mega188 Privacy Policy

1. Introduction

mega188 ("we", "us", "our") is committed to protecting the privacy of all individuals who access or use the mega188 platform at mega188.asia ("Platform"). This Privacy Policy describes in detail the personal data we collect from you, why we collect it, how we use it, who we share it with, and the rights you hold in relation to your personal data.

This Policy applies to all Users of the Platform, including registered Account holders, visitors browsing without an account, and individuals who contact us through support channels. By accessing the Platform or creating a mega188 Account, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein.

This Policy should be read in conjunction with our Terms & Conditions, which govern your use of the Platform generally.

2. Definitions

• "Personal Data" means any information that identifies or can reasonably be used to identify a living individual, directly or indirectly.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, or deletion.
• "Data Controller" means mega188, the entity that determines the purposes and means of processing your Personal Data.
• "Data Processor" means any third party that processes Personal Data on behalf of and under the instruction of mega188.
• "User" means any individual who accesses the Platform in any capacity.
• "Account" means a registered mega188 user account.
• "KYC Data" means identity verification documentation collected as part of the Know Your Customer process required by our licensing authority.

3. Personal Data We Collect

mega188 collects the following categories of Personal Data:

We do not collect special categories of sensitive Personal Data (such as racial origin, health information, or biometric data) unless explicitly required for responsible gaming compliance in exceptional circumstances, and only with your explicit consent.

4. How We Collect Your Data

mega188 collects Personal Data through the following means:

• Direct provision: When you register an Account, complete KYC verification, make deposits or withdrawals, contact support, or interact with any form or input on the Platform.
• Automated technical collection: Through cookies, web server logs, and similar tracking technologies when you access the Platform — see Section 8 for details.
• Third-party sources: From payment processors (such as Touch n Go eWallet, Boost, Maybank, and CIMB) to verify transaction details; from identity verification service providers during KYC; and from fraud prevention databases where required by our licensing authority.
• Publicly available sources: In limited circumstances and where permitted, from publicly available databases to verify identity information provided during registration.

5. How We Use Your Personal Data

mega188 uses your Personal Data for the following purposes:

• Account administration: To register your Account, verify your identity, maintain your profile, and process gaming activity, deposits, and withdrawals in MYR.
• Contract performance: To provide the Gaming Services you have requested, including live casino, slots, sportsbook, sports betting, and 4D lottery.
• Legal and regulatory compliance: To fulfil our obligations under our international gaming authority licence, including KYC, anti-money laundering (AML) checks, responsible gaming obligations, and reporting requirements.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, account takeover, or other prohibited conduct.
• Customer support: To respond to your enquiries, resolve disputes, and provide technical assistance via live chat and email.
• Platform improvement: To analyse usage patterns and improve the Platform's functionality, content, and user experience.
• Marketing communications: To send you promotional offers, bonus notifications, and relevant gaming updates — subject to your communication preferences and applicable consent requirements. You may opt out at any time via your Account settings or by contacting support.
• Responsible gaming: To monitor gaming behaviour in accordance with our responsible gaming obligations, apply limits you have set, and in certain cases proactively identify at-risk players as required by our licensing authority.

6. Legal Basis for Processing

mega188 processes your Personal Data under the following legal bases:

• Performance of a contract: Processing necessary to provide the Gaming Services under our Terms & Conditions.
• Legal obligation: Processing required to comply with our licensing authority's KYC, AML, responsible gaming, and data reporting obligations.
• Legitimate interests: Processing for fraud prevention, platform security, and internal analytics — where our interests are not overridden by your fundamental rights.
• Consent: For direct marketing communications and, where required, for any processing of sensitive data categories. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

7. Disclosure of Personal Data

mega188 does not sell your Personal Data. We may disclose your Personal Data to the following categories of recipients:

• Payment processors: Touch n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank, Visa, Mastercard, USDT processors, and 7-Eleven Cliqq, to facilitate deposits and withdrawals.
• Identity verification providers: Third-party KYC and AML service providers engaged under contractual data processing agreements.
• Game content providers: To the extent necessary to enable your access to games from licensed providers — limited to session tokens and technical data.
• Regulatory and law enforcement authorities: Where required by our licensing authority, applicable law, court order, or legitimate law enforcement request.
• Fraud prevention services: Industry fraud prevention databases and shared intelligence platforms where required by our licence.
• Professional advisers: Lawyers, auditors, and insurance providers, under confidentiality obligations.

All third parties who process your Personal Data on our behalf are bound by data processing agreements that require them to apply appropriate security measures and use your data only for the specified purpose.

8. Cookies & Tracking Technologies

mega188 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device when you visit the Platform.

