Privacy Policy mega8

Welcome to the mega8 Privacy Policy. This document explains how mega8 ("we", "Platform") handles personal data received from users ("you", "member") when using our online entertainment platform at mega8.win.

This Privacy Policy applies to all services provided by mega8, including account registration, access to games, financial transaction processing, customer service communications, and use of the mega8 mobile app. Whenever you register, log in, or interact with any part of our platform, this Privacy Policy applies.

We comply with Malaysia's Personal Data Protection Act 2010 (PDPA) and all applicable data protection laws and regulations. By using the mega8 platform, you agree to the collection and use of your personal data as described in this policy.

Mega8 collects various types of personal data depending on your interactions with our platform. The following are the main categories of data we collect:

We only collect data that is strictly necessary for the stated purposes. We do not collect sensitive data such as health information, religious beliefs, or political views unless required by law.

Mega8 collects your personal data through several key channels:

• Account Registration — When you register a new account, you provide basic information such as your name, email, phone number, and date of birth. This information is required to create and verify your account identity.
• KYC (Know Your Customer) Process — To meet anti-money laundering (AML) compliance requirements, we require identity verification documents such as a copy of your MyKad or passport, along with a bank statement or recent proof of address.
• Financial Transactions — Every time you make a deposit or withdrawal, our systems log transaction details including payment method, amount, and timestamp for audit and verification purposes.
• Platform Usage — While you play games, place bets, or navigate the platform, our systems automatically record technical and activity data for security and service improvement purposes.
• Support Communications — If you contact our customer support team via live chat, the conversation record is saved to help us provide better service in the future.
• Cookies & Tracking Technologies — Our platform uses cookies and similar tracking technologies to personalise your experience and analyse usage patterns. Further details are provided in Section 7.

Mega8 uses your personal data solely for the following legitimate and stated purposes:

• Account Management — Create, verify and maintain your user account including secure login and two-factor authentication.
• Transaction Processing — Process deposits, withdrawals and all other financial transactions securely and swiftly through our integrated payment system.
• Legal Compliance — Meet KYC, AML and other legal compliance requirements mandated by Malaysian authorities and relevant regulatory bodies.
• Platform Security — Detect and prevent fraud, money laundering, unauthorised access and other illegal activities that could compromise platform security and other members.
• Service Communications — Send important account notices, transaction confirmations, service updates and security alerts via email or SMS.
• Product Improvement — Analyse aggregated and anonymised usage patterns to improve the platform interface, game selection and overall user experience.
• Customer Support — Use communication records to provide more accurate, personalised and effective support to each member.
• Service Marketing — Send promotional information and exclusive offers — only if you have given consent to receive marketing communications.

Mega8 does not sell, rent or disclose your personal data to third parties for their own marketing purposes. However, in the course of operating the platform, we may share data with the following parties for legitimate reasons:

• Payment Service Providers — Authorised payment processors and financial institutions for the purpose of securely processing your deposits and withdrawals, including local banks and e-wallet providers registered in Malaysia.
• Game Software Providers — Game development companies that supply slot, Live Casino, and other game content to the mega8 platform may receive the minimum game session data required to operate those games.
• KYC Service Providers — Third-party services that help us verify user identities to meet Malaysia's AML and KYC compliance requirements.
• Relevant Authorities — Malaysian government authorities, regulatory bodies, or law enforcement agencies when required by law or a valid court order.
• Professional Advisors — Lawyers, accountants or auditors subject to strict professional confidentiality obligations, where required for legitimate business operational purposes.

Each third party with whom we share data receives only the minimum information required for the specific purpose, and they are obligated to protect that data to security standards equal to or higher than those we ourselves apply.

