Privacy Policy
madrid888

This Privacy Policy ("Policy") is issued by madrid888 ("we", "us", "our", "the Platform") and sets out the basis on which personal data collected from users ("you", "User", "Member") will be processed by us. This Policy applies to all personal data collected through the madrid888 website at https://madrid888.cam, including any associated subdomains, mobile-optimised interfaces, and services provided under the madrid888 brand.

madrid888 is committed to safeguarding the privacy and security of every Member's personal information. We process personal data in accordance with applicable data protection legislation, including the principles of data minimisation, purpose limitation, accuracy, storage limitation, integrity, and confidentiality.

By registering an account with madrid888 or by continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should discontinue use of the Platform immediately.

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information that relates to an identified or identifiable natural person, including but not limited to name, date of birth, email address, telephone number, physical address, payment details, and device identifiers.
• "Processing" means any operation performed on personal data, including collection, recording, storage, retrieval, use, disclosure, transmission, erasure, or destruction.
• "Data Controller" means madrid888, being the entity that determines the purposes and means of processing personal data collected through the Platform.
• "Data Processor" means any third party engaged by madrid888 to process personal data on our behalf, in accordance with our documented instructions.
• "Consent" means freely given, specific, informed, and unambiguous indication of your agreement to the processing of your personal data for a stated purpose.
• "KYC" means Know Your Customer — the identity and age verification procedure required before full account access is granted, including withdrawal privileges.
• "Cookies" means small text files placed on your device by the Platform to facilitate session management, analytics, and personalisation functions.

madrid888 collects the following categories of personal data in the course of providing its services. We collect only what is necessary for the purposes outlined in this Policy — no more.

madrid888 collects personal data through the following channels:

4.1 Information You Provide Directly

• During account registration — name, contact details, date of birth, and login credentials.
• During KYC verification — government-issued identity documents and supporting verification materials.
• When making deposits or withdrawals — payment method information including e-wallet accounts (Touch 'n Go eWallet, Boost, GrabPay) and bank references (Maybank, CIMB, Public Bank, Hong Leong).
• When communicating with our customer support team via live chat, email, or any other channel.
• When responding to surveys, promotions, or completing responsible gambling assessments.

4.2 Information Collected Automatically

• Technical and device information collected via standard web server logs and analytics technologies when you access the Platform.
• Cookies and similar tracking technologies that record session data, preferences, and browsing behaviour on the Platform.
• Gaming and transaction data generated automatically as you interact with the Platform's games, betting markets, and financial features.
• Location data derived from your IP address — used solely for compliance, fraud prevention, and responsible gambling purposes.

4.3 Information from Third Parties

• Identity verification agencies engaged to perform KYC and anti-money laundering (AML) checks.
• Payment processors and e-wallet providers used to facilitate deposit and withdrawal transactions.
• Fraud prevention and risk management services that flag potentially suspicious activity.
• Game providers who supply aggregated gameplay data relating to activity on their licensed games.

madrid888 processes your personal data for the following specific and documented purposes:

• Account Management: Creating, maintaining, and administering your madrid888 account, including profile updates and security management.
• Service Delivery: Enabling you to access and use all Platform features including casino games, live dealer tables, sports betting, and financial transactions in MYR.
• KYC & Identity Verification: Verifying your identity and age (21+ requirement) to comply with responsible gambling obligations and applicable regulatory requirements.
• Payment Processing: Processing deposits and withdrawals via your chosen payment method — including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX (Maybank / CIMB / Public Bank / Hong Leong), and cryptocurrency.
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent transactions, account compromise, money laundering, and other illegal activities.
• Legal & Regulatory Compliance: Meeting our obligations under applicable anti-money laundering (AML), counter-terrorism financing (CTF), and gaming regulatory requirements.
• Customer Support: Responding to support queries, resolving disputes, and improving service quality based on interaction records.
• Responsible Gambling: Monitoring gaming behaviour to identify signs of problem gambling, applying self-exclusions and deposit limits, and complying with responsible gambling obligations.
• Platform Improvement: Analysing aggregated usage data to understand how Members use the Platform and to improve features, performance, and user experience.
• Marketing Communications: Sending promotional communications (only where you have given explicit consent and have not opted out). You may withdraw consent at any time.

