Privacy Policy

Introduction

This Privacy Policy ("Policy") governs the collection, storage, use, disclosure, and protection of personal data by mage88, operating at mage88.cam ("Platform", "we", "us", "our"). This Policy applies to all users, members, and visitors of the Platform, including individuals who register accounts, make deposits, place bets, or otherwise interact with any feature of the mage88 service.

mage88 is primarily designed to serve players in Malaysia and other permitted markets. The Platform operates in English and processes all financial transactions in Malaysian Ringgit (MYR) unless otherwise specified. Given the nature of online gaming and sports betting services, the processing of personal data — including identity documents, payment details, and gameplay records — is an operational necessity. We approach this responsibility with seriousness and apply appropriate safeguards at all stages of data handling.

By accessing the Platform, registering an account, or making use of any mage88 service, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with any part of this Policy, you should not use the Platform.

Definitions

For the purposes of this Policy, the following definitions apply:

Term	Meaning
"Personal Data"	Any information relating to an identified or identifiable natural person, including but not limited to name, identification number, contact details, financial information, and online identifiers.
"Processing"	Any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure, or destruction.
"Data Controller"	The entity that determines the purposes and means of processing Personal Data. For this Platform, that is mage88.
"Data Processor"	A third party that processes Personal Data on behalf of the Data Controller under contractual obligation.
"Data Subject"	The natural person whose Personal Data is being processed — in this context, a registered Member or visitor of the Platform.
"Consent"	A freely given, specific, informed, and unambiguous indication by the Data Subject agreeing to the processing of their Personal Data for one or more stated purposes.
"KYC Data"	Identity verification documentation submitted by a Member, including government-issued identification, proof of address, and source-of-funds documentation.
"Cookies"	Small text files stored on a user's device by a website to retain session preferences, authentication states, and behavioural analytics data.

Data Controller

mage88, operating the Platform at mage88.cam, acts as the Data Controller for all Personal Data collected through or in connection with the Platform. As Data Controller, mage88 determines the purposes for which Personal Data is collected and the means by which it is processed.

mage88 engages third-party service providers — including payment processors, identity verification services, and technology infrastructure providers — who act as Data Processors. These processors are bound by contractual data processing agreements requiring them to handle Personal Data in accordance with applicable data protection standards and solely for the purposes instructed by mage88.

For all data-related enquiries, requests, or complaints, Members may contact our designated data support contact at: [email protected] (plain text — not a clickable link).

Data We Collect

mage88 collects the following categories of Personal Data from Members and Platform visitors:

4.1 Identity & Contact Data

• Full legal name as it appears on government-issued identification
• Date of birth (for age verification — must be 21 or above)
• Residential address, including city (e.g., Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam)
• Email address
• Mobile phone number
• Nationality and country of residence

4.2 Identification & KYC Documents

• Government-issued identity document (MyKad, passport, or equivalent)
• Proof of residential address (utility bill, bank statement — not older than 3 months)
• Source-of-funds documentation where applicable under our AML obligations

4.3 Financial & Payment Data

• Payment method identifiers (e-wallet account reference, bank account last digits, crypto wallet address)
• Transaction history — deposits, withdrawals, and transfers in MYR
• Deposit and withdrawal amounts and timestamps

We do not store full credit or debit card numbers. Payments via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX (Maybank, CIMB, Public Bank, Hong Leong Bank), and cryptocurrency are processed through third-party payment gateways that maintain their own security standards.

4.4 Account & Gameplay Data

• Username and encrypted account credentials
• Betting and gaming history — game titles, bet amounts, outcomes, timestamps
• Bonus and promotional activity records
• Support tickets, live chat transcripts, and email correspondence with our team

4.5 Technical & Device Data

• IP address and approximate geolocation at time of access
• Device type, operating system, and browser version
• Session duration, pages visited, and navigation paths
• Cookies and similar tracking identifiers (see Section 12)

How We Collect Data

mage88 collects Personal Data through the following means:

5.1 Directly from You

The majority of Personal Data is collected directly when you: register an Account; complete KYC verification; make a deposit or withdrawal; contact our support team via live chat or email; participate in a promotion; or complete any form or interactive element on the Platform.

