Privacy Policy Mantra88 — Personal Data Protection for Malaysian Players

Mantra88 takes every player's privacy seriously. This Privacy Policy clearly explains what data we collect, how it is used, who has access to it, and what your rights are as a user of our platform. Please read it carefully before using Mantra88's services.

Updated: January 2026 Applicable: Malaysia SSL 256-bit Active
Mantra88's Privacy Commitment
256-bit SSL Encryption
All data is transmitted securely
No Sale of Data to Third Parties
Your data is not for sale
Right to Access & Deletion
You can request data deletion at any time
Malaysia PDPA Compliance
Compliance with the Personal Data Protection Act 2010
Secure Data Storage
Servers protected by firewall & 24/7 monitoring

Mantra88's Six Data Protection Principles

This is the foundation of how Mantra88 handles every piece of information entrusted to us by our players.

Data Minimisation

Mantra88 collects only the data genuinely necessary to provide platform services, meet KYC requirements, and process financial transactions. We do not collect additional data that is irrelevant or unnecessary to platform operations.

Encryption & Technology Security

Every piece of data that passes through the Mantra88 platform — from login through to deposit processing via Touch 'n Go eWallet, DuitNow, or FPX — is protected by 256-bit SSL encryption. Our servers are safeguarded by advanced firewalls and 24/7 intrusion detection systems.

Data Use Transparency

Mantra88 is committed to being fully transparent about how your data is used. Every purpose for data collection is clearly stated in this policy. We do not use player data for any undisclosed purpose without first obtaining your renewed consent.

No Sale of Data to Third Parties

Mantra88 has never sold and will never sell players' personal data to any third party for marketing or commercial purposes. Data sharing with third parties occurs only in strictly limited situations explicitly stated in this policy — such as with payment providers for transaction processing.

Full Control in Your Hands

Mantra88 players have full rights over their personal data — the right to access, correct, transfer, and request deletion of that data. Such requests can be made through our Bahasa Malaysia-speaking support team at any time, free of charge and without unnecessary hassle.

Malaysia PDPA Compliance

Mantra88 fully complies with the Personal Data Protection Act 2010 (PDPA) of Malaysia, which is the primary legal framework governing the processing of personal data in Malaysia. This compliance is an ongoing responsibility that we take very seriously as a platform operating for Malaysian players.

1

Introduction & Scope of This Privacy Policy

This Privacy Policy is published by Mantra88 ("Mantra88", "we", "our platform") and applies to all users who register, access, or use the Mantra88 platform via the website mantra88-jit.com or any related mobile application.

We are committed to protecting your privacy and handling your personal data in a transparent, responsible manner that complies with applicable laws in Malaysia, including Personal Data Protection Act 2010 (PDPA). This Privacy Policy explains:

  • What personal data Mantra88 collects from you
  • How and why that data is used
  • Who data may be shared with in limited circumstances
  • How we protect your data from unauthorized access
  • Your rights regarding your personal data and how to exercise them

By using the Mantra88 platform, you acknowledge that you have read and understood this Privacy Policy. If you disagree with any part of this policy, please stop using the platform and contact us to close your account.

This Privacy Policy should be read together with Terms & Conditions and Responsible Gaming Policy Mantra88 for a full overview of your rights and responsibilities.

2

Personal Data We Collect

Mantra88 collects various categories of personal data from players depending on the nature of their interaction and level of platform usage. Below is an explanation of each category:

Data You Provide Directly:

  • Registration Information: Full name, Malaysian phone number, email address and date of birth provided when opening a Mantra88 account
  • KYC Verification Information: A copy of your identity card (MyKad), passport, or other identity document requested during the account verification process
  • Bank Account & E-Wallet Information: Bank account numbers, Touch 'n Go eWallet account numbers, GrabPay, DuitNow, or any other payment method you register for deposits and withdrawals
  • Support Communications: The content of any Live Chat, WhatsApp, or email messages you send to the Mantra88 support team

Automatically Collected Data:

  • Technical Data: IP address, device type, operating system, browser type, and screen size
  • Usage Data: Pages visited within the Mantra88 platform, session times and duration, games played, and matches wagered on
  • Transaction Data: The complete history of deposits, withdrawals, bets, wins and losses in your Mantra88 account
  • Approximate Location Data: Based on IP address, for regional compliance purposes — we do not collect GPS or precise location data without your explicit consent

Mantra88 does not request or store sensitive information such as full credit card numbers or PIN numbers. All financial transactions are processed through certified third-party payment channels such as FPX and licensed Malaysian e-wallet operators.