8.1 Types of Cookies We Use

• Strictly necessary cookies: Required for the Platform to function — including login session management, wallet authentication, and security tokens. These cannot be disabled.
• Performance cookies: Collect anonymised data about how Users navigate the Platform to help us identify and fix usability issues.
• Functional cookies: Remember your preferences such as language settings and game lobby filters.
• Analytics cookies: Used to understand aggregate traffic patterns and popular content — data is anonymised and does not identify you personally.

8.2 Managing Cookies

You can control non-essential cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the Platform. Strictly necessary cookies cannot be disabled as they are essential to providing the Gaming Services.

9. Data Retention

mega188 retains your Personal Data for as long as is necessary to fulfil the purposes described in this Policy and to comply with our legal and regulatory obligations. The following retention periods apply as a general guide:

• Account and Identity Data: Retained for the duration of your Account and for a minimum of five (5) years following Account closure, as required by our licensing authority's AML obligations.
• Transaction Data: Retained for a minimum of five (5) years from the date of the transaction, or longer if required by applicable law or ongoing investigation.
• Communications Data: Live chat and email records retained for two (2) years from the date of communication, unless subject to an ongoing dispute or legal proceeding.
• Technical and Usage Data: Retained in aggregate or anonymised form for up to two (2) years for analytics purposes.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised. Where anonymisation is not possible, data is restricted from further processing.

10. Data Security

mega188 implements technical and organisational security measures designed to protect your Personal Data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and mega188 servers;
• Encryption of Personal Data at rest in our databases;
• Role-based access controls limiting internal access to Personal Data on a need-to-know basis;
• Regular penetration testing and vulnerability assessments conducted by independent security firms;
• Two-factor authentication for staff accessing internal systems containing Personal Data;
• Incident response procedures including mandatory notification protocols in the event of a data breach.

While we take all reasonable steps to protect your Personal Data, no method of transmission over the internet is 100% secure. You are responsible for maintaining the security of your Account credentials — see our Terms & Conditions for your obligations in this regard.

11. Your Data Rights

Subject to applicable law and our licensing obligations, you have the following rights in relation to your Personal Data held by mega188:

• Right of access: To request a copy of the Personal Data we hold about you.
• Right of rectification: To request correction of inaccurate or incomplete Personal Data.
• Right of erasure: To request deletion of your Personal Data, subject to our legal retention obligations — particularly our AML and licensing requirements which may prevent deletion of certain data.
• Right to restrict processing: To request that we limit the processing of your Personal Data in certain circumstances.
• Right to data portability: To receive your Personal Data in a structured, commonly used, machine-readable format where processing is based on consent or contract.
• Right to object: To object to processing of your Personal Data based on legitimate interests, including objecting to direct marketing.
• Right to withdraw consent: To withdraw consent for any processing based on consent — this does not affect the lawfulness of prior processing.

To exercise any of these rights, please contact our support team via live chat on the Platform or by email at [email protected]. We will respond to all verifiable requests within thirty (30) days. Identity verification may be required before we can process your request.

12. International Data Transfers

mega188 may transfer your Personal Data to third-party service providers located outside Malaysia in the course of operating the Platform — including payment processors, KYC providers, game content providers, and cloud infrastructure providers. Where such transfers occur, mega188 ensures that appropriate safeguards are in place, such as contractual data transfer agreements incorporating standard data protection clauses, or transfers to jurisdictions that provide an adequate level of data protection.

By using the Platform, you acknowledge and consent to the transfer of your Personal Data in accordance with this section.

13. Children and Minors

The mega188 Platform is strictly for individuals aged 21 and over. We do not knowingly collect Personal Data from individuals under the age of 21. If we become aware that a User is under 21, their Account will be immediately closed and all Personal Data will be deleted in accordance with our retention policy, subject to any mandatory regulatory retention requirements.

If you believe that a minor has registered on the Platform, please contact our support team immediately.

14. Changes to This Privacy Policy

mega188 reserves the right to update or amend this Privacy Policy at any time. When we make material changes, we will notify registered Users via the email address associated with their Account at least seven (7) days before the changes take effect, where practicable. Non-material changes may be published without advance notice.

The "Last Updated" date at the top of this page indicates the date of the most recent revision. We encourage you to review this Policy periodically. Your continued use of the Platform following publication of an updated Policy constitutes your acceptance of the changes.

15. Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or mega188's data practices, please contact our Data Protection team through the 24/7 live chat facility on the Platform or by email at [email protected]. We aim to acknowledge all data-related enquiries within one (1) business day and provide a substantive response within thirty (30) days.

Where you are not satisfied with our response, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.