5.2 Automatically During Use

Technical and behavioural data is collected automatically through server logs, cookies, and analytics tools as you browse and interact with the Platform. This includes IP addresses, device identifiers, and session activity data.

5.3 From Third-Party Sources

Where required for identity verification or fraud prevention, mage88 may receive data from third-party identity verification providers, credit reference agencies, or anti-money laundering screening services. Such data is used solely for the purposes of KYC compliance and fraud detection and is not retained longer than necessary.

Purposes of Data Processing

mage88 processes Personal Data for the following specific purposes:

Purpose	Description
Account Management	Creating, maintaining, and administering your mage88 Account, including authentication and account settings management.
Identity Verification (KYC)	Verifying your identity and age (21+) as required under our licensing obligations and anti-money laundering frameworks.
Transaction Processing	Processing deposits and withdrawals in MYR via your selected payment method (e-wallets, FPX banks, cryptocurrency, or 7-Eleven CLiQQ).
Fraud & AML Prevention	Detecting, investigating, and preventing fraudulent activity, money laundering, bonus abuse, and other prohibited conduct.
Customer Support	Responding to your support queries, resolving disputes, and maintaining records of support interactions.
Responsible Gambling	Monitoring gameplay patterns to identify potential problem gambling behaviour and applying appropriate responsible gambling controls.
Legal & Regulatory Compliance	Complying with applicable laws, licensing conditions, and regulatory requirements, including record-keeping obligations.
Platform Improvement	Analysing aggregated and anonymised usage data to improve Platform performance, UX, and game offerings.
Marketing Communications	Sending promotional emails, bonus notifications, and campaign updates where you have consented to receive such communications. You may opt out at any time.

Legal Basis for Processing

mage88 processes Personal Data on the following legal bases:

• Contractual Necessity: Processing required to fulfil our obligations under the Terms and Conditions, including account administration, payment processing, and service delivery.
• Legal Obligation: Processing necessary to comply with anti-money laundering (AML) obligations, identity verification requirements, and record-keeping duties under our international licensing framework.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gambling monitoring, and service improvement, where these interests are not overridden by your rights and freedoms.
• Consent: Processing for direct marketing communications and non-essential cookies, where your explicit consent has been obtained. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

Data Sharing & Disclosure

mage88 does not sell, rent, or trade your Personal Data to any third party for commercial marketing purposes. We share Personal Data only in the following limited and controlled circumstances:

8.1 Service Providers (Data Processors)

We engage third-party service providers who process data on our behalf under strict contractual data processing agreements. These include: payment processors (for Touch 'n Go eWallet, Boost, GrabPay, FPX, DuitNow, and cryptocurrency transactions); identity verification and KYC service providers; fraud detection and AML screening tools; cloud infrastructure and hosting providers; customer support platform providers.

8.2 Regulatory Authorities

mage88 may be required to disclose Personal Data to regulatory bodies, law enforcement authorities, or courts where compelled to do so by applicable law or a valid legal process. We will inform you of any such disclosure where we are legally permitted to do so.

8.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of substantially all of our assets, Personal Data held by mage88 may be transferred to the successor entity. Members will be notified of any such change and any material impact on how their data is handled.

8.4 With Your Consent

mage88 may share your Personal Data with other parties where you have provided your explicit, informed consent for such sharing, beyond the purposes described in this Policy.

International Data Transfers

mage88 operates under international licensing frameworks and engages service providers located in multiple jurisdictions. As a result, your Personal Data may be transferred to, stored in, and processed in countries outside Malaysia. Where such international transfers occur, mage88 ensures that appropriate safeguards are in place, including standard contractual clauses, to maintain the protection of your data in accordance with applicable data protection standards.

By using the Platform, you acknowledge and consent to such international transfers of your Personal Data as described in this Policy, including transfers to jurisdictions that may not offer the same level of data protection as Malaysia's Personal Data Protection Act 2010 (PDPA 2010). mage88 applies equivalent safeguards regardless of where data is processed.

