M mega888 Privacy Policy – Security & Data Protection for Malaysian Players

1Introduction & Scope of This Privacy Policy

This Privacy Policy applies to all personal information collected by m mega888 through the website mmega888.xyz, mobile applications (where available), and all services offered under the m mega888 brand. It covers all registered members in Malaysia as well as visitors to our website.

M mega888 acts as the data controller for the personal information you provide to us. This means we are responsible for ensuring your data is collected, processed, and stored in line with best data protection practices and in accordance with applicable Malaysian legal requirements.

2Personal Data We Collect

M mega888 only collects data that is genuinely necessary to deliver our services safely and efficiently. The following are the categories of data we collect:

Registration & Identity Data:

• Full name as stated on your MyKad.
• An active Malaysian phone number (used for OTP verification and account communications).
• Email address (optional, for additional notifications and account recovery).
• Date of birth (to verify that you meet the minimum age requirement of 18 years).

Identity Verification Data (KYC):

• Malaysian identity card number (MyKad) — required for the KYC process prior to withdrawal.
• Certified copies of identity documents (requested selectively based on compliance requirements).
• Proof of ownership of the payment method (to verify that deposits and withdrawals are made by the same account holder).

Financial & Transaction Data:

• E-wallet details (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow) registered for deposits and withdrawals.
• Malaysian bank account details used for FPX transactions.
• Records of all deposit and withdrawal transactions, including date, time, and amount in RM.

Activity & Gaming Data:

• Sports betting records (badminton, Super League football, e-sports, and more).
• Casino game history (slots, baccarat, blackjack, roulette, live dealer).
• Login session records including date, time, and duration.
• Interactions with features such as deposit limits, session limits and responsible gambling tools.

Technical Data:

• The IP address of your device when accessing the m mega888 platform.
• The type of device, operating system, and web browser version you are using.
• Server access logs for security and fraud detection purposes.
• Cookie data and session identifiers (see Section 6 for further details).

3How We Use Your Personal Data

The data we collect is used solely for purposes related to the delivery of m mega888's services. The following are the primary purposes for which your data is used:

• Account management: Creating and maintaining your account, processing logins, and ensuring account security through OTP verification.
• Transaction processing: Processing deposits via Touch 'n Go, GrabPay, DuitNow, FPX and other Malaysian payment methods, as well as managing withdrawals to your e-wallet or bank account.
• KYC and anti-fraud compliance: Verifying your identity, preventing money laundering, detecting suspicious activity, and ensuring every account is held by a legitimate individual aged 18 and above.
• Game service delivery: Providing access to all casino games, Sports Betting, lottery, and e-sports titles you choose to play.
• Customer support: Enables our Malay-speaking support team to identify and assist you whenever you reach out with a query or issue.
• Service communications: Sending important notifications about your account, transactions, outcomes of events you have wagered on and relevant policy updates.
• Marketing (with consent): To inform you about promotions, bonuses, and special offers — only if you have opted in to receive marketing communications. You may opt out at any time.
• Platform improvements: Using aggregated (non-individual) data on how users interact with the platform to improve overall design, performance, and user experience.
• Responsible gaming: Monitoring gameplay patterns to identify signs of problem gambling and providing self-management tools or support resources where appropriate, in line with our commitment to Responsible Gaming.

4Data Sharing with Third Parties

M mega888 does not sell or rent your personal data to any third party. However, there are limited circumstances in which we need to share data with certain parties in order to deliver our services:

• Payment providers: Information required to process your transactions is shared with payment providers such as Touch 'n Go, GrabPay, DuitNow, and the FPX gateway. These providers maintain their own privacy policies and are subject to Malaysia's financial security standards.
• Game providers: Companies such as Pragmatic Play, Evolution Gaming, and other casino software providers receive the technical data required to run the games. They do not receive your full identity data.
• Legal authorities: m mega888 will disclose data if required by a valid court order, legal investigation, or applicable compliance obligations. In such situations, we disclose only the data specifically required by the request.
• Technical services: Technical infrastructure service providers — such as server hosting and cybersecurity services — may have limited access to your data in the course of delivering technical services. They are bound by strict confidentiality agreements.

5Data Security Measures

M mega888 employs a multi-layered security framework to protect your personal data from unauthorised access, disclosure, alteration or destruction:

• Encryption in transit: All data transmitted between your device and our servers is encrypted using 256-bit TLS/SSL protocols — including all financial transactions, logins, and gaming interactions.
• Storage encryption: Sensitive data stored in our databases — including identity and financial information — is encrypted at rest using industry-standard encryption.
• Access control: Access to members' personal data within m mega888's internal systems is restricted to staff who genuinely need it to carry out their specific job responsibilities, in accordance with the principle of least privilege.
• Two-factor authentication: Staff accounts with access to sensitive data are mandatorily protected with two-factor authentication (2FA).
• Security monitoring: Our intrusion detection and log monitoring systems operate 24/7 to identify any unusual activity within the m mega888 infrastructure.
• Regular security testing: Vulnerability assessments and penetration testing are conducted regularly to identify and address weaknesses before they can be exploited.

While we take all reasonable steps to protect your data, no system can guarantee absolute 100% security. You also play an important role in keeping your account safe by using a strong password and never sharing your login credentials with anyone.

