Maggi88 Privacy Policy — Our Commitment to Protecting the Personal Data of Malaysian Members

Maggi88 ("Platform", "We") respects the privacy of every member and visitor to our platform. This Privacy Policy explains our practices regarding the collection, use, disclosure, and protection of your personal information when you use the Maggi88 platform through the maggi88.asia website and all related services.

We are committed to complying with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international data protection standards. This policy is written in clear, plain language so you genuinely understand what happens with your data — not just a legal document that is difficult to read.

Maggi88 collects personal information from you through three main channels — information you provide directly, information collected automatically as you use our platform, and information we receive from authorised third parties.

Information You Provide Directly:

• Full name, username, and password upon account registration
• An active Malaysian phone number for account verification and communications
• Email address for account notifications, transactions, and promotions
• Date of birth for age verification (18 and above)
• Bank account or e-wallet details (Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay, FPX Maybank2u, CIMB Clicks account numbers) for deposit and withdrawal purposes
• Identity document (national ID card, passport) when identity verification is required for large transactions

Automatically Collected Information:

• IP address and device information (device type, operating system, web browser)
• Access log data including pages visited, access times, and session duration
• Betting records and in-platform gaming activity
• Cookie data and similar tracking technologies (detailed further in Section 5)
• General location information based on IP address (state or city in Malaysia)

Maggi88 uses your personal data only for legitimate purposes directly related to the services we offer. We never sell your data to third parties for commercial gain. The primary purposes for which your data is used are as follows:

• Account management — to create, maintain, and secure your Maggi88 account
• Transaction processing — to process deposits, withdrawals, and all financial transactions you carry out through local Malaysian payment methods such as Touch 'n Go, DuitNow, GrabPay, and FPX
• Identity and age verification — to verify that you meet the minimum age requirement of 18 years and to comply with anti-money laundering (AML) procedures
• Fraud detection and security — to detect suspicious activity, protect your account from unauthorised access, and maintain the integrity of the Maggi88 platform
• Service provision — to display Sports Betting content (Malaysia Super League football, badminton, MPL e-sports, and more), odds, and statistics relevant to you
• Customer support — to assist you when you reach out to the maggi88 support team via live chat or email
• Marketing communications — to send you information about promotions, bonuses, and platform updates that may be of interest to you (subject to your communication preferences)
• Platform improvement — to analyse usage patterns and improve the overall user experience on Maggi88
• Legal compliance — to fulfil the legal and regulatory obligations applicable to our operations

Maggi88 does not sell, rent, or trade your personal data to any third party for their own marketing purposes. We only share your data under the following limited circumstances, and only to the extent necessary for the stated purpose:

• Payment service providers — Malaysian payment gateway providers (including processors for Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay, FPX Maybank2u, and CIMB Clicks) receive the transaction information required to process your payments. These providers are bound by strict confidentiality agreements.
• IT service providers — companies that provide infrastructure, cloud computing, and cybersecurity services to maggi88. All such providers sign data processing agreements obligating them to protect your data in accordance with our standards.
• Legal authorities — when required by law, court order, or direction from a lawful enforcement agency. maggi88 will notify you of any such request wherever possible, unless prohibited from doing so by law.
• Anti-fraud authority — to prevent and detect financial fraud, money laundering, or other illegal activities involving our platform.
• Business transfer — if Maggi88 is involved in a merger, acquisition, or asset transfer, your data may be transferred as part of that transaction. You will be notified before your data becomes subject to a different privacy policy.

In all instances of data sharing, Maggi88 ensures that recipients comply with data protection standards equal to or higher than our own. We never share your data with parties that have no legitimate need to access it.

Maggi88 invests seriously in security infrastructure to ensure your personal and financial data is protected at the highest level at all times. This goes beyond mere compliance — it is our moral responsibility to the more than 500,000 members who trust us with their information.

