manis88 Privacy Policy — How We Collect, Use & Protect Your Personal Data

1. Introduction

This Privacy Policy ("Policy") is published by manis88 ("the Operator", "we", "us", "our") and governs how we collect, use, store, share, and protect personal information relating to users ("you", "Player") of the manis88 Platform accessible at manis88.club. manis88 is committed to handling personal data responsibly, transparently, and in accordance with the data protection obligations applicable under our International Gaming Authority (IGA) operating licence and any applicable Malaysian data protection legislation.

By registering for a manis88 Account or using any manis88 service, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal information as described herein. If you do not agree with this Policy, please do not register for or use the manis88 Platform.

2. Data Controller

For the purposes of this Policy, manis88 is the Data Controller in respect of all personal data collected through the manis88 Platform. As Data Controller, manis88 determines the purposes and means by which personal data is processed. All data-related queries, requests, and complaints should be directed to our Data Protection contact at [email protected] (plain text address — not a clickable link).

3. Data We Collect

manis88 collects personal data through several channels. The categories of data we collect, and the circumstances under which they are collected, are set out in the table below:

manis88 does not collect sensitive personal data such as biometric information, racial or ethnic origin data, religious beliefs, or health information, except where expressly required for responsible gaming purposes (e.g., self-exclusion or vulnerability assessments) with your explicit consent.

4. How We Use Your Personal Data

manis88 uses your personal data only for the purposes listed below. We do not use personal data for purposes that are incompatible with the purpose for which it was originally collected without your knowledge or consent.

• Account Management: To create, maintain, and administer your manis88 Account, including verifying your identity and processing your login credentials.
• Transaction Processing: To process deposits and withdrawals via your registered Malaysian payment channels (Maybank, CIMB, Public Bank, Touch n Go eWallet, Boost) and to maintain accurate financial records.
• Regulatory Compliance: To meet our obligations under our IGA operating licence, including Know Your Customer (KYC) identity verification, Anti-Money Laundering (AML) checks, and age verification.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, account abuse, and security threats on the manis88 Platform.
• Responsible Gaming: To monitor gaming patterns and identify potentially problematic behaviour, in accordance with our responsible gaming obligations. Where such patterns are identified, manis88 may contact you to offer support tools.
• Customer Support: To respond to your queries, complaints, and support requests in a timely and accurate manner.
• Platform Improvement: To analyse aggregated, anonymised usage data to improve the performance, features, and user experience of the manis88 Platform.
• Marketing Communications (opt-in only): To send you promotional offers, bonus notifications, and Platform updates where you have opted in to receive such communications. You may withdraw consent at any time.

5. Legal Basis for Processing

manis88 processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform our obligations under the Terms & Conditions you have accepted, including Account management and transaction processing.
• Legal Obligation: Processing required to comply with IGA licensing conditions, AML regulations, and any applicable Malaysian legislation.
• Legitimate Interests: Processing for fraud prevention, security monitoring, and internal analytics, where our legitimate interests are not overridden by your rights and interests.
• Consent: Processing for marketing communications and certain optional responsible gaming monitoring tools, where you have provided explicit, informed consent.

6. Data Sharing & Disclosure

manis88 does not sell, rent, or trade your personal data. We share personal data only in the following limited circumstances:

• Payment Processors: We share necessary financial and identity data with Malaysian payment service providers (including Maybank, CIMB, Public Bank, Touch n Go eWallet, and Boost) solely for the purpose of processing your deposits and withdrawals.
• Game Providers: Certain game providers may receive anonymised session data to facilitate gameplay and to certify RNG fairness. No directly identifiable personal data is shared with game providers without a data processing agreement.
• Regulatory Authorities: manis88 may be required to disclose personal data to the IGA, relevant Malaysian authorities, or law enforcement bodies where required by law, court order, or our operating licence conditions.
• KYC and AML Service Providers: We use licensed third-party identity verification and anti-money laundering screening services. These providers act as data processors under contractual obligations and may not use your data for their own purposes.

