Privacy Policy

This Privacy Policy (hereinafter "Policy") is issued by Mantra88 ("we", "us", "our", "the Operator") and governs the collection, processing, use, storage, and disclosure of personal data in connection with your access to and use of the Mantra88 platform accessible at https://mantra88.cam (the "Platform") and all services offered thereon (the "Services").

By registering an account, accessing the Platform, or engaging with any of the Services, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with any part of this Policy, you must cease use of the Platform and may request account closure by contacting our support team.

For the purposes of this Policy, the following terms carry the meanings ascribed to them below:

• "Personal Data" means any information that identifies or could reasonably be used to identify a natural person, directly or indirectly.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, or deletion.
• "Data Subject" means the individual to whom Personal Data relates — in this context, a registered Mantra88 player or website visitor.
• "Data Controller" means Mantra88 as the entity that determines the purposes and means of processing Personal Data.
• "Third Party" means any natural or legal person other than the Data Subject and Mantra88, including payment processors, KYC verification providers, and analytics services.
• "Cookies" means small text files placed on your device by the Platform to store browsing preferences and session information.
• "KYC" means Know Your Customer — the identity verification process required prior to processing withdrawals.
• "AML" means Anti-Money Laundering — the regulatory framework Mantra88 adheres to in order to detect and prevent financial crime.

Mantra88 collects the following categories of Personal Data:

Personal Data is collected through the following means:

• Direct submission: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, or contacting our support team.
• Automated technologies: Technical and usage data collected automatically when you access the Platform, including via cookies, server logs, and session tracking tools.
• Third-party sources: Identity verification and fraud screening data received from licensed KYC and AML service providers engaged by Mantra88.
• Payment processors: Transaction confirmation data received from payment networks including FPX, DuitNow, and e-wallet providers such as Touch 'n Go eWallet, Boost, and GrabPay, as well as local bank partners including Maybank, CIMB, Public Bank, and Hong Leong.

Mantra88 processes your Personal Data for the following purposes:

• To create, manage, and maintain your Mantra88 account.
• To verify your identity and age in compliance with KYC requirements (players must be 21 years of age or older).
• To process deposits and withdrawals via your registered payment methods.
• To detect, investigate, and prevent fraudulent transactions, money laundering, and other illegal activities.
• To provide customer support and respond to your enquiries via live chat or email.
• To send transactional notifications (e.g., deposit confirmations, withdrawal processing updates) related to your account activity.
• To monitor player activity for responsible gambling purposes, including identifying patterns that may indicate problem gambling behaviour.
• To personalise your experience on the Platform and, where you have opted in, to send promotional communications about relevant offers.
• To comply with applicable legal and regulatory obligations.
• To improve the Platform through analysis of aggregated usage data.

Mantra88 does not use your Personal Data for automated profiling that produces legal or similarly significant effects without your explicit consent.

Each processing activity carried out by Mantra88 rests on one or more of the following lawful bases:

• Contractual necessity: Processing is required to perform the contract between you and Mantra88 — including operating your account, processing payments, and delivering Services.
• Legal obligation: Processing is required to comply with applicable law, including KYC, AML, and age verification obligations.
• Legitimate interests: Processing is necessary for Mantra88's legitimate interests in fraud prevention, platform security, and service improvement, provided those interests are not overridden by your rights.
• Consent: For processing activities that are not strictly necessary — such as direct marketing communications — we rely on your explicit opt-in consent, which you may withdraw at any time.

Mantra88 does not sell, rent, or trade your Personal Data to third parties for their own commercial use. We may share your data only in the following circumstances:

Service Providers

We engage trusted third-party vendors who process data on our behalf under strict contractual data processing agreements. These include payment processors (e-wallets and banking partners), KYC/AML verification providers, cloud infrastructure providers, and customer support platform operators. These parties are permitted to use your data only in accordance with our instructions.

Legal and Regulatory Authorities

We may disclose Personal Data to relevant regulatory bodies, law enforcement agencies, or courts where required by applicable law, a valid legal order, or to protect the rights and safety of Mantra88, its players, or the public.

Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of Mantra88's assets, Personal Data held by the Operator may be transferred to the successor entity, subject to the same privacy protections as described in this Policy.

