mega8888 Privacy Policy

1 Data Controller

mega8888 ("we", "us", "our") is the data controller responsible for personal information collected through the mega8888 platform accessible at mega8888.asia. As data controller, mega8888 determines the purposes and means of processing your personal data in connection with the provision of online casino, sports betting, and related services to Members in Malaysia and other permitted jurisdictions.

All data processing activities are conducted in accordance with applicable data protection standards and international gaming authority compliance requirements. Where personal data is processed by third-party service providers acting as data processors, mega8888 maintains appropriate contractual safeguards to ensure equivalent levels of data protection.

2 Information We Collect

2.1 Information You Provide Directly

When you register a mega8888 Account, make deposits or withdrawals, or contact our support team, we collect information that you provide directly, including:

• Identity Data: Full legal name, date of birth, nationality, and government-issued identification document details (Malaysian MyKad or passport number) provided during KYC verification;
• Contact Data: Malaysian mobile number and email address used for account registration and communications;
• Financial Data: Payment method details (bank account numbers, e-wallet identifiers for Touch 'n Go eWallet, Boost, GrabPay, DuitNow, and FPX), deposit and withdrawal transaction records, and wallet balance history;
• Account Credentials: Username and hashed password (passwords are never stored in plain text);
• Support Communications: Records of correspondence with mega8888's customer support team via live chat or email.

2.2 Information Collected Automatically

When you access and use the mega8888 platform, we automatically collect certain technical and behavioural data, including:

• IP address, device type, operating system, and browser type;
• Session duration, pages visited, game sessions played, bet history, and in-platform navigation patterns;
• Device identifiers and, where applicable, geolocation data sufficient to verify jurisdictional eligibility;
• Cookie and tracking technology data as further described in Section 6.

2.3 Information from Third Parties

mega8888 may receive personal information about you from third-party identity verification services engaged for KYC purposes, payment processors, fraud detection service providers, and, where relevant, responsible gaming databases used to verify self-exclusion status.

3 How We Use Your Data

mega8888 processes your personal data for the following purposes:

• Account Management: Creating and maintaining your Member Account, authenticating login sessions, and managing your account preferences;
• Service Delivery: Processing deposits and withdrawals in Malaysian Ringgit, enabling access to games and sports betting markets, and administering bonuses and promotions;
• Identity & Age Verification: Conducting KYC verification to confirm your identity and that you meet the minimum age requirement of 21 years, in compliance with applicable gaming authority standards;
• Compliance & Anti-Money Laundering: Meeting our obligations under applicable anti-money laundering, counter-terrorist financing, and responsible gaming compliance frameworks;
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent transactions, account abuse, and security incidents;
• Customer Support: Responding to your enquiries, resolving disputes, and providing technical assistance;
• Platform Improvement: Analysing usage patterns to improve the functionality, performance, and user experience of the mega8888 platform;
• Responsible Gaming: Monitoring betting patterns to identify potential problem gambling indicators and administer self-exclusion or deposit limit measures requested by Members;
• Marketing Communications: Sending promotional communications about bonuses, new games, and platform features, where you have provided consent or where we have a legitimate interest in doing so.

4 Legal Basis for Processing

mega8888 processes personal data on the following legal bases:

• Contractual Necessity: Processing required to perform our obligations under the Terms & Conditions, including account management, payment processing, and service delivery;
• Legal Obligation: Processing necessary to comply with applicable anti-money laundering, KYC, age verification, and gaming authority compliance requirements;
• Legitimate Interests: Processing for fraud detection, platform security, responsible gaming monitoring, and service improvement, where our legitimate interests are not overridden by your data protection rights;
• Consent: Where you have provided explicit consent, including for direct marketing communications. You may withdraw consent at any time by contacting support or updating your account communication preferences.

5 Data Sharing & Disclosure

mega8888 does not sell, rent, or trade your personal information to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients in the circumstances described:

• Payment Processors: Financial institutions and e-wallet providers (including Maybank, CIMB, Public Bank, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, and FPX) to the extent necessary to process your transactions;
• Identity Verification Providers: Third-party KYC service providers engaged to verify your identity and age;
• Game Providers & Technology Partners: Software providers whose games and platform infrastructure power the mega8888 service, subject to data processing agreements;
• Fraud Prevention Services: Third-party fraud detection and security analytics providers;
• Regulatory & Law Enforcement Authorities: Where mega8888 is required by applicable law, court order, or gaming authority directive to disclose Member information;
• Responsible Gaming Databases: Where necessary to verify or record self-exclusion status in accordance with gaming authority responsible gaming requirements.

