Privacy Policy

This Privacy Policy (hereinafter referred to as "Policy" or "Privacy Policy") sets out the manner in which mege888 (hereinafter referred to as "mege888", "we", "us", or "our") collects, processes, uses, stores, shares, and protects personal data relating to individuals (hereinafter referred to as "you", "your", "Data Subject", or "Member") who access or use the mege888 online gaming platform at https://mege888.cam (the "Platform").

mege888 is committed to protecting the privacy and security of all personal data entrusted to us by our members. This Policy reflects our obligations under applicable data protection legislation and international best practice standards for online gaming platforms operating in the Malaysian market and beyond.

By accessing the Platform, creating a member account, making a deposit, or otherwise providing us with your personal information, you acknowledge that you have read, understood, and consent to the data practices described in this Policy. If you do not agree with any aspect of this Policy, please cease using the Platform immediately and contact us to request account closure and data deletion.

In this Privacy Policy, the following terms carry the meanings defined below:

• "Personal Data" — any information relating to an identified or identifiable natural person, including but not limited to: name, identification number, contact details, financial data, IP address, and device identifiers.
• "Processing" — any operation performed on personal data, including collection, recording, storage, retrieval, use, disclosure, transmission, and deletion.
• "Data Controller" — the entity that determines the purposes and means of processing personal data. mege888 is the Data Controller for all personal data collected through the Platform.
• "Data Processor" — a third party that processes personal data on behalf of the Data Controller, bound by contractual obligations to act only under the Controller's instructions.
• "Consent" — a freely given, specific, informed, and unambiguous indication of agreement to the processing of personal data for one or more specific purposes.
• "Sensitive Data" — special categories of personal data that warrant enhanced protection, including financial account details, identity documents, and data used for KYC verification purposes.
• "Cookie" — a small data file stored on your device by the Platform for purposes including session management, analytics, and functionality preferences.

For the purposes of this Privacy Policy, the Data Controller responsible for personal data collected through the mege888 Platform is:

For all data protection related queries, rights requests, or complaints regarding the handling of your personal data, please contact us directly through the live chat on the Platform or via the email address above. We aim to respond to all data-related enquiries within 30 calendar days of receipt.

mege888 collects personal data through several channels: directly from you when you register an account, make deposits or withdrawals, contact support, or use the Platform; automatically through the use of cookies and similar tracking technologies; and from third-party payment processors and identity verification services as part of our KYC obligations.

4.1 Data You Provide Directly

4.2 Data Collected Automatically

• Technical Data: IP address, browser type and version, operating system, device type, screen resolution, and referring URL.
• Usage Data: Pages visited, games played, session duration, bet history, deposit and withdrawal history, and navigation patterns.
• Location Data: General geographic location inferred from IP address (country and city level only — not precise GPS location).
• Cookie & Tracking Data: Session identifiers, preference cookies, analytics data. See Section 8 for full cookie information.

4.3 Data from Third Parties

In the course of providing KYC verification and payment processing services, mege888 may receive data from regulated third-party identity verification providers and payment processors. Such data is used solely for the purposes of verifying your identity and processing your financial transactions, and is handled in accordance with this Policy and the relevant third party's own data protection obligations.

mege888 processes your personal data only for specified, explicit, and legitimate purposes. The following table outlines each purpose for which we process personal data and the lawful basis upon which we rely:

mege888 processes personal data on the following lawful bases, each of which is applied only where appropriate to the specific processing activity in question:

• Contract Performance: Processing is necessary to perform the contract between mege888 and you as a registered member — including operating your account, processing transactions, and delivering gaming services.
• Legal Obligation: Processing is required for mege888 to comply with applicable laws, including anti-money laundering (AML) obligations, responsible gambling regulatory requirements, and identity verification mandates.
• Legitimate Interests: Processing serves mege888's legitimate business interests — such as fraud prevention, platform security, and service improvement — provided such interests are not overridden by your fundamental rights and freedoms.
• Consent: Where processing is based on consent (such as direct marketing communications), you retain the absolute right to withdraw that consent at any time without detriment.

mege888 does not sell, rent, trade, or otherwise commercially exploit your personal data. We share your data only in the limited circumstances described below, and only to the minimum extent necessary for the stated purpose:

7.1 Payment Processing Partners

To process your deposits and withdrawals in MYR, mege888 shares necessary transaction data with authorised payment processors including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, and USDT TRC20 network processors. These partners are bound by contractual data processing agreements and applicable financial regulation.

7.2 Identity Verification Providers

KYC identity and document verification is conducted with the assistance of regulated third-party identity verification service providers. These providers process identity documents solely for verification purposes and are contractually prohibited from using such data for any other purpose.

7.3 Regulatory & Law Enforcement

mege888 may disclose personal data to regulatory authorities, law enforcement agencies, or financial intelligence units where required to do so by applicable law, court order, or regulatory directive. We will provide notice of such disclosures to affected members where legally permitted to do so.

