Mahkota8 Privacy Policy – Malaysian User Data Protection

1Introduction – Who We Are and Why This Policy Matters

Mahkota8 is an online gaming platform operating under a recognized international license, providing sports betting, Live Casino, slots, bingo, and other games to users across Malaysia. We understand that when you register and use our platform, you are entrusting us with valuable personal information. That trust is a responsibility we take seriously.

This Privacy Policy is designed to give you full clarity on the types of information we collect, the purpose of collection, how it is used and stored, and your rights as a data owner. This document applies to all users who browse mahkota8.one, register an account, make a deposit, or use any services offered by Mahkota8.

By continuing to use the Mahkota8 platform after reading this Privacy Policy, you are deemed to have understood and agreed to how we handle your personal data. If you do not agree with any part of this policy, you are advised not to use our platform and to contact our support team to close your account if applicable.

2Personal Information We Collect

Mahkota8 collects various types of information from users to ensure the platform operates smoothly, securely, and in compliance with legal requirements. The information collected can be divided into two main categories: information you provide directly and information collected automatically when you use the platform.

Information You Provide Directly:

• Registration Information: Full name, email address, phone number, date of birth, and your preferred username.
• Identity Verification (KYC) Information: A copy of your MyKad or passport, a verification selfie, and a recent utility bill for address verification purposes.
• Financial Information: Bank account number, account holder name, and e-wallet details (Touch 'n Go eWallet, GrabPay, Boost) used for deposits and withdrawals.
• Communications: Any messages, enquiries, or complaints you submit via live chat, email, or other support channels.

Automatically Collected Information:

• Technical Data: IP address, browser type, operating system, screen resolution, and device information.
• Usage Data: Pages visited, session duration, games played, betting amounts, and transaction history.
• Cookie Data: Session cookies, preference cookies, and analytics cookies that help us understand how users interact with the platform.
• Location Data: General location information based on IP address for legal compliance and fraud prevention purposes.

3How We Use Your Personal Information

Every piece of information we collect is used for specific and legitimate purposes. mahkota8 does not use your data beyond what is necessary to deliver the services you use. The following are the primary purposes for which your personal data is used:

• Account Management: To create, verify, and maintain your mahkota8 account, including the login process, password resets, and two-factor authentication.
• Financial Transaction Processing: To process deposits, withdrawals, and all other financial transactions securely and accurately.
• KYC and AML Compliance: To fulfill legal obligations related to identity verification and Anti-Money Laundering (AML) compliance.
• Service Communications: To send important notifications regarding your account, transactions, the latest promotions, and relevant policy updates.
• Customer Support: To identify you when you contact our support team and provide accurate, efficient assistance.
• Platform Security: To detect and prevent fraudulent activity, unauthorized access, bonus abuse, and any other security threats.
• Service Improvement: To analyze platform usage patterns in order to improve the interface, conduct new feature testing, and ensure the best possible user experience.
• Legal Compliance: To comply with any legal obligations, regulations, or directives from the relevant authorities.

4Information Sharing and Disclosure

Mahkota8 does not sell, rent, or disclose your personal information to third parties for marketing or commercial purposes. However, there are limited situations where we need to share your information with certain parties to ensure the platform operates securely and in compliance with the law.

• Payment Service Providers: Required transaction information is shared with payment processors such as FPX, DuitNow, and e-wallet providers to process your deposits and withdrawals.
• Game Service Providers: Third-party game providers operating within the mahkota8 platform may receive game session data necessary for their technical operations.
• Identity Verification Services: KYC information is shared with recognized identity verification services to validate the authenticity of the documents you submit.
• Legal Authority: mahkota8 will disclose required information to government authorities, regulatory bodies, or law enforcement agencies when mandated by law or court order.
• Business Transfers: In the event of a merger, acquisition, or sale of company assets, user data may be transferred as part of the business assets, with prior notice given to users.

All third parties that receive mahkota8 user data are bound by strict confidentiality agreements and are only permitted to use that data for specified purposes. mahkota8 conducts regular audits of these third parties to ensure their compliance with our data protection standards.

5mahkota8 Data Security Measures

Protecting your personal and financial data is mahkota8's top priority. We continuously invest in the latest security infrastructure to ensure your information is always safeguarded against increasingly sophisticated cyber threats. Below are the layers of protection we have implemented:

• 256-bit SSL Encryption: All communications between your browser and mahkota8 servers are encrypted using 256-bit SSL/TLS technology, ensuring no third party can intercept the data transmitted.
• Stored Data Encryption: Sensitive data such as financial information and KYC documents stored in our database are encrypted using AES-256 algorithm.
• Two-Factor Authentication (2FA): mahkota8 provides and encourages the use of 2FA for all accounts to add an extra layer of security during login.
• Continuous Monitoring: Our 24/7 monitoring system actively detects any suspicious activity, intrusion attempts, or unusual patterns across the platform.
• Internal Access Controls: Access to user data within Mahkota8 is restricted to staff who genuinely require it to perform their duties, based on the principle of least privilege.
• Regular Security Audits: mahkota8 conducts regular penetration testing and security audits by registered independent parties to identify and address any system vulnerabilities.
• Incident Response Plan: We have clear and comprehensive incident response procedures in place. In the event of any data breach, we will notify affected users and the relevant authorities within the timeframe required by law.

