Section 1
Introduction
maggi88 ("the Operator", "we", "us", or "our") operates the online gaming platform at maggi88.net (the "Platform") and is committed to protecting the privacy and personal data of all registered players and Platform visitors ("you" or "the User"). This Privacy Policy sets out, in clear terms, what personal data we collect, why we collect it, how it is used, how long it is retained, and what rights you hold in relation to your data.
This Privacy Policy is incorporated by reference into the maggi88 Terms & Conditions. By registering for, accessing, or continuing to use the maggi88 Platform, you acknowledge that you have read, understood, and agreed to this Privacy Policy. If you do not agree to the terms of this Privacy Policy, you must discontinue use of the Platform.
maggi88 handles personal data in accordance with applicable data protection regulations and the standards set by the international gaming authority under which the Platform operates. Our data practices reflect the expectations of Malaysian players and align with best-practice standards across the online gaming industry in Southeast Asia.
Section 2
Personal Data We Collect
maggi88 collects the following categories of personal data from registered players and Platform visitors:
- Identity Data: Full legal name, date of birth, nationality, Malaysian identity card (MyKad) number or passport number, and a photograph or scan of the relevant identity document for KYC purposes.
- Contact Data: Registered email address, Malaysian mobile phone number, and residential address.
- Financial Data: Bank account details, e-wallet identifiers (Touch 'n Go, Boost, GrabPay), FPX transaction references, deposit and withdrawal transaction history, and wallet balance information.
- Account & Gaming Data: Username, account creation date, login history, game session records, betting history, bonus claim records, and responsible gaming tool settings.
- Technical Data: IP address, device type, operating system, browser type and version, screen resolution, time zone, and session duration data collected automatically during Platform use.
- Communications Data: Records of any correspondence between you and maggi88 support, including live chat transcripts and email exchanges.
- Preference Data: Game preferences, language settings, notification preferences, and marketing opt-in or opt-out status.
Section 3
How We Collect Your Data
maggi88 collects personal data through the following channels:
- Direct Collection: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or participating in a promotion.
- Automated Collection: Technical and session data collected automatically via cookies, web beacons, pixel tags, and server logs when you visit or interact with the Platform.
- Third-Party Sources: Identity and address verification data from KYC and anti-money laundering service providers; payment confirmation data from payment processors including FPX, Touch 'n Go eWallet, Boost, and DuitNow; fraud detection signals from security service providers.
maggi88 does not purchase contact lists or acquire personal data from data brokers or marketing aggregators for the purpose of targeting individuals who have not interacted with the Platform.
Section 4
How We Use Your Personal Data
maggi88 processes your personal data for the following purposes:
- To register and maintain your maggi88 player account, including verifying your identity and eligibility to use the Platform.
- To process deposits, withdrawals, and all financial transactions in MYR through your chosen payment methods.
- To fulfil our Know Your Customer (KYC) and Anti-Money Laundering (AML) obligations under applicable gaming regulations.
- To deliver the gaming services you have requested, including casino games, live casino, sportsbook, and promotional offers.
- To communicate with you about your account, transactions, promotions you have opted into, and important Platform updates.
- To detect, investigate, and prevent fraudulent activity, collusion, money laundering, and other prohibited conduct.
- To enforce our Terms & Conditions and Responsible Gaming Policy, including age verification (21+) and self-exclusion management.
- To improve the Platform's performance, user experience, and product offering through aggregated, anonymised analytics.
- To comply with legal obligations and respond to requests from regulatory or law enforcement authorities where required by law.
Section 5
Legal Basis for Processing
maggi88 processes your personal data on the following legal bases:
- Contractual Necessity: Processing required to fulfil the agreement with you as a registered player — including account management, game delivery, and transaction processing.
- Legal Obligation: Processing required to comply with KYC, AML, responsible gaming, and regulatory reporting obligations imposed by the international gaming authority under which maggi88 operates.
- Legitimate Interests: Processing for fraud prevention, Platform security, abuse detection, and improvement of services where such interests are not overridden by your rights and interests.
- Consent: Processing for optional marketing communications and non-essential cookies, where you have provided explicit, revocable consent.
Section 6
Data Sharing & Disclosure
maggi88 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. Personal data may be shared with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data processing agreements:
- Payment Processors: Maybank, CIMB, Public Bank, Hong Leong Bank, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, and FPX — solely for the purpose of processing your financial transactions.
- KYC & AML Service Providers: Third-party identity verification and fraud screening services engaged to support regulatory compliance obligations.
- Game Software Providers: Certified casino and sportsbook software providers may receive limited session and account data necessary to deliver game functionality and resolve disputes.
- IT & Security Service Providers: Cloud infrastructure, cybersecurity, and platform maintenance providers operating under strict confidentiality obligations.
- Regulatory & Law Enforcement Authorities: Where maggi88 is legally obliged or has a regulatory duty to disclose personal data — for example, in response to a lawful court order or regulatory investigation.
Section 7
Data Retention
maggi88 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. Specifically:
- Account and identity data is retained for a minimum of five (5) years following account closure, in compliance with AML record-keeping obligations.