7.4 Corporate Transactions

In the event of a merger, acquisition, restructuring, or sale of all or part of mege888's business, personal data may be transferred to the acquiring entity as part of that transaction. Affected members will be notified of any material change in Data Controller as a result of such a transaction.

mege888 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small data files stored on your device that help the Platform recognise you between sessions, remember your preferences, and analyse how the Platform is used.

8.1 Types of Cookies We Use

You may manage your cookie preferences through your browser settings. Please be aware that disabling strictly necessary cookies may prevent the Platform from functioning correctly. mege888 does not currently use third-party advertising or retargeting cookies.

mege888 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, comply with applicable legal obligations, resolve disputes, and enforce our agreements. The following general retention periods apply:

• Active Account Data: Retained for the duration of your membership plus any legally mandated post-closure retention period.
• KYC Documents: Retained for a minimum of 5 years following account closure, in accordance with standard anti-money laundering record-keeping obligations.
• Transaction Records: Deposit, withdrawal, and bet history retained for a minimum of 5 years to comply with financial record-keeping requirements.
• Support Communications: Live chat logs and email correspondence retained for up to 3 years following the last interaction, or longer if related to an open dispute or legal proceeding.
• Analytics Data: Anonymised and aggregated — retained indefinitely as it cannot be traced back to individual members.
• Marketing Consent Records: Retained for the period of consent plus 3 years following withdrawal, to demonstrate lawful processing history.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Deletion requests from members may be processed ahead of schedule where no conflicting legal retention obligation applies. See Section 11 for your right to erasure.

mege888 implements a comprehensive suite of technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• Transport Layer Security (TLS/SSL): All data in transit is encrypted using 256-bit SSL/TLS protocols. The Platform operates exclusively over HTTPS.
• Data Encryption at Rest: Sensitive personal and financial data stored on mege888 servers is encrypted using industry-standard encryption algorithms.
• Access Controls: Strict role-based access controls ensure that only authorised personnel with a demonstrated business need can access personal data. Access logs are maintained and regularly reviewed.
• Two-Factor Authentication (2FA): Available for all member accounts to provide an additional layer of identity verification beyond password alone.
• Regular Security Audits: The Platform's security infrastructure undergoes regular internal and third-party security assessments to identify and remediate vulnerabilities.
• Incident Response Plan: A documented data breach response plan is in place. In the event of a breach, affected members will be notified within the timeframes required by applicable law.

While mege888 takes all reasonable precautions to protect your personal data, no security system is entirely impenetrable. You are also responsible for maintaining the security of your account credentials and should contact support immediately if you suspect any unauthorised access to your account.

As a Data Subject, you hold the following rights in relation to the personal data mege888 processes about you. You may exercise any of these rights at any time by contacting our support team via live chat or at [email protected] (plain text email address):

mege888 will respond to all substantiated rights requests within 30 calendar days of receipt. Where requests are complex or numerous, we may extend this period by a further 60 days, in which case we will notify you of the extension and reasons within the initial 30-day period.

The mege888 Platform is strictly intended for individuals aged 21 years and above. mege888 does not knowingly collect or process personal data from individuals under the age of 21.

If mege888 becomes aware that personal data has been collected from an individual under the age of 21, that data will be immediately deleted, the associated account will be permanently closed, and any funds held in that account — including deposits and winnings — will be forfeited in accordance with our Terms & Conditions.

mege888 is primarily an online gaming platform serving Malaysian users. The majority of personal data processing occurs within the Platform's primary infrastructure. However, the nature of online gaming and cloud-based technology means that certain data may be processed or stored on servers located outside of Malaysia, including in connection with payment processing for Touch 'n Go eWallet, DuitNow, and other Malaysian financial services partners that may use international infrastructure.

Where personal data is transferred outside Malaysia or its primary jurisdiction, mege888 ensures that such transfers are conducted:

• To countries that provide an adequate level of data protection as recognised by applicable standards.
• Subject to appropriate contractual safeguards between mege888 and the receiving entity, including standard contractual clauses or equivalent data transfer agreements.
• Only to the extent necessary for the specific processing purpose and with appropriate security measures in place.

If you would like further information about the specific safeguards applied to international transfers of your personal data, please contact our support team at [email protected].

mege888 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, our business operations, or the ways in which we process personal data. The "Last Updated" date displayed at the top of this Policy reflects the date on which the most recent material amendment was made.

Where amendments are material in nature — meaning they significantly affect how we process your personal data or materially alter your rights — mege888 will provide advance notice of such changes via a prominent notice on the Platform and, where we hold a valid email address for you, by email notification to that address.

Non-material amendments — such as corrections to typographical errors, clarifications of existing language, or administrative updates that do not alter the substance of this Policy — may be made without advance notification.

Your continued use of the mege888 Platform following publication of any amended Privacy Policy constitutes your acknowledgement of the updated terms. If you do not agree with any amendment, you should cease using the Platform and contact us to request account closure.

For any questions, concerns, or formal requests relating to this Privacy Policy, data protection practices, or the exercise of your rights as a Data Subject, please contact the mege888 data team through the following channels: