (minimum 21 years), maintain your account records, and manage your preferences. Basis: performance of contract; compliance with legal obligations.
• Transaction processing: To process deposits, withdrawals, and bonus payments denominated in MYR through your chosen Malaysian payment method. Basis: performance of contract.
• KYC and fraud prevention: To verify your identity, detect and prevent fraud, money laundering, and other financial crimes. Basis: compliance with legal obligations; legitimate interests.
• Responsible gambling compliance: To monitor gameplay patterns and intervene proactively where indicators of problem gambling are detected, and to enforce self-exclusion and deposit limit requests. Basis: compliance with legal obligations; legitimate interests; vital interests of the data subject.
• Customer support: To handle your queries, complaints, and requests efficiently. Basis: performance of contract; legitimate interests.
• Platform improvement and analytics: To analyse usage patterns, identify technical issues, improve the platform interface, and enhance the user experience. Basis: legitimate interests (non-identifiable or aggregated data where possible).
• Marketing communications: Where you have opted in, to send you information about promotions, bonuses, and new features relevant to your account. Basis: consent (you may withdraw consent at any time by contacting our support team).
• Legal and regulatory compliance: To comply with applicable legal obligations, respond to lawful requests from authorities, and enforce our Terms & Conditions. Basis: compliance with legal obligations.

mag888 does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. We may share your personal data with the following categories of third parties, strictly on a need-to-know basis and subject to appropriate data protection obligations:

• Payment service providers: Malaysian e-wallet operators (Touch 'n Go, Boost, GrabPay), bank transfer networks (DuitNow, FPX), and online banking platforms (Maybank2u, CIMB Clicks, Public Bank, Hong Leong Connect) for the sole purpose of processing your financial transactions.
• Identity verification providers: Third-party KYC and age verification service providers engaged by mag888 to assist with identity checks required by our responsible gambling and fraud prevention obligations.
• Game and technology providers: Casino game studios and technology vendors whose games or infrastructure are hosted on the mag888 platform, strictly limited to data necessary for game operation and fairness auditing.
• IT infrastructure and cloud service providers: Hosting, database, and cloud infrastructure providers who process data on our behalf under strict data processing agreements.
• Legal and regulatory authorities: Where we are required by applicable law, court order, or regulatory directive to disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities, we will do so without prior notice to you where legally required.
• Professional advisers: Legal, accounting, and compliance advisers engaged by mag888, subject to professional confidentiality obligations.

Where data is shared with third parties, we require them to maintain appropriate security standards and prohibit them from using your data for any purpose other than those specified in our data processing agreements.

The mag888 platform uses cookies and similar tracking technologies to enhance your browsing experience, maintain session continuity, and gather analytical insights about platform usage. The following categories of cookies are used:

• Strictly necessary cookies: Essential to the operation of the platform. These enable core functions such as user authentication, session management, and security features. They cannot be disabled without impairing platform functionality.
• Performance and analytics cookies: Used to collect aggregated, anonymised information about how users interact with the platform — such as which pages are visited most frequently and where errors occur. This data helps us improve the platform experience.
• Functionality cookies: Allow the platform to remember your preferences (such as language settings and logged-in status) to provide a more personalised experience.
• Fraud prevention and security cookies: Used to identify unusual patterns of behaviour that may indicate fraud, bot activity, or account compromise attempts.

Most web browsers allow you to manage cookie preferences through the browser settings menu. Please note that disabling strictly necessary cookies may prevent you from logging in to or using the mag888 platform. We do not currently use third-party advertising or retargeting cookies.

mag888 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, and in compliance with applicable legal and regulatory retention obligations. The following general retention guidelines apply:

• Account data and KYC documentation: Retained for a minimum of five years from account closure, in line with standard anti-money laundering record-keeping requirements.
• Transaction records: Retained for a minimum of seven years to comply with applicable financial record-keeping obligations.
• Customer support communications: Retained for up to three years from the date of the last interaction, unless the matter relates to an active dispute or regulatory investigation.
• Technical and behavioural data: Aggregated or anonymised within12 months of collection where no longer required for fraud prevention or platform improvement purposes.
• Marketing consent records: Retained until consent is withdrawn, after which the data is deleted within 30 days.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual. You may request early deletion of your data in accordance with the rights set out in Section 10 of this Policy, subject to our legal retention obligations.

mag888 implements comprehensive technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the mag888 platform.
• Encryption of sensitive data at rest, including KYC documentation and financial records.
• Mandatory two-factor authentication (2FA) for account access.
• Strict access controls limiting employee access to personal data on a need-to-know basis.
• Regular security audits and penetration testing by qualified third-party security professionals.
• Intrusion detection systems and real-time monitoring for suspicious access patterns.
• Incident response procedures to identify, contain, and report data security incidents in a timely manner.

While we take every reasonable precaution to protect your personal data, no internet-based transmission or storage system is entirely immune from security risks. You also play an important role in keeping your account secure — please choose a strong, unique password, enable two-factor authentication, and notify our support team immediately if you suspect unauthorised access to your account.

As a data subject, you have the following rights in relation to personal data held by mag888. To exercise any of these rights, please contact our support team as described in Section 13. We will respond to all valid requests within 30 days of receipt, free of charge, unless the request is manifestly unfounded or excessive.

The mag888 platform is strictly intended for individuals aged 21 and above. We do not knowingly collect, process, or retain personal data from individuals under the age of 21. If we become aware that personal data has been submitted by or on behalf of an individual under 21, we will take immediate steps to delete that data and close the associated account.

Age verification is a mandatory step in the mag888 KYC process. We use a combination of self-declaration at registration and documentary verification to ensure compliance with our minimum age requirement. If you are a parent or guardian and believe that a minor has registered on the mag888 platform, please contact our support team immediately.

mag888 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or regulatory requirements. Where a material change is made, we will notify registered users by posting the updated Policy on the platform and updating the "Last Updated" date at the top of this document.

We encourage you to review this Policy periodically to remain informed of how we protect your personal data. Your continued use of the mag888 platform following the publication of an amended Policy constitutes your acceptance of the changes. If you do not agree with the updated Policy, you should cease use of the platform and contact our support team to close your account.

If you wish to exercise any of your data rights, submit a privacy-related query or complaint, or require clarification on any aspect of this Policy, please contact the mag888 data team through the following channels. All data-related requests will be acknowledged within 5 business days and substantively resolved within 30 days:

• Live Chat: Available24/7 on the mag888 platform. Please specify "Data Privacy Request" at the start of your message so our team can route your enquiry appropriately. Average response time: under 60 seconds.
• Email: [email protected] — please use the subject line "Privacy Policy Enquiry" for data-related matters.
• Support Hours: 24 hours a day, 7 days a week, including Malaysian public holidays. All response times are in Malaysia Standard Time (MYT, UTC+8).

When contacting us regarding a data rights request, please include your registered account username, a description of the request, and any supporting information that will help us process your enquiry efficiently. Proof of identity may be required before we can action any request relating to personal data access, rectification, or erasure.