Privacy Policy — megga88

1. Introduction

1.1 This Privacy Policy ("Policy") describes how megga88 ("megga88", "we", "us", "our") collects, processes, stores, and shares personal data in connection with your use of the megga88 platform at megga88.club ("Platform").

1.2 megga88 is committed to protecting the privacy of its players and handling personal data responsibly, transparently, and in compliance with applicable data protection laws, including the Personal Data Protection Act 2010 (PDPA) of Malaysia and any other applicable regulations.

1.3 By registering for a megga88 account or using any part of the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with this Policy, you should not use the megga88 Platform.

1.4 This Policy should be read together with the megga88 Terms & Conditions, which are incorporated by reference.

2. Personal Data We Collect

2.1 Registration Data

When you create a megga88 account, we collect the information you provide, including:

• Full legal name;
• Date of birth (for age verification — minimum 21 years);
• Email address;
• Mobile phone number;
• Residential address;
• Preferred username and password (password stored in hashed, non-recoverable form).

2.2 Identity Verification (KYC) Data

To comply with our obligations under international gaming authority guidelines and anti-money laundering requirements, megga88 collects:

• Government-issued photo identification (Malaysian MyKad, passport, or equivalent);
• Proof of residential address (utility bill, bank statement, or equivalent dated within 90 days);
• Source of funds documentation, where required for large transactions;
• A selfie or live photograph for identity matching purposes.

2.3 Financial Data

megga88 collects transaction data necessary to process deposits and withdrawals, including payment method identifiers (e-wallet account numbers, bank account numbers masked to last four digits), transaction amounts, and timestamps. megga88 does not store full bank account credentials or card numbers on its own servers — payment processing is handled by PCI-DSS compliant third-party payment providers.

2.4 Usage and Technical Data

When you use the megga88 Platform, we automatically collect certain technical information, including:

• IP address and approximate geolocation;
• Device type, operating system, and browser;
• Session duration, pages visited, and game activity logs;
• Login timestamps and session identifiers.

2.5 Communications Data

If you contact megga88 support via live chat, email, or any other channel, we retain records of those communications, including the content of the conversation, to assist with dispute resolution and service improvement.

3. How We Use Your Personal Data

megga88 uses the personal data we collect for the following purposes:

• Account management: To create and maintain your megga88 account, verify your identity, and enable access to the Platform.
• Age verification: To confirm that you meet the minimum age requirement of 21 years before permitting real-money gaming activity.
• Transaction processing: To process deposits and withdrawals in MYR via your selected payment method (Touch 'n Go eWallet, Boost, DuitNow, FPX, and other supported channels).
• Legal compliance: To meet our obligations under applicable anti-money laundering regulations, gaming authority requirements, and data protection laws.
• Fraud prevention: To detect and investigate suspicious activity, including duplicate accounts, bonus abuse, and unauthorised access attempts.
• Responsible gaming: To monitor gameplay patterns that may indicate problem gambling behaviour and to deliver self-exclusion and limit management features.
• Customer support: To respond to your queries, process complaints, and resolve account disputes.
• Platform improvement: To analyse aggregate usage data and improve the functionality, design, and content of the megga88 Platform.
• Marketing communications: To send you promotional offers, bonus updates, and newsletters where you have provided explicit consent to receive such communications. You may withdraw consent at any time.

