🔐 megga88 Privacy Policy

1. Introduction

megga88 ("we", "us", "our") operates the online gaming platform accessible at megga88.co and is committed to protecting the privacy and personal data of all users ("Member", "you") who access or use our Services. This Privacy Policy sets out the basis on which personal data collected from you, or that you provide to us, will be processed by megga88.

This Privacy Policy applies to all personal data processed in connection with your registration, account management, use of any gaming product, financial transactions, customer support interactions, and any other use of the megga88 platform. It should be read alongside our Terms & Conditions.

By registering an account or continuing to use the megga88 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree with any aspect of this Privacy Policy, you must not use the megga88 platform.

2. Data Controller

megga88 is the data controller responsible for the personal data collected and processed through the megga88 platform. As data controller, megga88 determines the purposes and means of processing your personal data and is accountable for ensuring that such processing complies with applicable data protection principles and the terms of this Privacy Policy.

For all data protection enquiries, including requests to exercise your data subject rights, you may contact our data protection team at: [email protected]. All requests will be acknowledged within five (5) business days and resolved within thirty (30) calendar days where technically and legally practicable.

3. Personal Data We Collect

megga88 collects personal data from Members through multiple channels. The categories of data we collect include, but are not limited to, the following:

a) Registration & Identity Data:

• Full legal name
• Date of birth (used to verify the 21+ age requirement)
• Email address
• Malaysian mobile phone number
• Residential address (including postcode and state)
• Username and encrypted password
• Government-issued identification document details (e.g., Malaysian MyKad number or passport number), where provided for KYC verification

b) Financial & Transaction Data:

• Deposit and withdrawal transaction records (amounts, timestamps, payment methods)
• Payment method identifiers (e.g., Touch 'n Go eWallet account reference, bank account last four digits) — megga88 does not store full bank account numbers or card numbers
• Bonus redemption history and associated wagering activity

c) Gaming Activity Data:

• Bet history, game session logs, wager amounts, and game outcomes
• Sports betting selections and live betting activity
• Platform interaction patterns, session durations, and feature usage

d) Technical & Device Data:

• IP address and approximate geolocation (country/region level)
• Device type, operating system, and browser version
• Cookies and session identifiers (see Section 7)
• Login timestamps and session activity logs

e) Communications Data:

• Content and metadata of customer support interactions (live chat transcripts, support ticket records)
• Email correspondence with megga88 support
• Responses to voluntary surveys or feedback forms

4. How We Use Your Personal Data

megga88 processes your personal data for the following purposes:

• Account creation and management: To register your megga88 account, verify your identity, and maintain accurate account records.
• Service delivery: To provide access to casino games, slot machines, live dealer tables, sportsbook markets, and all other megga88 products.
• Financial transaction processing: To process deposits and withdrawals via Touch 'n Go, Boost, Maybank, CIMB, Public Bank, and other accepted payment methods in MYR.
• Identity verification and fraud prevention: To comply with Know Your Customer (KYC) obligations, detect and prevent fraudulent account activity, and protect the integrity of the platform.
• Anti-money laundering (AML) compliance: To monitor transactions for patterns indicative of money laundering or terrorism financing and to report suspicious activity to relevant authorities as required by law.
• Responsible gaming: To monitor gameplay patterns that may indicate problem gambling behaviour, to enforce deposit limits and self-exclusion requests, and to provide intervention where appropriate.
• Customer support: To respond to support queries, resolve complaints, and maintain a record of customer interactions.
• Platform improvement: To analyse aggregate usage data (in anonymised or pseudonymised form) for the purpose of improving platform performance, user experience, and game content curation.
• Marketing communications: To send promotional offers, bonus notifications, and platform updates to Members who have opted in to receive such communications. You may opt out at any time by contacting support.
• Legal and regulatory compliance: To comply with applicable laws, respond to lawful regulatory requests, and enforce our Terms & Conditions.

5. Legal Basis for Processing

megga88 processes personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing required to fulfil our contractual obligations to you as a registered Member, including account management and game service delivery.
• Legal obligation: Processing required to comply with AML regulations, KYC verification requirements, regulatory reporting obligations, and court or authority orders.
• Legitimate interests: Processing for fraud detection, platform security, responsible gaming monitoring, and internal analytics — where megga88's interests are balanced against your privacy rights.
• Consent: Processing for direct marketing communications, where your explicit opt-in consent has been obtained. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6. Data Sharing & Third Parties

megga88 does not sell, rent, or otherwise commercially exploit your personal data to third parties. We may share your personal data with the following categories of recipients, strictly to the extent necessary for the identified purpose:

• Payment processors: Touch 'n Go eWallet, Boost, and Malaysian banking partners (Maybank, CIMB, Public Bank) receive transaction data necessary to process deposits and withdrawals.
• Game providers: Licensed third-party game studios (e.g., Pragmatic Play, PG Soft, Habanero) may receive pseudonymised session identifiers to deliver game content and verify outcomes. No personally identifiable data beyond session tokens is shared with game providers.
• Identity verification services: Where KYC verification is conducted through a third-party provider, identity document data may be transmitted to and processed by that provider under contractual data processing agreements.
• Regulatory and law enforcement authorities: megga88 will disclose personal data to competent authorities when required by law, regulation, court order, or formal regulatory request — including for the purposes of AML reporting.
• Professional advisors: Legal counsel, auditors, and compliance consultants may access limited personal data on a need-to-know basis under confidentiality obligations.