3

How & Why We Use Your Data

Mantra88 uses the personal data collected solely for the following purposes:

  • Platform Service Provision: Enabling you to log in, play, place sports bets including the Malaysia Super League and EPL, play Live Casino, slots and e-sports games, and make deposits and withdrawals via supported Malaysian payment methods
  • Identity Verification (KYC): To comply with legal requirements relating to financial compliance, anti-money laundering, and verification that all players are 18 years of age or older
  • Financial Transaction Processing: Processing deposits and withdrawals securely via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, FPX and other available methods
  • Fraud Prevention & Security: Detecting suspicious activity, protecting accounts from unauthorized access, and maintaining the integrity of the Mantra88 platform
  • Customer Support: Responding to inquiries and resolving issues you have reported to the Mantra88 support team
  • Platform Improvements: Analysing aggregated usage patterns to improve the design, performance, and features of the Mantra88 platform for the benefit of all players
  • Account-Related Communications: Sending important notifications about your account, policy changes, and security information — this is not optional marketing communication
  • Marketing (With Consent): Sending information about Mantra88 promotions, bonuses, and offers only where you have given your consent to receive marketing communications

You may withdraw your marketing consent at any time through the communication preferences settings in your Mantra88 account, or by contacting our support team.

4

Data Sharing With Third Parties

Mantra88 maintains a strict policy on data sharing: we does not sell, rent, or trade player personal data to any party for marketing or commercial purposes. Data sharing with third parties only takes place in the following limited circumstances:

  • Payment Service Provider: Required transaction data is shared with providers such as FPX, Touch 'n Go, GrabPay and DuitNow operators solely to process your deposits and withdrawals. These providers are bound by strict data protection agreements
  • Identity Verification Provider: Information required for the KYC process is shared with licensed and approved identity verification platforms for document verification purposes
  • Game Providers: Only the minimum data necessary to deliver a seamless gaming experience is shared with slot game providers, Live Casino providers, and e-sports platforms that partner with Mantra88.
  • Legal Authority: Information may be disclosed to Malaysian authorities or relevant regulatory bodies if required by law, court order or a legitimate investigation
  • Professional Advisor: Lawyers, accountants, or auditors bound by strict professional confidentiality obligations

In all data-sharing situations described above, Mantra88 ensures that the relevant third parties have adequate data protection measures in place and receive only the minimum data necessary for the stated purpose.

5

Mantra88 Data Security Measures

Mantra88 implements multiple layers of security to protect players' personal data from unauthorised access, disclosure, alteration, or destruction:

  • SSL 256-bit Encryption: All communications between your browser or app and the Mantra88 servers are encrypted using 256-bit SSL standards — the highest level of security used by leading financial institutions worldwide
  • Two-Factor Authentication (2FA): Available and strongly recommended for all Mantra88 accounts, adding an extra layer of protection beyond your password alone
  • Firewall & Intrusion Detection System: Mantra88's server infrastructure is protected by enterprise-grade firewalls and an intrusion detection system (IDS/IPS) operating 24/7
  • Internal Access Controls: Mantra88 staff only have access to the data necessary for their specific role — the principle of least privilege is strictly enforced across all internal systems
  • Regular Security Audits: The Mantra88 platform undergoes regular penetration testing and security audits by independent parties to identify and address any vulnerabilities before they can be exploited
  • Continuous Monitoring: An automated monitoring system operates around the clock to detect suspicious access patterns and alert the Mantra88 security team immediately

Important Note: While Mantra88 takes all reasonable steps to protect your data, no system can be guaranteed 100% secure. You are also responsible for keeping your own Mantra88 account password safe. Our support team will never ask for your password — any such request is fraudulent.

6

Data Retention Period

Mantra88 retains players' personal data only for as long as necessary for the purposes stated in this Privacy Policy, or as required by applicable law. Our data retention guidelines are as follows:

  • Active Account Data: Retained for the duration your Mantra88 account remains active and for a defined period following account closure
  • Financial Transaction Data: Retained for a minimum of seven (7) years from the date of the transaction, in line with Malaysian financial and tax regulatory requirements
  • KYC Records: Retained for a minimum of five (5) years from the date of last verification, in line with anti-money laundering (AML) compliance requirements
  • Support Communication Logs: Retained for three (3) years for reference and dispute resolution purposes
  • Session & Usage Data: Technical log data is retained for a maximum of twelve (12) months for system improvement and security analysis purposes

When data is no longer needed and there is no legal obligation to retain it, Mantra88 will securely delete or anonymise that data using methods that ensure it cannot be recovered.