4. Legal Basis for Processing

4.1 megga88 processes your personal data on the following legal bases as applicable:

• Contractual necessity: Processing required to perform the contract between megga88 and you as a registered player, including account management, payment processing, and game delivery.
• Legal obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering requirements, KYC obligations, and gaming authority mandates.
• Legitimate interests: Processing necessary for megga88's legitimate business interests, including fraud prevention, security monitoring, and platform improvement, where such interests are not overridden by your rights.
• Consent: Processing based on your explicit and freely given consent, such as for marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5. Data Sharing and Disclosure

5.1 megga88 does not sell or rent your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients for the purposes described in this Policy:

• Payment processors: E-wallet operators, FPX gateway providers, and banking partners to facilitate deposits and withdrawals in MYR.
• KYC and identity verification providers: Third-party services engaged to verify identity documents and confirm player eligibility.
• Game content providers: Software providers whose games are hosted on the megga88 Platform may receive anonymised session data necessary to deliver their gaming content.
• Regulatory and law enforcement authorities: Where megga88 is required by law, court order, or gaming authority directive to disclose your personal data.
• Professional advisers: Legal, accounting, and auditing firms engaged by megga88, subject to professional confidentiality obligations.

5.2 Any third parties with whom megga88 shares personal data are required to process it only for the specified purpose, maintain appropriate security standards, and comply with applicable data protection laws.

6. Cookies and Tracking Technologies

6.1 megga88 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device when you visit megga88.club.

6.2 The types of cookies megga88 uses include:

• Essential cookies: Required for the Platform to function, including authentication session cookies that keep you logged in to your megga88 account during a session.
• Analytics cookies: Used to understand how players interact with the Platform in aggregate, so we can identify pages or features that need improvement.
• Preference cookies: Used to remember your platform settings, such as language preference and display options.

6.3 You may configure your browser to refuse or delete cookies. Disabling essential cookies may prevent you from accessing certain features of the megga88 Platform, including account login.

7. Data Retention

7.1 megga88 retains your personal data for as long as your account remains active and for a period thereafter as required by applicable law or legitimate business purposes.

7.2 KYC documents and identity verification records are retained for a minimum of five (5) years following the closure of your megga88 account, in compliance with anti-money laundering regulatory requirements.

7.3 Transaction records are retained for a minimum of seven (7) years for accounting and regulatory purposes.

7.4 Upon expiry of applicable retention periods, personal data is securely deleted or anonymised so that it can no longer be linked to an identifiable individual.

8. Data Security

8.1 megga88 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the megga88 Platform;
• Encryption of sensitive data fields (including passwords, which are hashed and never stored in plain text);
• Restricted internal access to personal data on a need-to-know basis;
• Regular security audits and vulnerability assessments;
• Two-factor authentication options for player accounts.

8.2 Notwithstanding the above, no method of electronic transmission or storage is 100% secure. megga88 cannot guarantee absolute security of your data. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, megga88 will notify affected players without undue delay in accordance with applicable law.

9. Your Rights

9.1 Subject to applicable law, you have the following rights in relation to your personal data held by megga88:

• Right of access: You may request a copy of the personal data megga88 holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data. Many fields can be updated directly in your megga88 account settings.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to megga88's legal retention obligations.
• Right to restrict processing: You may request that megga88 restrict processing of your data in certain circumstances.
• Right to data portability: You may request your personal data in a structured, commonly used, machine-readable format where technically feasible.
• Right to withdraw consent: Where processing is based on consent (such as for marketing communications), you may withdraw consent at any time by updating your account notification preferences or contacting megga88 support.
• Right to object: You may object to processing of your personal data for direct marketing purposes at any time.

9.2 To exercise any of these rights, contact megga88 support via live chat or at [email protected]. megga88 will respond to verified requests within thirty (30) calendar days.

10. Children and Minors

11. Changes to This Policy

11.1 megga88 reserves the right to update this Privacy Policy at any time. Where changes are material, we will notify registered players via email or in-platform notification at least seven (7) days before the revised Policy takes effect.

11.2 The "Last Updated" date at the top of this page reflects the most recent revision. We encourage you to review this Policy periodically to stay informed about how megga88 handles your personal data. Continued use of the Platform following a revision constitutes your acceptance of the updated Policy.

12. Contact Us

If you have questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by megga88, please contact our support team via the live chat facility within your megga88 account, or by email at [email protected]. Support is available 24 hours a day, 7 days a week.