madrid88 Privacy Policy

1. Introduction

madrid88 ("the Platform", "We", "Us", "Our") is committed to protecting the personal data of all registered Members and visitors. This Privacy Policy applies to all data collected through the madrid88 website at madrid88.club, any associated mobile applications, customer support channels, and promotional communications.

By accessing the Platform or creating a madrid88 account, you acknowledge that you have read, understood, and agreed to the terms of this Privacy Policy. If you do not agree with any provision of this Policy, you must discontinue use of the Platform and contact us to request deletion of any data we hold about you.

This Policy should be read alongside our Terms & Conditions, which govern your use of the madrid88 Platform in its entirety.

2. Data Controller

madrid88 is the data controller responsible for the personal data processed in connection with the Platform. As data controller, madrid88 determines the purposes and means by which your personal data is processed. Where data processing is carried out by third-party service providers on behalf of madrid88 (for example, payment processors or game software providers), those parties act as data processors under written data processing agreements that require them to process data only on madrid88's documented instructions and in accordance with applicable data protection law.

For all privacy-related enquiries, including data subject requests, please contact us at the details provided in Section 14 of this Policy.

3. Data We Collect

3.1 Registration Data

When you create a madrid88 account, we collect the information you provide during the registration process, including:

• Full legal name
• Date of birth (to verify you are aged 21 or above)
• Residential address
• Email address
• Mobile phone number
• Preferred currency
• Username and encrypted password

3.2 Identity Verification (KYC) Data

To comply with our obligations and to protect Members from fraud and identity theft, madrid88 may request identity verification documents including a government-issued photo identification (MyKad, passport), proof of address, and proof of payment method ownership. KYC documents are processed securely and retained only for as long as required by our record-keeping obligations.

3.3 Financial Data

We collect transaction records relating to deposits, withdrawals, wagers, and bonuses on your madrid88 account. We do not store full payment card numbers or banking credentials. Payment processing is handled by our payment service providers who are independently PCI-DSS compliant. For e-wallet transactions (Touch n Go eWallet, Boost, GrabPay), we receive transaction reference numbers and confirmation statuses only.

3.4 Usage and Technical Data

When you use the Platform, we automatically collect technical information including:

• IP address and geolocation data (country and city level)
• Device type, operating system, and browser information
• Session duration, pages visited, and features used
• Login timestamps and session activity logs
• Game history, bet records, and gameplay statistics

3.5 Communications Data

If you contact madrid88 customer support, we retain records of your correspondence, including chat transcripts, email exchanges, and support ticket histories. This data is used to resolve your queries and improve our support quality.

4. How We Use Your Data

madrid88 uses your personal data for the following purposes:

• Account creation and management: To register your account, verify your identity, and maintain your account in accordance with our Terms & Conditions.
• Service delivery: To provide access to games, process bets and wagers, and deliver the core functionality of the madrid88 Platform.
• Payment processing: To process deposits and withdrawals via your chosen payment method, including Touch n Go eWallet, Boost, and FPX bank transfers.
• Regulatory compliance: To fulfil our anti-money laundering (AML), counter-terrorism financing (CTF), and age verification obligations, including the maintenance of transaction records.
• Fraud prevention and security: To detect and prevent fraudulent activity, collusion, bonus abuse, and unauthorised account access.
• Responsible gaming: To monitor gameplay patterns that may indicate problem gambling behaviour and to administer self-exclusion and limit requests appropriately.
• Customer support: To respond to your queries, resolve complaints, and improve the quality of our support services.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates, where you have provided consent or where we have a legitimate interest in doing so, subject to your opt-out rights.
• Platform improvement: To analyse usage patterns, identify technical issues, and develop new features that improve the madrid88 experience for Malaysian players.

5. Legal Basis for Processing

madrid88 processes your personal data on the following legal bases:

• Contract performance: Processing necessary to provide you with the services described in our Terms & Conditions — account management, game access, payment processing.
• Legal obligation: Processing required to comply with applicable laws — age verification, AML/CTF record-keeping, regulatory reporting.
• Legitimate interests: Processing for fraud prevention, security monitoring, responsible gaming oversight, and platform analytics, where our interests do not override your fundamental privacy rights.
• Consent: Where required by law, processing for direct marketing purposes will be based on your explicit consent, which you may withdraw at any time by contacting customer support or updating your communication preferences in your account settings.

6. Data Sharing & Disclosure

madrid88 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your data with the following categories of recipients where strictly necessary:

• Payment service providers: Touch n Go Digital, Boost, GrabPay, Maybank, CIMB, Hong Leong Bank, and other payment processors receive transaction data necessary to process your deposits and withdrawals.
• Game software providers: Licensed game studios receive anonymised or pseudonymised game session data necessary to operate their games on our platform.
• Identity verification services: KYC and age verification providers process identity document data under our instruction and under strict confidentiality obligations.
• IT and infrastructure providers: Cloud hosting, content delivery, and cybersecurity vendors who process data as data processors under written agreements.
• Law enforcement and regulators: Where required by applicable law, court order, or regulatory direction, madrid88 may disclose personal data to competent authorities. We will notify you of such disclosures where legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of the Platform's assets, your personal data may be transferred to the successor entity, subject to equivalent privacy protections.

