Privacy Policy Mantra88 – Malaysian Player Data Security Guaranteed

Mantra88 (operating the platform at mantra88.life) takes the privacy of every member seriously. This Privacy Policy sets out transparently how Mantra88 collects, uses, stores, and protects your personal information when you register an account, make a deposit via Touch 'n Go or DuitNow, play at a Live Casino table, place a Sports Betting wager, or interact with any part of the Mantra88 platform.

We understand that trust is the foundation of the relationship between Mantra88 and each of our members. When you register your personal information with us — whether that's your full name, phone number, email address, or payment details — you are placing your trust in us. We take that trust seriously, and this Privacy Policy is the written document that binds Mantra88 to that responsibility.

This policy applies to all Mantra88 members regardless of whether you access the platform via a laptop web browser, Android smartphone, iPhone, or any other device. It also covers all your interactions with the platform — from initial registration through every gaming session and every financial transaction you make.

Mantra88 only collects data that is genuinely necessary to provide our services safely and effectively. The following are the categories of data we collect:

Mantra88 collects your personal data through several different channels, depending on the type of data and the context of your interaction with our platform:

• Account Registration: When you complete the registration form on Mantra88, you voluntarily provide basic information such as your name, email, phone number, and date of birth. This is our primary channel of data collection.
• KYC Verification Process: When you submit identity verification documents (such as a MyKad photo and selfie) to fulfil KYC requirements, that data is collected and stored in accordance with strict security procedures.
• Financial Transactions: Every time you make a deposit or withdrawal — whether via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, or FPX — the transaction details are automatically recorded in our system.
• Gaming Activity: The Mantra88 platform automatically records all your betting activity, including the time, game type, stake amount, and outcome. This is a core platform function that cannot be disabled.
• Cookies & Similar Technologies: When you visit or use the Mantra88 platform, cookies and other tracking technologies automatically collect usage data. For more details, refer to Section 8 below.
• Customer Support Interactions: When you contact Mantra88's support team via live chat or email, the information you share during that conversation is collected and retained.

Mantra88 uses the personal data it collects solely for legitimate purposes to which you have given implicit or explicit consent. The following are the specific purposes for which your data is used:

• Account Management: To create and maintain your Mantra88 account, verify your identity at login, and grant you access to all platform features.
• Transaction Processing: To securely and accurately process deposits, withdrawals, and all other financial transactions, including verifying that the payment method used is valid and belongs to you.
• KYC & AML Compliance: To verify your age and identity in accordance with legal requirements, and to identify and prevent money laundering and fraudulent activity.
• Responsible Gaming: We analyze your gameplay patterns to detect early signs of problem gambling and provide effective self-management tools, including deposit limits and loss limits.
• Customer Support: This enables Mantra88's support team to provide relevant, context-aware assistance based on your account history and the issue you are experiencing.
• Platform Improvements: We analyze usage patterns in aggregate (not at the individual level) to understand how Malaysian players use the platform and identify areas for improvement.
• Marketing Communications (with your consent): We send information about promotions, new bonuses, local Sports Betting events, and platform updates — only if you have opted in to receive such communications.
• Legal Requirements: To comply with any legal requirements, regulations, or directions from relevant authorities that require us to disclose specific information.

Mantra88 does not sell, rent, or disclose members' personal data to third parties for marketing purposes. However, there are specific situations where Mantra88 needs to share data with other parties to keep the platform functioning properly:

• Payment Providers: When you make a deposit via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, or FPX, the required transaction data is shared with the respective provider to process the payment. These providers are governed by their own privacy policies and are not permitted to use your data for any other purpose.
• Game Providers: To enable you to play at Live Casino tables from Evolution Gaming, Pragmatic Play Live, or other providers available on Mantra88, certain game session data must be shared with those providers. This is a technical requirement that cannot be avoided.
• Third-Party KYC Services: Mantra88 may engage recognised third-party identity verification services to securely process KYC documents. These providers are bound by strict confidentiality agreements with Mantra88.
• Legal Authorities: Mantra88 will disclose data where required by Malaysian law or pursuant to a valid court order. We will not disclose more data than is legally required.
• Business Transfer: Should Mantra88 be involved in any merger, acquisition, or sale of business assets, member data may be transferred as part of those assets. Members will be notified before any such transfer takes place.

Mantra88 continually invests in security infrastructure to ensure the personal and financial data of our members is protected at all times. The technical and organisational security measures we employ include:

• 256-bit SSL Encryption: All data transmitted between your device and Mantra88's servers is encrypted using the latest TLS protocol. No data is sent in plain text that could be intercepted.
• Two-Factor Authentication (2FA): Members are encouraged to enable 2FA in their account settings. This adds an extra layer of security that protects your account even if your password is compromised.
• 24/7 Security Monitoring: Mantra88's technical security team monitors our systems around the clock to detect any suspicious activity or unauthorised access attempts.
• Data Segregation: Sensitive financial data is stored separately from profile data with strict access controls. Only designated personnel who require access to carry out their duties are permitted to do so.
• Regular Security Assessments: Mantra88 conducts regular security audits and penetration testing to identify and address any vulnerabilities in our systems before they can be exploited.
• Secure Data Backups: Data backups are performed on a regular basis and stored in an encrypted, secured environment to ensure swift data recovery in the event of any technical incident.