• 256-bit SSL Encryption — all data transmitted between your browser and Maggi88's servers is encrypted using TLS 1.3 with 256-bit encryption, the same standard used by Malaysia's leading banks
• Encrypted data storage — sensitive information such as passwords (stored as irreversible hashes) and financial data is held in encrypted databases with strict access controls
• 24/7 security monitoring — Maggi88's cybersecurity team continuously monitors our systems to detect any threats or unusual activity
• Two-factor authentication (2FA) — we provide and encourage the use of 2FA on all accounts to add an extra layer of security beyond just a password
• Periodic penetration testing — Maggi88's systems undergo regular security testing by independent security experts to identify and address any vulnerabilities before they can be exploited
• Internal access controls — only staff with a legitimate need who have undergone thorough background checks are granted access to members' personal data, and all access is logged and monitored

The Maggi88 platform uses cookies and similar tracking technologies to enhance your experience, keep your account secure, and understand how members use our platform. Cookies are small text files stored on your device when you visit our platform.

Below are the types of cookies we use:

You can manage cookie usage through your web browser settings. However, disabling essential cookies may affect your ability to log in and use the maggi88 platform. For instructions on managing cookies in your browser, refer to your browser's help documentation.

As a Maggi88 member and data subject under Malaysia's PDPA, you have important rights regarding the personal data we hold about you. Maggi88 respects and facilitates the exercise of these rights:

• Right to access — you have the right to request a copy of the personal data Maggi88 holds about you. Data access requests can be submitted to support@maggi88.asia and will be processed within 14 business days.
• Right to rectification — if any of your personal data in Maggi88's systems is inaccurate or out of date, you have the right to request a correction. Basic details such as your phone number and email can be updated directly in your account settings.
• Right to erasure — under certain circumstances, you may request maggi88 to delete your personal data. Please note that some data must be retained to fulfil our legal obligations even after account closure.
• Right to restrict processing — you may request that Maggi88 restrict how we process your data in certain circumstances, such as while a dispute about data accuracy is being resolved.
• Right to object — you may object to the processing of your data for direct marketing purposes at any time by contacting us or updating your communication preferences in your account.
• Right to data portability — you have the right to receive your personal data in a machine-readable format for transfer to another service provider should you choose to do so.

Maggi88 does not retain your personal data for longer than is necessary for the purposes described in this policy. Our data retention periods are as follows:

• Active account data — retained for as long as your account is active with maggi88 and for a reasonable period after account closure to allow for the resolution of any outstanding disputes
• Financial transaction records — retained for a minimum of 7 years from the transaction date to comply with anti-money laundering obligations and audit requirements
• Customer support communication records — retained for 3 years to assist in resolving any subsequent disputes
• Access and security log data — retained for 90 days for fraud detection and system security purposes
• Marketing Data — retained until you withdraw consent or close your account

Once the retention period expires, your data will be securely deleted or anonymised so that it can no longer be linked to you. The data deletion process follows strict security procedures to ensure data cannot be recovered after deletion.

If you have any questions, concerns, or requests regarding this Privacy Policy or how Maggi88 handles your personal data, we encourage you to reach out to us through the following channels:

• Privacy email: support@maggi88.asia — please state "Privacy Enquiry" in the subject line to ensure your request is handled by the right team
• Live chat platform: Click the chat icon in the bottom right corner of the Maggi88 platform — our support team is available 24/7 and can direct your privacy request to the relevant team

We are committed to responding to all privacy-related enquiries within 14 business days. For more complex cases requiring further review, we will notify you of the estimated resolution timeline and provide regular updates.

As an online platform, Maggi88 may need to transfer your personal data to servers or service providers operating outside Malaysia in certain circumstances — for example, for cloud computing services, international payment processing, or data backup facilities. When such transfers occur, Maggi88 ensures that:

• The recipient country provides a level of data protection equivalent to Malaysia's PDPA
• Appropriate data protection agreements have been signed with overseas data recipients
• Data transfers are carried out only when strictly necessary and to the minimum extent required
• Any transferred data remains subject to all the protections set out in this Privacy Policy

Maggi88 prioritises the use of local Malaysian service providers wherever possible, to minimise the need for cross-border data transfers and to keep your data within Malaysian legal jurisdiction to the greatest extent practicable.

Maggi88 may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform improvements. When we make material changes, we will:

• Updating the "Last Updated" date at the top of this document
• Sending email notifications to all registered members regarding important changes
• Displaying an in-platform notice for a minimum of 30 days following any changes

We encourage you to review this page periodically to stay informed about how Maggi88 protects your data. Your continued use of the Maggi88 platform following any changes to this Privacy Policy will be considered your acceptance of those changes.