All third-party recipients of personal data are required by contract to process that data only for the specified purpose and to maintain appropriate security standards consistent with those applied by megga88.

7. Cookies & Tracking Technologies

megga88 uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small text files placed on your device by your browser when you visit the megga88 website. We use the following categories of cookies:

• Strictly necessary cookies: Required for the platform to function. These include session authentication cookies, login state cookies, and security tokens. These cookies cannot be disabled without impairing platform functionality.
• Functional cookies: Remember your platform preferences such as language settings, display preferences, and previously used payment methods for convenience.
• Analytics cookies: Collect anonymised or pseudonymised data about how Members navigate and use the platform, helping megga88 identify performance issues and improve the user experience.
• Security cookies: Used to detect and prevent fraudulent activity, bot traffic, and multiple-account violations.

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging in to your megga88 account. megga88 does not use third-party advertising or retargeting cookies.

8. Data Retention

megga88 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by law or regulation. Our standard retention practices are as follows:

• Active account data: Retained for the duration of the Member's account relationship with megga88.
• Transaction and gaming records: Retained for a minimum of five (5) years following the closure of an account, in compliance with AML record-keeping requirements.
• KYC documentation: Retained for a minimum of five (5) years following the termination of the account relationship.
• Customer support records: Retained for three (3) years from the date of the last interaction.
• Marketing preferences: Retained until you withdraw consent or request deletion, after which marketing data is deleted within thirty (30) days.

Upon the expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised, subject to any legal obligation requiring continued retention.

9. Data Security

megga88 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and the megga88 platform
• Encrypted storage of passwords using industry-standard hashing algorithms — megga88 staff cannot view your password in plain text
• Role-based access controls limiting staff access to personal data to those with a legitimate operational need
• Regular security audits and penetration testing of the megga88 platform infrastructure
• Intrusion detection systems and anomalous login activity monitoring
• Mandatory security training for all staff who handle personal data

In the event of a personal data breach that poses a risk to your rights and freedoms, megga88 will notify affected Members without undue delay and will take all appropriate remediation steps. megga88 will also notify the relevant supervisory authority where required under applicable law.

10. Your Data Rights

Subject to applicable data protection law and any overriding legal obligations, you have the following rights in respect of your personal data held by megga88:

• Right of access: You may request a copy of the personal data megga88 holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data where there is no overriding legitimate basis or legal obligation for continued retention.
• Right to restrict processing: You may request that megga88 limit the processing of your personal data in certain circumstances.
• Right to data portability: Where processing is based on consent or contractual necessity, you may request a machine-readable copy of your personal data for transfer to another service provider.
• Right to object: You may object to processing of your personal data for direct marketing purposes at any time, with immediate effect.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact megga88 at [email protected]. Please include your account username and a description of your request. megga88 may request identity verification before processing data subject requests.

11. International Data Transfers

Where megga88 transfers personal data outside Malaysia — for example, to game providers or technology partners operating in other jurisdictions — megga88 ensures that appropriate safeguards are in place to protect that data to a standard equivalent to that applied within Malaysia. Such safeguards may include standard contractual clauses, data processing agreements, or reliance on the recipient country's adequacy status under applicable frameworks.

megga88 does not transfer personal data to jurisdictions that do not offer adequate data protection standards without implementing the contractual or technical safeguards described above.

12. Children & Minors

The megga88 platform is strictly restricted to individuals aged 21 years or older. megga88 does not knowingly collect, use, or store personal data from persons under the age of 21. If megga88 discovers or is notified that an account has been registered by a person under 21, that account will be immediately suspended, all personal data associated with the account will be deleted (subject to any mandatory retention obligations), and any funds will be returned to source.

If you are a parent or guardian and believe that your child has registered an account on the megga88 platform, please contact us immediately at [email protected] so that we can take appropriate action.

13. Changes to This Privacy Policy

megga88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, operational requirements, or applicable law. Material changes will be notified to Members via email to the registered account address or via a prominent notice on the megga88 platform at least seven (7) days before the change takes effect, where practicable.

The "Last updated" date at the top of this Privacy Policy will always reflect the date of the most recent revision. Your continued use of the megga88 platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy.

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by megga88, please contact our data protection team using the following details:

• Email: [email protected]
• Support Hours: 8 AM – 2 AM MYT, daily
• Response Time: Acknowledgement within 5 business days; resolution within 30 calendar days

For information about responsible gaming and account control tools, please visit our Responsible Gaming page.