madrid888 processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform our contract with you — account management, game access, payment processing, and customer support are all necessary for delivering the services you registered for.
• Legal Obligation: Processing required to comply with applicable laws — KYC / AML checks, regulatory reporting, responsible gambling compliance, and tax obligations fall under this basis.
• Legitimate Interests: Processing necessary for our legitimate business interests where these do not override your rights — fraud prevention, platform security, analytics, and service improvement are conducted on this basis.
• Consent: Where you have given explicit, freely-withdrawable consent — primarily for direct marketing communications and the use of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

madrid888 does not sell your personal data to third parties. We share personal data only in the circumstances described below, and only to the minimum extent necessary for the stated purpose:

• Payment Processors: Your payment details are shared with the relevant payment processor (e.g., FPX gateway, e-wallet providers) solely to process your financial transactions.
• Identity Verification Providers: KYC documentation is shared with our appointed identity verification partner to complete age and identity checks.
• Game Providers: Game providers receive limited technical data necessary for game delivery and dispute resolution. They do not receive your full personal profile.
• Fraud Prevention Services: We share relevant transaction and behavioural data with fraud prevention service providers to detect and prevent financial crime on the Platform.
• Regulatory Authorities: Where required by law or court order, madrid888 may disclose personal data to relevant regulatory bodies, law enforcement agencies, or judicial authorities.
• Corporate Transactions: In the event of a merger, acquisition, or sale of all or part of madrid888's business, personal data may be transferred to the acquiring entity, subject to the same privacy protections as set out in this Policy.

madrid888 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, accounting, or reporting obligations. Our general retention principles are as follows:

• Active Account Data: Retained for the duration of your registered account with madrid888, plus a minimum of five (5) years following account closure, to satisfy AML and regulatory record-keeping requirements.
• KYC & Identity Documents: Retained for a minimum of five (5) years following account closure, in accordance with anti-money laundering regulations.
• Transaction Records: Deposit, withdrawal, and gaming transaction records are retained for a minimum of seven (7) years for financial reporting and legal compliance purposes.
• Support Communications: Customer support records are retained for a period of three (3) years from the date of the last interaction.
• Marketing Data: Where consent for marketing communications is withdrawn, your email address will be removed from active mailing lists within 30 days. However, a suppression record will be maintained to ensure you are not re-added inadvertently.
• Technical & Behavioural Data: Anonymised analytics data may be retained indefinitely for Platform improvement purposes. Identifiable technical data is retained for a maximum of 24 months.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in a manner that prevents reconstruction of the original data.

madrid888 implements a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction.

9.1 Technical Measures

• 256-bit SSL/TLS Encryption: All data transmitted between your browser or device and the madrid888 Platform is encrypted using industry-standard 256-bit SSL/TLS protocols — the same level of encryption used by major financial institutions.
• Encrypted Data Storage: Sensitive personal data stored in our systems is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data is restricted to authorised personnel on a strict need-to-know basis, enforced through role-based access control systems.
• Network Security: Our Platform infrastructure is protected by firewalls, intrusion detection systems, and continuous security monitoring.
• Regular Security Audits: We conduct periodic internal and third-party security assessments to identify and remediate vulnerabilities.

9.2 Organisational Measures

• All staff with access to personal data receive mandatory data protection training.
• Data processors engaged by madrid888 are required to demonstrate adequate security measures and are bound by data processing agreements.
• We have documented incident response procedures to manage and report data breaches in accordance with applicable regulatory requirements.

