Privacy Policy

This Privacy Policy ("Policy") describes how Maggie888 ("we", "us", "our", "the Platform") collects, uses, stores, shares, and protects the personal data of individuals ("you", "User", "Player") who access or use our website at https://maggie888.cam/ and all associated services, mobile interfaces, and features (collectively, "the Services").

Maggie888 acts as the data controller in respect of personal data collected through the Platform. We are committed to processing personal data lawfully, fairly, and transparently in accordance with applicable data protection legislation and our licensing obligations.

This Policy should be read alongside our Terms and Conditions and our Responsible Gambling Policy, which together form the complete framework governing your relationship with Maggie888.

By registering an account, accessing the Platform, or submitting any personal information to us, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

For clarity and consistency throughout this Policy, the following definitions apply:

• "Personal Data" — Any information that identifies or could reasonably be used to identify a living individual, directly or in combination with other data.
• "Processing" — Any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, deletion, or any combination thereof.
• "Data Controller" — The entity that determines the purposes and means of processing Personal Data. Maggie888 is the data controller for all player data collected through the Platform.
• "Data Processor" — A third party that processes Personal Data on behalf of Maggie888 under a written data processing agreement.
• "Consent" — A freely given, specific, informed, and unambiguous indication of agreement to the processing of Personal Data for a stated purpose.
• "Sensitive Data" — Special categories of Personal Data including financial information, identity documents, and data relating to health or wellbeing.
• "Cookie" — A small text file placed on your device by our Platform or third-party services embedded within it, used to store preferences and session information.

Maggie888 collects the following categories of personal data from players in Malaysia and internationally:

We collect personal data through the following channels and mechanisms:

You provide personal data directly when you complete the registration form, submit KYC verification documents, make a deposit or withdrawal, contact our support team, or respond to a survey or promotional offer.

When you access the Platform, we automatically collect Technical Data through server logs, cookies, and similar tracking technologies. This includes your IP address, device identifier, browser fingerprint, session duration, and pages visited. This data is collected passively and is used primarily for security monitoring and platform performance analysis.

When you make a deposit or withdrawal using a Malaysian payment method — including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, or RHB — the relevant payment service provider may share transaction confirmation data with us to reconcile your account balance. We do not receive or store full bank account numbers or card numbers.

For KYC and identity verification purposes, Maggie888 may use third-party verification service providers who cross-reference submitted identity documents against official databases. These providers operate under data processing agreements and are bound by equivalent data protection obligations.

Maggie888 processes your personal data for the following specific purposes:

• Account Management: To create, maintain, and secure your registered account, including verifying your identity, processing deposits and withdrawals in MYR, and managing your VIP tier status.
• Service Delivery: To provide access to casino games, sports betting markets (including EPL, Liga Super Malaysia, UFC, and other competitions), live dealer tables, and all other features of the Platform.
• Financial Processing: To process all deposit and withdrawal transactions accurately and securely, and to maintain transaction records as required by our licensing and AML obligations.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, multi-accounting, and other prohibited conduct as defined in our Terms and Conditions.
• Responsible Gambling: To monitor player behaviour patterns that may indicate problem gambling, to apply self-imposed limits, and to implement self-exclusion requests promptly and accurately.
• Legal Compliance: To comply with applicable laws, licensing conditions, regulatory directions, court orders, and law enforcement requests.
• Customer Support: To respond to your queries, resolve disputes, and maintain records of support interactions for quality assurance purposes.
• Marketing Communications: Where you have provided consent, to send promotional offers, bonus notifications, and platform updates via email, SMS, or push notification. You may withdraw this consent at any time.
• Platform Improvement: To analyse aggregated usage data for the purpose of improving the Platform's functionality, game selection, payment processes, and user experience.

Maggie888 processes personal data on the following legal grounds, depending on the category of data and purpose of processing:

• Contractual Necessity: Processing required to deliver the Services you have requested under our Terms and Conditions, including account registration, game access, and payment processing.
• Legal Obligation: Processing required to comply with applicable laws, including anti-money laundering legislation, KYC requirements imposed by our licensing authority, and data preservation obligations.
• Legitimate Interests: Processing carried out for Maggie888's legitimate business interests, including fraud prevention, security monitoring, platform analytics, and responsible gambling programme management, where these interests are not overridden by your privacy rights.
• Consent: Processing based on your explicit consent, primarily in relation to direct marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

Maggie888 does not sell, rent, or trade your personal data. We share personal data with third parties only in the following limited circumstances:

We share the minimum necessary financial data with our payment processing partners — including Touch 'n Go eWallet, DuitNow, FPX, and major Malaysian banks — for the purpose of executing and confirming deposit and withdrawal transactions. These providers are bound by their own privacy policies and applicable financial regulations.

Identity documents submitted for KYC verification may be processed by authorised third-party verification services. These providers act as data processors under written agreements and may not use your data for any purpose other than identity verification on our behalf.

To deliver game content, certain gameplay data (such as session activity and bet history) may be shared with our licensed gaming software providers. This data is used solely for game operation, dispute resolution, and RNG audit compliance.

We may disclose personal data to our licensing authority, relevant financial regulators, or law enforcement agencies where required by law, court order, or where there is a credible suspicion of fraud, money laundering, or other criminal activity.

