ma888 Privacy Policy

1. Introduction

ma888 ("we", "us", "our", "ma888") is committed to protecting the privacy and personal data of all players and visitors who use the ma888 online gaming platform at ma888.org (the "Platform"). This Privacy Policy ("Policy") describes the categories of personal data we collect, the purposes for which we process that data, the parties with whom we may share it, and the rights you have in respect of your personal data.

This Policy applies to all players registered with ma888, visitors browsing the Platform, and any individuals who contact ma888 via our support channels. It should be read alongside our Terms & Conditions. By accessing or using the ma888 Platform, you acknowledge that you have read and understood this Policy.

ma888 serves players across Malaysia, including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, and other regions. Where applicable, we process personal data in compliance with the Malaysian Personal Data Protection Act 2010 (PDPA) and other applicable data protection frameworks.

2. Personal Data We Collect

ma888 collects personal data through several channels, including account registration, platform use, payment processing, and communications with our support team. The categories of personal data we collect include:

2.1 Data You Provide Voluntarily

You provide identity and contact data when you register an account, complete identity verification, submit a support request, or update your account settings. Providing accurate data is a condition of continued use of the ma888 Platform, as described in our Terms & Conditions.

2.2 Data Collected Automatically

When you access the ma888 Platform, we automatically collect technical and usage data through server logs, cookies, and similar technologies. This data is used for platform security, fraud prevention, and service improvement purposes.

3. How We Use Your Personal Data

ma888 uses the personal data we collect for the following purposes:

• Account administration: Creating and managing your ma888 account, verifying your identity and age (21+ requirement), and maintaining accurate account records.
• Service delivery: Providing access to games, sportsbook, live casino, and all platform features associated with your registered account.
• Payment processing: Processing deposits and withdrawals via Touch 'n Go eWallet, Boost, Maybank, CIMB, Public Bank, and FPX, and maintaining financial transaction records.
• Identity verification (KYC): Satisfying regulatory obligations to verify player identity before processing withdrawals or as required by our licensing authority.
• Fraud prevention and security: Detecting and preventing fraudulent activity, money laundering, multi-accounting, and other prohibited conduct described in our Terms & Conditions.
• Regulatory compliance: Complying with obligations under our international gaming licence, applicable anti-money laundering (AML) regulations, and other applicable law.
• Responsible gaming: Monitoring player behaviour for indicators of problem gambling and applying responsible gaming controls where appropriate.
• Customer support: Responding to player queries, complaints, and support requests in a timely and effective manner.
• Marketing communications: Sending you promotional offers, bonus notifications, and platform updates where you have consented or where a legitimate interest applies, subject to your right to opt out at any time.
• Platform improvement: Analysing usage patterns to improve game selection, user experience, and platform performance.

4. Legal Basis for Processing

ma888 processes your personal data on one or more of the following legal bases:

• Contract performance: Processing necessary to perform our obligations under the account agreement with you, including service delivery and payment processing.
• Legal obligation: Processing required to comply with our regulatory and licensing obligations, including AML checks, age verification, and KYC requirements.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement, where our interests are not overridden by your rights.
• Consent: Processing for direct marketing communications and non-essential cookies, where you have provided explicit consent. You may withdraw consent at any time.

5. Data Sharing and Disclosure

ma888 does not sell your personal data to third parties. We may share your data with the following categories of recipients, only as necessary for the stated purposes:

• Payment service providers: Touch 'n Go eWallet, Boost, Maybank, CIMB, Public Bank, and FPX operators, for transaction processing purposes.
• Identity verification providers: Third-party KYC and AML service providers engaged to assist with regulatory verification obligations.
• Game providers: Licensed game software providers who may receive certain technical data necessary for game delivery. Game providers are contractually bound to process data only for agreed purposes.
• Technology and infrastructure providers: Cloud hosting, security, and platform technology partners who process data on our behalf under data processing agreements.
• Regulatory and law enforcement authorities: Where required by applicable law, court order, or regulatory authority, ma888 may disclose personal data without prior notice to you.
• Responsible gaming organisations: Where a player has self-excluded, relevant data may be shared with industry self-exclusion registers in accordance with regulatory requirements.

All third-party data processors engaged by ma888 are subject to contractual data protection obligations and are permitted to use personal data only for the specified purpose.

