🔐 mga888 Privacy Policy

This Privacy Policy applies to the mga888 online gaming and sports betting platform, accessible at mga888.co and all associated subdomains and mobile interfaces (collectively, the "Platform"). References to "mga888", "we", "us", "our" in this Policy refer to the operator of the mga888 platform.

mga888 acts as the data controller in respect of personal data collected from Members and visitors to the Platform. We are responsible for determining the purposes and means of processing that personal data in accordance with applicable international gaming authority data protection requirements and relevant data protection legislation.

If you have any questions, concerns, or requests regarding this Privacy Policy or the personal data we hold about you, please contact the mga888 support team via live chat (available 24/7 from every page of the Platform) or by email at [email protected].

mga888 collects the following categories of personal data from Members and, where applicable, from visitors to the Platform:

mga888 collects personal data through the following means:

• Direct provision: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting support, or updating your account settings;
• Automated collection: Technical data collected automatically during each session through cookies, server logs, and similar technologies as described in Section 7 of this Policy;
• Third-party sources: Identity and address verification data obtained from KYC verification service providers; fraud screening data from anti-fraud monitoring services; payment processing data from payment gateway providers including Touch n Go eWallet, Boost, Maybank, CIMB, and Public Bank.

mga888 does not collect personal data from social media platforms or data aggregators without the explicit consent of the data subject. Where data is received from third-party KYC or fraud-screening providers, it is used solely for the purposes of identity verification and fraud prevention as described in this Policy.

mga888 uses the personal data we collect for the following purposes:

• Account administration: Creating and maintaining your mga888 account, processing deposits and withdrawals, verifying your identity, and communicating with you about your account;
• Service delivery: Providing access to sports betting, live casino, slot games, and all other products available on the mga888 platform;
• KYC and regulatory compliance: Verifying your identity and age in compliance with applicable international gaming authority requirements; conducting anti-money laundering (AML) screening; retaining records as required by applicable regulation;
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, account takeover attempts, money laundering, and other prohibited conduct;
• Responsible gaming: Monitoring gaming patterns to identify potential problem gambling behaviour; administering self-exclusion requests and deposit limit configurations;
• Platform improvement: Analysing aggregated usage data to improve the performance, features, and user experience of the mga888 platform;
• Marketing communications: Where you have opted in, sending you promotional offers, bonus notifications, and other mga888 marketing communications. You may opt out at any time via your account settings.

mga888 processes your personal data on the following legal bases:

• Performance of a contract: Processing necessary to provide the mga888 platform services to you, including account administration, payment processing, and service delivery;
• Legal obligation: Processing required to comply with applicable law, including KYC verification, AML obligations, and regulatory record-keeping requirements;
• Legitimate interests: Processing for fraud prevention, platform security, and aggregated analytics — where such processing does not override your fundamental rights and freedoms;
• Consent: Processing for marketing communications, where you have provided explicit opt-in consent. You have the right to withdraw this consent at any time.

mga888 may share your personal data with the following categories of third parties, strictly for the purposes described in this Policy:

• KYC and identity verification providers: To verify your identity, date of birth, and address as required by applicable gaming authority requirements;
• Payment processors: Touch n Go eWallet, Boost, Maybank, CIMB, Public Bank, and other payment service providers, to process deposits and withdrawals. These providers process your financial data under their own privacy policies and applicable financial regulation;
• Anti-fraud and AML service providers: To screen transactions and account activity against fraud and money laundering risk databases;
• Gaming software providers: Game studios and platform providers whose products are available on mga888 may receive anonymised session data for game performance and RNG audit purposes. No personally identifiable information is shared with game providers without your consent;
• Regulatory and law enforcement authorities: Where required by applicable law, court order, or regulatory directive, mga888 will disclose personal data to the relevant authority. mga888 will notify affected Members of such disclosure where permitted by law to do so;
• Successors in business: In the event of a merger, acquisition, or sale of all or part of mga888's business operations, your personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy.

All third-party service providers engaged by mga888 are subject to contractual data processing obligations consistent with applicable data protection requirements. mga888 does not transfer personal data to jurisdictions that do not provide an adequate level of data protection without implementing appropriate safeguards.

mga888 uses cookies and similar tracking technologies on the Platform for the following purposes:

• Essential cookies: Required for the Platform to function correctly — including session management, login state persistence, and security tokens. These cookies cannot be disabled without impairing your ability to use the Platform;
• Performance cookies: Used to collect anonymised data about how Members navigate and use the Platform, enabling mga888 to identify and improve performance issues;
• Functional cookies: Used to remember your preferences, such as language settings and game display options, to personalise your experience on subsequent visits;
• Analytics cookies: Used to aggregate usage statistics for internal platform improvement purposes. Aggregated analytics data does not identify individual users.

You may manage your cookie preferences through your browser settings. Blocking essential cookies will affect the functionality of the mga888 Platform. For detailed information on the specific cookies used, please contact mga888 support.

mga888 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to any mandatory retention periods imposed by applicable law or regulation. The following indicative retention periods apply:

• Account data and KYC records: Retained for a minimum of five (5) years following account closure, as required by applicable AML and gaming authority record-keeping obligations;
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction;
• Support communications: Retained for three (3) years from the date of the last communication, unless a longer period is required in connection with an ongoing dispute or investigation;
• Technical and session data: Retained for twelve (12) months from collection, unless required for longer in connection with a fraud investigation or security incident;
• Marketing preferences: Retained until you withdraw consent or close your account, whichever occurs first.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be attributed to an identifiable individual.

Subject to applicable law and the limitations necessary to comply with mga888's legal obligations, you have the following rights in respect of your personal data:

• Right of access: You may request a copy of the personal data mga888 holds about you;
• Right to rectification: You may request correction of inaccurate or incomplete personal data;
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to mandatory retention requirements;
• Right to restrict processing: You may request that mga888 restricts its processing of your personal data in certain circumstances;
• Right to object: You may object to processing based on legitimate interests, including direct marketing;
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, please contact the mga888 support team via live chat or email. mga888 will respond to verified requests within a reasonable period consistent with applicable data protection requirements. We may require identity verification before processing a data subject rights request.

mga888 implements technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption on all data transmissions between your device and mga888 servers;
• Encryption of sensitive data fields at rest in mga888 databases;
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis;
• Regular independent security audits and penetration testing of the mga888 platform infrastructure;
• Brute force protection and anomalous login detection on all member accounts;
• Staff training on data handling obligations and information security best practices.

While mga888 employs industry-standard security measures, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in risk to Members' rights, mga888 will notify affected Members and relevant authorities as required by applicable law.

mga888 implements age verification measures during the registration process and through KYC verification procedures to prevent access by minors. Where mga888 becomes aware that personal data has been collected from an individual under the age of 21, we will immediately close the associated account, delete the personal data, and void any associated wagers or transactions in accordance with our Terms & Conditions.

If you have reason to believe that a minor has registered an account on mga888, please contact our support team immediately via live chat or by email at [email protected].

mga888 reserves the right to update this Privacy Policy at any time. Where changes are material, mga888 will provide reasonable notice to Members via email or a prominent Platform notification prior to the changes taking effect. The date of the most recent revision is displayed at the top of this Policy. Continued use of the mga888 platform following any update constitutes acceptance of the revised Privacy Policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or mga888's data handling practices, please contact us:

• Live Chat: Available 24/7 from every page of the mga888 platform — look for the chat icon at the bottom right of your screen
• Email: [email protected]

mga888 is committed to resolving data protection queries promptly and transparently. If you are not satisfied with our response to a data protection concern, you may escalate your complaint to the applicable data protection supervisory authority.