maggie8 Privacy Policy

1 Introduction

This Privacy Policy (hereinafter referred to as the "Policy") sets out the basis on which maggie8 (hereinafter referred to as "maggie8", "we", "us", or "the Company"), the operator of the online gaming and sports betting platform accessible at maggie8.cam (the "Platform"), collects, uses, stores, shares, and otherwise processes personal data relating to individuals who access or use the Platform ("Users", "Players", or "you").

maggie8 is committed to protecting the privacy and security of all personal data entrusted to us. This Policy is designed to be transparent and comprehensive, explaining clearly what data we hold, why we hold it, the legal grounds on which we process it, and the rights you may exercise over your personal information.

By accessing, registering on, or otherwise using the Platform in any capacity, you acknowledge that you have read and understood this Policy and that you consent to the collection and processing of your personal data as described herein. This Policy should be read in conjunction with our Terms & Conditions, which govern your use of the Platform.

2 Definitions

For the purposes of this Policy, the following terms shall have the meanings set out below:

• "Personal Data" — any information that directly or indirectly identifies a natural person, including name, identification number, contact details, location data, and online identifiers.
• "Processing" — any operation or set of operations performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, transmission, erasure, or destruction.
• "Data Controller" — maggie8, in its capacity as the entity that determines the purposes and means of processing Personal Data collected through the Platform.
• "Data Processor" — a third party that processes Personal Data on behalf of and under the instructions of maggie8.
• "Data Subject" — the natural person to whom the Personal Data relates; in this context, a registered or visiting User of the Platform.
• "Cookies" — small text files placed on your device by the Platform to store and retrieve information about your browsing session, preferences, and behaviour.
• "KYC Data" — Personal Data collected for Know Your Customer identity verification purposes, including government-issued identification documents, proof of address, and payment method evidence.
• "PDPA" — the Personal Data Protection Act 2010 of Malaysia, which governs the processing of personal data in commercial transactions in Malaysia.

3 Data We Collect

maggie8 collects Personal Data through several channels and at various stages of your interaction with the Platform. The categories of data we collect include:

3.1 Registration & Account Data

• Full legal name as it appears on your government-issued identification;
• Date of birth (for age verification — you must be at least 21 years old);
• Email address and phone number;
• Residential address, including city and postcode;
• Username and encrypted account password;
• Preferred currency (MYR / RM for Malaysian players).

3.2 KYC Verification Data

• Malaysian Identity Card (MyKad) — front and back scan or photograph;
• Passport or other government-issued identity document where applicable;
• Proof of residential address (utility bill, bank statement, or equivalent);
• Proof of payment method ownership (e.g., screenshot of e-wallet account, bank account statement).

3.3 Financial & Transaction Data

• Deposit and withdrawal transaction records, including amounts, timestamps, and payment method identifiers;
• E-wallet account numbers or identifiers (Touch 'n Go eWallet, Boost, GrabPay, DuitNow QR);
• Bank account details provided for FPX, Maybank, CIMB, Public Bank, or Hong Leong transfers;
• Cryptocurrency wallet addresses where applicable (BTC, USDT);
• Bonus redemption and wagering history.

3.4 Usage & Technical Data

• IP address and approximate geographic location;
• Device identifiers, browser type, and operating system;
• Pages visited, session duration, click paths, and feature usage data;
• Game play logs, betting history, sports market activity (EPL, Liga Super Malaysia, UFC, live football), and session records;
• Live chat transcripts and customer support communication records.

3.5 Responsible Gambling Data

• Deposit limit settings, loss limit configurations, and session time preferences;
• Self-exclusion requests and cooling-off period records;
• Responsible gambling assessment responses where voluntarily completed.

4 How We Use Your Data

maggie8 processes Personal Data for the following specific and documented purposes:

• Account Creation & Management: To create and administer your Player Account, verify your identity and age, and maintain accurate account records;
• Service Delivery: To provide access to all gaming products, sports betting markets, live dealer games, and platform features, including personalised game recommendations where applicable;
• Payment Processing: To facilitate deposits and withdrawals via your chosen payment method, including e-wallets (Touch 'n Go eWallet, Boost, GrabPay), bank transfers (Maybank, CIMB, Public Bank, Hong Leong), DuitNow QR, FPX, and cryptocurrency;
• KYC & Regulatory Compliance: To verify your identity, age, source of funds, and payment method ownership, and to fulfil obligations under applicable Anti-Money Laundering (AML) and counter-terrorism financing (CTF) regulations;
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, account takeovers, money laundering, and any other abuse of the Platform;
• Customer Support: To respond to your enquiries, resolve disputes, process complaints, and provide assistance via live chat, email, or any other supported communication channel;
• Responsible Gambling: To implement and monitor responsible gambling tools including deposit limits, self-exclusion, session reminders, and cooling-off periods, and to identify potentially harmful gambling behaviour;
• Platform Improvement: To analyse usage patterns, identify technical issues, and improve the Platform's functionality, performance, and user experience;
• Legal Compliance: To comply with applicable laws, regulations, and court orders, including reporting obligations to regulatory and law enforcement authorities where required.