7. Data Retention

manis88 retains your personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods mandated by our IGA licence and applicable regulatory requirements:

• Account and identity data: Retained for a minimum of 5 years following Account closure, for AML compliance and audit purposes.
• Financial transaction records: Retained for a minimum of 7 years following the date of each transaction, in accordance with financial record-keeping requirements.
• Gaming history: Retained for a minimum of 3 years following the last gaming activity on the Account.
• Support communications: Retained for 3 years from the date of the last correspondence, unless retention is required for an ongoing dispute or investigation.
• Marketing consent records: Retained for as long as your Account is active or until you withdraw consent, whichever is earlier.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any individual.

8. Cookies & Similar Technologies

manis88 uses cookies and similar browser storage technologies on the Platform. A cookie is a small text file placed on your device by a web server. The following categories of cookies are used on the manis88 Platform:

• Strictly Necessary Cookies: Required for the Platform to function correctly, including maintaining your login session and remembering your security preferences. These cookies cannot be disabled without affecting Platform functionality.
• Analytics Cookies: Used to collect aggregated, anonymised information about how Players use the Platform, including page visit frequency, navigation paths, and feature usage. This data is used solely to improve Platform performance. No individual-level profiling is performed.
• Preference Cookies: Used to remember your Platform preferences, such as language settings and display options.

manis88 does not use advertising cookies, retargeting pixels, or third-party social media tracking technologies. You can manage or delete cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the manis88 Platform.

9. Data Security

manis88 implements a range of technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These include:

• 256-bit SSL/TLS encryption for all data transmitted between your browser and manis88 servers.
• Encryption at rest for all stored personal and financial data using industry-standard cryptographic protocols.
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis.
• Regular security audits and penetration testing conducted by independent third-party security firms.
• Two-factor authentication available for all Player Accounts and mandatory for all administrative access to Player data systems.
• Secure, segregated storage of player funds in accounts separate from operational funds.

While manis88 takes all reasonable precautions to protect your data, no internet-based service can guarantee absolute security. In the event of a data breach that is likely to result in a high risk to your rights, manis88 will notify affected Players without undue delay.

10. Your Data Rights

Subject to applicable law and regulatory retention requirements, you have the following rights in relation to your personal data held by manis88:

• Right of Access: You may request a copy of the personal data manis88 holds about you. We will respond to access requests within 30 calendar days.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data we hold about you.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data, subject to our legal obligation to retain certain data for regulatory compliance purposes.
• Right to Restrict Processing: You may request that we restrict the processing of your personal data in certain circumstances, for example while a dispute regarding accuracy is resolved.
• Right to Data Portability: Where processing is based on consent or contractual necessity, you may request your personal data in a structured, commonly used, machine-readable format.
• Right to Withdraw Consent: Where processing is based on consent (e.g., marketing communications), you may withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact manis88 at the email address listed in Section 14. All requests will be handled free of charge unless manifestly unfounded or excessive.

11. Children's Privacy

The manis88 Platform is strictly for users aged 21 and above. manis88 does not knowingly collect personal data from any individual under the age of 21. If we become aware that personal data has been collected from a minor, we will take immediate steps to delete that data and permanently close the associated Account. If you have reason to believe a minor has registered on the manis88 Platform, please notify us immediately at [email protected].

12. International Data Transfers

manis88 primarily stores and processes data within the jurisdiction of our IGA licence. Where data is transferred to third-party service providers (such as KYC verification partners or game providers) located in other jurisdictions, manis88 ensures that such transfers are subject to appropriate safeguards, including contractual data processing agreements that require the recipient to provide at least an equivalent level of protection to that required under applicable data protection law. manis88 does not transfer personal data to jurisdictions that do not provide an adequate level of protection without implementing compensating contractual mechanisms.

13. Changes to This Policy

manis88 reserves the right to update this Privacy Policy at any time. Where changes are material, we will notify Players via the Platform or by email to the registered Account address before the changes take effect. The date of the most recent revision is displayed at the top of this page. We encourage you to review this Policy periodically. Your continued use of the manis88 Platform after the effective date of any revision constitutes your acceptance of the updated Policy.

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or how manis88 handles your personal data, please contact our Data Protection team. All privacy-related correspondence is treated as confidential and handled by authorised personnel only.

Contact email: [email protected] (plain text — not a clickable link)

Please use the subject line "Privacy Request – [Your Account Username]" for all data rights requests. manis88 will acknowledge receipt of all formal privacy correspondence within 3 business days and will provide a substantive response within 30 calendar days.