6Cookies & Tracking Technologies

M mega888 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored in your web browser when you visit our website.

Types of cookies we use:

• Session cookies (essential): Required to keep you logged in during your active session and to maintain account security. These cookies cannot be disabled without affecting the core functionality of the platform.
• Preference cookies (functional): Saving your preferences such as language, layout, and gaming settings so you do not have to reconfigure them each time you log in.
• Analytics cookies (optional): Helps us understand how members use the platform — which pages are visited most, how long sessions last, and where users run into difficulties. This data is used in aggregate form to improve the platform.
• Security cookies: Used to detect unusual activity, prevent fraud, and protect your account from unauthorized access.

You can manage or delete cookies at any time through your web browser settings. Please note that disabling essential cookies may affect your ability to log in and use key features of the m mega888 platform.

7Your Rights Regarding Personal Data

As an m mega888 member, you have the following rights regarding your personal data. To exercise any of these rights, contact us via live chat or email at support@mmega888.xyz:

• Right to access: You may request a copy of the personal data we hold about you at any time. We will provide it in a readable format within 14 business days.
• Right to rectification: If any of your data is inaccurate or has changed (such as a new phone number), you have the right to request an immediate correction. Certain data can be updated directly through your account settings.
• Right to erasure: Under certain circumstances, you may request the deletion of your personal data. However, this does not apply to data we are required to retain for legal or compliance purposes (such as financial transaction records that must be kept for a specified period).
• Right to restrict processing: You may request that we temporarily pause the processing of your data in certain situations, such as when you are disputing the accuracy of that data.
• Right to object to marketing communications: You may opt out of marketing communications from m mega888 at any time through your account notification settings or by contacting our support team.
• Data portability rights: You may request the personal data you have provided to us in a portable format, allowing you to keep your own personal records.

We will process data rights requests within a reasonable timeframe at no charge for legitimate requests. We reserve the right to verify your identity before processing any request relating to your personal data, for your own security.

8Data Storage & Retention

M mega888 retains your personal data only for as long as necessary for the stated purposes, or for as long as required under applicable Malaysian law.

• Active account data: Retained for as long as your account remains active with m mega888. If your account has been inactive for an extended period, we may reach out to you before taking any archiving action.
• Financial transaction records: Retained for a minimum of 7 years in accordance with applicable financial compliance and anti-money laundering requirements in Malaysia. This includes records of all deposits and withdrawals in RM.
• Gaming and betting records: Retained for 2 years from the date of activity for dispute resolution and responsible gaming monitoring purposes.
• Customer support communication logs: Retained for 2 years for reference and service improvement purposes.
• KYC Data: Retained for the minimum period required under anti-money laundering regulations, typically 5–7 years after the business relationship ends.

Once the relevant retention period has expired, data will be securely deleted or anonymised so it can no longer be linked to any individual. Anonymised data may be retained indefinitely for internal analytics and research purposes.

9Financial Data & Payment Security

The security of your financial data is m mega888's highest priority. All financial transactions — whether deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX through Maybank2u and CIMB Clicks — are processed through fully encrypted channels.

Some of the financial protection measures we have in place:

• M mega888 does not store your PIN, password, or login credentials for any e-wallet or internet banking service — all payment authentication is handled directly on each payment provider's platform within a secure environment.
• All transactions in MYR are recorded with a unique reference and are traceable for dispute resolution purposes.
• Withdrawals are only processed to the same payment method used for the deposit — this policy is in place to prevent money laundering and protect you from fraud.
• Our automated fraud detection system monitors all transactions and flags unusual activity for manual review by our security team.

10Children & Age Restrictions

The m mega888 platform is strictly for individuals aged 18 and above. We do not knowingly collect or process personal data from anyone under the age of 18.

During registration, you are required to confirm that you are at least 18 years of age. Should we discover that data belonging to a minor has been collected without our knowledge, we will take immediate steps to delete that data and close the account in question.

If you are a parent or guardian and believe your underage child has registered an account with m mega888, please contact us immediately at support@mmega888.xyz so we can take appropriate action.

11Amendments to This Privacy Policy

M mega888 reserves the right to amend this Privacy Policy from time to time to reflect changes in our data processing practices, service updates, or new legal compliance requirements.

If we make material changes — meaning changes that significantly affect how we collect or use your data — we will:

• Updating the "Updated" date at the top of this Privacy Policy.
• Notifying all members via in-account messages or email (if a registered email is on file) at least 14 days before any changes take effect.
• Displaying a clear notice on the m mega888 homepage regarding upcoming changes.

Continued use of the m mega888 platform after the effective date of any Privacy Policy changes constitutes acceptance of the updated terms. If you do not agree with the changes, you have the right to close your account and withdraw any remaining balance.

12Contact Us About Privacy

If you have any questions, concerns, or requests relating to this Privacy Policy or how m mega888 handles your personal data, please contact us through the following channels:

• Email: support@mmega888.xyz — please state "Privacy Enquiry" in the subject line of your email.
• Live chat: Via the live chat function within the m mega888 platform — available 24 hours a day, 7 days a week in Bahasa Melayu.
• Your account: Via the "Settings" or "Support" section within your m mega888 account.

Our privacy team will respond to enquiries within 3–5 business days. For deletion or data access requests, please provide sufficient identity verification so we can process your request securely.