Privacy Policy

This Privacy Policy (hereinafter "Policy") describes how megga888 (hereinafter "megga888", "we", "us", "our") collects, processes, stores, shares, and protects personal data provided by or collected from users (hereinafter "User", "Player", "you", "your") of the website located at https://megga888.cam and all associated pages and services (the "Platform").

megga888 takes the privacy and security of your personal data seriously. This Policy is designed to be read alongside our Terms and Conditions and our Responsible Gambling Policy, both of which form part of the broader agreement governing your use of the megga888 platform.

By registering an account, accessing, or using the megga888 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. If you do not agree with this Policy, you must cease using the platform and, if you have registered an account, contact support to request its closure.

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information that relates to an identified or identifiable natural person, including name, identification number, contact details, financial information, and online identifiers such as IP addresses.
• "Processing" means any operation or set of operations performed on personal data, including collection, recording, organisation, storage, adaptation, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" means megga888, the entity that determines the purposes and means of processing your personal data.
• "Data Processor" means any third-party service provider engaged by megga888 to process personal data on megga888's behalf and under megga888's instructions.
• "Cookies" means small text files placed on your device by the megga888 platform to facilitate session management, analytics, and personalisation functions.
• "KYC Data" means identity and address verification documents submitted by a User in compliance with megga888's Know Your Customer programme, including but not limited to copies of national identity cards (MyKad), passports, and utility bills.

megga888 collects personal data through several channels: directly from you when you register and use the platform, automatically through your use of the platform, and from third-party sources where required for verification purposes. The categories of personal data collected are set out in the table below.

3.1 Data You Are Not Required to Provide

Certain data fields beyond the mandatory registration requirements are optional. You are not required to provide optional data, but declining to do so may limit your access to certain platform features or promotional offers. megga888 will always clearly indicate which fields are mandatory at the point of collection.

3.2 Sensitive Personal Data

megga888 does not intentionally collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data, except where explicitly required by applicable law or where you have provided such data voluntarily in the context of a responsible gambling self-assessment.

megga888 uses personal data collected from Users for the following defined purposes only:

• Account Management: Creating, maintaining, and managing your registered account; verifying your identity and age; processing password resets; and communicating important account-related information.
• Transaction Processing: Processing deposits and withdrawals in Malaysian Ringgit (MYR) via verified payment channels including FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, bank transfer, and USDT TRC20; reconciling financial records; and issuing receipts.
• Legal and Regulatory Compliance: Fulfilling KYC and anti-money laundering (AML) obligations under our international gaming licence; responding to lawful requests from competent authorities; and retaining records as required by applicable law.
• Platform Security: Detecting and preventing fraud, unauthorised account access, money laundering, and prohibited conduct as defined in our Terms and Conditions; monitoring for suspicious activity patterns.
• Responsible Gambling: Monitoring gambling behaviour to identify potential problem gambling indicators; administering self-exclusion and deposit limit requests; and fulfilling our responsible gaming programme obligations.
• Service Improvement: Analysing aggregated usage data to improve the platform, identify technical issues, optimise game offerings, and enhance the overall player experience for Malaysian users.
• Communications: Sending you account notifications, transaction confirmations, and — where you have provided consent — promotional communications about megga888 offers and services relevant to Malaysian players.
• Customer Support: Responding to your enquiries, managing complaints, and maintaining records of support interactions for quality assurance purposes.

megga888 processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform our contract with you — i.e., to operate your Account, process transactions, and deliver the gaming services you have registered to use. Without this processing, megga888 cannot provide its services to you.
• Legal Obligation: Processing required to comply with applicable legal and regulatory obligations, including KYC verification, AML record-keeping, and responses to lawful requests from competent authorities.
• Legitimate Interests: Processing carried out in pursuit of megga888's legitimate business interests, including fraud prevention, platform security, service improvement, and responsible gambling monitoring — where these interests are not overridden by your data protection rights.
• Consent: Processing based on your explicit consent, such as the sending of promotional marketing communications. Where consent is the legal basis, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

megga888 does not sell, rent, or transfer your personal data to unaffiliated third parties for their own marketing or commercial use. Your personal data may be shared with third parties in the following limited circumstances:

6.1 Service Providers (Data Processors)

megga888 engages third-party service providers who process personal data on our behalf and under our documented instructions. These include: payment processing partners (including FPX network operators, DuitNow, Touch 'n Go, Boost, GrabPay, and Maybank/CIMB/Public Bank/RHB/Hong Leong Bank transaction infrastructure); KYC and identity verification providers; fraud detection and AML screening services; cloud infrastructure and data hosting providers; customer support platform providers; and licensed game content providers.

All Data Processors engaged by megga888 are contractually required to: process personal data only as instructed by megga888; implement appropriate technical and organisational security measures; not sub-process data without megga888's prior written consent; and promptly notify megga888 of any personal data breach.