Mega8 implements multiple layers of technical and organisational security to protect your personal data from unauthorised access, disclosure, alteration or destruction:

• 256-bit SSL Encryption — All data transmitted between your browser or app and mega8's servers is protected with industry-standard SSL encryption, ensuring your information cannot be intercepted by unauthorised parties.
• Two-Factor Authentication (2FA) — mega8 supports and encourages the use of two-factor authentication for all member accounts to add an extra layer of security during login.
• Encrypted Database — Sensitive data such as passwords and financial information is stored in encrypted databases using modern encryption algorithms. Passwords are never stored in plain text.
• Internal Access Controls — Only mega8 staff specifically authorised according to their job roles may access member personal data, and all access is logged and monitored.
• 24/7 Security Monitoring — Our security systems continuously monitor the platform to detect any unusual activity, unauthorised access attempts, or potential security breaches.
• Regular Security Audits — mega8 conducts regular penetration testing and security audits by independent third parties to ensure our security systems remain at the highest level at all times.

In the event of a data breach that may affect your personal data, mega8 will notify you and the relevant authorities within the timeframe required by Malaysian law, and we will take immediate steps to contain and remediate the situation.

The mega8 platform uses cookies and similar tracking technologies to enhance functionality and user experience. Below are the types of cookies we use:

• Essential Cookies — These cookies are required for the platform to function properly. They handle login sessions, security settings and basic platform preferences. You cannot disable this type of cookie.
• Performance Cookies — These cookies collect information about how you use the platform — such as pages visited and time spent — to help us understand usage patterns and improve platform performance.
• Functional Cookies — These cookies allow the platform to remember your preferences such as language, display settings and game preferences to provide a more personalised experience.
• Analytics Cookies — We use analytics tools to understand platform traffic in an aggregated and anonymised manner for product improvement purposes. This data cannot be directly linked to an individual's identity.

You can manage cookie settings through your browser preferences. However, disabling essential cookies may affect the functionality and security of your platform experience. Most modern browsers offer granular controls over the types of cookies you allow.

Under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding your personal data held by mega8:

• Right of Access — You have the right to request a copy of the personal data we hold about you. Requests can be made through our customer support team and will be processed within a reasonable timeframe.
• Right to Rectification — If you find that any personal data we hold about you is inaccurate or outdated, you have the right to request a correction or update of that information.
• Right to Withdraw Consent — You may withdraw consent previously given for the use of your data for marketing purposes at any time without affecting your core account services.
• Right to Restrict Processing — In certain circumstances provided for by law, you have the right to request that we restrict the processing of your personal data.
• Right to Deletion — You may request the deletion of your personal data, subject to our obligation to retain data for legal compliance, dispute resolution, or legitimate operational requirements.

To exercise any of the above rights, please contact the mega8 customer support team via the platform's live chat. We will endeavour to process your request within a reasonable timeframe and will inform you if any restrictions prevent us from fulfilling your request in full.

Mega8 retains your personal data for as long as necessary to fulfil the original purpose of collection and applicable legal requirements. The following are general guidelines for our data retention periods:

• Active Account Data — For as long as your account remains active, all related personal data will be retained to enable us to provide you with full service.
• Data After Account Closure — After an account is closed, core identity data and financial transaction records will be retained for a minimum of 7 years in accordance with Malaysia's AML legislation and financial accounting requirements.
• Security Logs — Technical and security logs are retained for 12 months for security investigation and fraud detection purposes, after which they are automatically deleted.
• Communication Records — Customer support conversation records are retained for 24 months for quality control purposes and to resolve any disputes that may arise.
• Marketing Data — If you withdraw your marketing consent, your marketing preferences will be updated within 30 business days to reflect your new choices.

When your personal data is no longer needed and there is no legal obligation to retain it, Mega8 will delete or anonymise that data in a secure and irreversible manner.

Mega8 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data handling practices, legal requirements or new operational needs. Whenever we make significant changes, we will notify you via a notice on the platform or by email to your registered address.

The "Last Updated" date at the top of this document will be revised whenever amendments are made. We encourage you to review this page periodically to stay informed of the latest way we handle your personal data.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact us through the following channels:

• Live Chat — The fastest way to get an immediate response. Our trained support team is available in English and Bahasa Melayu, 24 hours a day, 7 days a week.
• Email — For enquiries requiring an official written response or involving supporting documents, please email our privacy team. Our official email address is [email protected].

We aim to respond to all privacy-related enquiries within 5 business days. For more complex cases requiring further investigation, we will inform you of a more precise timeframe.