madrid88 Privacy Policy

1 Data Controller

1.1 madrid88 (referred to as "madrid88", "we", "us", or "our") is the data controller responsible for personal data collected through the madrid88.win Platform and all associated services.

1.2 As data controller, madrid88 determines the purposes and means by which personal data of registered Players and Platform visitors is processed. This Privacy Policy describes those purposes and means in full.

1.3 For all data protection enquiries, Players may contact madrid88 via the contact details set out in Section 16 of this Policy.

2 Personal Data We Collect

2.1 madrid88 collects the following categories of personal data from Players and Platform visitors:

• Identity Data: Full legal name, date of birth, gender, nationality, and copies of government-issued identification documents (e.g., Malaysian MyKad or passport) where provided for KYC verification;
• Contact Data: Email address, Malaysian mobile phone number, and residential address;
• Account Data: Username, encrypted password hash, account creation date, and account status history;
• Financial Data: Bank account details, e-wallet identifiers (Touch n Go eWallet, Boost), transaction history including deposit amounts, withdrawal amounts, and payment method used. Note: madrid88 does not store full card or bank account numbers directly — these are processed through certified payment processors;
• Gaming Activity Data: Bet history, game session logs, win/loss records, bonus usage, and responsible gaming settings configured by the Player;
• Technical Data: IP address, device type and model, operating system, browser type and version, time zone, and approximate geolocation derived from IP;
• Communications Data: Records of support interactions via live chat, WhatsApp, Telegram, and email.

3 How We Collect Personal Data

3.1 madrid88 collects personal data through the following means:

• Direct provision: Information you provide when registering an Account, completing KYC verification, making deposits, submitting support requests, or responding to promotions;
• Automated collection: Technical and Gaming Activity data collected automatically through the Platform's systems as you browse, log in, and use madrid88 services;
• Third-party sources: Identity and fraud verification data from licensed KYC and anti-money laundering service providers; payment processing data from our certified payment partners; and publicly available data where relevant for fraud prevention.

4 How madrid88 Uses Your Personal Data

4.1 madrid88 uses your personal data for the following purposes:

• To create, verify, and maintain your madrid88 Account and provide access to the Platform;
• To process deposits, withdrawals, and all other financial transactions on your Account;
• To verify your identity and age in compliance with our KYC and responsible gaming obligations;
• To detect, prevent, and investigate fraud, money laundering, underage access, and other prohibited conduct;
• To administer bonuses, promotions, and the madrid88 loyalty programme;
• To provide customer support and respond to your enquiries;
• To send transactional communications including deposit confirmations, withdrawal notifications, and security alerts;
• To send promotional communications where you have consented or where we have a legitimate interest in doing so, subject to your right to opt out at any time;
• To comply with applicable legal and regulatory obligations, including reporting requirements under anti-money laundering legislation;
• To improve Platform performance, game offerings, and user experience through anonymised analytics.

5 Legal Basis for Processing

5.1 madrid88 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform our contractual obligations to you as a registered Player — account creation, transaction processing, and service delivery;
• Legal obligation: Processing required to comply with anti-money laundering laws, age verification requirements, and regulatory reporting obligations applicable to licensed gaming operators;
• Legitimate interests: Processing for fraud prevention, platform security, and improving our services where those interests are not overridden by your data protection rights;
• Consent: Processing for marketing communications and non-essential cookies where you have provided explicit consent. You may withdraw consent at any time.

6 Data Sharing & Disclosure

6.1 madrid88 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share personal data only in the following circumstances:

• Service providers: Trusted third-party vendors engaged by madrid88 to provide essential Platform services, including payment processors (handling Touch n Go eWallet, Boost, and bank transfer transactions), KYC and identity verification providers, fraud prevention services, IT infrastructure providers, and customer support tools. All such providers are contractually bound to process your data only for the specified purpose and in accordance with applicable data protection law;
• Gaming software providers: Certified game studios (such as Evolution Gaming, PG Soft, Pragmatic Play) receive the minimum data necessary to deliver their games and maintain fair play integrity on the madrid88 Platform;
• Regulatory and legal authorities: Where madrid88 is legally required to disclose personal data to regulatory bodies, law enforcement, or courts under applicable law — including anti-money laundering reporting obligations;
• Business transfers: In the event of a merger, acquisition, or sale of the madrid88 business, personal data may be transferred to the acquiring entity, subject to equivalent privacy protections.

7 Cookies & Tracking Technologies

7.1 madrid88 uses cookies and similar tracking technologies on the Platform for the following purposes:

• Essential cookies: Required for the Platform to function correctly, including session management, madrid88 Login state persistence, and security token validation. These cannot be disabled without breaking Platform functionality;
• Analytics cookies: Used to collect anonymised data on how Players use the Platform, which pages are visited most, and where technical issues occur. This data is used solely to improve the Platform;
• Preference cookies: Store your Platform preferences such as language settings and display options between sessions.

