Mahkota8 Privacy Policy – Member Personal Data Protection

1. Introduction

Mahkota8 ("we", "Platform", or "company") takes your privacy very seriously. This Privacy Policy explains how we collect, use, disclose, transfer, and protect your personal information when you use the mahkota8.vu platform, our mobile app, and all related services.

This document applies to all users accessing the mahkota8 platform, whether as a guest or a registered member. We are committed to ensuring your privacy is protected in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable international data protection standards.

Please read this Privacy Policy carefully. If you have any questions or concerns about how we handle your data, do not hesitate to contact our team via the details provided at the end of this document.

2. Personal Data We Collect

We collect various types of information to provide you with the best possible service. The categories of data we collect are as follows:

We only collect data that is strictly necessary for the stated purposes. We do not collect sensitive information such as biometric data or health information unless required by law.

3. How Personal Data Is Collected

Mahkota8 collects your personal data through various transparent and legitimate methods:

• Account Registration: When you register as a new member, you provide basic information such as your name, email, phone number, and password.
• KYC Process: We collect your identity verification documents to meet anti-money laundering (AML) and know-your-customer (KYC) compliance requirements.
• Financial Transactions: Each time you make a deposit or withdrawal, the relevant financial information is recorded for processing and compliance purposes.
• Platform Usage: Our system automatically records technical data such as your IP address, device type, and usage patterns on the platform.
• Cookies and Tracking Technologies: Our platform uses cookies and similar technologies to enhance user experience and analyse website performance.
• Support Communications: When you contact our support team, the information you provide during that session is also recorded for issue resolution purposes.

4. Purposes of Personal Data Use

Mahkota8 uses your personal data for the following lawful purposes:

• Account Management: Creating and managing your member account, processing logins and ensuring account security.
• Payment Processing: Processing deposits, withdrawals and all financial transactions securely and efficiently.
• Legal Compliance: Fulfilling KYC, AML and reporting obligations to relevant authorities as required by law.
• Platform Security: Detecting and preventing fraudulent activity, unauthorised access and platform abuse.
• Service Improvement: Analysing usage patterns to improve user experience, platform performance and game offerings.
• Service Communications: Sending important notifications related to your account, including transaction confirmations, security alerts and policy updates.
• Customer Support: Helps resolve inquiries, complaints and technical issues you report to our support team.
• Promotions & Bonuses: Processing bonus eligibility and distribution of promotions related to your account, subject to your consent.

5. Data Sharing and Disclosure

Your privacy is our priority. mahkota8 does not sell or transfer your personal data to third parties for marketing purposes. However, there are certain situations where we may need to share your data:

• Trusted Service Providers: We work with payment service providers, third-party gaming platforms and technology infrastructure suppliers who are bound by strict confidentiality agreements. They may only use your data for purposes we direct.
• Legal Compliance: If required by a court order, law, or directive from a legitimate authority, we may be required to disclose certain information about you.
• Platform Rights Protection: In cases of fraud, misuse, or legal action, we may disclose the necessary data to relevant parties to protect the legitimate rights and interests of the platform.
• Business Transfer: In the event of any merger, acquisition, or asset sale, user data may be transferred as part of the business assets, subject to advance notice to members.

6. Data Security Measures

Mahkota8 implements a comprehensive range of technical and organisational security measures to protect your personal data from unauthorised access, loss, misuse, or alteration:

• 256-bit SSL Encryption: All communications between your device and our servers are encrypted using the latest TLS/SSL protocols.
• Strict Access Controls: Only authorised personnel with a legitimate business need may access members' personal data.
• Continuous Monitoring: Our systems are monitored 24/7 to detect any suspicious activity or intrusion attempts.
• Regular Data Backups: Your data is regularly backed up to a secure, separate location to ensure recoverability in the event of an emergency.
• Security Testing: We conduct regular security tests and technical audits to identify and address any vulnerabilities.
• Two-Factor Authentication: Our platform supports two-factor authentication (2FA) as an added layer of security for member accounts.

7. Data Retention Period

Mahkota8 retains your personal data only for as long as necessary to fulfil the purposes stated in this policy or as required by applicable law. The following are general guidelines for our data retention periods:

• Active Account Data: For the duration your account remains active and for a minimum of 5 years after account closure for legal compliance purposes.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysia's accounting and anti-money laundering legal requirements.
• KYC Documents: Retained for the duration of account use and up to 5 years after account closure, or longer if required by the relevant authorities.
• Communication Logs: Customer support communication records are retained for 2 years for reference and dispute resolution purposes.
• Technical Data: Access logs and technical data are retained for 12 months unless related to an active security investigation.

Once the retention period expires, your data will be securely deleted or anonymised in accordance with established procedures.

8. Your Rights as a Data Subject

As a mahkota8 member and data subject under Malaysia's PDPA, you have the following rights regarding your personal data:

To exercise any of the rights above, please contact the mahkota8 support team. We will process your request within 30 business days. In complex cases, this period may be extended up to 60 days with appropriate notice to you.

9. Cookies and Tracking Technologies

Mahkota8 uses cookies and similar tracking technologies to enhance platform functionality and your experience. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login session authentication, account security, and basic navigation. These cookies cannot be disabled without affecting platform functionality.
• Analytics Cookies: Helps us understand how users interact with the platform — most visited pages, session duration and navigation paths. This information is used in aggregate and does not identify individuals.
• Functional Cookies: Allows the platform to remember your preferences such as language, display settings and login details for a more convenient experience.

You can manage or disable cookies through your web browser settings. However, disabling essential cookies may affect the functionality and security of your platform account.

10. Cross-Border Data Transfers

In the course of global operations, mahkota8 may need to process or store your personal data on servers located outside Malaysia. Any cross-border data transfer is carried out with appropriate safeguards in place, including:

• Ensuring the recipient country maintains an adequate level of data protection.
• Using approved standard contractual clauses for data transfers.
• Obtaining your consent for specific transfers where required.
• Ensuring the receiving party is bound by equivalent data protection obligations.

11. Privacy of Children and Minors

The mahkota8 platform is exclusively for individuals aged 18 and above. We do not knowingly collect, process, or store personal data of individuals under 18 years of age.

If we discover that personal data of a child or minor has been collected without our knowledge, we will take immediate steps to delete that data and close the relevant account. Parents or guardians who suspect their child has registered on our platform are requested to contact us immediately.

12. Amendments to This Privacy Policy

Mahkota8 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service offerings. When we make material changes, we will:

• Updating the "Last updated" date at the top of this document.
• Posting a clear notice on the platform's home page about the changes made.
• Sending email notifications to registered members for material changes.
• For significant changes, seeking your renewed consent before they take effect.

We encourage you to review this page periodically so you are always aware of how we protect your data. Continued use of the platform after any amendments take effect constitutes your acceptance of the updated Privacy Policy.

13. Contact Us – Privacy Enquiries

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact the mahkota8 Data Protection Officer (DPO) through the following channels:

• Privacy Email: [email protected] (text display only)
• General Support Email: [email protected] (text display only)
• Live Chat: Available 24/7 via the chat icon on the platform
• Response Time: Privacy requests are processed within 30 business days

You may also refer to FAQ page us for more information, or read our Terms and Conditions and Responsible Gaming Policy us for a full overview of the platform's policies.