1. Introduction
magga88 ("magga88", "we", "us", "our") operates the online gaming platform accessible at magga88.org and is committed to protecting the privacy and personal data of all individuals who use our services ("Members", "you", "your"). This Privacy Policy describes our practices in relation to the collection, use, storage, disclosure, and protection of personal data in accordance with applicable data protection principles and international gaming authority guidelines.
By registering an account with magga88, accessing the platform, or using any service we provide, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree with any part of this Privacy Policy, you should discontinue use of the magga88 platform.
This Privacy Policy should be read in conjunction with magga88's Terms & Conditions and Responsible Gaming policy, each of which forms part of your agreement with magga88.
2. Data Controller
magga88 acts as the data controller in respect of personal data collected and processed through the magga88 platform. As data controller, magga88 determines the purposes and means of processing your personal data. Where magga88 engages third-party service providers to process data on its behalf, those providers act as data processors and are bound by contractual obligations consistent with this Privacy Policy.
For any questions or concerns regarding this Privacy Policy or the processing of your personal data, please contact our Data Protection team using the details set out in Section 15 of this policy.
3. Personal Data We Collect
magga88 collects the following categories of personal data from Members:
- Identity Data: Full legal name, date of birth, gender, nationality, and copies of government-issued identification documents provided for KYC verification purposes.
- Contact Data: Email address, mobile phone number, and residential address (including city and postcode, which for Malaysian members may include Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, and other locations).
- Account Data: Username, encrypted password, account registration date, login history, and session records.
- Financial Data: Deposit and withdrawal transaction records, payment method details (e.g. Maybank account reference, CIMB, Public Bank, Touch n Go eWallet, or Boost identifiers), and balance history. Full payment card or bank account numbers are not stored by magga88 — these are handled directly by our payment processing partners.
- Gaming Activity Data: Game history, bet amounts, win/loss records, bonus usage, and wagering activity across all magga88 products.
- Technical Data: IP address, device identifiers, browser type and version, operating system, referring URLs, and geolocation data derived from your IP address.
- Communication Data: Records of communications with magga88 customer support, including live chat transcripts and email correspondence.
- Responsible Gaming Data: Self-exclusion requests, deposit limit settings, session timer preferences, and reality-check configurations.
4. How We Collect Your Data
magga88 collects personal data through the following means:
- Direct provision: Data you submit when registering a magga88 account, completing KYC verification, making deposits or withdrawals, contacting support, or updating your profile.
- Automated collection: Technical data gathered automatically as you navigate and interact with the magga88 platform, including via cookies, server logs, and similar tracking technologies described in Section 9.
- Third-party sources: Identity verification agencies, fraud prevention databases, payment processing partners, and publicly available sources, where magga88 is legally permitted to obtain such data for compliance or security purposes.
5. Purposes and Legal Bases for Processing
magga88 processes your personal data for the following purposes and on the following legal bases:
- Contract performance: To create and maintain your magga88 account, process deposits and withdrawals, deliver gaming services, administer bonuses, and provide customer support.
- Legal obligation: To comply with Anti-Money Laundering (AML) and Know Your Customer (KYC) requirements, age verification obligations under international gaming authority guidelines, and any applicable regulatory reporting requirements.
- Legitimate interests: To detect and prevent fraud, protect the security of the magga88 platform, conduct internal analytics to improve our services, and manage responsible gaming obligations.
- Consent: To send you marketing communications about magga88 promotions, new games, and special offers, where you have opted in to receive such communications. You may withdraw consent at any time by contacting support.
6. Disclosure of Personal Data
magga88 does not sell, rent, or trade your personal data to third parties. We may disclose your personal data to the following categories of recipient where necessary and proportionate:
- Service providers: Payment processors, identity verification agencies, game content providers, cloud infrastructure providers, fraud detection services, and customer support platform vendors engaged by magga88 under appropriate data processing agreements.
- Regulatory and law enforcement authorities: Where required by applicable law, court order, or at the direction of a competent regulatory authority, including international gaming authority compliance obligations.
- Professional advisers: Legal counsel, auditors, and compliance consultants, subject to obligations of confidentiality.
- Business transfers: In the event of a merger, acquisition, or sale of all or part of magga88's business, your personal data may be transferred to the relevant acquiring entity, subject to the same privacy protections.
All third-party recipients are required to process your data in accordance with applicable data protection standards and are prohibited from using it for any purpose other than those specified by magga88.
