Privacy Policy

Introduction

This Privacy Policy ("Policy") is issued by Magnum8 ("Magnum8", "we", "us", or "the Company"), the operator of the online casino and sports betting platform accessible at magnum8.cam (the "Platform"). This Policy governs the collection, use, storage, disclosure, and protection of personal data provided by or collected from individuals who access or use the Platform ("Users", "Players", or "you").

Magnum8 is committed to handling personal data responsibly and in accordance with applicable data protection principles, including those reflected in Malaysia's Personal Data Protection Act 2010 (PDPA) and internationally recognised privacy frameworks. By registering an account on the Platform or by continuing to use the Platform after this Policy has been made available to you, you acknowledge that you have read and understood this Policy.

This Policy should be read in conjunction with our Terms and Conditions, which govern your use of the Platform more broadly. In the event of any conflict between this Policy and the Terms and Conditions on a data privacy matter, this Policy shall prevail.

Definitions

For the purposes of this Policy, the following terms shall carry the meanings set out below:

Data We Collect

Magnum8 collects Personal Data from Users through multiple channels. The categories and specific types of data collected are described below.

3.1 Registration Data

When you create an account on the Platform, we collect the following information:

• Full legal name (as it appears on your Malaysian identity document);
• Date of birth (to verify compliance with the 21+ age requirement);
• Residential address (including city — e.g., Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, or Shah Alam);
• Mobile phone number;
• Email address;
• Preferred currency (Malaysian Ringgit / MYR by default for Malaysian residents);
• Username and encrypted password.

3.2 Identity Verification (KYC) Data

To comply with our Know Your Customer (KYC) obligations and to safeguard against fraud and money laundering, we may collect:

• Scanned copy or photograph of your MyKad (Malaysian National Identity Card) or valid international passport;
• Proof of residential address (e.g., utility bill from Tenaga Nasional, Syabas/Air Selangor, or bank statement);
• Proof of payment method ownership (e.g., screenshot of your Touch 'n Go eWallet, Boost app, or bank account in your name);
• Source of funds documentation where required for high-value transactions.

3.3 Financial Transaction Data

Each financial transaction conducted through the Platform generates a record that we retain, including:

• Deposit and withdrawal amounts in MYR or cryptocurrency equivalent;
• Payment method used (e.g., Maybank2u, CIMB Clicks, Public Bank Online, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, BTC, ETH, USDT, LTC);
• Transaction timestamps and reference numbers;
• Masked payment instrument identifiers (we do not store full card numbers or full wallet account credentials).

3.4 Usage and Behavioural Data

When you use the Platform, we automatically collect technical and behavioural data, including:

• IP address and approximate geographic location;
• Device type, operating system, and browser version;
• Session duration, pages visited, and game interactions;
• Betting history, wager amounts, and game preferences;
• Referral source (e.g., how you arrived at magnum8.cam).

3.5 Communications Data

When you contact our support team via live chat or email, we retain a record of those communications, including the content of messages, timestamps, and the nature of the query or complaint raised.

How We Use Your Data

Magnum8 uses the Personal Data it collects for the specific, legitimate purposes set out in the table below. We do not process your data in ways that are incompatible with these stated purposes.

Legal Basis for Processing

Magnum8 processes your Personal Data on the following legal grounds:

• Contractual Necessity: Processing required to perform our obligations under the account agreement — including facilitating deposits, game access, and withdrawals;
• Legal Obligation: Processing required to comply with applicable laws, including anti-money laundering (AML) obligations, KYC requirements, and responsible gambling legislation;
• Legitimate Interests: Processing carried out for our legitimate business interests, such as fraud detection, platform security, and product improvement — provided such interests are not overridden by your fundamental rights;
• Consent: Processing based on your freely given consent, such as the receipt of promotional communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

Data Sharing & Third-Party Disclosure

Magnum8 does not sell, rent, or trade your Personal Data to any third party for commercial purposes. We may share your data with third parties in the following limited and controlled circumstances:

6.1 Payment Processing Partners

To process your financial transactions, we share relevant payment data with verified Malaysian payment processors and gateway operators, including those facilitating Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, and Hong Leong bank transactions, as well as cryptocurrency network operators. These partners are bound by contractual data processing agreements and are not permitted to use your data for any other purpose.

6.2 Identity Verification Providers

Magnum8 engages third-party KYC verification service providers to assist with identity and age verification. These providers access only the data necessary to complete the verification process and are subject to strict confidentiality obligations.

6.3 Technology and Hosting Partners

Our Platform infrastructure is hosted on cloud servers operated by reputable third-party providers. These providers have access to server-level data as part of their hosting services but are contractually prohibited from accessing or processing your Personal Data for any purpose other than providing the hosting service.