Subject to applicable law and certain conditions, you have the following rights in respect of your personal data held by madrid888. You may exercise these rights by contacting our support team at [email protected].

madrid888 will respond to all valid rights requests within a reasonable timeframe and in any event within 30 calendar days of receipt. We may need to verify your identity before processing a request. In certain circumstances (e.g., legal retention obligations, ongoing investigations), we may be unable to comply with a request in full and will explain the reasons for any limitations.

madrid888 uses cookies and similar technologies (including local storage, session storage, and web beacons) to operate the Platform effectively, remember your preferences, and collect analytics data that helps us improve your experience.

11.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the Platform to function — these enable core features such as account login, session management, and security. They cannot be disabled without affecting Platform functionality.
• Functional Cookies: Remember your preferences and settings (such as language and currency display) to provide a personalised experience on subsequent visits.
• Analytics Cookies: Collect aggregated and anonymised information about how users interact with the Platform — pages visited, session duration, error occurrences — used solely for internal Platform improvement.
• Security Cookies: Used to detect and prevent fraudulent activity, including account takeover attempts and bot traffic.

11.2 Managing Cookies

You can control and manage non-essential cookies through your browser settings. Most modern browsers allow you to view, manage, block, and delete cookies. Note that blocking strictly necessary cookies will impair your ability to use the Platform. Your cookie preferences can also be managed through our on-Platform consent management tool where available.

madrid888 is strictly a platform for individuals aged 21 years and above. We do not knowingly collect or process personal data from individuals under the age of 21. The collection of personal data from minors is strictly prohibited under our Terms and Conditions, and we take this obligation seriously.

All registrations are subject to age verification through our KYC process. Where madrid888 has reasonable grounds to believe that a registered Member is under the age of 21, the account will be suspended immediately pending verification. If it is confirmed that the account holder is a minor, the account will be permanently closed, all funds returned where lawfully possible, and any winnings derived from gaming activity will be voided.

The madrid888 Platform integrates with a range of third-party service providers to deliver its full functionality. These include payment processors (including e-wallet providers such as Touch 'n Go eWallet, Boost, and GrabPay, as well as FPX-participating banks including Maybank, CIMB, Public Bank, and Hong Leong), game providers, KYC and AML verification services, fraud prevention tools, and analytics platforms.

Each third-party service provider operates under its own privacy policy and is independently responsible for its own data practices. madrid888 selects third-party providers with care and requires all providers to demonstrate adequate data protection standards. We are not responsible for the privacy practices of third-party websites that may be linked from external sources but that are not operated by madrid888.

madrid888 does not embed third-party social media tracking pixels or share personal data with advertising networks for the purpose of targeting external advertising to our Members.

As an internationally operating platform, madrid888 may transfer personal data to servers and service providers located outside Malaysia. Where such transfers occur, madrid888 ensures that appropriate safeguards are in place to protect personal data to a standard equivalent to that required under applicable data protection law.

Safeguards for international transfers may include: standard contractual clauses approved by the relevant data protection authority; transfers to jurisdictions recognised as providing an adequate level of data protection; or other legally recognised transfer mechanisms.

madrid888 reserves the right to amend this Privacy Policy at any time. Where material changes are made — changes that affect how we process your personal data in a way that may impact your rights — we will notify you by email and/or by a prominent notice on the Platform prior to the changes taking effect.

Non-material amendments (such as corrections, clarifications, or administrative updates) may be made without prior notice and will take effect from the date of publication on this page, as indicated by the "Last Updated" date above.

Your continued use of the madrid888 Platform following the effective date of any amendment constitutes your acceptance of the updated Policy. We encourage you to review this Policy periodically to remain informed of how we protect your personal data.

If you have any questions or concerns about this Privacy Policy, or if you wish to exercise any of your data protection rights, please contact madrid888 using the details below. Our support team will acknowledge your request promptly and endeavour to respond substantively within 30 calendar days.

If you are not satisfied with our response to your privacy concern, you have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction. madrid888 takes all privacy complaints seriously and will work constructively to resolve any legitimate concern raised.