Megaa88 Privacy Policy

1Introduction

This Privacy Policy (the "Policy") describes how Megaa88 (the "Company", "we", "us", or "our"), the operator of the online gaming and sports betting platform at megaa88.cam (the "Platform"), collects, uses, stores, and protects the personal data of users ("you" or "Player") in connection with your use of megaa88.

Megaa88 is committed to protecting your privacy and handling your personal data in a lawful, transparent, and secure manner. This Policy is designed to comply with applicable data protection legislation, including Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international data protection frameworks applicable to our operating jurisdiction.

By registering an Account on megaa88 or continuing to use the Platform, you acknowledge that you have read and understood this Policy and consent to the data practices described herein. This Policy should be read together with our Terms & Conditions, which govern your overall use of the Platform.

2Definitions

The following terms carry the meanings ascribed below throughout this Policy:

• "Personal Data" means any information that relates to an identified or identifiable natural person, including name, contact details, identification numbers, financial information, and technical identifiers such as IP addresses.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, transmission, restriction, erasure, or destruction.
• "Data Controller" means Megaa88 in its capacity as the entity that determines the purposes and means of Processing Personal Data collected through the Platform.
• "Data Processor" means a third party that processes Personal Data on behalf of Megaa88 pursuant to a data processing agreement.
• "KYC" (Know Your Customer) means the identity and address verification process conducted by Megaa88 in compliance with anti-money laundering and gaming regulatory requirements.
• "Cookies" means small text files placed on your device by the Platform to store session and preference information.
• "PDPA" means Malaysia's Personal Data Protection Act 2010 and all subsidiary regulations made thereunder.

3Data We Collect

Megaa88 collects Personal Data through several channels and at different stages of your interaction with the Platform. The categories of data collected are set out below:

Megaa88 does not intentionally collect Sensitive Personal Data (such as racial or ethnic origin, religious beliefs, health data, or biometric data beyond what is contained in standard identity documents submitted for KYC). Where an identity document incidentally contains such information, it is stored only as a scanned image for KYC purposes and is not parsed or processed for any other purpose.

4How We Use Your Data

Megaa88 processes Personal Data for the following purposes:

• Account Management: To create, maintain, and manage your megaa88 Account, authenticate your identity on login, and facilitate account recovery.
• Payment Processing: To process deposits via Touch 'n Go eWallet, DuitNow, FPX, Maybank, CIMB, Public Bank, cryptocurrency, and other supported Malaysian payment channels, and to process withdrawal requests to your verified payment method.
• Regulatory Compliance: To conduct KYC identity verification, perform anti-money laundering (AML) screening, comply with gaming licence obligations, and respond to lawful requests from regulatory or law enforcement authorities.
• Platform Operation & Improvement: To deliver and maintain the gaming and betting services you use, monitor platform performance, fix bugs, and develop new features based on aggregated usage analytics.
• Responsible Gambling: To monitor gaming behaviour for signs of problem gambling, apply responsible gambling tools where appropriate, and communicate with players who may need support.
• Customer Support: To respond to your queries, resolve disputes, and maintain records of communications for quality assurance and training purposes.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates where you have opted in to receive such communications. You may opt out at any time via Account Settings or by contacting support.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, multi-accounting, bonus abuse, and other security threats to the Platform and its users.

5Legal Basis for Processing

Megaa88 processes your Personal Data on the following legal bases as applicable to each processing activity:

• Contractual Necessity: Processing is necessary to perform our contract with you — namely, to operate your Account, process your transactions, and provide the gaming services you have requested.
• Legal Obligation: Processing is required to comply with applicable legal and regulatory obligations, including KYC identity verification, AML screening, and gaming licence conditions.
• Legitimate Interests: Processing is necessary for megaa88's legitimate business interests, including fraud prevention, platform security, and internal analytics, where such interests are not overridden by your fundamental rights and freedoms.
• Consent: Where we rely on consent as the legal basis — for example, for direct marketing communications — you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6Sharing Your Data

Megaa88 does not sell your Personal Data to any third party. We may share your data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate confidentiality and data processing protections:

• Payment Service Providers: Malaysian payment infrastructure partners including Touch 'n Go, DuitNow, FPX operators, and licensed banks (Maybank, CIMB, Public Bank, Hong Leong, RHB) to process your deposit and withdrawal transactions.
• KYC & Identity Verification Providers: Authorised third-party identity verification services engaged to perform document checks and biometric verification as part of our KYC obligations.
• Game Content Providers: Licensed game studios and live casino operators whose games are hosted on the megaa88 Platform may receive aggregated game session data required to operate their titles.
• Regulatory and Law Enforcement Authorities: Where required or permitted by law, we may disclose Personal Data to gaming regulators, anti-money laundering agencies, tax authorities, or law enforcement agencies.
• IT Infrastructure and Security Providers: Cloud hosting, cybersecurity, and platform monitoring providers that process data on our behalf under strict data processing agreements.
• Professional Advisers: Legal, accounting, and compliance advisers where disclosure is necessary and subject to professional confidentiality obligations.

