Privacy Policy — Mega88

This Privacy Policy (hereinafter referred to as the "Policy") sets out the basis upon which Mega88 (hereinafter referred to as "Mega88", "we", "us", or "our") processes the personal data of individuals who access or use the Mega88 online gaming and sports betting platform at mega88.casa (hereinafter referred to as the "Platform").

This Policy applies to all Members, registered users, visitors, and any individual whose personal data Mega88 processes in connection with the Platform. It covers data collected through the Website, communications channels (including live chat and email), and any associated services provided by Mega88.

This Policy should be read in conjunction with Mega88's Terms & Conditions, which constitute the overarching legal agreement governing your use of the Platform.

For the purposes of this Privacy Policy, the following terms shall have the meanings set out below:

Mega88, the operator of the Platform at mega88.casa, acts as the Data Controller with respect to all Personal Data processed in connection with the Platform and its services. As Data Controller, Mega88 is responsible for ensuring that your Personal Data is processed lawfully, fairly, and transparently, and in accordance with the principles set out in this Policy.

Mega88 collects Personal Data across the following categories, each of which is collected only to the extent necessary for the purposes described in this Policy:

Mega88 does not collect special categories of sensitive Personal Data (such as racial or ethnic origin, political opinions, health data, or biometric data) unless strictly required by applicable law, in which case explicit consent will be obtained.

Mega88 collects Personal Data through the following means:

• Direct interactions: When you register an Account, complete KYC verification, make a deposit or withdrawal, set responsible gambling limits, contact customer support, or respond to promotions, you provide Personal Data directly to Mega88.
• Automated technologies: When you access and use the Platform, Mega88 automatically collects Technical Data and Usage Data through server logs, cookies, web beacons, and similar tracking technologies. Further detail is provided in the Cookies section of this Policy.
• Third-party sources: Mega88 may receive Personal Data from third-party KYC verification providers, fraud detection services, and payment processors (including Malaysian banking partners and e-wallet operators) in order to verify your identity, confirm payment method ownership, and assess fraud risk.
• Public sources: In limited circumstances relevant to fraud prevention or regulatory compliance, Mega88 may consult publicly available sources such as sanctions lists, politically exposed person (PEP) databases, or adverse media databases.

Mega88 processes your Personal Data for the following specific purposes, each underpinned by a legitimate legal basis:

Where Mega88 relies on consent as the legal basis for processing, you retain the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Mega88 does not sell, rent, or trade your Personal Data to third parties for commercial purposes. However, in order to operate the Platform and fulfil our legal obligations, we share Personal Data with the following categories of third parties under appropriate contractual and technical safeguards:

• Payment Processors: Malaysian banking partners (Maybank, CIMB, Public Bank, Hong Leong) and e-wallet operators (Touch 'n Go eWallet, Boost, GrabPay), as well as DuitNow and FPX gateway operators, receive the minimum data necessary to process deposits and withdrawals on your behalf.
• KYC & Identity Verification Providers: Specialist third-party providers who conduct identity document verification and liveness checks on behalf of Mega88 to satisfy anti-money laundering obligations.
• Fraud Detection & Security Services: Technology providers who assist Mega88 in identifying fraudulent activity, device fingerprinting, and anomalous account behaviour.
• Cloud Infrastructure Providers: Third-party cloud hosting and data centre operators who provide the secure server infrastructure on which the Platform and its data reside.
• Regulatory Authorities: Mega88 may be required to disclose Personal Data to competent regulatory authorities, law enforcement agencies, or courts in response to lawful requests or as required by applicable law.
• Professional Advisers: Legal counsel, auditors, and compliance consultants, where necessary, under strict confidentiality obligations.

Mega88 uses cookies and similar tracking technologies on the Platform to ensure proper functionality, enhance your browsing experience, and gather analytical data to improve Platform performance. By using the Platform, you consent to the use of cookies in accordance with this Policy.

The categories of cookies used by Mega88 are as follows:

• Strictly Necessary Cookies: Essential for the Platform to function correctly, including session authentication, security tokens, and load balancing. These cannot be disabled without impairing Platform functionality.
• Functional Cookies: Enable the Platform to remember your preferences — such as language settings, deposit limits you have set, and game display preferences — to provide a more personalised experience.
• Analytical Cookies: Used to collect aggregated statistical data about how Members use the Platform, including which pages are visited most frequently and where errors occur. This data is used solely for internal Platform improvement purposes.
• Security Cookies: Used for fraud detection and bot prevention purposes, helping Mega88 identify and block automated or malicious access attempts.

You may control cookie settings through your browser preferences. Please note that disabling certain cookies may affect the functionality of the Platform. Mega88 does not use third-party advertising or behavioural targeting cookies.