We may share limited personal data with our legal advisors, auditors, and compliance consultants on a strictly confidential basis where required to fulfil professional obligations.

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law and our licensing obligations. The following retention schedules apply:

• Active Account Data: Retained for the duration of your account's active status and for a minimum of five (5) years following account closure, in accordance with AML record-keeping requirements.
• KYC Documents: Retained for a minimum of five (5) years from the date of submission or from the date of account closure, whichever is later.
• Transaction Records: Retained for a minimum of five (5) years from the transaction date.
• Support Communications: Retained for three (3) years from the date of the interaction, unless the communication forms part of an ongoing dispute or legal proceeding.
• Marketing Consent Records: Retained for the duration of the consent period and for one (1) year following withdrawal of consent as evidence of lawful processing.
• Technical / Log Data: Typically retained for twelve (12) months for security and performance purposes.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in a manner that prevents re-identification.

Maggie888 uses cookies and similar tracking technologies to operate and improve the Platform. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication tokens, CSRF protection cookies, and load-balancing identifiers. These cookies cannot be disabled without impairing Platform functionality.
• Functional Cookies: Used to remember your preferences, language settings, and account customisations between sessions. These improve your experience but are not essential to core Platform operation.
• Performance / Analytics Cookies: Used to collect aggregated data about how players navigate the Platform, which pages are most visited, and where errors occur. This data is used to improve Platform performance. Analytics data is anonymised where possible.
• Security Cookies: Used to detect and prevent fraudulent access attempts, brute-force login attacks, and suspicious session activity.

Maggie888 does not use third-party advertising cookies or behavioural targeting cookies. No data collected through Platform cookies is shared with advertising networks.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in or using core Platform features.

As a data subject, you hold the following rights in relation to your personal data held by Maggie888. These rights may be exercised at any time by contacting us at [email protected] with the subject line "Data Rights Request":

We will acknowledge all data rights requests within five (5) business days and aim to fulfil them within thirty (30) calendar days. Where a request is complex or involves large volumes of data, we may extend this period by a further thirty (30) days with prior notice.

Maggie888 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes:

• 256-Bit SSL/TLS Encryption: All data in transit between your device and our servers is encrypted using industry-standard TLS 1.3 protocols.
• Encrypted Data Storage: Personal and financial data stored in our databases is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data is restricted to authorised personnel on a strict need-to-know basis, with role-based access controls and full audit logging.
• Multi-Factor Authentication: Internal system access requires multi-factor authentication for all staff members with access to player data.
• Penetration Testing: Our systems undergo regular third-party security testing to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: We maintain a documented data breach response procedure. In the event of a confirmed data breach affecting your personal data, we will notify relevant regulatory authorities and affected individuals in accordance with applicable notification requirements.
• Staff Training: All Maggie888 employees and contractors with access to personal data receive mandatory data protection training on onboarding and annually thereafter.

While we implement all reasonable security measures, no data transmission over the internet or electronic storage system is entirely impervious to risk. We encourage players to use strong, unique passwords for their accounts and to enable two-factor authentication where available.

The Maggie888 Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. Age verification is conducted as part of the KYC process for all registered accounts.

If we become aware that personal data has been collected from a person under the age of 21, we will immediately suspend the associated account, delete all personal data related to that individual, and return any funds to the original payment source after completing identity verification of the rightful account holder.

If you have reason to believe that a minor has registered an account on Maggie888, please contact us immediately at [email protected]. We treat all such reports as urgent and will investigate and respond within 24 hours.

As an internationally licensed platform serving players in Malaysia and other jurisdictions, Maggie888 may process or store personal data on servers located outside of Malaysia. Transfers of personal data to countries outside Malaysia may occur in connection with our use of cloud infrastructure, gaming software providers, or verification service partners.

Where personal data is transferred internationally, Maggie888 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under applicable data protection laws, including through:

• Contractual clauses in agreements with third-party processors that impose equivalent data protection obligations.
• Transfer of data only to jurisdictions recognised as providing an adequate level of data protection by relevant international standards.
• Application of our internal data protection policies to all entities that process personal data on our behalf.

By using the Maggie888 Platform and providing your personal data, you acknowledge and consent to the international transfer of your personal data in accordance with this Policy.

Maggie888 reserves the right to update or amend this Privacy Policy at any time. The current effective version will always be published at https://maggie888.cam/privacy-policy with a revised effective date and version number at the top of the document.

We will endeavour to notify registered players of material changes to this Policy via email or an in-platform notification prior to the changes taking effect. For minor amendments — including clarifications, corrections, or formatting changes that do not alter the substance of the Policy — we may update this document without direct notification.

Continued use of the Platform following publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any amendment, you should stop using the Platform and contact us to request account closure and data deletion.

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact our Data Protection team through the following channels:

• Email: [email protected] — Use subject line "Privacy Query" or "Data Rights Request" for priority routing.
• Live Chat: Available 24/7 on the Platform. Request to be connected to our Data Protection Officer for formal data rights matters.

We take all privacy queries seriously and will acknowledge receipt of your communication within five (5) business days. For formal data rights requests (access, erasure, portability), we target fulfilment within thirty (30) calendar days of receiving sufficient information to process the request.

Our support team serves players across Malaysia — from Kuala Lumpur and Petaling Jaya to Penang, Johor Bahru, Shah Alam, and beyond — in English, seven days a week.