7Cookies & Tracking Technologies

Megaa88 uses cookies and similar technologies (including local storage and session tokens) to operate the Platform, improve your experience, and support our security and analytics functions. The categories of cookies we use are:

• Strictly Necessary Cookies: Essential for the Platform to function correctly. These include session authentication cookies, security tokens, and load-balancing identifiers. These cannot be disabled without impairing your ability to use the Platform.
• Functional Cookies: Used to remember your preferences, such as language settings and whether you have dismissed a notification. These improve your experience but are not essential to core functionality.
• Analytics Cookies: Used to collect aggregated, anonymised data about how Players navigate the Platform. This helps us identify areas for improvement and optimise performance. No individually identifiable data is shared with analytics providers.
• Security Cookies: Used to detect and prevent fraudulent activity, multi-accounting, and automated abuse of the Platform.

Most modern browsers allow you to manage or block cookies through browser settings. Please note that disabling strictly necessary cookies will affect the functionality of the megaa88 Platform, including your ability to log in and maintain a session.

8Security Measures

Megaa88 implements a layered security architecture to protect Personal Data against unauthorised access, disclosure, alteration, or destruction. Our technical and organisational security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the megaa88 Platform.
• AES-256 encryption for Personal Data stored in our databases at rest.
• Role-based access controls ensuring that only authorised personnel with a demonstrable business need can access Personal Data.
• Comprehensive audit logging of all administrative access to Personal Data systems.
• Regular third-party penetration testing and vulnerability assessments of the Platform and underlying infrastructure.
• Multi-factor authentication required for all internal system access by megaa88 staff.
• Incident response procedures for the detection, containment, and notification of any personal data breach in accordance with applicable regulatory requirements.

While megaa88 takes every reasonable precaution to protect your data, no internet transmission or electronic storage method is 100% secure. We encourage you to protect your own Account by enabling two-factor authentication, using a strong and unique password, and notifying us immediately if you suspect unauthorised activity on your Account.

9Data Retention

Megaa88 retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our general retention periods are as follows:

• Active Account Data (registration, financial, and gaming data): Retained for the duration of your Account and for a minimum of five (5) years following Account closure, in accordance with anti-money laundering regulations.
• KYC Identity Documents: Retained for a minimum of five (5) years from the date of the last transaction or Account closure, whichever is later, as mandated by AML compliance requirements.
• Transaction Records: Retained for a minimum of five (5) years to satisfy financial record-keeping obligations.
• Customer Support Communications: Retained for three (3) years from the date of the last interaction for quality assurance and dispute resolution purposes.
• Technical and Analytics Data (anonymised): Retained indefinitely in aggregated, anonymised form for platform development purposes. This data cannot be re-associated with any individual.
• Marketing Preferences: Retained until you withdraw consent or request deletion, after which marketing data is deleted within 30 days.

Upon expiry of the applicable retention period, Personal Data is securely and permanently deleted or anonymised in a manner that prevents recovery or re-identification.

10Your Rights

Subject to applicable data protection law, including Malaysia's PDPA, you have the following rights in respect of your Personal Data held by megaa88. To exercise any of these rights, please submit a written request to [email protected] with your Account details and a clear description of your request. We will respond within 30 days.

11Minors & Age Restriction

Megaa88 is strictly for persons aged 21 and above. The Platform is not directed at, and does not knowingly collect Personal Data from, persons under the age of 21. Age verification is conducted as part of the registration and KYC process.

If megaa88 becomes aware that Personal Data has been collected from a person under 21, that Account will be immediately closed, all associated data will be deleted or anonymised as required by applicable law, and any deposited funds will be handled in accordance with our Terms and Conditions. If you believe a person under 21 has registered on megaa88, please notify us immediately at [email protected].

12Policy Amendments

Megaa88 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform functionality. Where a material change is made, we will provide notice to registered Players via the email address on file, with a minimum notice period of 14 days before the amended Policy takes effect.

Minor, non-material updates — such as corrections of typographical errors or clarifications that do not substantively alter your rights — may be made without advance notice. The "Last Updated" date at the top of this Policy will always reflect the most recent revision. We recommend checking this page periodically to stay informed.

Your continued use of the megaa88 Platform after the effective date of an updated Policy constitutes your acceptance of the revised data practices. If you do not agree to the updated Policy, you should cease using the Platform and may request Account closure as described in our Terms & Conditions.

13Contact Us

If you have questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data by megaa88, please contact us through any of the following channels. All privacy-related enquiries are handled by our compliance team.

For issues relating to responsible gambling, self-exclusion, or account restrictions, please refer to our Responsible Gambling page. For questions about the Terms that govern your use of megaa88, please refer to our Terms & Conditions.