While Mantra88 takes all reasonable steps to protect your data, no security system in the world can be guaranteed 100% safe from every threat. We therefore also encourage members to take personal responsibility for securing their accounts — use a strong, unique password, enable 2FA, and never share your login credentials with anyone.

Mantra88 recognises and respects your rights regarding your personal data. Below are the rights you hold and how to exercise them:

To exercise any of the rights above, you may contact Mantra88's customer support team via live chat available 24/7, or by email at support@mantra88.life. Please include your account number and a description of your request. We will acknowledge receipt within 3 business days and resolve it within 30 business days.

Mantra88 uses cookies and similar tracking technologies to enhance your experience on our platform. Below are the types of cookies we use and their respective purposes:

• Essential Cookies (Required): These cookies are required for the Mantra88 platform to function correctly. They include session login cookies that keep you logged in while you use the platform, security cookies that protect your account from CSRF attacks, and language preference cookies. This type of cookie cannot be disabled as it forms part of the platform's core functionality.
• Performance & Analytics Cookies: These cookies collect information about how you use Mantra88 — which pages you visit, how long you spend on each page, and your navigation path. This data is collected in aggregate and anonymized to help us understand how to improve the platform. You may opt out of this type of cookie in your web browser settings.
• Functional Cookies: These cookies remember your preferences, such as the betting limits you have set, table display preferences, and other settings that improve usability. Without them, you may need to re-configure your preferences each time you log in.
• Marketing Cookies (With Your Consent): Only with your explicit consent, Mantra88 may use cookies to show you more relevant promotions based on your gaming activity. You may withdraw this consent at any time.

You can control and delete cookies through your web browser settings. Please note that disabling essential cookies may affect the functionality of the Mantra88 platform. For guidance on managing cookies in popular browsers such as Chrome, Safari, or Firefox, please refer to the help documentation of the respective browser.

Mantra88 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by law. The following are the data retention guidelines we follow:

• Active Account Data: For as long as your account is active and you continue using Mantra88's services, your personal data is retained to allow us to provide those services to you.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with applicable legal requirements relating to financial records and AML regulations in Malaysia. This includes records of all deposits and withdrawals made via Touch 'n Go, DuitNow, GrabPay, and other methods.
• KYC Documents: Retained for 5 years after the business relationship with the member ends, in accordance with applicable anti-money laundering legal requirements.
• Support Communication Records: Retained for 2 years for quality control purposes and reference in the event of a dispute.
• Gaming Activity Data: Retained for the duration of the active account and for 3 years after account closure for audit and fraud detection purposes.
• Cookie & Technical Log Data: This data is typically retained for no longer than 13 months, after which it is deleted or anonymized.

Once data is no longer required within the timelines above, Mantra88 will securely delete it using procedures that ensure it cannot be recovered. Members who close their accounts may request information on when their data will be deleted by contacting our support team.

Mantra88 strictly prohibits the use of the platform by any individual under the age of 18. Our platform is not designed for minors, and we do not knowingly collect personal data from underage individuals.

If Mantra88 discovers that a person under the age of 18 has registered an account using false information, that account will be closed immediately, all transactions will be voided, and the associated data will be deleted. Any balance remaining in such an account will be returned to the original deposit method where possible, or disposed of in accordance with established procedures.

Mantra88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or technological developments. Whenever we make material changes to this policy, we will notify you via:

• A clear notification in your Mantra88 account when you log in after the effective date of the amendment.
• An email to the address you registered with us, at least 14 days before the changes take effect.
• An announcement on the main page of the Mantra88 platform.

Continued use of the Mantra88 platform after any policy amendment takes effect will be considered your acceptance of the updated policy. If you disagree with any changes, you may close your account before the amendment's effective date without any penalty applied to your account balance.

If you have any questions, concerns, or requests regarding this Privacy Policy or how Mantra88 handles your personal data, we encourage you to reach out to us directly. Our team is ready to assist and committed to providing clear, satisfactory responses in a timely manner.

You can reach us via:

• Live Chat: Available 24 hours a day, seven days a week, directly from the Mantra88 platform. This is the fastest way to get a response.
• Email: support@mantra88.life — for enquiries related to privacy and personal data. Please include "Privacy Policy Enquiry" in the subject line of your email to help expedite processing.

Mantra88 is committed to providing an initial response within 3 business days and resolving data-related requests within 30 business days. For more complex requests, we will keep you informed of progress and the expected resolution timeline.

If you are not satisfied with how Mantra88 has handled your privacy enquiry or complaint after contacting us directly, you have the right to seek independent advice from a data protection authority or a solicitor with expertise in Malaysian privacy law.