Section 1
1. Who We Are and How to Contact Us
maggie8 operates the online gaming and sports betting platform accessible at maggie8.win. In the context of this Privacy Policy, "maggie8", "we", "us", and "our" refer to the platform operator responsible for the collection and processing of personal data submitted through or generated by use of the maggie8 platform.
If you have any questions, concerns, or requests regarding your personal data, you may contact our Data Protection team by email at [email protected]. Our support team is also available via live chat on the maggie8 platform 24 hours a day, seven days a week.
Section 2
2. What Personal Data We Collect
maggie8 collects the following categories of personal data from members and platform visitors:
- Identity Data: Full legal name, date of birth, nationality, and government-issued identification number (for KYC purposes).
- Contact Data: Email address, mobile phone number, and residential address.
- Financial Data: Payment method details (such as bank account number, Touch n Go eWallet identifier, or Boost account reference), transaction history, deposit and withdrawal records.
- Account Data: Username, password (stored in hashed form only), account preferences, game history, betting history, and bonus utilisation records.
- Technical Data: IP address, browser type and version, device type and identifier, operating system, time zone, and pages visited on the maggie8 platform.
- Usage Data: Information about how you use the maggie8 platform, including session duration, game interactions, and navigation patterns.
- Communications Data: Records of correspondence between you and maggie8 support, including live chat transcripts and email exchanges.
- Verification Documents: Copies of identity documents (such as MyKad, passport, or driving licence) and proof of address submitted for KYC verification purposes.
Section 3
3. How We Collect Your Data
maggie8 collects personal data through the following means:
- Direct interactions: When you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or update your account settings on maggie8.
- Automated technologies: When you access and navigate the maggie8 platform, technical data is collected automatically through cookies, server logs, and similar tracking technologies.
- Third-party payment processors: When you make a deposit or withdrawal, payment processing data is shared between maggie8 and the relevant payment service provider (such as Touch n Go, Boost, Maybank, CIMB, or Public Bank).
- Identity verification partners: Where maggie8 uses a third-party identity verification service to assist with KYC processes, that service may return verification results and associated data to maggie8.
Section 4
4. How We Use Your Personal Data
maggie8 uses your personal data for the following purposes:
- To register and maintain your maggie8 account;
- To process deposits and withdrawals in Malaysian Ringgit (MYR);
- To conduct identity verification and comply with applicable anti-money laundering (AML) and Know Your Customer (KYC) obligations;
- To personalise your experience on the maggie8 platform, including game recommendations and bonus offers relevant to your usage patterns;
- To provide customer support and respond to your enquiries;
- To detect, prevent, and investigate fraud, cheating, money laundering, and other prohibited conduct;
- To send you service-related communications, including account notifications, transaction confirmations, and security alerts;
- To send you marketing communications about maggie8 promotions and products, where you have consented to receive such communications or where we have a legitimate interest in doing so, subject always to your right to opt out;
- To monitor and improve the performance, security, and functionality of the maggie8 platform;
- To comply with applicable legal obligations and regulatory requirements.
Section 5
5. Legal Basis for Processing
maggie8 processes your personal data on the following legal bases:
- Contract performance: Processing necessary to provide the Gaming Services you have requested and to manage your maggie8 account;
- Legal obligation: Processing required to comply with applicable AML, KYC, and gaming regulatory requirements;
- Legitimate interests: Processing necessary for fraud prevention, platform security, and the improvement of Gaming Services, where such interests are not overridden by your fundamental rights;
- Consent: Processing for direct marketing communications, where you have provided explicit consent, and for the placement of non-essential cookies.
Section 6
6. Data Sharing and Third Parties
maggie8 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. maggie8 may share your personal data with the following categories of third parties only where strictly necessary:
- Payment service providers: Touch n Go eWallet, Boost, Maybank, CIMB, Public Bank, and other payment processors, for the purpose of processing your deposit and withdrawal transactions;
- Identity verification providers: Third-party KYC and AML screening services used to verify your identity and comply with regulatory obligations;
- Game software providers: Licensed gaming studios whose titles are available on the maggie8 platform may receive session data necessary to operate their games;
- IT and cloud service providers: Infrastructure and hosting partners who process data on behalf of maggie8 under data processing agreements that require them to maintain appropriate security standards;
- Regulatory authorities: Applicable gaming authorities, financial intelligence units, and law enforcement agencies where maggie8 is legally required to disclose information.
