MA888 Privacy Policy — Your Personal Data Protection

Welcome to the ma888 Privacy Policy. This document outlines our commitment to your privacy and explains how we handle the personal information you provide when using the ma888 platform.

MA888 ("we", "Platform") operates as an online casino entertainment platform catering to adult users in Malaysia. We understand that your trust is our most valuable asset, and protecting your personal data is a responsibility we take seriously.

This Privacy Policy is drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international data protection standards. By using the MA888 platform, you agree to the practices described in this Privacy Policy. Please read this document carefully together with Terms and Conditions us.

We only collect data that is strictly necessary to provide a secure, compliant, and high-quality service. The following are the categories of data we collect:

We do not collect sensitive data such as health information, religious beliefs or political affiliations. Your data is collected only through lawful means — either directly from you, automatically through your use of the platform, or from trusted third parties such as registered payment providers.

Every piece of data we collect has a clear and legitimate purpose. ma888 uses your personal data for the following purposes:

• Account Management: Creating, verifying and maintaining your account securely, including the KYC process required by law.
• Transaction Processing: Processing deposits, withdrawals and all other financial transactions accurately and securely through legitimate payment channels.
• Fraud Prevention: Detecting and preventing suspicious activity, including unauthorised access, money laundering and bonus abuse.
• Legal Compliance: Fulfilling obligations under the PDPA 2010, anti-money laundering (AML) laws and relevant regulatory requirements.
• Service Improvement: Analysing usage patterns to improve platform features, reduce response times and deliver a smoother gaming experience.
• Communication: Sending important account notices, security alerts, promotional updates (with your consent) and customer support responses.
• Responsible Gaming: Monitoring gaming patterns to identify signs of problem gambling and offering appropriate self-control tools.

MA888 does not sell, rent or disclose your personal data to any third party for commercial purposes. We only share data in the following limited situations:

• Payment Providers: Required transaction data is shared with registered payment providers such as DuitNow, FPX, Touch 'n Go eWallet, GrabPay, and Boost solely for the purpose of processing your transactions.
• Game Software Providers: Required game session information is shared with our game software providers to ensure the integrity of every game round.
• Authorities: We may be required to disclose data to law enforcement agencies, regulatory bodies or courts when mandated by Malaysian law or a valid court order.
• Technology Providers: Technical partners such as cloud service providers and security systems are bound by strict confidentiality agreements and only access the data necessary for their specific functions.
• Audit and Compliance: Independent auditing bodies that verify RNG fairness and platform security compliance may access anonymized statistical data.

All third parties with whom we share data are bound by strict data protection agreements and are required to comply with security standards equal to or exceeding those of ma888.

MA888 invests seriously in cutting-edge security infrastructure to ensure your data is always protected. Our technical and organisational security measures include:

• 256-bit SSL Encryption: All data transmitted between your device and ma888 servers is encrypted using the 256-bit SSL standard, the same standard adopted by leading banking institutions.
• Secure Password Storage: Your password is never stored in plain text. We use strong one-way hashing algorithms with random salting.
• Two-Factor Authentication (2FA): We provide 2FA as an additional layer of protection for your account, ensuring only you can access it even if your password is compromised.
• 24/7 Monitoring: Our intrusion detection system operates around the clock to identify and block any unauthorised access attempts in real time.
• Data Segregation: Member funds are held separately from company operating funds in distinct accounts to safeguard your financial security.
• Regular Security Audits: The ma888 platform undergoes regular independent security audits by certified third-party cybersecurity experts.

MA888 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

• Essential Cookies: Required for core platform functions such as login session authentication and security settings. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collecting information about how you interact with the platform to help us identify areas for improvement. This data is aggregated and non-identifiable.
• Functional Cookies: Storing your preferences such as language, display theme and other settings so you do not need to reconfigure them each time you log in.
• Analytics Cookies: Used to understand general traffic patterns and user behavior for the purpose of continuous improvement of the MA888 platform.

You may manage or disable cookies through your web browser settings. Please note, however, that disabling certain cookies may affect some platform functionality.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and MA888's policy, you have the following rights regarding your personal data:

To exercise any of the above rights, please contact the ma888 support team via live chat within the platform or by email. We will process your request within 30 days of receipt.

MA888 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected or to comply with applicable legal requirements. The following are our general data retention guidelines:

• Active Account Data: Retained for the duration your account is active and for a reasonable period after account closure for dispute and audit purposes.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysian tax and anti-money laundering legal requirements.
• KYC Data: Retained for a minimum of 5 years after the business relationship ends, in line with AMLA 2001 requirements.
• Security Logs: Retained for 12 months to assist with security incident investigations if required.
• Marketing Data: Retained until you withdraw consent to receive marketing communications.

When data is no longer required, we will securely delete or anonymize it in a manner that ensures it cannot be re-identified.

MA888 is a platform intended exclusively for adults aged 18 and above. We do not knowingly collect, process or store any personal data from children or individuals under the age of 18.

All membership applicants must complete an age verification process during registration. Should we discover that a minor's personal data has been collected without valid parental or guardian consent, we will take immediate steps to delete that data and close the account in question.

MA888 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our practices, updated legal requirements or platform improvements.

When we make significant changes, we will provide clear notice via:

• In-platform notice upon your next login
• Email to the address registered to your account
• Updating the "Last Updated" date at the top of this page

Your continued use of the ma888 platform after any amendments are published will be deemed as your acceptance of the updated Privacy Policy. We encourage you to review this page periodically.

If you have any questions, concerns or complaints regarding this Privacy Policy or how we handle your personal data, the MA888 team is ready to assist.

• Live Chat: The fastest way — accessible directly within the MA888 platform, available 24/7.
• Email: [email protected] — we aim to respond within 48 business hours.
• Official Complaints: For formal written complaints regarding data protection, please state "Privacy Complaint" in your email subject line. We will investigate and respond within 14 business days.

If you are not satisfied with our response, you also have the right to lodge a complaint with Malaysia's Personal Data Protection Department (PDPD) as the responsible regulatory authority.