Privacy Policy Megga88 – Personal Data Protection for Malaysian Members

Megga88 ("we", "our platform") is an online sports betting and casino platform operating in Malaysia, serving members from across the country — from Kuala Lumpur and Shah Alam to Penang, Johor Bahru, Kota Kinabalu, and Kuching. We understand that your trust in us depends not only on fair gameplay and fast withdrawals — but also on how we manage and protect the personal information you entrust to us.

This Privacy Policy describes Megga88's practices for collecting, using, storing, and protecting personal data, and applies to all members using our services — including Sports Betting (Malaysia Super League football, EPL, badminton), Live Casino (baccarat, roulette), progressive jackpots, virtual sports, and live matches.

Megga88 complies with Malaysia's Personal Data Protection Act 2010 (PDPA) and all related regulations. We have appointed a Data Privacy Officer responsible for ensuring ongoing compliance with all applicable data protection legislation.

Megga88 only collects personal data that is necessary to provide the services you request and to fulfil our legal obligations. The data we collect falls into three main categories:

Data You Provide Directly:

• Registration Information: Full name, Malaysian mobile number, email address, date of birth, and state of residence.
• Identity Verification Information (KYC): MyKad number, identity document copies uploaded during the KYC process, and age verification selfies where required.
• Financial Information: E-wallet account details (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow) or Malaysian bank account details (Maybank, CIMB, and others) linked to your Megga88 account for deposit and withdrawal purposes.
• Communications: Records of live chat conversations, emails, and messages sent to the Megga88 customer support team.

Automatically Collected Data:

• Technical Data: IP address, web browser type, device operating system, screen resolution, and device information used to access the platform.
• Usage Data: Pages visited, time spent, links clicked, searches performed within the platform, and general navigation patterns.
• Gaming Data: Betting records, casino game history, results, wager amounts, and activity timestamps for all games on Megga88.
• Location Data: General location based on IP address — we do not collect precise GPS data unless you explicitly consent.

Data from Third-Party Sources:

• Identity verification information from licensed KYC service providers.
• Anti-money laundering (AML) screening data from recognised compliance service providers.
• Information from payment providers (Touch 'n Go, GrabPay, DuitNow, etc.) required to verify and process transactions.

Megga88 uses your personal data only for legitimate and necessary purposes. Below are the primary ways your data is used on the Megga88 platform:

• Account Management: Creating and maintaining your Megga88 account, processing logins, resetting passwords, and updating your profile information.
• Transaction Processing: Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX Maybank2u or CIMB Clicks, and processing withdrawal of winnings to your account.
• KYC & Age Verification: Ensuring all members meet the minimum age requirement of 18 years and verifying their identity for AML compliance and regulatory requirements.
• Fraud Prevention & Security: Detecting and preventing fraud, money laundering, bonus abuse, duplicate accounts, and other suspicious activity that could compromise the security of the platform and other members.
• Service Improvement: Analysing usage patterns to improve the interface, surface relevant games and promotions, and enhance the overall playing experience on Megga88.
• Service Communications: Sending important notices about your account, transactions, changes to terms, security alerts, and other service-related information.
• Customer Support: Processing enquiries, resolving complaints, and providing technical assistance to members who require support.
• Legal Compliance: Meeting the reporting and compliance obligations required under applicable Malaysian law, including PDPA 2010 and AML requirements.

Megga88 does not sell, rent, or trade members' personal data to third parties for marketing purposes. However, in the course of normal business operations, we may need to share certain data with the following parties:

• Payment Providers: Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX, and banking providers such as Maybank and CIMB receive the transaction data required to process your deposits and withdrawals. This sharing is limited strictly to what is necessary and is governed by each provider's own privacy policy.
• KYC & AML Providers: Licensed identity verification and anti-money laundering compliance service providers that help Megga88 meet our regulatory obligations.
• Game Software Providers: Internationally licensed casino gaming and Sports Betting platform providers that handle the technical operation of games on the Megga88 platform receive the session data necessary to run those games.
• Legal Authorities: Megga88 will disclose personal data when required by Malaysian law, court order, or a competent regulatory authority. We will notify you of any such disclosure unless we are legally prohibited from doing so.
• IT & Security Service Providers: Companies providing hosting, cybersecurity monitoring, and technical support services to Megga88, with limited access to your data under strict confidentiality agreements.

Protecting members' personal and financial data is Megga88's top priority. We continually invest in the latest security infrastructure and practices to ensure your data is always safeguarded against unauthorised access, disclosure, alteration, or destruction.

