maggie88 Privacy Policy

1 Introduction & Who We Are

maggie88 ("maggie88", "we", "us", "our") operates the online gaming platform accessible at maggie88.net and all associated subdomains and mobile interfaces. maggie88 is the data controller responsible for the personal data of users of its platform.

This Privacy Policy applies to all personal data collected from or about you in connection with your registration, use of the maggie88 platform, customer support interactions, and any other dealings you have with maggie88. It should be read alongside our Terms & Conditions and Responsible Gaming Policy.

maggie88 is committed to handling your personal data with transparency, care, and in compliance with applicable data protection laws and the data governance requirements of our international gaming authority licence.

2 Personal Data We Collect

maggie88 collects the following categories of personal data, to the extent necessary for the purposes described in this Policy:

maggie88 does not collect special categories of sensitive personal data (such as racial origin, health data, or biometric data) except where strictly required to comply with responsible gaming obligations (e.g., processing a self-exclusion request).

3 How We Collect Your Data

maggie88 collects personal data through the following channels:

• Direct Provision: Data you provide when registering, completing KYC verification, making deposits or withdrawal requests, using live chat or email support, or submitting responsible gaming requests.
• Automated Collection: Technical data collected automatically when you access the platform, including IP address, session data, device identifiers, and interaction logs. This data is collected via server logs, session tokens, and similar standard web technologies.
• Payment Processors: Transaction confirmation data received from Touch n Go eWallet, Boost, Maybank, CIMB, Public Bank, Hong Leong Bank, and other payment partners when you transact through the maggie88 cashier.
• Identity Verification Services: Verification results from third-party KYC service providers engaged to confirm the authenticity of identity documents submitted by players.
• Game Providers: Game session data generated by third-party game providers whose titles are hosted on or linked to the maggie88 platform.

4 Purposes for Which We Process Your Data

maggie88 processes your personal data for the following purposes:

• Account Management: Creating and managing your maggie88 account, authenticating your identity at login, and maintaining account security.
• Payment Processing: Processing deposits and withdrawals via your chosen payment method, reconciling transactions, and investigating payment disputes.
• Identity Verification (KYC): Verifying your identity and age in compliance with our licensing obligations and applicable anti-money laundering regulations.
• Fraud Prevention and Security: Detecting and preventing fraudulent transactions, account takeover attempts, money laundering, bonus abuse, and other prohibited conduct.
• Platform Personalisation: Personalising your experience on the maggie88 platform based on your game preferences and usage patterns.
• Responsible Gaming: Monitoring gaming behaviour to identify indicators of problem gambling and applying any deposit limits, session controls, or self-exclusion settings you have configured.
• Marketing Communications: Sending you promotional offers, bonuses, and platform updates where you have given your prior consent.
• Legal and Regulatory Compliance: Meeting our obligations under applicable laws and the requirements of our international gaming authority licence, including record-keeping and reporting obligations.
• Customer Support: Responding to your queries, resolving complaints, and improving our support service quality.

5 Legal Bases for Processing

maggie88 processes your personal data on the following legal bases:

• Contract Performance: Processing necessary to provide the maggie88 service to you, including account management, payment processing, and game access.
• Legal Obligation: Processing required to comply with KYC, anti-money laundering, record-keeping, and other legal and regulatory obligations applicable to maggie88's licensed operations.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and improving our services, where such interests are not overridden by your data protection rights.
• Consent: Processing for marketing communications and optional personalisation features, where you have given freely-given, informed, and specific consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6 Sharing Your Personal Data

maggie88 does not sell, rent, or trade your personal data. We share your data only in the following circumstances and only to the extent necessary:

• Payment Partners: Transaction data shared with Touch n Go eWallet, Boost, Maybank, CIMB, Public Bank, and Hong Leong Bank solely to process your payment instructions.
• KYC and Identity Verification Providers: Identity documents shared with certified third-party verification services to conduct age and identity checks as required by our licence.
• Game Providers: Session-level data shared with licensed game studios (e.g., Pragmatic Play, Evolution Gaming, PG Soft) to enable game play and settle bet outcomes.
• IT and Security Service Providers: Technical data shared with hosting, CDN, and cybersecurity providers under strict contractual data processing agreements.
• Regulatory and Law Enforcement Authorities: Personal data disclosed to our licensing authority, financial intelligence units, or law enforcement bodies where we are legally required to do so.
• Corporate Transactions: In the event of a merger, acquisition, or sale of maggie88's business, personal data may be transferred as part of the transaction subject to equivalent privacy protections.

7 International Data Transfers

Some of maggie88's service providers — including game studios and technical infrastructure providers — may be located outside Malaysia. Where personal data is transferred to recipients in jurisdictions that may not provide equivalent data protection standards, maggie88 implements appropriate safeguards, including contractual data processing agreements incorporating standard data protection clauses, to protect your data during such transfers.