7. International Data Transfers
magga88 operates under an international gaming authority framework and some of our service providers are located outside Malaysia. Where personal data is transferred internationally, magga88 ensures that appropriate safeguards are in place — including standard contractual clauses or equivalent data transfer mechanisms — to maintain a level of protection consistent with this Privacy Policy. By using the magga88 platform, you acknowledge that your data may be processed in jurisdictions outside your country of residence.
8. Data Retention
magga88 retains your personal data for as long as your account remains active and for such further period as may be required to comply with legal, regulatory, or audit obligations. In particular:
- KYC and identity documentation is retained for a minimum of five (5) years following account closure, in compliance with AML regulatory requirements.
- Financial transaction records are retained for a minimum of five (5) years following the date of the transaction.
- Gaming activity logs are retained for a minimum of three (3) years.
- Support communications are retained for a minimum of two (2) years from the date of the last interaction.
- Dormant account data (accounts with no login activity for 12 or more consecutive months) is subject to magga88's dormant account policy as described in our Terms & Conditions.
Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised.
9. Cookies and Tracking Technologies
magga88 uses cookies and similar tracking technologies to enhance your platform experience, maintain session state, and gather aggregated analytics data. The types of cookies we use include:
- Strictly necessary cookies: Required for the magga88 platform to function correctly, including session management and security tokens. These cannot be disabled.
- Performance cookies: Aggregate, anonymised data on how Members navigate the platform, used to identify and fix usability issues and improve the magga88 experience.
- Functional cookies: Store your preferences such as language settings, game history, and display preferences to personalise your magga88 session.
- Analytics cookies: Used by magga88's internal analytics systems to measure platform performance and gaming activity trends. No personally identifiable data is shared with third-party analytics providers without your consent.
You may manage cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the magga88 platform.
10. Security of Personal Data
magga88 implements a range of technical and organisational measures to protect personal data against unauthorised access, loss, destruction, alteration, or disclosure. These measures include:
- TLS 1.3 encryption on all data transmitted between your device and the magga88 platform.
- Password hashing and salting — no plaintext passwords are stored by magga88.
- Role-based access controls limiting internal access to personal data to authorised personnel with a legitimate operational need.
- Continuous monitoring and intrusion detection systems operating 24/7 across magga88's infrastructure.
- Regular security assessments and penetration testing conducted by independent specialists.
Whilst magga88 takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is completely secure. Members are encouraged to use strong, unique passwords and to enable two-factor authentication (2FA) on their magga88 accounts.
11. Your Rights
Subject to applicable data protection law, you have the following rights in relation to your personal data held by magga88:
- Right of access: To request a copy of the personal data magga88 holds about you.
- Right to rectification: To request correction of inaccurate or incomplete personal data.
- Right to erasure: To request deletion of your personal data where magga88 no longer has a lawful basis for retaining it, subject to legal and regulatory retention obligations.
- Right to restriction: To request that magga88 restricts processing of your data in certain circumstances.
- Right to data portability: To receive your personal data in a structured, machine-readable format where processing is carried out on the basis of consent or contract.
- Right to object: To object to processing based on legitimate interests, including direct marketing.
- Right to withdraw consent: Where processing is based on your consent, to withdraw that consent at any time without affecting the lawfulness of prior processing.
To exercise any of the above rights, please contact the magga88 Data Protection team via live chat or at the email address set out in Section 15. magga88 will respond to all valid requests within thirty (30) calendar days.
12. Children and Minors
The magga88 platform is strictly intended for adults aged 21+ and above. magga88 does not knowingly collect personal data from individuals under the age of 21. If we become aware that a minor has provided personal data or registered an account, we will take immediate steps to close the account, delete the data, and refund any deposits made. If you believe a minor has accessed magga88, please contact our support team without delay.
13. Third-Party Links
The magga88 platform does not contain links to third-party websites. However, to the extent that any third-party content providers or payment method integrations involve redirection to an external domain (e.g. a banking portal), magga88 has no control over the privacy practices of those external sites and is not responsible for their content or privacy policies. We encourage you to review the privacy policy of any third-party service you access in connection with your magga88 account.
14. Changes to This Privacy Policy
magga88 reserves the right to update this Privacy Policy at any time. Material changes will be communicated to registered Members via the email address on record or via an on-platform notification prior to the change taking effect. The "Last updated" date at the top of this page reflects the date of the most recent revision. Continued use of the magga88 platform following notification of any change constitutes your acceptance of the revised Privacy Policy.
15. Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by magga88, please contact us via:
- Live Chat: Available 24/7 on the magga88 platform — average response time under 2 minutes.
- Email: support@magga88.org (plain text — not a clickable link)
magga88 will acknowledge receipt of all written privacy enquiries within two (2) business days and aim to resolve them within thirty (30) calendar days.