Privacy Policy Mega88 – How We Protect Malaysian Players' Personal Data

01 Mega88 Introduction & Commitment

Mega88 is a digital entertainment platform serving players across Malaysia. We understand that your trust is the foundation of the relationship we build with our member community. That trust cannot exist without transparency — and transparency starts with telling you clearly how your personal data is managed.

This Mega88 Privacy Policy is written in plain, easy-to-understand language — not dense legal jargon. We want you to genuinely understand what happens to your information, not just click "Agree" without knowing what you're signing up for.

Mega88 adheres to internationally recognised data protection principles, including data minimisation (we only collect what is necessary), purpose limitation (we only use data for the stated purposes), and storage limitation (we do not retain data longer than required).

If at any point you are uncomfortable with how Mega88 handles your data, you have the right to contact us, request a review, or in certain cases, request deletion of your data. These rights are explained in greater detail in Section 8 of this policy.

02 Personal Data We Collect

Mega88 collects your personal data in a number of different situations. The following outlines the categories of data we collect and the context in which it is collected:

Account Registration Data

When you register a new account with Mega88, we collect the following information:

• Full name as per MyKad or passport
• An active Malaysian mobile number registered in your name
• A valid email address
• Date of birth (for age verification — you must be 18 years of age or older)
• Chosen username and password

Identity Verification (KYC) Data

To process withdrawals or when your account reaches certain transaction thresholds, Mega88 may request additional identity verification documents:

• Copy of MyKad (front and back) or Malaysian passport
• Recent bank statement or proof of address
• Proof of payment method — for example, a screenshot of your Touch 'n Go eWallet or DuitNow showing your name
• A selfie with your identification document (in cases where further verification is required)

Financial Transaction Data

Every time you make a deposit or withdrawal on Mega88, we record transaction details including the amount, time, payment method used (Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay, FPX, or bank transfer), and transaction status. Please note that Mega88 does not store full bank account numbers or payment card details directly — these are managed by third-party payment gateways that are PCI-DSS compliant.

Gaming Activity Data

Mega88 records your gaming activity, including games played, bets placed, wins and losses, and session duration. This data is used for analytics, fraud detection, and ensuring compliance with responsible gambling requirements.

Technical & Device Data

When you access the Mega88 platform, we automatically collect certain technical information, including:

• Your IP address
• Device type and operating system (Android, iOS, Windows, etc.)
• Browser type and version used
• Access time and date
• Pages visited within the Mega88 platform

This technical data is collected automatically and is used to ensure the platform operates smoothly, identify and resolve technical issues, and detect suspicious or unauthorised access.

03 How Mega88 Uses Your Data

Mega88 uses your personal data only for clearly defined and lawful purposes. We do not use your data beyond what is stated here without your explicit consent. The following are the primary purposes for which your data is used:

Marketing Communications

Mega88 may use your email or phone number to send you information about promotions, the latest bonuses, and exclusive offers. You can opt out of marketing communications at any time by clicking the "unsubscribe" link in our emails or by contacting the support team to update your communication preferences. Opting out of marketing communications will not affect your ability to receive important service communications such as transaction confirmations and security notifications.

04 Sharing Data with Third Parties

Mega88 does not sell, rent, or disclose your personal data to third parties for their own marketing purposes. This is a commitment we uphold without exception.

However, there are situations where Mega88 needs to share certain data with trusted third parties in order to provide our services to you:

Authorised Service Providers

• Payment Gateway: To process deposits and withdrawals via Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay, FPX, and other payment methods, the necessary transaction information is shared with the relevant payment processors.
• Game Software Providers: Game providers such as Evolution Gaming, Pragmatic Play, and others may receive player identifiers to enable access to their games. No full identity information is shared.
• Cloud Services & Infrastructure: The Mega88 platform uses cloud computing services that comply with international security standards for data storage and processing.
• Analytics Services: We use analytics tools to understand how the Mega88 platform is used, in order to drive continuous improvement. Any data shared is in aggregate form and does not reveal individual identities.

Legally Mandated Disclosure

Mega88 may be required to disclose members' personal data to the relevant authorities in the following circumstances:

• Upon a court order or valid warrant issued by Malaysian authorities
• Investigation of financial crime, money laundering, or terrorism financing
• Valid requests from Malaysian law enforcement agencies

In all of the above cases, Mega88 will disclose only the minimum information necessary and will notify the affected member accordingly (unless we are legally prohibited from doing so).

05 Data Security Measures

Mega88 invests seriously in security infrastructure to ensure your data remains protected at all times. The following are the security layers we have in place:

Data Encryption

All data transmitted between your device and Mega88's servers is protected by 256-bit SSL (Secure Socket Layer) encryption — the same standard used by leading financial institutions worldwide. This means that even if someone were to intercept the data in transit, they would be unable to read it without the encryption key held exclusively by Mega88.

Sensitive data stored in our databases — including bank account information and identity documents — is also encrypted using strong encryption algorithms at rest.