6 Cookies & Tracking Technologies

mega8888 uses cookies and similar tracking technologies to operate the platform effectively and to improve your experience. The categories of cookies used include:

• Strictly Necessary Cookies: Required for core platform functionality including authentication, session management, and security. These cannot be disabled without affecting your ability to use the platform;
• Functional Cookies: Storing your preferences such as language settings and lobby display options;
• Analytics Cookies: Collecting anonymised data about how Members use the platform to help us improve performance and user experience;
• Security Cookies: Supporting fraud detection and account protection measures.

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair platform functionality and may prevent successful login to your mega8888 Account.

7 Data Retention

mega8888 retains your personal data for as long as your Account remains active and for a minimum period thereafter as required by applicable compliance and anti-money laundering obligations — typically a minimum of five years following Account closure. Transaction records, KYC documentation, and compliance-related data are retained for the periods mandated by applicable gaming authority and financial regulatory requirements. Where personal data is no longer required for any lawful purpose, it will be securely deleted or anonymised.

8 Data Security

mega8888 implements technical and organisational security measures designed to protect your personal data against unauthorised access, loss, alteration, or disclosure. These measures include industry-standard 256-bit SSL/TLS encryption for all data transmitted between your device and our servers, encrypted storage of sensitive data including payment information, access controls limiting data access to authorised personnel on a need-to-know basis, and regular security testing and vulnerability assessments of our platform infrastructure.

Notwithstanding these measures, no data transmission or storage system can be guaranteed to be 100% secure. In the event of a data security incident that is likely to result in a risk to your rights and interests, mega8888 will notify affected Members in accordance with applicable notification obligations.

9 Your Rights

Subject to applicable data protection law, you may have the following rights in respect of your personal data held by mega8888:

• Right of Access: The right to request a copy of the personal data we hold about you;
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data;
• Right to Erasure: The right to request deletion of your personal data, subject to our legal retention obligations;
• Right to Restrict Processing: The right to request that we limit the processing of your personal data in certain circumstances;
• Right to Data Portability: The right to receive your personal data in a structured, machine-readable format;
• Right to Object: The right to object to processing of your personal data on legitimate interest grounds, including for direct marketing;
• Right to Withdraw Consent: Where processing is based on your consent, the right to withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact our support team via live chat or at [email protected]. We will respond to verified requests within 30 days. Note that certain rights may be limited where compliance with legal obligations requires continued retention or processing of your data.

10 Children's Privacy

The mega8888 platform is strictly for adults aged 21 years and above. mega8888 does not knowingly collect personal information from individuals under the age of 21. If we become aware that personal data has been collected from a person under the age of 21, we will take immediate steps to close the associated Account and delete the data. If you believe a person under 21 has accessed the platform, please notify us immediately at [email protected].

11 Cross-Border Data Transfers

In operating the mega8888 platform, your personal data may be transferred to and processed in countries outside Malaysia where our technology partners and service providers are located. Where such transfers occur, mega8888 ensures that appropriate safeguards are in place — including contractual data transfer agreements incorporating standard data protection clauses — to provide a level of protection for your personal data equivalent to that provided under applicable Malaysian data protection standards.

12 Changes to This Policy

mega8888 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable legal requirements, or platform features. Material changes will be communicated to Members via the registered mobile number or by prominent notice on the platform prior to the changes taking effect. The date of the most recent revision is displayed at the top of this page. Your continued use of the mega8888 platform following notification of changes constitutes acceptance of the revised Privacy Policy.

13 Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by mega8888, please contact our support team:

• Live Chat: Available 24/7 via the Help Center on the mega8888 platform. Agents are fluent in English and Bahasa Malaysia.
• Email: [email protected]

We aim to acknowledge all privacy-related enquiries within 48 hours and to resolve substantive requests within 30 days of receipt of all necessary information to verify your identity and process the request.