6Your Rights as a User

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you as a data subject have certain rights regarding the personal information Mahkota8 holds. We fully respect these rights and make it easy for you to exercise them:

• Right of Access: You have the right to obtain a copy of the personal information we hold about you. Access requests can be submitted via our support email and will be processed within 14 business days.
• Right to Rectification: If the personal information we hold about you is inaccurate or outdated, you have the right to request an immediate correction. Certain details such as your name and date of birth can be updated directly through your account portal.
• Right to Erasure: You may request the deletion of your personal information from our systems, subject to record-keeping requirements mandated by law. We are generally required to retain financial records for a minimum of 7 years.
• Right to Object to Processing: You may object to the processing of your personal data for specific purposes such as direct marketing. You can opt out of any marketing communications at any time.
• Right to Data Portability: You have the right to request your personal data in a machine-readable format for transfer to another platform, where technically feasible.
• Right to Lodge a Complaint: If you are dissatisfied with how mahkota8 handles your personal data, you have the right to file a complaint with the Department of Personal Data Protection Malaysia.

7Mahkota8 Cookie Policy

Cookies are small text files stored in your browser when you browse the mahkota8 platform. Cookies help us remember your preferences, maintain your login session, and analyze how you use the platform so we can continue to improve it.

• Essential Cookies: These cookies are required for the basic operation of the platform, including login session management and security. They cannot be disabled without affecting platform functionality.
• Performance Cookies: Used to collect information on how visitors use our website, such as the most frequently visited pages. This data is collected in aggregate and anonymously.
• Functional Cookies: Allows the platform to remember your preferences such as language, location, and display settings to provide a more personalized experience.
• Analytics Cookies: Helps us understand how users interact with the platform through internal analytics, enabling us to continuously improve the user experience.

You can manage or delete cookies through your browser settings at any time. Note that disabling certain cookies may affect the functionality of some parts of the Mahkota8 platform, particularly essential cookies related to your login session.

8Children's Privacy and Protection of Minors

The mahkota8 platform is strictly for individuals aged 18 and above. We do not knowingly collect personal information from anyone under the age of 18. Our registration process is designed to reject underage sign-ups, including through date-of-birth verification and a rigorous KYC process.

If you are a parent or guardian and believe your underage child has registered or provided personal information to us, please contact the mahkota8 support team immediately at [email protected]. We will take prompt action to deactivate the account and remove all related information from our systems.

9Links to Third-Party Sites

The mahkota8 platform may contain links to third-party websites or services, particularly those related to game providers or payment partners. Please note that once you leave the mahkota8 platform and visit those third-party sites, the mahkota8 Privacy Policy no longer applies.

Mahkota8 is not responsible for the privacy practices or content of third-party websites. We recommend reading the privacy policy of each website you visit separately to understand how they handle your personal data. The presence of links to third-party sites on the mahkota8 platform does not imply that we endorse or support their content or privacy practices.

10Personal Data Retention Period

Mahkota8 does not retain your personal data longer than necessary for the purposes stated in this Privacy Policy, or beyond the period required by applicable Malaysian law.

• Active Account Data: Retained for the duration your account remains active on the Mahkota8 platform.
• Financial Transaction Data: Financial transaction records are retained for a minimum of 7 years from the transaction date, in accordance with Malaysia's accounting and tax legal requirements.
• KYC Documents: Retained for a minimum of 5 years after account closure, in line with AML (Anti-Money Laundering) compliance requirements.
• Security Logs: System and security logs are retained for 2 years for investigation purposes in the event of a security incident.
• Post-Account Closure Data: Upon account closure, personal data no longer required for legal compliance will be deleted or anonymised within 90 days.

11Amendments to This Privacy Policy

Mahkota8 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, legal requirements, or service improvements. Any amendments made will be updated on this page with a new effective date.

For amendments that significantly affect your privacy rights or how we handle your personal data, mahkota8 will provide at least 14 days' notice before the amendment takes effect, via in-platform notifications or an email to your registered address. We encourage you to review this page periodically to stay informed of the latest version of the mahkota8 Privacy Policy.

12Contact Us About Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or how mahkota8 handles your personal data, our Data Privacy Officer team is ready to assist.

• Privacy Email: [email protected] (Subject: Data Privacy Enquiry)
• Live Chat: Available 24/7 via the chat icon on the mahkota8 platform
• Frequently Asked Questions: Visit the page FAQ us for answers to common enquiries

We are committed to responding to all privacy-related inquiries within 3 business days. For issues requiring in-depth investigation, we will notify you within a reasonable timeframe and provide regular updates on the progress of your case.