Privacy Policy mantra88 — Protection of Your Personal Data

When you register and use the mantra88 platform, we collect various types of information to ensure our services run smoothly, securely, and meet your needs as a player. This information falls into several key categories.

Account Registration Information — Includes your full name, email address, mobile number, date of birth, and password chosen when opening a new account at mantra88.

Identity Verification Information (KYC) — A copy of your identity card, passport, or other identification document required to verify your identity for regulatory compliance and fraud prevention purposes.

Financial Information — Bank account details, account name, and account number registered for deposit and withdrawal purposes. We do not store credit card numbers or sensitive payment information in plain format.

Platform Usage Data — Information on how you use the mantra88 platform, including games played, wagering amounts, active hours, and your gaming habits.

Technical Data — IP address, browser type, operating system, screen resolution, and device information used to access our platform.

Every piece of information we collect is used responsibly and solely for its intended purpose. mantra88 uses your data for the following purposes:

Mantra88 firmly upholds the principle that your personal data belongs to you. We does not sell, rent, or trade your personal information to any third party for their own commercial purposes.

However, in certain situations, we may need to share your information with the following parties, and only to the extent necessary:

• Payment Service Providers — Approved financial institutions and payment processors to enable your deposit and withdrawal transactions to be processed securely.
• Game Software Providers — Licensed game providers supplying game content on the mantra88 platform, to the extent necessary for your gaming experience.
• Regulatory Authority — Government bodies, law enforcement agencies, or licensed authorities when required by Malaysian law or court order.
• Technical Service Providers — Hosting companies, cloud infrastructure, and cybersecurity firms that help us operate the platform securely, subject to strict confidentiality agreements.
• Independent Auditor — Audit firms conducting periodic compliance and security assessments, with access limited to the minimum necessary.

All third parties working with mantra88 are required to sign binding data protection agreements, ensuring they handle your information to the same high security standards we uphold.

Mantra88 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

The following are the types of cookies we use:

• Essential Cookies — Required for core platform functions such as login authentication, session security, and language preferences. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies — Collects information on how visitors use our platform to help us understand which pages are most frequently visited and improve the user experience.
• Functional Cookies — Remembers your preferences such as display settings, language, and login information for ease of use.
• Analytics Cookies — Helps us understand platform usage patterns in aggregate and anonymised form for service improvement purposes.

You can manage and delete cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality and your experience on the mantra88 platform.

Mantra88 retains your personal data only for as long as necessary to fulfill the original purpose of collection or to comply with applicable legal requirements.

• Active Account Data — Retained for the duration your account remains active on mantra88 and until all pending transactions are resolved.
• KYC and Identity Verification Data — Retained for a minimum of 5 years after account closure to fulfil anti-money laundering (AML) legal requirements in Malaysia.
• Financial Transaction Records — Retained for 7 years after each transaction for tax compliance and financial audit purposes.
• Support Communication Logs — Retained for 2 years after the last interaction for reference and dispute resolution purposes.
• Technical Data and Access Logs — Retained for 12 months for security purposes and incident investigation.

Upon expiry of the designated retention period, your data will be securely deleted or anonymised in accordance with established standard procedures. You may request early data deletion subject to applicable legal limitations.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and mantra88's privacy policy, you have important rights regarding your personal data. We fully respect and facilitate the exercise of these rights.

Mantra88 implements a comprehensive security framework to protect your personal data from unauthorized access, disclosure, alteration, or destruction. Our technical and organizational security measures include:

• End-to-End Encryption — All communications between your device and the mantra88 platform are encrypted using TLS 1.3, ensuring no third party can intercept data in transit.
• Two-Factor Authentication (2FA) — An additional security layer for account login that protects you even if your password is compromised.
• Real-Time Threat Monitoring — An intrusion detection system (IDS) operates 24/7 to identify and block suspicious activity before it can impact your data.
• Regular Penetration Testing — Independent security firms conduct quarterly penetration tests to identify and remediate system vulnerabilities before they can be exploited.
• Staff Training — All mantra88 staff who handle user data undergo comprehensive information security training and regular assessments.
• Incident Response Plan — Clear and tested procedures to respond swiftly in the event of a security incident, including notification to affected users within the timeframe required by law.

While we take all reasonable steps to protect your data, no security system is one hundred percent perfect. We encourage you to take protective measures on your end as well, such as using a strong password and not sharing your login credentials.

The mantra88 platform may include integrations with third-party services such as licensed game providers, payment processors, and technical infrastructure providers. It is important that you understand the following:

• Every third-party provider working with mantra88 undergoes a rigorous security assessment before being approved as a partner.
• Our third-party service providers are contractually required to uphold data protection standards equivalent to those in our Privacy Policy.
• Mantra88 is not responsible for the privacy policies of external websites or services that you may independently access outside our platform.
• Any data sharing with third parties is strictly limited to the minimum information required to fulfil the function of the relevant service only.

Mantra88 is a gaming platform strictly restricted to individuals aged 18 years and above only. We take child protection very seriously and carry out the following active measures:

• Age verification is mandatory during new account registration via official identification document checks.
• We do not intentionally collect, store, or process any personal data from individuals under the age of 18.
• Should we discover that personal data of a minor has been inadvertently collected, we will promptly delete such information and close the associated account.
• Parents or guardians who are concerned that their child may have registered a mantra88 account are advised to contact us immediately at [email protected].

Mantra88 also supports responsible gaming initiatives that help parents control children's access to online gambling websites. Visit the Responsible Gaming us for more information on available protection tools.

Mantra88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or service improvements. The following are our commitments regarding any amendments:

• Advance Notification — For material or significant amendments, we will send a notification to your registered email address at least 14 days before the amendment takes effect.
• Effective Date — Each version of the Privacy Policy will display a clear "Last Updated" date at the top of the page for your easy reference.
• Access Legacy Version — We maintain an archive of previous versions of this Privacy Policy, available upon request through our support team.
• Ongoing Consent — Continued use of the mantra88 platform after the effective date of any amendment constitutes your acceptance of the updated terms.

We encourage you to review this Privacy Policy page periodically to stay informed about how we handle your personal information. If you disagree with any amendments, you have the right to close your account before the changes take effect.

If you have any questions, concerns, or wish to exercise your rights regarding personal data, the mantra88 Data Protection Officer (DPO) team is always ready to assist you.