mage88 Privacy Policy

1. Introduction

1.1 This Privacy Policy ("Policy") is published by mage88 ("mage88", "we", "us", "our") and applies to all personal data collected from individuals ("you", "Member", "User") who access or use the mage88 website and platform (collectively, the "Platform").

1.2 mage88 is committed to protecting the privacy of all members and users. We process personal data in accordance with applicable data protection legislation and international best-practice standards, including the principles of data minimisation, purpose limitation, and storage limitation.

1.3 This Policy describes the categories of personal data we collect, the purposes for which we process it, the legal basis for processing, how long we retain data, and the rights available to you as a data subject. If you have any questions about this Policy, please contact us using the details set out in Section 15.

2. Personal Data We Collect

2.1 mage88 collects the following categories of personal data:

Identity Data

• Full legal name as it appears on your government-issued identification document;
• Date of birth (to verify that you meet the minimum age requirement of 21 years);
• Nationality;
• Copies of identification documents — Malaysian MyKad or International Passport — submitted during Know Your Customer (KYC) verification;
• Selfie or live facial verification image, where required for enhanced KYC.

Contact Data

• Email address registered with your mage88 account;
• Malaysian mobile telephone number;
• Residential or mailing address, where submitted during KYC or account verification.

Financial Data

• Payment method details (e-wallet identifiers, bank account numbers, or bank name) used for deposits and withdrawals;
• Transaction history including deposit amounts, withdrawal amounts, dates, and payment methods;
• Account balance information.

Technical Data

• IP address at the time of each login and session;
• Device type, operating system, and browser type;
• Geolocation data derived from IP address (approximate region only — mage88 does not access GPS location);
• Session duration and page interaction data.

Gaming Activity Data

• Game history, bet records, win/loss records, and game session data;
• Bonus and promotion participation history;
• Responsible gaming tool settings (deposit limits, session limits, self-exclusion status).

Communications Data

• Records of live chat support interactions;
• Email correspondence with the mage88 support team;
• Survey responses and feedback submissions.

3. How We Collect Personal Data

3.1 mage88 collects personal data through the following means:

• Direct submission: data you provide when registering a mage88 account, completing KYC verification, making a deposit, requesting a withdrawal, contacting support, or responding to a survey;
• Automated collection: technical and session data collected automatically when you access the Platform, via cookies, server logs, and similar technologies (see Section 10);
• Payment processors: confirmation and transaction reference data received from mage88's payment processing partners when a deposit or withdrawal is processed;
• Identity verification services: verification status data received from licensed KYC and AML screening service providers used by mage88 to fulfil its regulatory obligations;
• Third-party game providers: game session data and wagering records received from mage88's licensed game provider partners, necessary for the operation of game content on the Platform.

4. Purposes of Data Processing

4.1 mage88 processes your personal data for the following purposes:

• To register and maintain your mage88 account, including verifying your identity and age eligibility;
• To process deposits, withdrawals, and all account financial transactions;
• To provide access to all game and betting services available on the Platform;
• To administer bonuses, promotions, and the mage88 Rewards programme;
• To comply with anti-money laundering (AML), counter-terrorist financing (CTF), and Know Your Customer (KYC) legal obligations;
• To detect and prevent fraud, collusion, money laundering, and any other prohibited or illegal activities on the Platform;
• To enforce the mage88 Terms & Conditions and Responsible Gaming Policy, including the administration of self-exclusion requests;
• To provide customer support and respond to member enquiries;
• To send transactional and service communications related to your account — including deposit confirmations, withdrawal notifications, security alerts, and policy update notifications;
• To send marketing communications about mage88 promotions and offers, where you have consented to receive such communications or where a legitimate interest applies (you may opt out at any time);
• To analyse Platform usage and gaming behaviour in aggregate to improve the mage88 product and user experience;
• To fulfil any other purpose for which you provide express consent at the time of data collection.

5. Legal Basis for Processing

5.1 mage88 processes personal data on the following legal bases:

• Contractual necessity: processing required to fulfil our obligations under the mage88 Terms & Conditions, including account management, payment processing, and game service delivery;
• Legal obligation: processing required for compliance with AML, KYC, and other applicable regulatory requirements;
• Legitimate interests: processing for fraud detection, platform security, and Platform improvement, where such interests are not overridden by your fundamental rights;
• Consent: processing for marketing communications and any other non-essential purpose where we have obtained your prior consent. Consent may be withdrawn at any time without affecting the lawfulness of processing prior to withdrawal.

6. Data Sharing & Disclosure

6.1 mage88 does not sell your personal data to third parties. We share personal data only in the following circumstances and only to the extent necessary for the relevant purpose:

• Payment processors: your name and payment method details are shared with licensed payment processing partners (including e-wallet operators and banking institutions) solely for the purpose of processing your transactions;
• Game providers: your account identifier and session data are shared with licensed third-party game providers (including Evolution Gaming, Pragmatic Play, PG Soft, Habanero, and others) to the extent required to deliver game services and maintain game records;
• Identity verification services: identity data submitted for KYC verification is shared with licensed identity verification and AML screening service providers engaged by mage88;
• Regulatory and law enforcement authorities: mage88 is required by law to disclose personal data to competent authorities, regulators, and financial intelligence units upon lawful request. Such disclosures may be made without prior notice to you where required by applicable law;
• Professional advisers: legal, accounting, or audit advisers engaged by mage88 may access personal data on a confidential basis where necessary for the provision of professional services;
• Corporate transactions: in the event of a merger, acquisition, or sale of assets, personal data held by mage88 may be transferred to a successor entity, subject to equivalent data protection obligations.

6.2 All third parties to whom mage88 discloses personal data are contractually required to maintain the confidentiality and security of that data and to process it only for the purposes for which it was disclosed.

