Privacy Policy Megga88 — Data Protection & Privacy for Malaysian Players

Megga88 is an online Sports Betting and casino platform serving Malaysian players. We understand that privacy matters deeply to every individual — especially when personal and financial information is involved. That is why we have written this Privacy Policy as honestly and transparently as possible, in clear English that all our users can easily understand.

This Privacy Policy applies to all users who register a Megga88 account, use the megga88.click website, access Megga88 services via any device or platform, or contact the Megga88 support team through any communication channel.

Megga88 acts as the data controller for all personal information collected from users of our platform. This means we are responsible for ensuring your data is handled to the highest privacy standards and in compliance with applicable data protection laws in Malaysia.

Megga88 collects your personal data in several ways — directly when you register and use the platform, automatically as you browse our website, and from authorised third parties such as payment providers. The categories of data we collect are as follows:

Data You Provide Directly to Us:

• Full name as stated on official Malaysian identity documents (MyKad).
• An active Malaysian phone number for account verification.
• A valid email address.
• Date of birth for age verification (must be 21 years of age or older).
• MyKad number or other Malaysian identity document — collected during the KYC process for withdrawals.
• Malaysian bank account or e-wallet details (Touch 'n Go, GrabPay, DuitNow, Maybank2u, CIMB Clicks, ShopeePay, Boost) for deposit and withdrawal purposes.
• Transaction history for RM deposits and withdrawals.

Automatically Collected Data:

• The IP address of your device when accessing the platform.
• Device type, operating system, and web browser version.
• Cookie data and session identifiers (discussed further in Section 6).
• Betting activity history, including wagers placed, markets viewed, and session duration.
• Account login and logout activity with timestamps.

Below is a summary of the data types we collect, the purposes for collection, and the legal basis for processing:

Megga88 uses your personal data for specific, lawful purposes directly related to the operation of our betting platform. We will not use your data for any purpose not stated in this policy without obtaining your consent first.

The primary purposes for which Megga88 uses your data are:

• Account Management: Creating, verifying and managing your Megga88 account, including the login process, two-factor authentication, and password management.
• Financial Transaction Processing: Processing deposits and withdrawals using Malaysian payment methods such as Touch 'n Go, GrabPay, DuitNow, FPX Maybank2u, ShopeePay and Boost in RM.
• Betting Services Provision: Allows you to bet on Malaysia Super League football, EPL, BWF badminton, IPL cricket, e-sports, and all other products available on the Megga88 platform.
• Identity Verification & KYC/AML Compliance: To meet anti-money laundering (AML) and know-your-customer (KYC) obligations as required by applicable financial regulations.
• Fraud Prevention & Security: Detecting and preventing fraud, duplicate accounts, odds manipulation, and any activity that violates Megga88's Terms & Conditions.
• Customer Support: To enable the Megga88 support team to provide effective, personalised assistance whenever you reach out to us in Bahasa Melayu.
• Platform Communications: Sending important notifications about your account, terms updates, promotions you qualify for, and account-related security information.
• Platform Improvements: Analysing aggregated usage data (without identifying individuals) to understand how players use the platform and make relevant improvements for the Malaysian community.

Megga88 will not use your data to build psychographic profiles, make automated decisions that significantly affect you without human oversight, or for third-party advertising purposes without your explicit consent.

Megga88 does not sell or distribute your personal data to third parties for their own marketing purposes. However, in order to operate the platform effectively, we do need to share certain information with a limited and carefully selected group of third-party categories. All such third parties are bound by strict data protection agreements with Megga88.

Categories of third parties that may receive some of your data:

• Malaysian Payment Service Providers: Touch 'n Go eWallet, GrabPay, DuitNow, FPX (Maybank2u, CIMB Clicks), ShopeePay and Boost — to process your financial transactions. Data shared is limited strictly to what is necessary to verify and complete each transaction.
• Game Service Providers: Companies providing live casino content, online slots, virtual sports, and e-sports platforms available on Megga88 — limited to the minimum data required to manage your gaming account.
• Technical Service Providers: Companies providing server infrastructure, cloud services, analytics systems, and cybersecurity tools used by Megga88 — subject to strict confidentiality agreements.
• Legal Authorities: Law enforcement agencies, financial regulatory bodies, or courts when we are legally required to disclose information, or when disclosure is necessary to protect the rights, property, or safety of Megga88 and its users.

Megga88 invests seriously in cybersecurity infrastructure to ensure the personal data of all our members is protected to the highest practical standard. This is not merely a marketing slogan — it is an operational responsibility we take very seriously in every technical decision we make.

Technical security measures we have in place:

• 256-bit SSL/TLS Encryption: All communications between your browser or app and Megga88 servers are encrypted using SSL/TLS protocols — your data cannot be intercepted in transit.
• Hashed Password Storage: Your account password is never stored in plain text — we use strong cryptographic hashing algorithms, meaning the original password cannot be recovered by anyone, including Megga88 staff.
• Firewall & Intrusion Detection Systems: Megga88 servers are protected by multiple firewall layers and an intrusion detection system (IDS) that monitors traffic in real time to identify and block attempted cyberattacks.
• Role-Based Access Control: Internal access to user data is restricted on a need-to-know basis — only staff who require access to carry out specific duties are authorised, and all access is logged.
• Regular Security Assessments: Megga88 conducts regular penetration testing and security audits to identify and address potential vulnerabilities before they can be exploited.