Section 7
7. International Data Transfers
Where maggie8 transfers personal data to recipients located outside Malaysia, we take appropriate steps to ensure that such transfers are conducted in accordance with applicable data protection standards. This may include the use of standard contractual clauses, adequacy decisions, or other approved transfer mechanisms. Where you have questions about the safeguards in place for a specific international transfer, you may contact our Data Protection team.
Section 8
8. Data Retention
maggie8 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulation. As a general guide:
- Account and transaction data is retained for a minimum of five years following account closure, in accordance with AML regulatory requirements;
- KYC verification documents are retained for a minimum of five years from the date of submission;
- Support communications are retained for up to three years;
- Marketing consent records are retained for as long as the consent remains active and for two years thereafter.
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with maggie8's data destruction procedures.
Section 9
9. Cookies and Tracking Technologies
The maggie8 platform uses cookies and similar tracking technologies to operate core platform functions, maintain session security, and analyse aggregate usage patterns. Cookies used by maggie8 fall into the following categories:
- Strictly necessary cookies: Essential for the platform to function, including session authentication and security tokens. These cannot be disabled without impairing platform functionality.
- Analytical cookies: Used to collect aggregate, anonymised data about how visitors navigate the maggie8 platform, enabling us to identify and resolve performance issues.
- Preference cookies: Used to remember your platform settings and language preferences across sessions.
maggie8 does not use third-party advertising or behavioural tracking cookies. You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will affect your ability to use the maggie8 platform.
Section 10
10. Your Data Rights
Subject to applicable law, you have the following rights in respect of your personal data held by maggie8:
- Right of access: You may request a copy of the personal data we hold about you;
- Right to rectification: You may request correction of inaccurate or incomplete personal data;
- Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our regulatory retention obligations;
- Right to restriction: You may request that we limit the processing of your data in certain circumstances;
- Right to data portability: You may request a structured, machine-readable copy of the data you have provided to maggie8;
- Right to object: You may object to processing based on legitimate interests, including direct marketing;
- Right to withdraw consent: Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of processing prior to withdrawal.
To exercise any of the above rights, please contact our Data Protection team via live chat or at [email protected]. We will respond to all verifiable requests within 30 days.
Section 11
11. Children and Minors
The maggie8 platform is strictly for adults aged 21 years and above. maggie8 does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been submitted by a person under 21, we will immediately suspend the associated account and delete the data in question. If you believe a minor has registered on maggie8, please contact our support team immediately.
Section 12
12. Security Measures
maggie8 implements technical and organisational security measures appropriate to the sensitivity of the personal data we process. These include TLS 1.3 encryption for all data in transit, AES-256 encryption for sensitive data at rest, access controls limiting internal data access to authorised personnel only, two-factor authentication for internal administrative systems, regular security assessments and penetration testing, and incident response procedures for data breach scenarios. No method of electronic transmission or storage is completely secure. In the event of a data breach affecting your personal data, maggie8 will notify you and the relevant authorities as required by applicable law.
Section 13
13. Changes to This Policy
maggie8 may update this Privacy Policy from time to time to reflect changes in our data practices or applicable legal requirements. The "Last updated" date at the top of this page will be revised accordingly. Where changes are material, maggie8 will notify registered members via email prior to the changes taking effect. Your continued use of the maggie8 platform following notification of material changes constitutes your acknowledgment of the updated Policy.
Section 14
14. Contact and Complaints
For any privacy-related queries, data rights requests, or complaints regarding maggie8's handling of your personal data, please contact us via live chat on the maggie8 platform (available 24/7) or by email at [email protected]. We take all privacy complaints seriously and will respond within 30 days. If you are not satisfied with our response, you may escalate your complaint to the relevant data protection or gaming regulatory authority in your jurisdiction.