By using the maggie88 platform, you acknowledge that your data may be processed in jurisdictions outside Malaysia for the purposes described in this Policy, subject to the safeguards described above.

8 Data Retention

maggie88 retains personal data for as long as is necessary for the purposes for which it was collected, taking into account our legal and regulatory obligations:

• Active Accounts: Personal data is retained for the duration of your relationship with maggie88 and for a period thereafter as required by applicable law.
• Closed Accounts: Following account closure, maggie88 retains identity data, transaction records, and KYC documentation for a minimum of five (5) years in compliance with anti-money laundering record-keeping requirements. This period may be extended where required by regulatory direction or ongoing legal proceedings.
• Communications Data: Support chat transcripts and email records are retained for a minimum of two (2) years for quality assurance and dispute resolution purposes.
• Technical Logs: Server and access logs are retained for up to twelve (12) months for security monitoring purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with you.

9 Cookies & Similar Technologies

maggie88 uses the following types of cookies and similar technologies on its platform:

• Strictly Necessary Cookies: Required for the platform to function, including session authentication tokens that keep you logged in to your maggie88 account during a session. These cannot be disabled without affecting platform functionality.
• Performance & Analytics Cookies: Used to understand how players navigate the platform — which pages are visited, how long sessions last, and where errors occur. This information is used in aggregate to improve the platform.
• Functional Cookies: Store your platform preferences, such as language settings and last-visited game category, to personalise your experience.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from using authenticated features of the maggie88 platform, including your account dashboard and game access.

10 Your Data Protection Rights

Subject to applicable law and our regulatory obligations, you have the following rights in relation to your personal data held by maggie88:

• Right of Access: Request a copy of the personal data maggie88 holds about you.
• Right to Rectification: Request correction of inaccurate or incomplete personal data. Note that identity data that has passed KYC verification cannot be altered without re-verification.
• Right to Erasure: Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected and no legal retention obligation applies.
• Right to Restrict Processing: Request that maggie88 limit processing of your data in certain circumstances, such as while an accuracy dispute is resolved.
• Right to Data Portability: Request a copy of data you have provided to maggie88 in a structured, machine-readable format.
• Right to Object: Object to processing based on legitimate interests, including direct marketing. Where you object to marketing, maggie88 will cease such processing immediately.
• Right to Withdraw Consent: Where processing is based on your consent, withdraw that consent at any time. Withdrawal does not affect lawfulness of prior processing.

To exercise any of these rights, contact the maggie88 data team via the support channels listed in Section 14. maggie88 will respond to valid requests within 30 days. Identity verification may be required before a request can be actioned to protect against unauthorised data access.

11 Security Measures

maggie88 implements the following technical and organisational security measures to protect your personal data:

• 256-bit SSL/TLS encryption for all data in transit between your device and maggie88 servers;
• AES-256 encryption for sensitive data stored at rest, including identity documents and financial data;
• Role-based access controls limiting staff access to personal data to those with a genuine operational need;
• Multi-factor authentication for internal systems accessing player data;
• Regular security audits and penetration testing of the platform infrastructure;
• Intrusion detection systems and 24/7 security monitoring; and
• Staff training on data protection obligations and secure data handling procedures.

While maggie88 takes all reasonable measures to protect your data, no internet transmission or digital storage system is 100% secure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, maggie88 will notify you and the relevant supervisory authority as required by applicable law.

12 Children's Privacy

The maggie88 platform is strictly for individuals aged 21 and above. maggie88 does not knowingly collect personal data from anyone under 21. If maggie88 discovers or is informed that it has collected data from a person under 21, that account will be immediately closed, data will be deleted to the extent legally permissible, and the matter will be referred to the responsible gaming compliance team. If you are a parent or guardian and believe your child has registered a maggie88 account, please contact support immediately.

13 Amendments to This Privacy Policy

maggie88 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or regulatory requirements. Material changes will be communicated to registered users via email or in-platform notification before taking effect. The effective date at the top of this document will be updated with each revision. Continued use of the maggie88 platform following the effective date of a revised Policy constitutes acceptance of the revised terms. The current version is always available at maggie88.net/privacy-policy.

14 Contact & Complaints

If you have questions about this Privacy Policy, wish to exercise a data subject right, or wish to raise a privacy concern, please contact the maggie88 data team:

• Live Chat: Available 24/7 via the maggie88 platform — fastest response
• Email: [email protected] — include "Privacy Request" in the subject line
• Response Time: maggie88 will acknowledge privacy requests within 5 business days and respond substantively within 30 days

If you are not satisfied with maggie88's handling of a privacy concern, you have the right to lodge a complaint with the supervisory authority responsible for data protection in the jurisdiction where maggie88 holds its gaming licence.