6.2 Legal and Regulatory Disclosures

megga888 may disclose personal data to competent governmental, regulatory, or law enforcement authorities where required by applicable law, court order, or the lawful exercise of legal authority. megga888 will, where legally permissible, notify affected Users of such disclosure requests.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of megga888's business, personal data held by megga888 may be transferred to the relevant successor entity. Users will be notified of any such transfer and of any material changes to data processing practices that result from it.

megga888 uses cookies and similar tracking technologies to operate and improve the platform. The categories of cookies used are as follows:

• Strictly Necessary Cookies: Essential for the platform to function. These enable session management, account authentication, and security functions. These cookies cannot be disabled without impairing platform functionality.
• Functional Cookies: Enable the platform to remember your preferences (such as language settings and previously selected payment methods) to provide a more personalised experience.
• Analytical Cookies: Used to collect aggregated, anonymised data about how Users interact with the platform — including pages visited, session duration, and features used — to help megga888 understand usage patterns and improve the service.
• Security and Fraud Prevention Cookies: Used to identify and mitigate fraudulent activity, detect bot traffic, and enforce responsible gambling controls including session time monitoring.

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent you from using the platform. Disabling functional or analytical cookies will not prevent access but may reduce platform functionality and the relevance of your experience.

megga888 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, or licensing obligations. The following general retention periods apply:

• Account and Identity Data: Retained for the duration of your active Account plus a minimum of five (5) years following account closure, in compliance with AML and gaming licensing record-keeping requirements.
• Transaction Records: Retained for a minimum of five (5) years from the date of the transaction, consistent with financial record-keeping obligations under our international gaming licence.
• KYC Documents: Retained for a minimum of five (5) years from submission or account closure (whichever is later), as required by AML compliance obligations.
• Customer Support Communications: Retained for up to three (3) years from the date of the interaction, for quality assurance and dispute resolution purposes.
• Technical and Usage Data: Retained for up to two (2) years in identifiable form; thereafter retained only in aggregated, anonymised form for platform analytics.
• Marketing Consent Records: Retained for the duration of your consent plus one (1) year, to evidence lawful basis for prior communications.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised using technically sound methods that prevent reconstruction of identifiable information.

megga888 implements a layered security framework to protect personal data against unauthorised access, disclosure, alteration, and destruction. Technical and organisational security measures in place include:

• TLS 1.2/1.3 encryption for all data in transit between the User's browser and megga888's platform infrastructure.
• AES-256 encryption for personal data and financial records stored at rest on megga888's servers.
• Access controls restricting internal access to personal data on a strict need-to-know basis, with role-based permissions and audit logging of all data access events.
• Regular third-party security penetration testing and vulnerability assessments of platform infrastructure.
• Segregation of player funds from operational accounts, ensuring that player balances are protected independently of megga888's business cash flow.
• Data breach response procedures including detection, containment, and notification protocols consistent with international best practices.

megga888 operates as an international online gaming platform. Your personal data may be processed, stored, or accessed by megga888 or its Data Processors in jurisdictions outside of Malaysia, including the jurisdiction in which megga888 holds its international gaming licence and jurisdictions where its cloud infrastructure and technology partners are based.

Where personal data is transferred outside Malaysia, megga888 ensures that appropriate safeguards are in place to maintain the protection of your data to a standard equivalent to that required under applicable data protection frameworks. These safeguards may include: contractual clauses in Data Processing Agreements with third-party processors; processing in jurisdictions that have been assessed as providing adequate data protection standards; and technical security measures consistent with those described in Section 9 of this Policy.

Subject to applicable law and certain limited exceptions (including legal hold obligations), megga888 recognises the following data rights for registered Users:

To exercise any of the above rights, contact megga888's Data Protection team at [email protected] with the subject line "Data Rights Request". Please include your registered email address and a description of your request. Requests will be acknowledged within 5 business days and fulfilled within 30 calendar days, or you will be notified if additional time is required.

The megga888 platform is strictly intended for adults aged 21 years and above. megga888 does not knowingly collect personal data from any person under the age of 21. If megga888 becomes aware that personal data has been collected from a person under 21, the associated account will be immediately suspended, and all personal data collected will be securely deleted as soon as reasonably practicable.

If you are a parent or guardian and believe that a person under the age of 21 in your care has registered or attempted to register with megga888, please contact us immediately at [email protected]. We will investigate and take appropriate action promptly. 🔞

megga888 reserves the right to update or amend this Privacy Policy at any time. Where material changes are made to the Policy, megga888 will notify registered Users by email and/or by a prominent notice on the platform website no less than fourteen (14) days before the changes take effect, except where immediate amendment is required for legal or regulatory compliance purposes.

The "Last reviewed and updated" date displayed at the top of this Policy reflects the most recent revision. Your continued use of the megga888 platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised Policy. If you do not agree with the updated Policy, you should cease use of the platform and close your account.

We encourage you to review this Policy periodically. Archived versions of previous Privacy Policies are available upon request by contacting [email protected].

For any questions, concerns, or requests relating to this Privacy Policy or megga888's data processing practices, please contact us through the following channels:

• Email (Data Privacy Enquiries): [email protected] — please use the subject line "Privacy Policy Enquiry" or "Data Rights Request" as applicable.
• Live Chat: Available 24/7 on the megga888 platform, including Malaysian public holidays. For data privacy matters, please request escalation to the Data Protection team via live chat.

Our Data Protection team will acknowledge all privacy-related enquiries within 5 business days. Complex requests or formal data rights exercises will be responded to within 30 calendar days, with notification if an extension is required.