Privacy Policy mege88 — Your Personal Data Protection

Mege88 ("we", "Platform") respects the privacy rights of every individual who uses our services. This Privacy Policy is drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and global data security industry best practices.

This document applies to all individuals accessing the mege88.app website, using our mobile app, registering as a member, or interacting with any services we provide. By using the mege88 platform, you agree to the collection and use of information as described in this Privacy Policy.

We are committed to ensuring that the information you provide is handled responsibly, stored securely, and never misused under any circumstances. Your trust is our most valuable asset, and we take this responsibility seriously.

Mege88 collects the information necessary to provide a secure, efficient, and personalised service to every member. The information collected falls into several key categories:

We only collect information that is strictly necessary. Information provided voluntarily, such as preferred usernames or game preferences, is used solely to enhance your experience on the mege88 platform.

Every piece of information we collect is used for a clear and legitimate purpose. mege88 does not use your data for unrelated purposes without obtaining your consent first.

• Account management: Verify your identity during registration, login, and the KYC process to ensure the security of your account.
• Transaction processing: Process deposits via DuitNow, FPX, Touch 'n Go eWallet, GrabPay, Boost, and Visa/Mastercard, as well as withdrawal of winnings to your bank account.
• Platform security: Detect and prevent fraud, money laundering, unauthorised access, and any activity that violates our Terms and Conditions.
• Customer support: Enables our support team to identify you and provide accurate assistance when you contact us via live chat.
• Service communications: Send important notifications relating to your account, current promotions, policy updates, and relevant security information.
• Legal compliance: Meets reporting and compliance requirements under applicable Malaysia laws including PDPA 2010 and relevant financial regulations.
• Platform improvement: Analyse aggregated usage patterns to improve the interface, performance, and game offerings on mege88.

Mege88 will not use your data for third-party marketing, external advertising, or any commercial activity not directly related to our platform's services.

Mege88 does not sell, rent, or transfer your personal data to any third party for their own commercial purposes. Your information may only be shared in the following limited and controlled situations:

• Payment service providers: Information required to process your financial transactions is shared with integrated payment providers that comply with industry security standards.
• Game providers: Basic game session data is shared with game software providers partnered with mege88 to ensure a smooth and fair gaming experience.
• Statutory Authority: When required by Malaysian law, court order, or direction from a competent authority, we will disclose the necessary information in accordance with proper legal procedures.
• Affiliated companies: Within the mege88 group of companies, certain information may be shared for integrated operational purposes under equally strict confidentiality obligations.
• Fraud prevention: In cases of suspected fraud or money laundering, relevant information may be shared with regulatory bodies or law enforcement agencies.

We continuously invest in the latest security infrastructure to ensure your data is always protected. The security measures we implement encompass multiple layers of protection:

• 256-bit SSL Encryption: All communications between your device and mege88 servers are secured by industry-grade Transport Layer Security (TLS) encryption — the same standard used by Malaysia's leading banks.
• Two-Factor Authentication (2FA): Members can enable 2FA on their account for an extra layer of security that blocks unauthorized access even if their password has been compromised.
• 24/7 Monitoring: Our intrusion detection system operates around the clock to identify and block any suspicious activity in real time.
• Data segregation: Sensitive financial data is stored on separate servers with strict access controls — only specifically authorized personnel can access it.
• Regular security audits: The mege88 platform undergoes regular penetration testing and independent security audits to identify and address any vulnerabilities.
• Data backups: Your data is automatically backed up to a secure location to ensure service continuity in the event of a technical failure.

While we take every reasonable precaution, no system in the world can guarantee 100% absolute security. As such, you also play an important role in protecting your account — never share your password with anyone and always log out from shared devices.

Mege88 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

• Essential cookies (required): These cookies are required for core platform functions such as maintaining your login session, remembering language preferences, and ensuring session security. The platform will not function properly without them.
• Performance cookies: We use analytics cookies to understand how members use the platform — the most frequently visited pages, time spent, and navigation paths — to improve the user experience.
• Functional cookies: These cookies remember your preferences such as display settings, favourite games, and promotional preferences to deliver a more personalised experience.
• Security cookies: Used to detect suspicious login attempts, verify trusted device identities, and protect your account from unauthorized access.

You can manage your cookie settings through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the mege88 platform and your overall gaming experience.

As a mege88 member, you have rights protected under Malaysia's PDPA regarding your personal data. We fully respect and facilitate the exercise of these rights:

To exercise any of the above rights, please contact our customer support team via live chat on the mege88 platform. We will respond to every request within the timeframe stipulated under Malaysia's PDPA.

The Know Your Customer (KYC) process is a mandatory compliance requirement for all responsibly operated online gaming platforms. mege88 implements transparent and secure KYC procedures to protect you and the integrity of the platform.

• Required documents: MyKad (front and back) or a valid Malaysia passport as the primary identity verification document.
• Address verification: Bank statement, utility bill, or other official document showing your current name and address dated within the last 3 months.
• Payment method verification: A screenshot or proof of ownership of the bank account or e-wallet used for deposits, to prevent the use of third-party accounts.
• Verification selfie: In certain cases, we may require a photo of you holding your MyKad to verify your identity in person.

All KYC documents submitted to mege88 are stored in an encrypted server environment with strictly limited access. These documents are not shared with any party except statutory authorities when required by law. The KYC review process is typically completed within 24 working hours of complete document submission.

Mege88 retains your personal data only for as long as necessary to fulfil the original purpose of collection or as required by applicable law. Our retention policy is as follows:

• Active account data: For as long as your account remains active and for 5 years after account closure, to meet audit and financial compliance requirements.
• Transaction records: Retained for a minimum of 7 years in accordance with Malaysian accounting and anti-money laundering (AML) legal requirements.
• Security logs: Access logs and security activity records are retained for 2 years for security incident investigation purposes when required.
• KYC Documents: Retained for the duration of the active account plus 5 years after account closure, in accordance with KYC/AML compliance requirements.
• Support communication data: Live chat session records and emails are retained for 2 years for quality control and dispute resolution purposes.

When data is no longer needed and there is no legal obligation to retain it, mege88 will securely delete or anonymize it using industry-standard deletion methods.

Mege88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements. Members will be notified of any material amendments via:

• In-platform notifications on mege88 displayed upon your next login.
• An email notification will be sent to the address registered on your account at least 7 days before the amendment takes effect.
• Updates to the "Last Updated" date at the top of this page for your reference.

Continued use of the mege88 platform after any amendments take effect constitutes your acceptance of the updated Privacy Policy. We encourage you to review this page periodically. If you disagree with any amendments, you have the right to close your account and request data deletion as outlined in Section 7.