Data Retention

mage88 retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by applicable law or licensing obligations. The following general retention periods apply:

Data Category	Retention Period
Account & Identity Data	Duration of account plus 5 years after closure, or as required by applicable AML law.
KYC Documents	Minimum 5 years from submission, or longer if required under licensing obligations.
Transaction Records	Minimum 5 years from transaction date, in accordance with financial record-keeping standards.
Gameplay & Betting History	3 years from last account activity, or longer if required for dispute resolution.
Support Communications	2 years from date of communication, or until the relevant matter is resolved.
Marketing Preferences	Until consent is withdrawn or account is permanently closed.
Technical / Log Data	90 days rolling retention for server logs; cookie data in accordance with Section 12.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in a manner that prevents re-identification.

Your Rights as a Data Subject

Subject to applicable law, you hold the following rights in respect of your Personal Data held by mage88. To exercise any of these rights, please contact us at: [email protected] (plain text). We will respond to verified requests within a reasonable timeframe and no later than 30 days.

Cookies & Tracking Technologies

12.1 What Cookies We Use

mage88 uses the following categories of cookies and similar technologies:

Cookie Type	Purpose	Duration
Strictly Necessary	Session management, authentication, security, and basic Platform functionality. Cannot be disabled without affecting core features.	Session / up to 24 hours
Performance / Analytics	Aggregated usage statistics to understand how members navigate the Platform and identify performance issues.	Up to 12 months
Functional	Remembering your language preference, login state, and personalisation settings across sessions.	Up to 30 days
Marketing	Tracking responses to promotional campaigns and tailoring offers to your activity profile. Used only where consent has been obtained.	Up to 90 days

12.2 Managing Cookies

You may manage cookie preferences through your browser settings. Most browsers allow you to refuse all or certain types of cookies. Disabling strictly necessary cookies will impair Platform functionality, including your ability to log in or place bets. For guidance on managing cookies in your browser, refer to your browser's help documentation.

Security Measures

mage88 implements technical and organisational security measures appropriate to the nature and sensitivity of the data we process. These include:

• TLS 1.3 encryption for all data transmitted between your device and our servers.
• AES-256 encryption for sensitive data stored at rest, including KYC documents and payment references.
• Two-factor authentication (2FA) available to all Members and mandatory for administrative access.
• Access controls ensuring that Personal Data is accessible only to authorised personnel with a documented need to process it.
• Regular security assessments of Platform infrastructure, including penetration testing and vulnerability scanning.
• Incident response procedures for detecting, reporting, and responding to personal data breaches in a timely manner.

While we apply industry-standard security practices, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your own account credentials and for notifying us promptly at [email protected] if you suspect any unauthorised access to your Account.

Children & Minors

The mage88 Platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect Personal Data from persons under the age of 21. Age verification is a mandatory step in the account registration process, and KYC checks are performed to validate declared ages.

If mage88 becomes aware that Personal Data has been collected from a person under the age of 21, that account will be immediately suspended and the data will be deleted without compensation to the account holder. Any deposits associated with an underage account will be reviewed under our terms and applicable law before any refund determination is made.

If you believe that a minor has registered an account on mage88, please contact us immediately at [email protected] so that appropriate action can be taken promptly.

Third-Party Links

The mage88 Platform may contain references to third-party payment providers or services. Where links to third-party websites or services are present, mage88 does not control those websites and is not responsible for their privacy practices or content. We encourage you to review the privacy policies of any third-party services you access in connection with your use of mage88.

The inclusion of a reference to a third-party service on the Platform does not constitute endorsement of that service's privacy practices.

Amendments to This Policy

mage88 reserves the right to update, amend, or replace this Privacy Policy at any time. The revised Policy will be published at this URL with the "Last Updated" date amended accordingly. Material changes to this Policy — particularly those affecting the purposes of processing or your rights — will be communicated to registered Members via email or an in-Platform notification where reasonably practicable.

Continued use of the Platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with a revision, you should cease using the Platform and may request account closure by contacting our support team.

Contact Us

For all privacy-related queries, access requests, objections, or complaints, please contact mage88 through the following channels. We ask that you include your registered username and a clear description of your request to ensure prompt handling.

• Email (plain text): [email protected]
• Live Chat: Available 24/7 via the in-Platform chat widget
• Response Time: Privacy-related requests are acknowledged within 48 hours and resolved within 30 days of receipt of a complete request.

If you are dissatisfied with our response to a privacy complaint, you may have the right to escalate the matter to the relevant data protection authority in your jurisdiction. mage88 will cooperate with any such authority investigation in good faith.