7

Your Personal Data Rights

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and Mantra88's internal policies, you have the following rights in relation to your personal data:

Right of Access

You have the right to request and receive a copy of the personal data Mantra88 holds about you. Such requests will be processed within 30 working days.

Right to Rectification

If any personal data held by Mantra88 is inaccurate or out of date, you have the right to request a correction promptly through your account settings or by contacting support.

Right to Erasure

You may request the deletion of your personal data under certain circumstances, subject to legal retention requirements applicable to financial accounts.

Right to Object

You may object to the processing of your data for direct marketing purposes at any time. Mantra88 will honour your objection immediately.

Right to Data Portability

You have the right to receive your data in a machine-readable format for transfer to another platform, should you choose to do so.

Right to Restriction of Processing

In certain circumstances, you may request that Mantra88 restrict the processing of your data while a dispute or review is pending.

To exercise any of the rights above, please contact Mantra88's Privacy Officer by email at support@mantra88-jit.com specifying the right you wish to exercise and your account details. We will verify your identity before processing any data-related request to ensure the security of your information.

8

Cookies & Tracking Technologies

Mantra88 uses cookies and similar tracking technologies to enhance the user experience, analyse platform performance and maintain the security of login sessions. Below is an explanation of the types of cookies used:

You can manage your cookie settings through your web browser. However, disabling essential cookies may affect the core functionality of the Mantra88 platform. Continued use of the Mantra88 platform after receiving a cookie notice is considered your consent to the use of cookies as described above.

9

Children's Data & Minor Protection

Mantra88 takes the protection of children and young people very seriously. The Mantra88 platform is strictly not intended for individuals under the age of 18. We do not knowingly collect personal data from anyone under the age of 18.

If Mantra88 becomes aware or discovers that personal data has been collected from a person under the age of 18, we will:

  • Closing the account immediately
  • Delete all data associated with that account as promptly as possible, in accordance with legal requirements
  • Returning any remaining balance (where applicable and once investigation is complete)

If you are a parent or guardian and have reason to believe that your child under the age of 18 has registered and used the Mantra88 platform, please contact our support team immediately at support@mantra88-jit.com.

10

Cross-Border Data Transfers

In the course of operating the Mantra88 platform, there are situations where players' personal data may be processed or stored on servers located outside Malaysia — for example, for data backup purposes, cloud infrastructure, or processing by the high-technology software providers we use.

In all cases of cross-border data transfers, Mantra88 ensures that:

  • Transfers occur only to countries or entities that provide an adequate level of data protection
  • Appropriate and legally binding data protection agreements are signed with all recipients of data outside Malaysia
  • The protection standards applied are equivalent to or exceed Malaysia's PDPA requirements
  • Data transfers are carried out using appropriate encryption both in transit and at rest

By using the Mantra88 platform, you agree that your personal data may be transferred to and processed outside of Malaysia, subject to the protections outlined in this section.

11

Amendments to This Privacy Policy

Mantra88 reserves the right to amend this Privacy Policy from time to time to reflect changes in data processing practices, new legal requirements, platform improvements, or player feedback.

When material amendments are made to this Privacy Policy, Mantra88 will:

  • Updating the "Last Updated" date at the top of this document
  • Display a clear notice within the platform for an appropriate period
  • Notify players via email or in-platform notice for significant amendments

Continued use of the Mantra88 platform after the effective date of any amendment constitutes acceptance of the updated Privacy Policy. We encourage you to review this page periodically to stay informed about how Mantra88 protects your data.

12

Contact Mantra88's Privacy Officer

If you have any questions, concerns or complaints regarding how Mantra88 handles your personal data, or if you wish to exercise any of the privacy rights outlined in this policy, please reach out to us through the following channels:

  • Privacy Email: support@mantra88-jit.com — please mark the subject as "Data Privacy Enquiry" for faster processing
  • Live Chat: Available 24 hours a day, 7 days a week directly within the Mantra88 platform for general privacy-related inquiries
  • WhatsApp Support: For privacy matters requiring immediate attention

Mantra88 aims to respond to all privacy-related enquiries within 14 working days. For more complex matters requiring thorough investigation, response times may be longer, but we will keep you updated on the progress within that 14-day period.

