Madrid888 Privacy Policy – Member Data Protection in Malaysia

At Madrid888, we understand that privacy is more than a legal obligation — it is the foundation of trust between our platform and every member who chooses us as their online entertainment destination in Malaysia. We treat your personal data as a responsibility, and we are fully committed to keeping it safe.

This Privacy Policy has been drawn up in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable international data protection standards. It applies to all users of the Madrid888 platform — whether you are a new registrant or a long-standing member.

We wrote this policy in plain, straightforward language because we believe every member deserves to know exactly what happens to their information — not buried in convoluted legal jargon that most people cannot decipher. If you ever have questions about any part of this policy, the Madrid888 support team is available to help you 24/7.

Madrid888 collects information from you through several different means. Below is a detailed explanation of the types of information we collect and how it is obtained:

A. Information You Provide Directly

• Registration information: Full name, date of birth, email address, Malaysian mobile number, username and password.
• Identity verification (KYC) information: A copy of your Malaysian MyKad or passport, identification number, and any other supporting documents required to meet anti-money laundering (AML) compliance obligations.
• Financial information: Bank account details, Touch 'n Go eWallet account number, GrabPay, DuitNow, Boost, ShopeePay, or FPX information required to process deposits and withdrawals.
• Communications with us: Records of Live Chat conversations, emails, and any other correspondence with the Madrid888 support team.

B. Information Collected Automatically

• Platform usage data: Games played, bet amounts, wins and losses, session times and duration, and transaction history.
• Technical data: IP address, device type and operating system, browser type and version, screen resolution, and other technical details that help us optimise the platform for your device.
• Location data: General location information based on your IP address, used to ensure compliance with applicable regional restrictions. Madrid888 does not collect precise GPS data without your explicit consent.
• Cookie and tracking data: Information collected through cookies, web beacons, and similar tracking technologies, as further described in Section 6 of this document.

Every piece of information Madrid888 collects serves a clear and legitimate purpose. We do not gather data for the sake of it — each item is used in a way that directly benefits you as a member or fulfils a legal obligation we are required to meet.

Madrid888 uses your personal data for the following purposes:

• Account management: Creating and maintaining your madrid888 account, processing login and logout requests, and enabling access to all platform features.
• Transaction processing: Processing deposits via Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay and FPX, as well as withdrawals to your bank account or e-wallet.
• Identity verification: Ensuring all members meet the minimum age requirement of 18 years and implementing the necessary KYC process to comply with Malaysian anti-money laundering laws.
• Platform security: Detecting and preventing fraud, player collusion, multi-account usage, bonus abuse, and other activities that violate madrid888's Terms and Conditions.
• Customer support: Providing accurate and relevant assistance when you contact the madrid888 support team, including referencing your account history and transaction records to resolve issues more efficiently.
• Personalised experience: Recommending games you may enjoy based on your play history, sending relevant promotions, and displaying personalised content in Bahasa Melayu.
• Analytics & improvement: Understanding how players use the madrid888 platform to improve the user interface, platform performance, and overall experience.
• Legal compliance: Meet reporting obligations to the relevant Malaysian authorities when required by applicable law.

Madrid888 does not use your data to make automated decisions that carry legal or equivalent effects without human review. Any decision that significantly affects your account — such as account closure or withdrawal rejection — is reviewed by qualified madrid888 personnel.

Madrid888 does not sell, rent, or trade members' personal information to any third party for marketing or commercial purposes. This is an absolute commitment on our part.

However, there are limited circumstances in which Madrid888 may need to share certain information with specific parties:

• Trusted service providers: Third parties that assist Madrid888 in operating the platform — including technology infrastructure providers, payment processors, and security audit firms. All such parties are bound by strict confidentiality agreements and may only use your data for the specific purposes agreed upon.
• Legal requirements: When required by a competent Malaysian court, regulatory body, or law enforcement authority through a lawful order. Madrid888 will notify you of any such request unless prohibited from doing so by a court order.
• Anti-money laundering (AML) compliance: Certain information may be reported to Bank Negara Malaysia or relevant bodies as required under the Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001 (AMLA).
• Protection of the public interest: In cases involving threats to public safety or serious criminal activity, Madrid888 reserves the right to disclose necessary information to the relevant authorities.

Madrid888 takes cybersecurity infrastructure seriously to ensure that the personal data of all members is protected to the highest practicable standard. The following are the key security measures we have in place:

• 256-bit SSL Encryption: All data transmitted between your device and Madrid888's servers is encrypted using TLS 1.3 with AES-256-bit encryption — the same industry standard used by major banking institutions in Malaysia.
• Secure password storage: Member passwords are never stored in plain text — they are processed using a one-way hashing algorithm with a unique salt for each account, ensuring that actual passwords remain inaccessible even to Madrid888 staff.
• Two-factor authentication (2FA): Madrid888 supports and encourages the use of two-factor authentication via SMS or an authenticator app for added account protection.
• Continuous security monitoring: Our systems are monitored 24/7 to detect unusual activity, unauthorized access attempts, and other cyber threats. The Madrid888 security team responds to incidents promptly.
• Regular security audits: madrid888 conducts regular security assessments and penetration testing carried out by independent, certified third parties to identify and address vulnerabilities before they can be exploited.
• Protected servers: Members' personal data is stored in data centres protected by strict physical access controls, redundant cooling systems, and safeguards against natural disasters.