PCI-DSS Compliance

All financial transactions on Mega88 are processed through payment gateways that comply with the highest level of PCI-DSS (Payment Card Industry Data Security Standard). Mega88 does not store credit or debit card details directly in our systems — all payment processing is handled by certified payment processors that adhere to these standards.

Access Controls

Access to Mega88 members' personal data is restricted to staff who require it to perform their job duties (the "least privilege" principle). All access is logged and monitored. Mega88 staff undergo regular background checks and data security training.

Continuous Monitoring

Mega88's security systems are monitored 24 hours a day to detect suspicious activity, intrusion attempts, or anomalies in data access patterns. Any security incidents are treated with high priority and handled according to established incident response protocols.

06 Cookies & Tracking Technologies

The Mega88 platform uses cookies and similar tracking technologies to enhance your user experience and ensure the platform functions properly.

Types of Cookies Used

• Essential Cookies: Required for the platform to function — for example, to maintain your login session. Without these cookies, you will not be able to use the Mega88 platform. This type of cookie cannot be disabled.
• Performance Cookies: Collects information on how users interact with the platform to help us identify technical issues and improve performance. Data collected is in aggregated form and does not reveal individual identities.
• Functional Cookies: Saving your preferences such as display language and account settings so you do not have to reconfigure them each time you log in.
• Analytics Cookies: Helps Mega88 understand platform usage patterns for continuous improvement purposes. This data is collected anonymously.

Managing Cookie Preferences

You can manage or block cookies through your web browser settings. Most modern browsers allow you to view, delete, or block specific cookies. Please note that blocking essential cookies may affect the functionality of the Mega88 platform. For optional cookies (performance, functional, analytics), you may opt out without affecting your basic access to the platform.

07 Data Retention Period

Mega88 does not retain your personal data indefinitely. We adhere to the principle of minimum retention — data is kept only for as long as necessary for the stated purpose or to fulfil legal obligations.

Data Retention Guidelines

• Active Account Data: Retained for as long as your account is active with Mega88, plus any period required by law following account closure.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysia's accounting and tax legal requirements.
• KYC Documents: Retained for a minimum of 5 years after the business relationship ends, in accordance with anti-money laundering legal requirements.
• Support Communication Logs: Retained for 2 years from the date of communication for reference and service quality purposes.
• Technical Data & Access Logs: Retained for a maximum of 12 months, unless required for an ongoing security investigation.

Once the applicable retention period has elapsed, your data will be permanently deleted or irreversibly anonymised so that it can no longer be associated with you. Mega88 follows secure data disposal procedures to ensure that deleted data cannot be recovered.

08 Your Rights as a Mega88 Player

You have certain rights regarding the personal data held by Mega88. Mega88 respects and facilitates the exercise of these rights:

To exercise any of the rights above, please contact the Mega88 support team via live chat or email at support@mega88.express. We will respond within 30 business days. In complex cases, this period may be extended, and you will be notified accordingly. Requests that cannot be fulfilled — for example, where they conflict with legal obligations — will be explained to you with detailed reasons.

09 Children's Privacy

The Mega88 platform is intended solely for individuals aged 18 years and above only. We do not knowingly collect or process personal data from individuals under the age of 18.

During the registration process, Mega88 carries out age verification to ensure all members meet the minimum age requirement. Should we find that personal data has been collected from someone under the age of 18, we will take immediate steps to delete that data and close the associated account.

If you are a parent or guardian and discover that your underage child has registered a Mega88 account without your consent, please contact us immediately at support@mega88.express. We will take prompt action to address the situation.

10 Amendments to the Privacy Policy

Mega88 reserves the right to amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or improvements to the way we protect your data. We are committed to informing you of any material changes.

When significant amendments are made to this Privacy Policy, Mega88 will:

• Displaying a clear notice on the Mega88 platform's main page
• Sending a notification to your registered email
• Updating the "Last Updated" date at the top of this page

You are encouraged to review this Privacy Policy periodically. Continued use of the Mega88 platform after any amendments take effect will be considered your acceptance of the updated Privacy Policy. If you do not agree with the changes, you have the right to close your account and withdraw any eligible balance.

11 Contact Us About Privacy

If you have any questions or concerns, or wish to exercise your rights under this Privacy Policy, the Mega88 privacy team is here to assist you:

• Live Chat: Available 24/7 on the Mega88 platform. All our agents are proficient in Bahasa Melayu and will direct your privacy inquiries to the relevant department.
• Email: support@mega88.express – please include "Privacy Inquiry" in the subject line of your email to help expedite processing. We will respond within 5 business days.

When submitting a privacy-related request, please include your full name, Mega88 account number, and a clear description of your request or concern. This will help us process your request promptly and accurately.

At Mega88, we view privacy as more than a legal obligation — it is a core part of the trust you place in us. Every privacy inquiry will be handled with the utmost respect and professionalism.