- Financial transaction records are retained for a minimum of seven (7) years for audit and regulatory purposes.
- Gaming session data and betting history are retained for five (5) years following the last active session.
- Support correspondence is retained for three (3) years following resolution of the relevant matter.
- Marketing preference data and consent records are retained for the duration of your account plus three (3) years.
Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised.
Section 8
Cookies & Tracking Technologies
maggi88 uses cookies and similar tracking technologies (including web beacons and local storage) to operate and improve the Platform. Cookies are small text files stored on your device when you visit the Platform. The categories of cookies we use are:
- Strictly Necessary Cookies: Essential for Platform operation — authentication, session management, security, and fraud prevention. These cannot be disabled.
- Performance Cookies: Collect anonymised data on how players interact with the Platform, which pages are visited most frequently, and where errors occur. Used to improve Platform performance.
- Functional Cookies: Remember your preferences (language, game lobby layout, notification settings) to personalise your Platform experience.
- Analytics Cookies: Used internally by maggi88 to analyse aggregated usage patterns. No personal data is shared with external analytics platforms for advertising purposes.
You may manage cookie preferences through your browser settings. Note that disabling non-essential cookies may affect some Platform functionality. Strictly necessary cookies cannot be rejected without ceasing use of the Platform.
Section 9
Security Measures
maggi88 implements technical and organisational security measures proportionate to the risks associated with processing personal data on a gaming platform. These measures include:
- 256-bit Transport Layer Security (TLS/SSL) encryption for all data transmitted between your device and maggi88 servers — the same encryption standard employed by leading Malaysian financial institutions.
- Two-Factor Authentication (2FA) available to all registered players to protect account access beyond username and password credentials.
- IP monitoring and anomaly detection systems that flag and block unusual access patterns, including logins from unrecognised devices or unusual geographic locations.
- Regular penetration testing and security audits conducted by independent third-party cybersecurity specialists.
- Role-based access controls within maggi88's internal systems limiting employee access to personal data on a strict need-to-know basis.
- Encrypted storage of sensitive data fields, including identity document numbers and financial account details.
While maggi88 employs robust security practices, no internet-based platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for notifying maggi88 immediately if you suspect unauthorised access to your account.
Section 10
Your Data Rights
Subject to applicable data protection law and maggi88's regulatory obligations, you have the following rights in relation to your personal data held by maggi88:
- Right of Access: Request a copy of the personal data maggi88 holds about you.
- Right to Rectification: Request correction of inaccurate or incomplete personal data.
- Right to Erasure: Request deletion of your personal data where there is no overriding legal basis for retention. Note that regulatory record-keeping obligations may preclude immediate deletion.
- Right to Restriction: Request that maggi88 restrict processing of your data in certain circumstances.
- Right to Data Portability: Receive your personal data in a structured, machine-readable format where processing is based on consent or contractual necessity.
- Right to Withdraw Consent: Where processing is based on consent (e.g., marketing communications), you may withdraw consent at any time without affecting the lawfulness of prior processing.
- Right to Object: Object to processing based on legitimate interests, including profiling for marketing purposes.
To exercise any of these rights, contact the maggi88 support team via live chat or at support@maggi88.net. maggi88 commits to responding to all data rights requests within thirty (30) days of receipt.
Section 11
Children's Privacy
The maggi88 Platform is strictly intended for persons aged 21 years and above. maggi88 does not knowingly collect, process, or retain personal data from individuals below the age of 21. Age verification is conducted at the point of registration and may be repeated at any time during the account lifecycle.
Where maggi88 becomes aware that personal data has been collected from a person under the age of 21 without verifiable parental consent (in jurisdictions where a lower age minimum applies), such data will be promptly deleted and the associated account will be closed. If you believe that a minor has registered on the Platform, please contact support immediately.
Section 12
International Data Transfers
Some of maggi88's service providers and game software partners may be located in jurisdictions outside Malaysia. Where personal data is transferred internationally, maggi88 ensures that appropriate safeguards are in place, including contractual data processing agreements requiring the receiving party to maintain data protection standards equivalent to those applied by maggi88 in respect of Malaysian player data.
maggi88 does not transfer personal data to any jurisdiction that does not provide an adequate level of data protection without first implementing appropriate transfer safeguards.
Section 13
Changes to This Privacy Policy
maggi88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, Platform functionality, or applicable legal requirements. Material changes will be notified to registered players via email or a prominent notice displayed on the Platform prior to the change taking effect.
Continued use of the maggi88 Platform following notification of a revised Privacy Policy constitutes acceptance of the updated terms. The date of the most recent revision is displayed at the top of this page. We encourage you to review this Privacy Policy periodically.
Section 14
Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by maggi88, please contact our support team:
- Live Chat: Available 24/7 through the maggi88 Platform
- Email: support@maggi88.net (plain text — not a clickable link)
maggi88 is committed to resolving all privacy-related enquiries promptly and transparently. If you are not satisfied with maggi88's response to your data rights request, you may escalate your complaint to the relevant data protection authority in your jurisdiction.