6. Data Retention

ma888 retains personal data for as long as is necessary to fulfil the purposes described in this Policy, or as required by applicable law and regulatory obligations. General retention periods applicable to ma888 player data are as follows:

• Active account data: Retained for the duration of the account relationship.
• Closed account data: Retained for a minimum of five (5) years following account closure, in accordance with AML and gaming regulatory requirements.
• Financial transaction records: Retained for a minimum of seven (7) years from the date of the transaction.
• Support communications: Retained for three (3) years from the date of the interaction, unless forming part of a longer dispute or regulatory record.
• Self-exclusion records: Retained for the duration of the exclusion period and for a minimum of five (5) years thereafter.

Where there is no overriding legal or regulatory obligation, ma888 will securely delete or anonymise personal data that is no longer required.

7. Security Measures

ma888 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL encryption for all data transmitted between your device and the ma888 Platform.
• Role-based access controls restricting internal access to personal data to authorised personnel only.
• Two-factor authentication options available to players for account-level security.
• Regular security assessments and penetration testing of Platform infrastructure.
• Incident response procedures to address any data security breach in a timely manner.

Notwithstanding these measures, no online platform can guarantee absolute security. You are responsible for maintaining the security of your ma888 login credentials and should contact support immediately if you suspect a breach of your account.

8. Cookies and Tracking Technologies

ma888 uses cookies and similar tracking technologies on the Platform. Cookies are small text files placed on your device that allow us to recognise your browser, maintain your session, and analyse Platform usage.

8.1 Types of Cookies Used

• Strictly necessary cookies: Required for the Platform to function, including session management and login authentication. These cannot be disabled.
• Functional cookies: Remember your preferences such as language and display settings to improve your experience.
• Analytics cookies: Collect aggregated, anonymised data about how players use the Platform, used to improve performance and game selection.
• Security cookies: Assist in fraud detection and account security monitoring.

You can manage cookie settings through your browser preferences. Disabling certain cookies may affect the functionality of the ma888 Platform.

9. Your Data Rights

Subject to applicable law, you have the following rights in respect of the personal data ma888 holds about you:

• Right of access: Request a copy of the personal data ma888 holds about you.
• Right to rectification: Request correction of inaccurate or incomplete personal data.
• Right to erasure: Request deletion of your personal data where it is no longer necessary for the original purpose, subject to overriding legal retention obligations.
• Right to restrict processing: Request that we limit how we use your data in certain circumstances.
• Right to data portability: Receive your personal data in a structured, commonly used format where processing is based on consent or contract.
• Right to object: Object to processing based on legitimate interests, including direct marketing.
• Right to withdraw consent: Withdraw consent for consent-based processing (such as marketing emails) at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact the ma888 data team at [email protected]. We will respond within 30 days of receipt of a valid request. We may require identity verification before processing your request.

10. International Data Transfers

ma888's infrastructure and some of its third-party service providers may be located outside Malaysia. Where personal data is transferred internationally, ma888 ensures that appropriate safeguards are in place — including contractual data protection clauses — to provide a level of protection equivalent to that applicable in Malaysia under the PDPA. By using the ma888 Platform, you consent to such transfers subject to these safeguards.

11. Minors

The ma888 Platform is strictly prohibited for persons under 21 years of age. 21+ ma888 does not knowingly collect personal data from minors. If we become aware that personal data has been collected from a person under 21, we will take immediate steps to delete that data and close the associated account. If you believe a minor has registered on the Platform, please contact us immediately at [email protected].

12. Third-Party Links and Services

The ma888 Platform may contain references or navigation to affiliated services. This Policy applies solely to the ma888 Platform operated at ma888.org. ma888 is not responsible for the privacy practices of third-party game providers' standalone websites or any other external services. We encourage you to review the privacy policies of any third-party services you access independently of the ma888 Platform.

13. Updates to This Privacy Policy

ma888 may update this Privacy Policy from time to time to reflect changes in our data practices, Platform features, or applicable law. Material changes will be communicated to registered players via their registered email address or by prominent notice on the Platform. The effective date at the top of this page indicates when the current version came into force. We encourage you to review this Policy periodically. Your continued use of the ma888 Platform following a policy update constitutes your acceptance of the revised terms.

14. Contact and Complaints

For questions, requests, or concerns regarding this Privacy Policy or ma888's data processing practices, please contact our support team:

If you are unsatisfied with our response, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction. Malaysian players may refer to the Department of Personal Data Protection (JPDP) under the Ministry of Digital Malaysia.