5 Legal Basis for Processing

maggie8 processes Personal Data in accordance with the Personal Data Protection Act 2010 of Malaysia (PDPA) and other applicable data protection legislation. The legal bases on which we rely for processing include:

• Contractual Necessity: Processing is necessary to perform the contract we hold with you as a registered Player — specifically to operate your account, process transactions, and deliver gaming services;
• Legal Obligation: Processing is required to comply with legal and regulatory obligations applicable to our business, including KYC, AML, and CTF requirements;
• Legitimate Interests: Processing is necessary for our legitimate business interests, including fraud prevention, Platform security, responsible gambling monitoring, and service improvement — provided those interests are not overridden by your fundamental rights;
• Consent: Where we process data for optional purposes such as marketing communications or optional responsible gambling assessments, we do so on the basis of your freely given and informed consent, which you may withdraw at any time.

6 Data Sharing & Disclosure

maggie8 does not sell your Personal Data. We may share your data only in the following circumstances and with the following categories of recipients:

• Payment Processors: We share necessary financial data with payment service providers that facilitate your deposits and withdrawals, including e-wallet operators, banking partners, and cryptocurrency processing services. These processors are bound by strict confidentiality and data security obligations.
• KYC & Identity Verification Providers: We engage third-party identity verification and AML screening services to assist with KYC compliance. These providers process your identity documents under our instructions and in accordance with applicable data protection law.
• Game Content Providers: Third-party game studios and live casino operators may receive session and gameplay data necessary to deliver their games. These providers operate under data processing agreements with maggie8.
• Regulatory & Law Enforcement Authorities: We may disclose Personal Data where required to do so by law, court order, or regulatory direction, including to relevant gaming regulators, financial intelligence units, or law enforcement agencies.
• Fraud Prevention Networks: We may share data with industry fraud prevention databases or consortia where we have grounds to suspect fraudulent or abusive behaviour, in order to protect the Platform and other players.
• Professional Advisors: We may share limited data with auditors, lawyers, and other professional advisors under obligations of confidentiality where necessary for the conduct of our business.

7 Cookies & Tracking Technologies

maggie8 uses cookies and similar tracking technologies on the Platform to enhance your experience, maintain session state, and analyse how the Platform is used. The types of cookies we deploy include:

• Strictly Necessary Cookies: Essential for core Platform functionality — including login session management, security tokens, and payment flow integrity. These cannot be disabled without impairing Platform use.
• Performance & Analytics Cookies: Collect anonymised data about how users navigate the Platform, which pages receive the most traffic, and where technical errors occur. This data helps us improve the Platform's performance.
• Functional Cookies: Remember your preferences — such as your preferred language, regional settings, and Platform layout — to provide a more personalised experience on return visits.
• Session Identification Cookies: Used for responsible gambling monitoring, including tracking session duration for session time reminders configured by the Player.

You may manage or disable non-essential cookies through your browser settings. Please be aware that disabling certain cookies may affect the functionality of some Platform features. Your continued use of the Platform following initial cookie consent constitutes your acceptance of our cookie practices as described in this section.

8 Data Retention

maggie8 retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law or regulatory obligation. Our retention practices are as follows:

• Active Account Data: Retained for the full duration of the Player's Account being open and active on the Platform.
• Transaction & Financial Records: Retained for a minimum of seven (7) years following the date of the relevant transaction, in accordance with AML compliance and financial record-keeping requirements.
• KYC Documentation: Retained for a minimum of five (5) years following Account closure, or longer where required by applicable law or regulatory instruction.
• Customer Support Records: Retained for three (3) years from the date of the last interaction, unless required for ongoing dispute resolution.
• Responsible Gambling Records: Self-exclusion and problem gambling records are retained in accordance with responsible gambling best practice, which may extend beyond Account closure to prevent circumvention of exclusion tools.
• Marketing Consent Records: Retained for as long as the consent is active, and for three (3) years thereafter for record-keeping purposes.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in a manner that prevents re-identification.