While we implement all these measures, no system can guarantee absolute 100% security. We therefore also encourage you to take personal precautions, such as using a strong and unique password for your Megga88 account, enabling two-factor authentication, and never sharing your login credentials with anyone.

The Megga88 platform uses cookies and similar tracking technologies to ensure the platform functions correctly, enhance your user experience, and understand aggregate platform usage patterns. Cookies are small text files stored on your device by your web browser when you visit our website.

Types of cookies Megga88 uses:

• Essential Cookies (Required): These cookies are essential for the Megga88 platform to function correctly — including session cookies that maintain your logged-in status, security cookies that protect your account, and cookies that store your language preferences. These cookies cannot be disabled without affecting the platform's core functionality.
• Performance & Analytics Cookies: These cookies help us understand how players use the Megga88 platform — which pages are visited most, time spent on the platform, the types of matches most popular (such as Super League football or BWF badminton), and any technical issues that may arise. This data is used in aggregate form and does not identify individual users.
• Functional Cookies: These cookies remember your platform preferences — such as your favourite sports, preferred odds format, and display settings — so you do not have to reconfigure them each time you log in.

Megga88 retains your personal data only for as long as necessary to fulfil the purposes set out in this Privacy Policy, or to comply with applicable legal requirements — whichever is longer.

Our general data retention guidelines:

• Active Account Data: For as long as your Megga88 account remains active, we retain all personal data associated with the management of your account.
• Financial Transaction Data: Financial transaction records in MYR (deposits and withdrawals via Touch 'n Go, GrabPay, DuitNow, FPX, and others) are retained for a minimum of 7 years to comply with Malaysian financial and tax legal requirements.
• KYC & Identity Verification Data: Identity verification documents (such as copies of MyKad) are retained for a minimum of 5 years after the business relationship with Megga88 ends, in compliance with AML requirements.
• Security Logs: Security logs and account activity are retained for 2 years for the purposes of security incident investigation where required.
• Account Closure: Once an account is closed at the user's request, personal data not subject to legal retention requirements will be deleted or anonymised within 90 days.

Once the retention period has expired, your personal data will be securely deleted or anonymised so that it can no longer be linked back to you as an individual. The deletion process is carried out using methods that ensure the data cannot be recovered.

As a Megga88 platform user, you have several rights regarding your personal data. Megga88 is committed to respecting and facilitating the exercise of these rights. All privacy rights requests can be submitted to us by email at support@megga88.click.

To submit any request relating to the privacy rights above, please email support@megga88.click with the subject line "Privacy Rights Request", including your full name, Megga88 account number, and a description of your request. We will respond within 5 business days and fulfil valid requests within 30 business days.

The Megga88 platform is strictly for adult users aged 21 and above. We do not knowingly collect or process personal data of individuals under the age of 21.

If you have reason to believe that a minor has registered for or is using the Megga88 platform, please notify us immediately by email at support@megga88.click. We will take prompt action to investigate and address the situation.

Parents and guardians concerned about minors accessing online betting platforms are encouraged to use parental control software and to discuss with their children the risks involved and the minimum age requirements for platforms such as Megga88.

In the course of operating the platform, your personal data may be transferred to and stored on servers located outside Malaysia — for example, for cloud storage, technical support, or gaming services provision. This is standard practice in the global digital services industry.

Megga88 ensures that any cross-border data transfer complies with the following requirements:

• Data is only transferred to countries or entities that provide an adequate level of data protection.
• All overseas data recipients are bound by contractual agreements that hold them to data protection standards equivalent to those we uphold in Malaysia.
• Data transfers are carried out through encrypted channels to ensure that data cannot be intercepted in transit.

By using the Megga88 platform, you consent to the possible transfer of your personal data outside Malaysia as described above, with appropriate safeguards in place as outlined in this policy.

Megga88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or changes in how we operate the platform. We are committed to doing so in a transparent manner and to providing our users with reasonable notice.

Our process for managing changes to this Privacy Policy:

• All Megga88 members will be notified of significant changes to the Privacy Policy via their registered email address or through an in-platform notification at least 14 days before the changes take effect.
• The "Updated" date at the top of this Privacy Policy will be revised whenever changes are made, allowing you to identify the current version in effect.
• Continuing to use the Megga88 platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy.
• If you do not agree with any changes made, you have the right to close your account before those changes take effect by contacting our support team.

We encourage you to review this Privacy Policy periodically to stay informed about how we handle your personal data. The current version of the Privacy Policy is always available on this page.

If you have any questions, concerns, or requests regarding this Privacy Policy or how Megga88 handles your personal data, we encourage you to contact us directly. We take all privacy-related enquiries seriously and are committed to providing a helpful and timely response.

Megga88 sincerely appreciates your trust in our platform. Your privacy is something we never take lightly — it is the foundation of the trust that allows us to serve over 250,000 Malaysian members every day. We are continuously committed to doing better in protecting and respecting the privacy of every player who is part of the Megga88 family.