All privacy inquiries are handled in Bahasa Malaysia by our trained support team. Please don't hesitate to reach out to us with any concerns regarding your personal data.

Mantra88 Personal Data Handling Summary Table

Data Type Collected Retained Third-Party Sharing Sold
Registration Information Restricted
KYC Documents Restricted
Financial Transaction Data Payment Provider
Betting & Gaming History
Technical Data (IP, Device)
Support Communications
Approximate Location Data Temporary
Marketing Data (with consent) Options If you agree

"Restricted" means sharing only takes place with service providers directly involved in the relevant transaction and bound by data protection agreements. Mantra88 does not sell any data to any party under any circumstances.

Privacy at Mantra88 — What You Need to Know as a Malaysian Player

When you register with Mantra88, you entrust us with fairly sensitive information — your name, phone number, bank account details, and transaction history. That trust is not something we take lightly. At Mantra88, our Privacy Policy is not a document written purely for compliance purposes and then left to gather digital dust — it is a genuine operational guide that shapes how our team handles every piece of data relating to you.

One of the most common questions new Malaysian players ask the Mantra88 support team is: "Is my information safe?" The short answer — yes, and here's why: every transaction you make via Touch 'n Go eWallet, DuitNow, GrabPay, or FPX passes through layers of 256-bit SSL encryption. This means that even if someone managed to intercept your network traffic, what they'd see is nothing but a string of meaningless characters — without the decryption key that only Mantra88 and you possess.

Regarding the Personal Data Protection Act 2010 (PDPA) of Malaysia, this is the legislation that governs how organizations in Malaysia may collect, use, and store individuals' personal data. Mantra88 fully complies with the PDPA, which means you have legally enforceable rights over your data — not just promises written in a document with no teeth. These rights include the right to know what data we hold about you, the right to request a correction if any information is inaccurate, and in certain circumstances, the right to request deletion.

One thing Mantra88 wants to be completely transparent about is cookies. When you use the Mantra88 platform, essential cookies are required for it to function properly — without them, the system cannot recognise that you are logged in or retain your language settings. Analytics cookies help us understand which parts of the platform are most useful to players and which areas need improvement. All of this is done at an aggregate level and does not involve identifying individuals for marketing purposes without your consent.

Regarding KYC data — many Mantra88 players ask why they are sometimes required to submit a copy of their MyKad or other verification documents. This is not something Mantra88 has invented — it is a standard requirement set by international financial compliance frameworks for legally operating online betting platforms. Its purpose is to ensure the platform is not used for money laundering, terrorist financing or financial fraud. Your KYC data is stored with full encryption and can only be accessed by authorised Mantra88 staff for verification and compliance purposes.

Mantra88 players sometimes ask what happens to their data if they decide to close their account. The answer depends on the type of data. General account data and gaming activity data may be deleted upon request. However, financial transaction records must be retained for a minimum of seven years in accordance with Malaysian legal requirements relating to financial compliance — this includes all deposits and withdrawals made through methods such as FPX or DuitNow. This is not Mantra88's choice; it is the same legal obligation observed by all financial institutions in Malaysia.

Mantra88 is committed to continuously improving our privacy practices in line with technological and legal developments. We conduct regular internal reviews of our data handling procedures and update this Privacy Policy whenever material changes occur. If you have any concerns, questions, or wish to exercise your privacy rights, our Malaysian-speaking Mantra88 support team is always on hand to assist you in a friendly and professional manner.

Summary of Mantra88's Privacy Commitments

Mantra88 does not sell players' personal data. All data is protected by SSL 256-bit encryption. You have the right to access, amend, or request deletion of your data at any time. Our platform complies with the Malaysia PDPA 2010. For any privacy enquiries, contact us at support@mantra88-jit.com or read Terms & Conditions us for full context.

Playing at Mantra88 — Safe, Transparent & Protected

Register for free and enjoy a sports betting, casino, slots & e-sports platform that puts the privacy and data security of Malaysian players first.

SSL 256-bit PDPA Compliant TnG DuitNow FPX GrabPay
Bahasa Melayu