mage888 Privacy Policy

This Privacy Policy applies to all personal data collected by mage888 ("mage888", "we", "us", "our") through the mage888 website, mobile-optimised platform, and all associated services, including account registration, deposits, withdrawals, gameplay, customer support interactions, and marketing communications.

By registering a mage888 account or using any part of the platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. This Policy is incorporated by reference into the mage888 Terms & Conditions.

mage888 collects personal data through several channels: directly from you when you register and use the platform, automatically through technical systems, and in limited cases from third-party verification providers. The categories of data we collect include:

• Full legal name
• Date of birth (used for age verification — you must be 21 or above)
• Email address and mobile phone number
• Residential address
• Username and hashed password
• Government-issued identity document details (provided during KYC verification)

• Payment method identifiers (e-wallet account references, FPX bank references — not full card numbers)
• Deposit and withdrawal amounts and timestamps
• Transaction history and MYR balance records
• Source of funds documentation where requested

• Games played, bets placed, wins and losses
• Session duration and login timestamps
• Bonus and promotion usage history
• Responsible gaming limit settings and self-exclusion history

• IP address and approximate geolocation (country/city level)
• Device type, operating system, and browser version
• Referring URL and navigation path within the platform
• Cookie identifiers and session tokens

• Customer support chat transcripts and email correspondence
• Feedback and survey responses submitted voluntarily

mage888 uses your personal data for the following purposes:

• Account administration: Creating and maintaining your mage888 account, verifying your identity, and processing login authentication.
• Transaction processing: Facilitating MYR deposits via Touch 'n Go eWallet, Boost, DuitNow, and FPX banking; processing withdrawal requests to verified accounts.
• Age and identity verification: Confirming that users meet the mandatory 21+ age requirement and complying with anti-money laundering (AML) obligations through KYC procedures.
• Platform operation: Delivering casino games, sportsbook services, live betting feeds, and all associated platform features to your session.
• Customer support: Responding to account queries, complaints, and technical issues submitted through any mage888 support channel.
• Security and fraud prevention: Detecting and investigating suspicious login activity, fraudulent transactions, bonus abuse, and other conduct that violates mage888's Terms & Conditions.
• Responsible gaming: Monitoring gameplay patterns to identify potential problem gambling indicators and enforcing self-imposed limits and exclusions.
• Legal and regulatory compliance: Meeting obligations under applicable licensing requirements, including transaction reporting and record retention.
• Marketing communications: Sending promotional offers, bonus notifications, and platform updates to users who have consented to receive such communications. You may opt out at any time.
• Platform improvement: Analysing aggregated, anonymised usage data to improve game performance, navigation, and overall user experience on the mage888 platform.

mage888 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil the Terms & Conditions you agreed to on registration, including account management, transaction processing, and gameplay delivery.
• Legal obligation: Processing required to comply with anti-money laundering regulations, licensing requirements, and other applicable laws — including KYC verification and transaction record retention.
• Legitimate interests: Processing for fraud prevention, security monitoring, and platform integrity purposes, where these interests do not override your fundamental rights.
• Consent: Processing for marketing communications, where you have expressly opted in. You may withdraw this consent at any time without affecting the lawfulness of prior processing.

mage888 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may share your data in the following limited circumstances:

• Payment processors: Your transaction data is shared with the relevant payment service providers (e.g., Touch 'n Go eWallet operator, FPX banking network, Boost) solely to process your deposit or withdrawal.
• KYC and identity verification providers: Identity documents and verification data may be shared with licensed KYC service providers to fulfil age verification and AML obligations.
• Game software providers: Your gameplay session data is transmitted to the relevant game provider's servers to deliver the game in real time. Providers are contractually bound to process this data solely for game delivery purposes.
• Legal authorities: Where required by law, court order, or regulatory authority, mage888 may disclose personal data to relevant law enforcement or regulatory bodies. We will notify affected users where legally permitted to do so.
• Corporate transactions: In the event of a merger, acquisition, or sale of all or part of mage888's business, user data may be transferred to the acquiring entity, subject to equivalent privacy protections.