9 International Data Transfers

Given the international nature of online gaming operations, your Personal Data may be transferred to, stored in, or processed in jurisdictions outside Malaysia. Such transfers may occur in connection with our payment processing partners, KYC verification providers, game content providers, and cloud hosting infrastructure.

Where we transfer Personal Data to recipients in countries that may not provide equivalent levels of data protection to those applicable in Malaysia, we implement appropriate safeguards, which may include:

• Contractual clauses that bind the recipient to process your data to a standard consistent with applicable data protection law;
• Requirements that the recipient maintain adequate technical and organisational security measures;
• Transfer only to recipients whose countries have been assessed as providing adequate data protection by the relevant regulatory authority.

If you require further information about the specific safeguards in place for international data transfers, please contact us at the details provided in Section 15.

10 Your Rights as a Data Subject

Under the Personal Data Protection Act 2010 (Malaysia) and applicable data protection principles, you hold the following rights with respect to your Personal Data processed by maggie8:

To exercise any of the above rights, please submit your request in writing to [email protected] with the subject line "Data Subject Request — [Right Type]". We will acknowledge receipt within five (5) business days and fulfil your request within thirty (30) calendar days, subject to any applicable legal exemptions or identity verification requirements.

11 Minors & Age Restriction

The Platform is strictly prohibited to persons under the age of twenty-one (21) years. maggie8 does not knowingly collect or process Personal Data relating to individuals who are under 21 years of age.

During the registration process, all users are required to confirm that they are aged 21 or above, and KYC verification is used to verify date of birth against government-issued identification. Where maggie8 becomes aware that Personal Data has been collected from a person under 21, that data will be deleted immediately, the Account will be closed, and any deposits will be returned subject to verification.

If you have reason to believe that a minor has registered on the Platform or provided Personal Data to maggie8, please notify us immediately at [email protected] so that we may take appropriate action without delay.

12 Data Security

maggie8 implements a comprehensive range of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the Platform is encrypted using industry-standard SSL/TLS protocols;
• Data-at-Rest Encryption: Sensitive Personal Data, including KYC documentation and financial records, is encrypted in storage;
• Access Controls: Strict role-based access controls ensure that only authorised personnel may access Personal Data, on a need-to-know basis;
• Two-Factor Authentication (2FA): Available to all Players to provide an additional layer of Account security;
• Intrusion Detection Systems: Continuous monitoring of Platform infrastructure for suspicious activity, unauthorised access attempts, and anomalous behaviour;
• Regular Security Audits: Periodic independent security assessments and penetration testing to identify and remediate vulnerabilities;
• Staff Training: All personnel with access to Personal Data receive regular data protection and security training.

While maggie8 takes every reasonable precaution to protect your data, no online system can guarantee absolute security. In the event of a data breach that is likely to affect your rights and freedoms, we will notify you and any applicable regulatory authority in accordance with our legal obligations.

13 Third-Party Services & Links

The Platform may display or reference third-party services, including game content providers, payment processors, and analytics tools. This Privacy Policy applies solely to Personal Data processed by maggie8 in connection with the Platform. We are not responsible for the privacy practices of third-party service providers, who operate under their own privacy policies.

All third-party Data Processors engaged by maggie8 are required to enter into data processing agreements that obligate them to:

• Process Personal Data only on maggie8's documented instructions;
• Implement appropriate technical and organisational security measures;
• Not sub-process Personal Data without prior authorisation from maggie8;
• Return or securely delete Personal Data upon termination of the processing relationship.

The Platform does not embed social media plugins or third-party advertising trackers that would transmit your Personal Data to social networks or advertising networks without your knowledge.

14 Policy Amendments

maggie8 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, legal obligations, or the Platform's functionality. Where changes are material, we will provide reasonable advance notice through the Platform interface or via email to the address associated with your Account.

The effective date at the top of this Policy indicates the date on which the current version came into force. Your continued use of the Platform following publication of an updated Privacy Policy constitutes your acknowledgement of, and agreement to, the revised terms.

We recommend that you review this Policy periodically to remain informed of how maggie8 handles your Personal Data and any changes to your rights or our obligations.

15 Contact & Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data by maggie8, please contact our Data Compliance Team using the details below:

• Email: [email protected]
• Subject Line: Please use "Privacy Enquiry" or "Data Subject Request" as appropriate
• Live Chat: Available 24/7 through the Platform interface
• Response Time: Written enquiries acknowledged within five (5) business days; substantive responses within thirty (30) calendar days.

If you are not satisfied with our response to your privacy enquiry or complaint, you have the right to escalate the matter to the relevant data protection authority in your jurisdiction. For Malaysian residents, this may include the Personal Data Protection Commissioner's Office under the auspices of the Ministry of Communications and Digital.