7. International Data Transfers

7.1 Some of mage88's service providers operate from jurisdictions outside Malaysia. Where personal data is transferred to such jurisdictions, mage88 ensures that adequate safeguards are in place — such as contractual data protection clauses — to provide a level of protection for your personal data that is equivalent to that required under applicable Malaysian data protection standards.

7.2 By registering an mage88 account and accepting this Privacy Policy, you acknowledge and consent to the transfer of your personal data to jurisdictions outside Malaysia where necessary for the provision of mage88 services, subject to the safeguards described in this Section.

8. Data Retention

8.1 mage88 retains personal data for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting obligations. The following general retention periods apply:

• Account data and KYC documents: retained for a minimum of 5 years following account closure, in accordance with AML and financial record-keeping obligations;
• Transaction records: retained for a minimum of 5 years from the date of each transaction;
• Support communications: retained for 2 years from the date of the relevant interaction;
• Technical and session data: retained for 12 months from the date of collection, after which it is anonymised or deleted;
• Self-exclusion records: retained indefinitely to prevent re-registration during or following a permanent self-exclusion period.

8.2 At the end of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.

9. Security Measures

9.1 mage88 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• 128-bit SSL (Secure Sockets Layer) encryption for all data transmitted between your device and the mage88 Platform;
• Encrypted storage of all sensitive personal data and financial records at rest;
• Role-based access controls limiting staff access to personal data on a need-to-know basis;
• OTP (one-time password) device verification for new device logins;
• Automated session timeout controls for inactive sessions;
• Continuous security monitoring and intrusion detection systems;
• Regular security audits and penetration testing conducted by independent security specialists.

9.2 Notwithstanding these measures, no method of electronic transmission or storage is 100% secure. mage88 cannot guarantee the absolute security of your personal data and cannot be held liable for unauthorised access resulting from circumstances beyond its reasonable control. You are responsible for maintaining the security of your mage88 account credentials.

10. Cookies & Tracking Technologies

10.1 mage88 uses cookies and similar tracking technologies on the Platform for the following purposes:

• Strictly necessary cookies: required for the Platform to function correctly — including session management, login authentication, and security. These cookies cannot be disabled without impairing Platform functionality;
• Functional cookies: used to remember your preferences, such as language settings and display options, to enhance your Platform experience;
• Analytical cookies: used to collect aggregate, anonymised data about how members use the Platform — including page visit frequency, navigation paths, and feature usage — to inform Platform improvement decisions.

10.2 mage88 does not use third-party advertising or cross-site tracking cookies. Analytical cookies are limited to first-party analytics only.

10.3 You may disable non-essential cookies through your browser settings. Note that disabling strictly necessary cookies will impair your ability to use core Platform features, including login.

11. Your Data Subject Rights

11.1 Subject to applicable law, you have the following rights with respect to your personal data held by mage88:

• Right of access: you may request a copy of the personal data mage88 holds about you;
• Right to rectification: you may request that inaccurate or incomplete personal data be corrected;
• Right to erasure: you may request deletion of your personal data, subject to legal retention obligations (see Section 8);
• Right to restrict processing: you may request that mage88 restrict the processing of your personal data in certain circumstances;
• Right to data portability: you may request that mage88 provide your personal data in a structured, machine-readable format;
• Right to object: you may object to processing based on legitimate interests or for direct marketing purposes;
• Right to withdraw consent: where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

11.2 To exercise any of the above rights, please contact mage88 using the details in Section 15. mage88 will respond to all data subject requests within 30 days of receipt. In complex cases, this period may be extended by a further 30 days, of which you will be notified.

11.3 Please note that mage88 may be required to retain certain data notwithstanding an erasure request, where retention is mandated by applicable law (including AML and financial record-keeping obligations).

12. Children's Privacy

12.1 The mage88 Platform is strictly restricted to individuals aged 21 years and above. mage88 does not knowingly collect personal data from individuals under the age of 21. If mage88 becomes aware that personal data has been collected from a person under 21, the relevant account will be suspended immediately, all personal data collected from that individual will be deleted, and all deposited funds will be returned to the originating payment method in accordance with applicable law.

12.2 If you believe that mage88 may have inadvertently collected personal data from a person under 21, please notify us immediately using the contact details in Section 15.

13. Third-Party Platforms

13.1 The mage88 Platform may reference third-party service providers (such as payment processors and game providers) whose services are accessible through the Platform. mage88 is not responsible for the privacy practices of third-party platforms or services. This Privacy Policy applies solely to personal data processed by mage88 in connection with the mage88 Platform. Members are encouraged to review the privacy policies of any third-party services they access.

14. Updates to This Policy

14.1 mage88 reserves the right to update or amend this Privacy Policy at any time. Material changes to this Policy — particularly changes that affect your rights or the purposes for which we process your personal data — will be communicated to registered members via email or via a notice displayed upon next login to the mage88 Platform.

14.2 The effective date of the current version of this Policy is published at the top of this page. Continued use of the mage88 Platform following notification of material changes constitutes your acceptance of the updated Policy. If you do not accept the updated Policy, you should cease using the Platform and may request account closure by contacting our support team.

15. Contact & Data Enquiries

15.1 For any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by mage88, please contact us using the following details:

• Live Chat: Available 24/7 via the mage88 Platform — fastest channel for urgent data queries
• Email: [email protected] (plain text — not a clickable link)

15.2 mage88 aims to acknowledge all privacy-related written communications within 3 business days and to resolve data subject requests within 30 days in accordance with Section 11.

This Privacy Policy was last updated in June 2026 and supersedes all prior versions. This Policy forms part of the mage88 Terms & Conditions. mage88 is an entertainment platform for adults aged 21 and above.