Key security measures we have implemented include:

• 256-bit SSL Encryption: All communications between your browser and Megga88's servers are encrypted using the latest TLS protocol with 256-bit key length. This ensures that sensitive data such as login credentials and financial details cannot be intercepted by third parties during transmission.
• Data Encryption at Rest: Member passwords are stored using a strong one-way hashing algorithm — even Megga88 staff cannot read your password in plain text. Sensitive financial data is encrypted at rest using AES-256 encryption.
• Two-Factor Authentication (2FA): Megga88 offers two-factor authentication for account logins and major financial transactions, adding an extra layer of security even if your password is compromised.
• 24/7 Security Monitoring: Automated monitoring systems oversee all platform activity around the clock to swiftly detect and respond to any suspicious activity or security threats.
• Internal Access Controls: Access to members' personal data within Megga88's internal systems is restricted on a strict need-to-know basis. Only staff who require access to perform their duties are permitted to view that data, and all access is recorded in an audit log.
• Regular Penetration Testing: Megga88 conducts regular security assessments, including penetration testing by independent security experts, to identify and address system vulnerabilities before they can be exploited.

Megga88 retains your personal data only for as long as necessary to fulfil the original purpose of collection or to meet our legal obligations. Retention periods vary depending on the data category and applicable legal requirements:

• Active Account Data: Profile data, contact information, and preferences are retained for as long as your account remains active, and can be updated at your request at any time.
• Financial & Transaction Records: All deposit, withdrawal, and financial transaction records are retained for a minimum of 7 years following the last transaction, in line with Malaysia's accounting and AML legal requirements.
• KYC & Identity Verification Records: Identity verification documents and KYC records are retained for 5 years following account closure, or longer if required by the relevant regulatory authorities.
• Game & Betting Records: Game and betting history is retained for 3 years for dispute resolution, compliance, and service improvement purposes.
• Communication Records: Live chat logs and customer support emails are retained for 2 years for quality control and dispute resolution purposes.
• Technical Data & Logs: Server access logs and technical data are retained for 12 months for security and incident investigation purposes.

Once the applicable retention period has ended, your personal data will be securely deleted or anonymised so it can no longer be linked back to you.

Under Malaysia's PDPA and the privacy principles we adhere to, you have the following rights regarding your personal data held by Megga88:

Megga88 uses cookies and similar tracking technologies to enhance user experience, maintain session security, and analyse platform usage patterns. Below are the types of cookies we use:

In operating the platform with international game software providers, payment providers, and certified IT infrastructure partners, Megga88 members' personal data may be transferred to or accessed from servers located outside Malaysia. Such transfers occur only when necessary and are subject to adequate safeguards.

Megga88 ensures that all cross-border data transfers are protected by one of the following mechanisms:

• Data processing agreements incorporating internationally recognised standard data protection clauses.
• Data recipients are located in countries that maintain data protection standards deemed adequate by the relevant regulatory authorities.
• Explicit, informed consent from the member for that specific transfer.

The Megga88 platform is strictly for individuals aged 18 and above. We do not knowingly collect personal data from minors under the age of 18. If we discover that personal data belonging to a minor has been collected without valid age verification, we will take immediate steps to delete that data and close the account in question.

Parents or guardians who believe their minor child may have registered an account on Megga88 are urged to contact us immediately at support@megga88.biz so we can take the appropriate action without delay.

The Megga88 platform may contain links to third-party websites, including payment provider sites such as Touch 'n Go eWallet or GrabPay, for transaction processing purposes. This Privacy Policy applies solely to the Megga88 platform and does not cover the privacy practices of those third-party websites.

Megga88 is not responsible for the content, privacy policies, or data protection practices of any third-party websites you may access through our platform. We recommend reading the privacy policy of every website you visit.

Megga88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, new legal requirements, or service improvements. Members will be notified of any material amendments via email or an in-platform notice at least 14 days before the changes take effect.

The last updated date of this Privacy Policy is displayed at the top of this page. Continued use of the Megga88 platform after any amendment takes effect constitutes acceptance of the revised policy. Previous versions of the Privacy Policy are available upon request by emailing support@megga88.biz.

If you have any questions, concerns, or requests regarding this Privacy Policy or how Megga88 handles your personal data, please contact our Data Privacy Officer through the following channels:

• Email: support@megga88.biz (subject: "Privacy Policy Enquiry")
• Live Chat: Available 24 hours a day via the Megga88 platform
• Response Time: We are committed to responding within 14 working days for all privacy-related enquiries.

If you are not satisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia or the relevant regulatory authority in your jurisdiction.