mage88 Privacy
Policy

This Privacy Policy ("Policy") is published by mage88 ("we", "us", "our", "mage88") and applies to all personal data collected, processed, and stored in connection with the mage88 website at mage88.app ("Platform") and any associated services, games, promotions, and communications directed at registered or prospective players.

mage88 is committed to handling all personal data in a manner that is lawful, fair, transparent, and consistent with the data protection principles applicable under international data protection standards, including those required under our gaming authority licensing obligations. We treat the privacy and security of player data as a fundamental operational requirement, not a compliance box to tick.

By registering a mage88 account, accessing the Platform, or interacting with any mage88 service, you acknowledge that you have read and understood this Policy and consent to the data practices described herein. Where consent is the legal basis for a specific processing activity, you will be given a clear opportunity to provide or withdraw consent at the relevant point of data collection.

mage88 collects personal data from you directly (when you register, transact, or contact support), automatically (through your use of the Platform), and from third parties (such as payment processors or identity verification services). The categories of data collected include:

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data for identification purposes, except where such data is strictly necessary for identity verification under applicable KYC requirements and only with your explicit consent.

mage88 uses your personal data for the following purposes:

• Account Management: Creating and maintaining your player account, authenticating logins, managing account settings and preferences.
• Service Delivery: Processing deposits and withdrawals, providing access to games and betting markets, delivering promotions and bonuses to which you are entitled.
• Identity & Age Verification: Verifying that you are aged 21 or above and that your identity matches the information provided at registration, as required under licensing obligations.
• Regulatory Compliance: Meeting anti-money-laundering (AML), counter-terrorism financing (CTF), and know-your-customer (KYC) requirements imposed by our gaming authority licenses.
• Security & Fraud Prevention: Detecting and preventing fraudulent activity, account sharing, multi-accounting, and other prohibited conduct outlined in our Terms & Conditions.
• Responsible Gaming: Monitoring play patterns to identify potential problem gambling indicators, applying self-imposed limits and exclusions, and fulfilling our duty of care obligations under licensing requirements.
• Customer Support: Responding to your enquiries, resolving disputes, and maintaining records of support interactions.
• Platform Improvement: Analysing usage data in aggregate to improve game selection, site performance, and user experience.
• Marketing Communications: Sending promotional offers, bonus notifications, and relevant product updates — subject to your communication preferences and applicable consent requirements.

mage88 does not use your personal data for purposes incompatible with those described above. Where we intend to use your data for a new purpose not covered by this Policy, we will notify you and obtain any required consent before doing so.

Every processing activity carried out by mage88 is supported by at least one of the following lawful bases:

• Contract Performance: Processing necessary to provide the services you have contracted for when registering an account and accepting our Terms & Conditions.
• Legal Obligation: Processing required to comply with AML, KYC, age verification, and reporting obligations imposed by applicable law and our gaming authority licenses.
• Legitimate Interests: Processing for fraud prevention, security operations, and Platform improvement where our legitimate interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for marketing communications and certain optional data collection activities, where we have obtained your freely given, specific, informed, and unambiguous consent. You may withdraw consent at any time.

mage88 does not sell your personal data to third parties. We may share your data with the following categories of recipients strictly on a need-to-know basis and only to the extent necessary for the stated purpose:

• Payment Processors: Boost, Touch 'n Go, DuitNow, FPX, GrabPay, and other payment service providers require transaction data to process deposits and withdrawals. Each provider operates under its own data protection obligations.
• Identity Verification Providers: Third-party KYC service providers who verify identity documents and perform age verification checks on our behalf under contractual data processing agreements.
• Game Software Providers: Game suppliers require minimal data (player identifier, bet amount, game session data) to facilitate game play. No personally identifiable contact information is shared with game providers.
• Regulatory Authorities: Gaming licensing authorities, financial intelligence units, and law enforcement agencies, where disclosure is required by applicable law or licensing obligation.
• IT Infrastructure Providers: Cloud hosting, content delivery, and security service providers who process data on our behalf under binding data processing agreements and appropriate security obligations.
• Professional Advisers: Legal counsel, auditors, and compliance consultants, under professional confidentiality obligations, where necessary for legal or regulatory proceedings.

All third parties with whom mage88 shares personal data are required to maintain adequate security standards and to use the data only for the specific purpose for which it was disclosed. mage88 does not permit third-party recipients to use your data for their own independent marketing purposes without your explicit consent.

mage88 uses cookies and similar tracking technologies to operate the Platform effectively, maintain your login session, and understand how players interact with our site. The categories of cookies we use include:

• Essential Cookies: Strictly necessary for the Platform to function. These include session authentication cookies that keep you logged in, security tokens, and load balancing cookies. These cannot be disabled without preventing access to core Platform functionality.
• Functional Cookies: Remember your preferences such as language settings, game display options, and responsible gaming limit configurations. Disabling these may reduce your experience quality.
• Analytics Cookies: Collect aggregated, anonymised data about how players use the Platform — which pages are visited most frequently, where users navigate from, and session duration. This data is used to improve Platform performance and game selection.
• Security Cookies: Used by fraud detection and bot prevention systems to distinguish legitimate players from automated access attempts. These help protect your account and the integrity of the Platform.