While madrid888 takes all reasonable steps to protect your data, no online security system can be guaranteed 100% safe from every threat. You also play an important role in keeping your account secure — use a strong, unique password, never share your login credentials with anyone, and contact us immediately if you suspect any unauthorised activity on your account.

Madrid888 uses cookies and similar tracking technologies to enhance the user experience, ensure the platform functions correctly, and gather analytical insights into how the platform is used. The following are the types of cookies we use:

Essential Cookies (Required)

These cookies are essential for the core functions of the Madrid888 platform — including login session management, account security, and game processing. Without them, the platform will not function properly. These cookies cannot be disabled.

Performance & Analytics Cookies

These cookies help Madrid888 understand how players use the platform — which pages are visited most, where players run into difficulties, and what overall navigation patterns look like. This information is used to improve the platform. All data is collected in aggregate and anonymised.

Preference Cookies & Personalisation

These cookies allow madrid888 to remember your preferences — such as your preferred language, display settings, and favourite games — so your experience is more comfortable with every visit.

Madrid888 retains your personal data for as long as necessary to fulfil the purposes outlined in this Privacy Policy, or for as long as required by applicable Malaysian law — whichever is longer.

As a general guideline:

• Active account data: Retained for as long as your account remains active and for a reasonable period following account closure.
• Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysian legal requirements on financial records and AML compliance.
• Support communication records: Retained for 3 years for reference and dispute resolution purposes.
• Technical log data: Typically retained for 90 days for security and debugging purposes.
• Marketing data: Retained until you withdraw your consent to receive marketing communications from us.

Once the applicable retention period has expired, your personal data will be securely deleted or anonymised in accordance with accepted industry standards. Anonymised data (where no personal information can be traced back to you) may be retained indefinitely for analytical and statistical purposes.

Madrid888's data is stored in data centres located in regions that meet or exceed the data protection standards required under Malaysia's PDPA. Where data needs to be transferred outside Malaysia, Madrid888 ensures that appropriate safeguards are in place to protect your rights.

As a Madrid888 member in Malaysia, you have the following rights regarding your personal data under Malaysia's Personal Data Protection Act 2010 (PDPA) and Madrid888's policies:

To exercise any of the rights listed above, please send a written request to support@madrid888.xyz with the subject line "Privacy Rights Request", specifying the right you wish to exercise along with a brief explanation. Madrid888 will process your request within 30 business days and will notify you if a longer period is required due to the complexity of the request.

Madrid888 is a platform designed exclusively for adults aged 18 and above. We do not knowingly collect, store, or process the personal data of children under the age of 18.

If you are a parent or guardian and believe that your underage child has registered or used the Madrid888 platform, please contact us immediately at support@madrid888.xyz. We will take prompt action to close the account and delete all associated data within a reasonable timeframe.

The Madrid888 platform integrates certain third-party services that are essential to its operation — including licensed game providers, local Malaysian payment processing systems, and technical infrastructure. Every third-party provider undergoes a thorough security and privacy screening process by Madrid888 before any integration is approved.

Third-party providers that access Madrid888 member data are bound by strict data processing agreements, which require them to:

• Only uses shared data for the agreed purposes and nothing else.
• Implementing security measures that meet or exceed Madrid888's standards.
• Never sharing data with any third party without madrid888's written authorisation.
• Comply with all relevant data protection laws.

Please be aware that while madrid888 carefully vets all third-party providers, this Privacy Policy applies only to data handled directly by madrid888. Any interaction you have directly with third-party providers outside the madrid888 platform is governed by their own privacy policies.

Madrid888 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, legal developments, or how our platform operates. When significant amendments are made, we will:

• Updating the "Last Updated" date at the top of this page.
• Sending an in-platform notification on Madrid888 to inform you of the changes.
• For amendments that materially affect your rights, we will send a notice to your registered email address at least 14 days before the changes take effect.

Continued use of the Madrid888 platform after any amendments take effect will be considered acceptance of the updated policy. If you do not agree with any of the changes, you have the right to close your account by contacting our support team.

Madrid888 also encourages you to review this Privacy Policy page periodically, even if you have not received a notice of amendment — we are committed to keeping this document current and accurate at all times.

If you have any questions, concerns, or complaints regarding how Madrid888 handles your personal data, or if you wish to exercise any of the privacy rights set out in this document, please contact us through the following channels:

• Privacy Email: support@madrid888.xyz (use the subject line "Data Privacy Inquiry")
• Live Chat: Available 24/7 within the Madrid888 platform via the Live Chat button at the bottom corner of the screen
• Response time: Our team is committed to responding to all privacy enquiries within 3 business days, and to resolving formal privacy rights requests within 30 business days.

Madrid888 takes every privacy complaint seriously. If you are not satisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia or the relevant regulatory body under PDPA 2010.