7.2 You may manage non-essential cookie preferences through your browser settings. Note that disabling certain cookies may affect Platform performance or cause some features to function incorrectly.

8 Data Retention

8.1 madrid88 retains personal data for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations — whichever period is longer.

8.2 In practice, this means:

• Account and Identity Data is retained for the duration of your Account's active status, plus a minimum period of five (5) years following Account closure, in compliance with anti-money laundering record-keeping requirements;
• Transaction and Gaming Activity Data is retained for a minimum of five (5) years to satisfy financial audit and regulatory reporting requirements;
• Support communications are retained for two (2) years from the date of the interaction;
• Technical and analytics data in anonymised or aggregated form may be retained indefinitely for Platform improvement purposes.

8.3 On expiry of the applicable retention period, personal data will be securely deleted or anonymised.

9 Data Security

9.1 madrid88 implements technical and organisational security measures appropriate to the risk, including:

• 256-bit SSL/TLS encryption for all data in transit between your device and madrid88 servers;
• Encryption of stored sensitive data including passwords (stored as salted cryptographic hashes only — never in plain text) and financial identifiers;
• Role-based access controls ensuring madrid88 staff can only access personal data on a strict need-to-know basis;
• Regular security audits, penetration testing, and vulnerability assessments of Platform infrastructure;
• Two-factor authentication availability for Player Accounts to reduce the risk of unauthorised access.

9.2 Notwithstanding the above measures, no internet transmission or electronic storage system is entirely secure. madrid88 cannot guarantee absolute security of data but commits to notifying affected Players without undue delay in the event of a data breach that is likely to result in a high risk to their rights and freedoms.

10 Your Data Rights

10.1 Subject to applicable law, registered Players have the following rights in respect of their personal data held by madrid88:

• Right of access: You may request a copy of the personal data madrid88 holds about you;
• Right of rectification: You may request correction of inaccurate or incomplete personal data;
• Right of erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to overriding legal obligations to retain it;
• Right to restrict processing: You may request that madrid88 limits its processing of your data in certain circumstances;
• Right to data portability: You may request that your personal data be provided in a structured, commonly used, machine-readable format;
• Right to object: You may object to processing of your data based on legitimate interests, including for direct marketing purposes;
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

10.2 To exercise any of the above rights, contact madrid88 via the details in Section 16. madrid88 will respond to verified requests within thirty (30) days.

11 International Data Transfers

11.1 As an online Platform with international technology partners, madrid88 may transfer personal data to service providers located outside of Malaysia. Where such transfers occur, madrid88 ensures that appropriate safeguards are in place — including contractual data protection clauses — to maintain a level of data protection equivalent to that required under applicable Malaysian law.

11.2 By registering on madrid88, you acknowledge and consent to the transfer of your personal data to countries outside Malaysia where necessary for the provision of the services described in this Policy.

12 Children's Privacy

12.1 The madrid88 Platform is strictly restricted to individuals aged 21 years and above. madrid88 does not knowingly collect, process, or retain personal data from individuals under the age of 21.

12.2 If madrid88 becomes aware that personal data of a person under 21 has been collected, we will take immediate steps to delete that data and close the associated Account. If you believe a minor has registered on madrid88, please notify us immediately via the contact details in Section 16.

13 Marketing Communications

13.1 With your consent, madrid88 may send you promotional emails, SMS messages, or Platform notifications about bonuses, new games, sports events, and other offers relevant to your interests as a Player.

13.2 You may opt out of marketing communications at any time by: (a) following the unsubscribe link in any marketing email; (b) updating your communication preferences in Account Settings; or (c) contacting madrid88 support directly.

13.3 Opting out of marketing communications will not affect transactional communications such as deposit confirmations, withdrawal notifications, or security alerts, which madrid88 is required to send in connection with Account management.

14 Third-Party Links

14.1 The madrid88 Platform may contain references to third-party services — for example, licensed game providers or payment processors. madrid88 is not responsible for the privacy practices of any third-party websites or services. We encourage Players to review the privacy policies of any third-party services they interact with independently of the madrid88 Platform.

15 Updates to This Privacy Policy

15.1 madrid88 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or Platform services. Material changes will be communicated to registered Players via their registered email address or via a prominent Platform notification.

15.2 The date of the most recent revision is displayed at the top of this Policy. Continued use of the madrid88 Platform following notification of an updated Privacy Policy constitutes acceptance of the revised terms.

16 Contact Us

For any questions, requests, or complaints regarding this Privacy Policy or madrid88's data practices, please contact our team:

• Live Chat: Available 24/7 via the madrid88 Platform
• WhatsApp & Telegram: Available via links on the Platform's contact section
• Email: [email protected]

madrid88 aims to acknowledge all written data enquiries within 48 hours and to resolve them within 30 days. If you are not satisfied with our response, you may escalate your complaint to the relevant data protection authority in your jurisdiction.