You may configure cookie preferences through your browser settings. Note that disabling essential cookies will prevent Platform functionality. mage88 does not use third-party advertising cookies or cross-site tracking technologies for behavioural advertising to third-party platforms.

mage88 retains your personal data for as long as necessary to fulfil the purposes described in this Policy, and for the periods required by applicable law and our gaming authority licensing obligations. Key retention periods include:

• Account Data: Retained for the duration of your account and for a minimum of five (5) years following account closure, as required by AML regulations.
• Financial Transaction Records: Retained for a minimum of seven (7) years from the date of each transaction in accordance with financial recordkeeping requirements.
• KYC & Identity Documents: Retained for a minimum of five (5) years following the end of the customer relationship, or longer where required by regulatory instruction.
• Support Communications: Retained for three (3) years from the date of the last communication unless a longer period is required for ongoing dispute resolution.
• Marketing Preferences: Retained until you withdraw consent or opt out, plus a reasonable period to process the withdrawal of consent.

Upon expiry of applicable retention periods, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original personal data. Data retained in anonymised aggregate form for statistical or analytical purposes is not subject to deletion obligations.

mage88 implements comprehensive technical and organisational security measures appropriate to the nature and sensitivity of the personal data we hold. These measures include:

• TLS 1.3 encryption for all data transmitted between your device and mage88 servers
• Encryption at rest for stored sensitive personal data and financial records
• Role-based access controls limiting internal access to personal data on a strict need-to-know basis
• Multi-factor authentication for mage88 staff accessing production systems containing player data
• Regular penetration testing and vulnerability assessments by independent security specialists
• Incident response procedures including player notification protocols in the event of a data breach
• Third-party data processor security vetting and contractual security obligations

While mage88 takes all reasonable steps to protect your personal data, no security system is completely impenetrable. In the unlikely event of a data breach that poses a material risk to your rights and freedoms, mage88 will notify affected players and relevant authorities within the timeframes required by applicable law.

Subject to applicable law and our legitimate regulatory obligations, you have the following rights in respect of your personal data held by mage88:

1. Right of Access: You may request a copy of the personal data mage88 holds about you, along with information about how it is processed.
2. Right to Rectification: You may request correction of inaccurate or incomplete personal data. Some data corrections may require identity verification.
3. Right to Erasure: You may request deletion of your personal data in certain circumstances. Note that regulatory retention obligations may prevent full erasure during mandatory retention periods.
4. Right to Restrict Processing: You may request that we limit processing of your data in certain circumstances while a dispute is pending.
5. Right to Data Portability: You may request your personal data in a structured, commonly used, machine-readable format for transfer to another controller where technically feasible.
6. Right to Object: You may object to processing based on legitimate interests or for direct marketing purposes. Objections to direct marketing will always be honoured immediately.
7. Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of the above rights, contact mage88 support via live chat. We will respond to all legitimate requests within 30 days. We may need to verify your identity before processing your request to protect against unauthorised access to personal data.

mage88 is a 21+ platform. We do not knowingly collect or process personal data from individuals under the age of 21. Registration requires confirmation of age eligibility and is subject to mandatory age verification. If mage88 discovers that it has inadvertently collected personal data from a person under the age of 21, that data will be deleted immediately and the associated account will be permanently closed.

Parents and guardians of minors who may have accessed the Platform in contravention of these age restrictions should contact mage88 support via live chat immediately. mage88 will take prompt action to close the account and delete associated data upon receipt of a verified parental or guardian notification.

mage88 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or licensing requirements. The effective date of the current version is stated at the top of this document. Material changes — those that significantly affect your rights or how we use your data — will be communicated to registered players via email to the address on file, or through a prominent notice on the Platform, at least seven (7) days before the changes take effect.

Your continued use of the Platform following the effective date of any updated Policy constitutes your acknowledgment of the changes. If you do not agree with material changes, you should contact support to close your account prior to the effective date. Continued access after the effective date constitutes acceptance.

For any questions, concerns, or requests regarding this Privacy Policy or mage88's handling of your personal data, please contact our Data Protection team via live chat support available 24/7 on the Platform. Our support team can escalate data protection queries to our compliance team for matters requiring specialist handling.

If you are dissatisfied with our response to a data protection concern, you have the right to lodge a complaint with the supervisory authority or data protection regulator applicable to your jurisdiction. mage88 will cooperate fully with any investigation by a competent supervisory authority.