7. Cookies & Tracking Technologies

madrid88 uses cookies and similar tracking technologies to operate the Platform, maintain your authenticated session, remember your preferences, and analyse usage patterns. The categories of cookies we use include:

• Strictly necessary cookies: Essential for the Platform to function — session authentication, security tokens, and load balancing. These cannot be disabled without impairing core functionality.
• Functional cookies: Remember your language preferences, display settings, and recently visited game categories to personalise your madrid88 experience.
• Analytics cookies: Collect aggregated data about how Members navigate the Platform — which pages are visited most, where users encounter errors, and how long sessions last. This data informs platform improvements.
• Marketing cookies: Track the effectiveness of our promotional campaigns. Where consent is required, marketing cookies will only be activated with your explicit agreement.

You may configure your browser to refuse cookies or to alert you when cookies are being sent. Note that disabling strictly necessary cookies will prevent you from logging in to your madrid88 account.

8. Data Retention

madrid88 retains your personal data for as long as your account remains active and for a defined period following account closure, as required by our legal and regulatory obligations. Specific retention periods include:

• Account registration and KYC data: Retained for a minimum of five (5) years following account closure, in accordance with AML record-keeping requirements.
• Financial transaction records: Retained for a minimum of seven (7) years following each transaction, in accordance with financial record-keeping standards.
• Game history and bet records: Retained for a minimum of three (3) years for dispute resolution and audit purposes.
• Customer support correspondence: Retained for two (2) years from the date of the last interaction.
• Marketing consent records: Retained for the duration of your account and for two (2) years following account closure or withdrawal of consent.

Upon expiry of applicable retention periods, data is securely deleted or anonymised in accordance with our data disposal procedures.

9. Data Security

madrid88 implements technical and organisational security measures proportionate to the risks posed by the personal data we process. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform
• Encrypted storage of passwords using industry-standard hashing algorithms
• Role-based access controls limiting staff access to personal data on a need-to-know basis
• Regular security assessments and penetration testing of platform infrastructure
• Intrusion detection systems and real-time security monitoring
• Secure data centre facilities with physical access controls

10. Your Rights

Subject to applicable law, you have the following rights in relation to your personal data held by madrid88:

• Right of access: You may request a copy of the personal data madrid88 holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data where we no longer have a legal basis to retain it, subject to our regulatory record-keeping obligations.
• Right to restriction: You may request that we temporarily suspend processing of your data in certain circumstances, for example while a rectification request is being assessed.
• Right to data portability: Where processing is based on your consent or on contract performance, you may request receipt of your data in a structured, machine-readable format.
• Right to object: You may object to processing based on legitimate interests, including direct marketing. We will honour marketing opt-outs promptly.
• Right to withdraw consent: Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact madrid88 customer support with your request. We will respond within thirty (30) calendar days. We may require identity verification before processing a data subject request to prevent unauthorised disclosure of your personal data.

11. Children's Privacy

The madrid88 Platform is strictly intended for individuals aged 21 and above. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that a registered account belongs to a person under 21, the account will be immediately suspended, all associated data will be secured, and the matter will be reviewed in accordance with our age verification procedures. If you believe a minor has registered on the Platform, please contact us immediately at the details in Section 14.

12. Third-Party Links

The madrid88 Platform does not include links to third-party websites for commercial purposes. Where references to payment providers or game studios appear on the Platform, these are informational only and do not constitute endorsement of the privacy practices of those entities. madrid88 accepts no responsibility for the privacy practices or content of any third-party websites or services.

13. Changes to This Policy

madrid88 reserves the right to update or amend this Privacy Policy at any time. Revised versions will be published on the Platform with an updated "Last Updated" date. Where changes are material, we will endeavour to notify registered Members via their registered email address prior to the changes taking effect. Your continued use of the Platform following publication of any amended Policy constitutes your acceptance of the revised terms. If you object to any change, you should cease using the Platform and contact us to exercise your data rights.

14. Contact Us

For all privacy-related enquiries, data subject access requests, or complaints regarding the handling of your personal data by madrid88, please contact our Data Protection team:

• Email: [email protected] (plain text — not a clickable link)
• Subject Line: Include "Privacy Request" in your email subject line for prioritised handling.
• Live Chat: Available 24/7 on the Platform for general enquiries.
• Response Time: Privacy requests will receive an acknowledgement within 5 business days and a substantive response within 30 calendar days.

If you are not satisfied with our response to a privacy complaint, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.