Section 1
Introduction
This Privacy Policy ("Policy") is issued by Megga88 ("Megga88", "we", "us", "our"), the operator of the online gaming and sports betting platform accessible at megga88.cam. This Policy describes how Megga88 collects, uses, stores, shares, and protects the personal data of individuals ("Players", "Users", "you") who access or use the Megga88 platform, including via any associated mobile interfaces or applications.
Megga88 takes the privacy of its players seriously. We recognise the trust players place in us when they provide their personal information, and we are committed to handling that information with appropriate care, transparency, and respect for individual privacy rights.
By registering an account on the Megga88 platform, you confirm that you have read and understood this Privacy Policy, and that you consent to the collection and processing of your personal data as described herein. This Policy should be read in conjunction with our Terms and Conditions, which govern the overall contractual relationship between you and Megga88.
Effective Date: This Privacy Policy is effective as of 1 January 2026 and supersedes all prior privacy statements issued by Megga88.
Section 2
Definitions
For the purposes of this Privacy Policy, the following definitions shall apply:
- "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, identification number, contact details, financial information, and online identifiers.
- "Data Controller" means Megga88, as the entity that determines the purposes and means of processing personal data collected through the Platform.
- "Data Processor" means any third-party entity that processes personal data on behalf of and under the instruction of Megga88.
- "Processing" means any operation performed on personal data, including collection, storage, use, disclosure, transfer, deletion, or destruction.
- "KYC Data" means identity verification documents and information submitted by a Player to satisfy Know Your Customer obligations, including government-issued identification and proof of address.
- "Cookies" means small data files stored on a Player's device by the Platform for functional, analytical, or preference-related purposes.
- "Platform" means the Megga88 website, mobile interface, and all associated services accessible via megga88.cam.
Section 3
Personal Data We Collect
Megga88 collects personal data from players through several mechanisms: information provided directly by you during registration and account management; data generated through your use of the Platform; information received from third-party service providers; and data collected automatically through technical means such as cookies and server logs.
3.1 Information You Provide Directly
- Full legal name as it appears on your government-issued identification;
- Date of birth (used for mandatory age verification — players must be 21 years or older);
- Email address and mobile phone number;
- Residential address, including city (e.g., Kuala Lumpur, Petaling Jaya, Shah Alam, Penang, Johor Bahru);
- National identification number (MyKad or equivalent for Malaysian players) provided during KYC;
- Payment method details, including bank account information or e-wallet identifiers for DuitNow, Touch 'n Go eWallet, Maybank2u, CIMB Clicks, Boost, or GrabPay;
- Cryptocurrency wallet addresses where applicable;
- Username and hashed password (passwords are never stored in plaintext);
- Any supporting documentation submitted during KYC verification, including identity documents, proof of address, and source-of-funds documentation.
3.2 Data Generated by Platform Use
- Betting history, game activity, and wagering patterns;
- Deposit and withdrawal transaction records;
- Login timestamps, IP addresses, and device identifiers;
- Browser type, operating system, and referring URL;
- Responsible gambling tool settings (deposit limits, time-out periods, self-exclusion status);
- Customer support interaction records, including live chat transcripts and email correspondence.
3.3 Data from Third Parties
Megga88 may receive personal data about you from third-party sources, including identity verification providers, fraud prevention agencies, payment processors, and affiliate partners who referred you to the Platform. Such data is used only for the purpose for which it was shared and is handled in accordance with this Policy.
Section 4
How We Use Your Personal Data
Megga88 processes personal data for the following purposes:
| Purpose | Data Categories Used |
|---|---|
| Account registration and identity verification | Name, date of birth, contact details, KYC documents |
| Processing deposits and withdrawals | Payment method details, transaction records, bank identifiers |
| Fraud prevention and AML compliance | Transaction patterns, IP address, device data, KYC information |
| Platform personalisation and preferences | Game history, session data, cookie preferences |
| Responsible gambling monitoring | Betting patterns, deposit frequency, voluntary limit settings |
| Customer support | Contact details, account information, support interaction records |
| Marketing communications (with consent) | Email address, communication preferences |
| Regulatory reporting obligations | Transaction data, identity documents, AML-related records |
| Platform security and technical maintenance | IP addresses, login logs, session identifiers |
Megga88 does not use automated decision-making processes that produce legal or similarly significant effects on players without human oversight. Decisions that materially affect a player's account — such as account suspension under fraud review — are subject to human review upon formal request.