All third parties with whom mage888 shares personal data are bound by contractual data processing agreements that require them to handle your data securely and in accordance with applicable privacy law.

The mage888 platform uses cookies and similar tracking technologies to operate core platform functions and to analyse usage patterns. Types of cookies used include:

• Essential cookies: Required for login session management, security tokens, and platform functionality. These cannot be disabled without impairing core platform operation.
• Analytics cookies: Used to collect aggregated, anonymised data about how users navigate the mage888 platform, helping us identify and fix performance issues.
• Preference cookies: Store user preferences such as display language and currency settings between sessions.

Most browsers allow you to control cookie settings through the browser's privacy or settings menu. Disabling essential cookies will affect your ability to log in and use the mage888 platform. mage888 does not use third-party advertising cookies or cross-site tracking technologies.

mage888 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. Specific retention periods include:

• Account and identity data: Retained for the lifetime of the account plus a minimum of five (5) years following account closure, in accordance with AML record-keeping requirements.
• Transaction records: Retained for a minimum of seven (7) years following the transaction date.
• Customer support records: Retained for three (3) years from the date of the last interaction.
• Marketing consent records: Retained until consent is withdrawn, plus a reasonable period thereafter for record-keeping purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised.

mage888 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure:

• 256-bit SSL/TLS encryption on all data in transit between your browser and mage888 servers.
• Cryptographic hashing of passwords — your plaintext password is never stored by mage888.
• Access controls restricting internal data access to personnel with a genuine operational need.
• Two-factor authentication available to all users for account login.
• Automated anomaly detection for unusual login patterns and transaction behaviour.
• Regular security assessments and penetration testing of the mage888 platform infrastructure.

Despite these measures, no internet-based platform can guarantee absolute security. In the event of a data breach that poses a risk to your rights, mage888 will notify affected users and relevant authorities in accordance with applicable legal obligations.

Subject to applicable law, you have the following rights in relation to your personal data held by mage888:

• Right of access: You may request a copy of the personal data mage888 holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations.
• Right to restrict processing: You may request that mage888 limit the processing of your data in certain circumstances.
• Right to data portability: You may request that mage888 provide your personal data in a structured, machine-readable format where technically feasible.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw consent at any time. Withdrawal does not affect the lawfulness of prior processing.
• Right to object: You may object to processing carried out on the basis of legitimate interests, subject to mage888's assessment of overriding grounds.

To exercise any of the above rights, contact the mage888 data team at the email address in Section 13. mage888 will respond within 30 days of receiving a valid request.

The mage888 platform is strictly intended for users aged 21 years and above. mage888 does not knowingly collect personal data from individuals under 21. If mage888 becomes aware that personal data has been collected from a user below the minimum age, that account will be closed and all associated data deleted. If you believe that a person under 21 has registered an account on the mage888 platform, please contact our support team immediately.

mage888 operates under international licensing and may process or store personal data on servers located outside Malaysia. Where data is transferred internationally, mage888 ensures that appropriate safeguards are in place — including contractual data processing agreements with receiving parties — to ensure your data receives a level of protection equivalent to that required under applicable privacy law.

mage888 reserves the right to update this Privacy Policy at any time. Where changes are material, mage888 will notify registered users via their registered contact details or via a prominent notice on the platform prior to the effective date of the change. The effective date at the top of this Policy reflects the date of the most recent revision. Continued use of the mage888 platform after the effective date constitutes your acceptance of the revised Privacy Policy.

For any questions, requests, or complaints relating to this Privacy Policy or mage888's data practices, please contact our support team:

• Email: [email protected]
• Live chat: available from the platform once logged in to your mage888 account

mage888 will acknowledge all privacy-related requests within 5 business days and provide a substantive response within 30 days.