Mega88 retains Personal Data only for as long as is necessary to fulfil the purpose for which it was collected, or for as long as is required by applicable law. Our general data retention approach is as follows:

• Account Data: Retained for the duration of your active Account plus a minimum of five (5) years following account closure, to satisfy anti-money laundering record-keeping obligations.
• Transaction Records: Financial transaction data, including deposit and withdrawal records, is retained for a minimum of seven (7) years in accordance with applicable financial record-keeping requirements.
• KYC Documents: Identity documents submitted for KYC verification are retained for a minimum of five (5) years following account closure or the completion of the relevant transaction, whichever is later.
• Communications Data: Customer support transcripts and email correspondence are retained for a period of three (3) years from the date of the relevant interaction.
• Technical & Log Data: Server logs and technical access records are retained for up to twelve (12) months for security and fraud investigation purposes.
• Marketing Preferences: Records of your marketing consent or opt-out are retained for as long as is necessary to demonstrate compliance with applicable communications laws.

Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised so that it can no longer be associated with any identifiable individual.

Mega88 implements a comprehensive suite of technical and organisational measures to protect your Personal Data against unauthorised access, accidental loss, destruction, or disclosure. Our security infrastructure includes:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the Mega88 Platform is encrypted using Transport Layer Security (TLS) to prevent interception.
• Encrypted Data Storage: Personal Data stored on Mega88 servers is encrypted at rest. Sensitive fields such as identity document data and payment credentials are subject to additional field-level encryption.
• Access Controls: Access to Personal Data within Mega88's systems is restricted on a strict need-to-know basis. All staff with data access privileges are subject to confidentiality obligations and regular security training.
• Intrusion Detection Systems: Mega88 operates continuous network monitoring and intrusion detection systems to identify and respond to potential security incidents in real time.
• Two-Factor Authentication (2FA): Mega88 supports two-factor authentication for Member accounts to provide an additional layer of account security.
• Regular Security Audits: Mega88's systems undergo periodic internal and third-party security assessments to identify and remediate vulnerabilities.

As a Member and Data Subject, you hold the following rights with respect to your Personal Data processed by Mega88. These rights may be exercised by contacting our support team at [email protected] with a clear description of your request and sufficient information to verify your identity.

Mega88 will respond to all valid data subject requests within thirty (30) calendar days of receipt. In complex cases, this period may be extended by a further two months, in which case you will be notified of the extension and the reasons for it.

The Mega88 Platform is strictly intended for individuals aged 21 years and above. Mega88 does not knowingly collect, process, or retain the Personal Data of individuals under the age of 21.

Where Mega88 becomes aware — through KYC verification or any other means — that a minor has registered an Account or provided Personal Data, the Account will be immediately suspended, all associated data will be reviewed and deleted in accordance with applicable law, and any funds held in the Account will be dealt with in accordance with our Terms & Conditions.

In operating the Mega88 Platform, your Personal Data may be processed by service providers or infrastructure partners located outside of Malaysia. Where such international transfers occur, Mega88 ensures that appropriate safeguards are in place to protect your data, including:

• Contractual clauses requiring recipient organisations to apply data protection standards equivalent to those observed by Mega88.
• Limiting transfers to jurisdictions that provide an adequate level of data protection as assessed by the applicable regulatory framework.
• Conducting due diligence on all third-party processors to whom Personal Data is transferred internationally.

Mega88's primary data processing infrastructure is hosted in secure, access-controlled data centres. The Platform's payment processing infrastructure specifically leverages Malaysian-regulated financial channels — including DuitNow, FPX, and licensed e-wallet operators — to minimise cross-border data transfer for financial transactions wherever possible.

Mega88 reserves the right to update, amend, or replace this Privacy Policy at any time in response to changes in applicable law, regulatory guidance, technological developments, or changes to our data processing practices. The date of the most recent revision is indicated at the top of this Policy.

Where a change is material — meaning it significantly affects the way we collect or use your Personal Data, or alters your rights — Mega88 will endeavour to provide advance notice by prominently displaying a notice on the Platform or by sending a communication to the email address associated with your Account.

Your continued use of the Platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. We encourage you to review this page periodically to stay informed of any changes.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way Mega88 processes your Personal Data, please contact our support and compliance team using the details below:

If you are dissatisfied with the way Mega88 has handled your Personal Data or your data subject request, you have the right to lodge a complaint with the appropriate data protection supervisory authority in your jurisdiction. Mega88 welcomes all feedback relating to data handling practices and treats all complaints seriously as part of our ongoing commitment to privacy and transparency.

For further information about your rights and how Mega88 keeps your experience safe, secure, and compliant, please also review our Terms & Conditions and our Responsible Gambling page.