Section 5
Legal Basis for Data Processing
Megga88 processes personal data on one or more of the following legal bases, depending on the specific processing activity in question:
- Contractual Necessity: Processing is required to fulfil our contractual obligations to you under the Terms and Conditions — for example, processing your deposits and paying out verified winnings.
- Legal Obligation: Processing is required to comply with applicable laws and regulatory requirements, including anti-money laundering (AML) regulations, counter-financing of terrorism (CFT) obligations, and age verification requirements.
- Legitimate Interests: Processing is conducted on the basis of Megga88's legitimate interests, such as fraud prevention, platform security, and responsible gambling monitoring, where these interests are not overridden by your rights and freedoms.
- Consent: Processing is based on your freely given, specific, and informed consent — for example, sending you promotional marketing communications. You may withdraw consent at any time by updating your communication preferences in your account settings.
Section 6
Data Sharing & Disclosure
Megga88 does not sell or rent personal player data to third parties. Personal data may be shared with the following categories of recipients only where necessary and proportionate to the purpose:
6.1 Payment Processors
To process deposits and withdrawals, Megga88 shares necessary transaction data with payment providers, including FPX network participants such as Maybank, CIMB, Public Bank, and Hong Leong; e-wallet providers including Touch 'n Go eWallet, Boost, and GrabPay; and cryptocurrency processing partners. Data shared is limited to what is strictly required for transaction completion.
6.2 Identity Verification Providers
KYC verification is conducted with the assistance of specialised third-party identity verification services. These providers process identification documents, cross-reference data against sanctions and politically exposed persons (PEP) databases, and return a verification outcome to Megga88. They are contractually prohibited from using your data for any purpose beyond this verification function.
6.3 Fraud Prevention & AML Services
Megga88 uses third-party fraud detection and AML screening services to identify suspicious transaction patterns and comply with financial crime prevention obligations. These services process transaction data and account activity under strict data processing agreements.
6.4 Regulatory & Law Enforcement Authorities
Megga88 will disclose personal data to governmental, regulatory, or law enforcement authorities where required to do so by applicable law, court order, or binding regulatory directive. Where legally permitted, Megga88 will endeavour to notify the affected player of such disclosure.
Cross-Border Transfers: Some service providers engaged by Megga88 may be located outside Malaysia. Where personal data is transferred internationally, Megga88 ensures that appropriate contractual safeguards — such as standard data protection clauses — are in place to protect your data to a standard equivalent to this Policy.
Section 7
Cookies & Tracking Technologies
The Megga88 platform uses cookies and similar tracking technologies to provide a functional, personalised, and secure user experience. A cookie is a small text file stored on your device by your browser at the direction of a website. Cookies do not contain executable code and cannot access other data on your device.
The following categories of cookies are used by Megga88:
| Cookie Category | Purpose | Can Be Disabled? |
|---|---|---|
| Essential / Strictly Necessary | Maintain login sessions, protect against cross-site request forgery (CSRF), and enable core platform functionality | No — required for the platform to function |
| Functional / Preference | Remember language preferences, display settings, and previously selected payment methods | Yes — optional |
| Analytical / Performance | Collect anonymised usage data to understand how players interact with the platform and identify areas for improvement | Yes — optional |
| Security | Detect and prevent fraudulent login attempts and suspicious account activity | No — required for account security |
Megga88 does not deploy third-party advertising or cross-site tracking cookies. You may manage cookie preferences through your browser settings. Please note that disabling essential or security cookies will impair your ability to use the platform.
Section 8
Data Retention
Megga88 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, or accounting obligations. The following retention guidelines apply:
- Account Data & KYC Documents: Retained for the duration of your account's active status, plus a minimum of 5 years following account closure, to comply with AML regulatory retention obligations.
- Transaction Records: Retained for a minimum of 7 years to satisfy financial record-keeping requirements applicable to licensed gaming operators.
- Customer Support Records: Retained for 3 years from the date of the most recent interaction, unless a longer period is required due to ongoing dispute or regulatory matter.
- Marketing Consent Records: Retained for the duration of the consent, plus 3 years following withdrawal of consent, as evidence of consent management.
- Server Logs & Technical Data: Retained for up to 12 months in anonymised or pseudonymised form for security monitoring and platform performance analysis.
Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised.
Section 9
Data Security
Megga88 implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:
- 256-bit SSL/TLS Encryption: All data in transit between your device and Megga88 servers is encrypted using 256-bit SSL/TLS protocols.
- Encrypted Data Storage: Sensitive personal data, including KYC documents and payment details, is stored in encrypted form at rest.
- Access Controls: Strict role-based access controls ensure that only authorised Megga88 personnel with a legitimate operational need may access personal player data. All such access is logged.
- Two-Factor Authentication: Internal administrative systems require multi-factor authentication for all personnel access.
- Regular Security Audits: Megga88's systems and processes undergo regular internal and external security assessments to identify and remediate vulnerabilities.
- Incident Response Procedures: In the event of a confirmed personal data breach that poses a risk to players, Megga88 will notify affected players without undue delay and take immediate steps to contain and remediate the incident.
While Megga88 applies robust security measures, no internet-based system can guarantee absolute security. Players are also responsible for maintaining the security of their own devices and login credentials.
Section 10
Your Data Rights
As a player whose personal data is processed by Megga88, you hold the following rights, subject to applicable legal limitations and the requirements of our regulatory obligations:
Right of Access
Request a copy of the personal data Megga88 holds about you, along with information about how it is being processed.
Right to Rectification
Request correction of inaccurate or incomplete personal data held in your account. Basic profile corrections can be made directly in account settings.
Right to Erasure
Request deletion of your personal data where it is no longer necessary for the purpose collected, subject to our regulatory retention obligations.
Right to Restriction
Request that processing of your personal data be temporarily restricted while a correction or objection request is under review.
Right to Portability
Request a structured, machine-readable copy of personal data you provided to Megga88, where processing is based on consent or contract.
Right to Object
Object to processing of your personal data where it is based on legitimate interests, including the right to opt out of marketing communications at any time.
To exercise any of the above rights, contact the Megga88 Data Privacy team at [email protected] with the subject line "Data Rights Request". We will acknowledge receipt within 5 business days and respond substantively within 30 calendar days. Complex requests may take up to 90 days, in which case you will be informed of the extended timeline.
Identity Verification: To protect the privacy of all players, Megga88 is required to verify the identity of the person making a data rights request before fulfilling it. You may be asked to confirm your account details or provide a copy of your identification document.
Section 11
Children & Minors
The Megga88 platform is strictly intended for adults aged 21 and above. Megga88 does not knowingly collect or process personal data belonging to individuals under the age of 21. Age verification is a mandatory component of the account registration process, and Megga88 reserves the right to conduct additional KYC checks at any time to confirm a player's age.
If Megga88 becomes aware that personal data has been collected from a person under the age of 21, that account will be immediately suspended, the personal data deleted, and any associated funds handled in accordance with applicable regulations. Parents or guardians who believe that their child has registered an account on the Megga88 platform should contact us immediately at [email protected].
Section 12
Third-Party Links & Services
The Megga88 platform may contain references to third-party payment providers and game software suppliers. Megga88 is not responsible for the privacy practices of any third-party entities. Where you interact directly with a third-party payment interface — such as an FPX bank portal or a Touch 'n Go eWallet redirect — that interaction is governed by the third party's own privacy policy.
Megga88 recommends that players review the privacy policies of any third-party services they interact with in connection with their Megga88 account activity.
Section 13
Amendments to This Policy
Megga88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, regulatory requirements, or operational procedures. Material changes to this Policy will be communicated to registered players by email notification or via a prominent notice on the Megga88 platform at least 14 days before the changes take effect, where reasonably practicable.
Continued use of the Megga88 platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. The "Last Updated" date at the top of this page will be revised with each update. We encourage players to review this Policy periodically.
Section 14
Contact Us & Privacy Complaints
If you have any questions about this Privacy Policy, wish to exercise your data rights, or wish to make a formal privacy complaint, please contact the Megga88 Data Privacy team using the details below:
Data Privacy Enquiries
Use subject line: "Privacy Policy Enquiry" or "Data Rights Request"
Response Times
Acknowledgement within 5 business days
Full response within 30 calendar days
All formal privacy complaints are investigated by Megga88's Data Privacy team. Where a complaint cannot be resolved to your satisfaction, you retain the right to escalate the matter to the relevant data protection supervisory authority in the jurisdiction governing this Policy.