6.4 Legal and Regulatory Disclosure

We may disclose your Personal Data to competent authorities, law enforcement agencies, or regulatory bodies where we are required to do so by law, court order, or regulatory direction, or where disclosure is necessary to prevent or report fraud, money laundering, or other criminal activity.

Cookies & Tracking Technologies

Magnum8 uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file stored on your device when you visit a website. We use the following categories of cookies:

• Strictly Necessary Cookies: Required for the Platform to function. These enable session management, login authentication, and security features. They cannot be disabled without impairing core Platform functionality.
• Performance Cookies: Collect anonymous, aggregated data about how Users interact with the Platform — such as page load times, error rates, and navigation patterns — to help us improve performance and stability.
• Functional Cookies: Remember your preferences such as language selection (English, Bahasa Melayu, or Mandarin), display settings, and previously visited game categories.
• Analytics Cookies: Used to analyse Platform usage trends and player behaviour in aggregate form. Data collected through analytics cookies does not identify you personally.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies may prevent certain features of the Platform from functioning correctly. We do not use cookies to deliver advertising for third-party products or services.

Data Retention

Magnum8 retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our standard retention periods are as follows:

• Active Account Data: Retained for the duration of your account's existence plus a minimum of five (5) years following account closure;
• Financial Transaction Records: Retained for a minimum of seven (7) years to comply with financial record-keeping obligations;
• KYC Documentation: Retained for the lifetime of your account plus five (5) years, or longer if required by applicable AML law;
• Customer Support Communications: Retained for two (2) years from the date of last interaction;
• Marketing Consent Records: Retained for the period of your consent plus one (1) year following withdrawal of consent.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in accordance with our internal data disposal procedures.

Data Security

Magnum8 implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers;
• Encryption of sensitive data fields (including passwords and payment identifiers) at rest using industry-standard cryptographic algorithms;
• Multi-factor authentication (MFA) available for all player accounts and mandatory for administrative access;
• Regular third-party penetration testing and security audits of the Platform infrastructure;
• Strict internal access controls — only personnel with a legitimate business need may access Personal Data;
• Continuous automated monitoring for anomalous access patterns and potential security incidents;
• Segregation of player funds from operational accounts to protect financial assets in all circumstances.

Your Rights as a Data Subject

As a Data Subject, you are entitled to exercise the following rights in relation to your Personal Data held by Magnum8. You may submit a request to exercise any of these rights by contacting our Data Privacy team via the contact details in Section 14.

To exercise any of the above rights, please contact us using the details provided in Section 14. We will respond to all verifiable requests within the timeframes required under applicable data protection law. We may need to verify your identity before processing your request.

Minors & the 21+ Requirement

The Magnum8 Platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect Personal Data from persons under the age of 21. If we discover that an account has been registered by or is being used by a person under 21, we will immediately suspend that account, initiate a full investigation, and delete or restrict the relevant Personal Data in accordance with this Policy and our legal obligations.

If you are a parent or guardian and believe that a minor has registered an account on the Platform using personal data belonging to you or another adult, please contact us immediately at the details set out in Section 14. We will take prompt remedial action.

Cross-Border Data Transfers

Magnum8 operates with server infrastructure and technology partners located in multiple jurisdictions. As a result, your Personal Data may be transferred to and stored in countries outside Malaysia. Where such transfers occur, Magnum8 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under Malaysian data protection law, including:

• Entering into contractual data processing agreements with all recipients that require them to apply adequate data protection standards;
• Transferring data only to jurisdictions or organisations that maintain security standards equivalent to or exceeding those required under the PDPA;
• Conducting due diligence on all third-party Data Processors prior to engagement.

By using the Platform, you consent to the transfer of your Personal Data to countries outside Malaysia as described in this section, subject to the safeguards described above.

Updates to This Privacy Policy

Magnum8 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or Platform functionality. The date of the most recent revision is displayed at the top of this page.

Where changes are material — for example, where we introduce a new category of data processing or a new category of third-party recipients — we will endeavour to notify registered Users by displaying a prominent notice on the Platform or by sending an email to the address associated with your account. Your continued use of the Platform following the effective date of any revised Policy shall constitute your acceptance of those changes.

We encourage you to review this Policy periodically to stay informed about how Magnum8 protects your Personal Data.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data by Magnum8, please contact our Data Privacy team through the following channels. All correspondence will be treated as confidential.

When contacting us regarding a data rights request, please include your registered email address or username and a description of your request. We will respond within the timeframes required by applicable law and will verify your identity before processing your request.

We are committed to resolving all privacy-related enquiries fairly and promptly. If you are not satisfied with our response, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.