Some of Mantra88's service providers and infrastructure partners may be located outside of Malaysia. Where Personal Data is transferred internationally, Mantra88 ensures that such transfers are conducted in accordance with applicable data protection law and that adequate safeguards are in place to protect your data to a standard equivalent to that required domestically.

Safeguards may include standard contractual clauses, adequacy decisions, or equivalent binding commitments from the recipient entity. You may request information about the specific safeguards applicable to a given international transfer by contacting our Data Protection team via live chat.

Mantra88 retains Personal Data only for as long as is necessary to fulfil the purpose for which it was collected or as required by applicable law. Our general retention principles are as follows:

• Active accounts: Personal Data is retained for the duration of your account relationship with Mantra88.
• Closed accounts: Following verified account closure, most Personal Data is deleted or anonymised within a reasonable period, subject to mandatory retention obligations.
• KYC and financial records: Identity verification and transaction records may be retained for a minimum of five (5) years following account closure to comply with AML and financial crime prevention obligations.
• Support records: Customer support communications may be retained for up to two (2) years for quality assurance and dispute resolution purposes.

Upon expiry of applicable retention periods, Personal Data is securely deleted or irreversibly anonymised.

Mantra88 employs a comprehensive range of technical and organisational security measures to protect your Personal Data from unauthorised access, disclosure, alteration, and destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers.
• Encryption of sensitive data at rest within our databases.
• Role-based access controls ensuring that Personal Data is accessible only to employees and contractors with a legitimate operational need.
• Regular security audits, vulnerability assessments, and penetration testing of our platform infrastructure.
• Multi-factor authentication (MFA) requirements for privileged internal system access.
• Incident response procedures, including notification protocols in the event of a data breach affecting player data.

Mantra88 uses cookies and similar tracking technologies to enhance your experience on the Platform, maintain session continuity, and gather aggregated analytics data. The categories of cookies we use include:

• Strictly necessary cookies: Essential for the basic operation of the Platform, including maintaining your login session and security state. These cannot be disabled.
• Performance cookies: Used to collect anonymised data about how users interact with the Platform, helping us identify areas for improvement. No personally identifiable information is collected via these cookies.
• Functionality cookies: Enable personalisation features such as language preferences and display settings. Disabling these may impact your user experience.
• Analytics cookies: Help us understand aggregate usage patterns and Platform performance metrics through tools such as third-party analytics platforms.

You can control the placement of non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of some Platform features. Continued use of the Platform following your review of this Policy constitutes acknowledgment of our cookie practices.

Subject to applicable law, you hold the following rights with respect to your Personal Data processed by Mantra88. To exercise any of these rights, please contact our support team via 24/7 live chat or by email at [email protected].

Mantra88's Services are strictly for individuals who are 21 years of age or older. We do not knowingly collect Personal Data from any person under the age of 21. If we become aware that Personal Data has been collected from a minor, we will take immediate steps to delete that data and close the associated account.

Parents and guardians who believe that their child may have accessed the Platform or provided Personal Data to Mantra88 should contact our support team immediately via live chat so that appropriate action can be taken.

Mantra88 reserves the right to update or modify this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or our data processing practices. The "Last Updated" date at the top of this page will be revised accordingly upon each update.

Where amendments are material — meaning they meaningfully alter your rights or the way we process your Personal Data — we will make reasonable efforts to notify registered users via the contact information on file. We encourage all users to review this Policy periodically.

Your continued use of the Mantra88 Platform following the publication of any update to this Policy constitutes your acknowledgment and acceptance of the revised terms.

If you have any questions, concerns, or wish to exercise any of your data subject rights, please contact the Mantra88 Data Protection team through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, directly on the Mantra88 Platform. This is our fastest response channel — typical response time is under 2 minutes.
• Email: [email protected] — please include "Privacy Request" in the subject line for data-related enquiries.

Our support team serves players from across Malaysia, including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and beyond. All privacy-related communications are handled with strict confidentiality and in accordance with this Policy.

For matters related to your account terms and gambling rules, please also refer to our Terms & Conditions and Responsible Gambling pages.