mega188 Privacy Policy

1. Introduction

mega188 ("we", "us", "our") operates the online gaming platform accessible at mega188.club. We are committed to protecting the personal data of all members and visitors to our Platform and to handling such data in a lawful, transparent, and responsible manner.

This Privacy Policy applies to all personal data collected by mega188 in connection with your use of the Platform, including data provided at registration, during account activity, during payment transactions, and through your interactions with our customer support team. It should be read in conjunction with our Terms & Conditions and Responsible Gaming Policy, both of which are published on this website.

By registering an account on mega188 or continuing to use the Platform following the publication of this Policy, you acknowledge that you have read, understood, and consent to the data practices described herein.

2. Personal Data We Collect

mega188 collects personal data in the following categories:

• Identity Data: Full legal name, date of birth, nationality, government-issued identification document number (e.g., MyKad, passport), and a copy of the relevant identity document where required for KYC verification.
• Contact Data: Email address, mobile phone number, and residential address (including city and postcode). Malaysian members commonly provide addresses in Kuala Lumpur, Petaling Jaya, Penang, Johor Bahru, Bangsar, and other locations across the country.
• Account Data: Username, hashed password, account registration date, account status, login history, and any self-imposed responsible gaming limits or self-exclusion settings.
• Financial Data: Payment method details (e.g., registered Touch n Go eWallet account, Boost account, bank account number for Maybank, CIMB, or Public Bank), transaction history including deposits, withdrawals, and bonus credits denominated in MYR.
• Gaming Activity Data: Game session records, bet history, win/loss records, game preferences, and sportsbook betting records across all products on the mega188 Platform.
• Technical Data: IP address, device type and identifier, browser type and version, operating system, screen resolution, session duration, page interaction data, and geolocation data at the time of login or transaction where enabled by your device.
• Communications Data: Records of your interactions with mega188 customer support via live chat or email, including message content, timestamps, and resolution outcomes.

3. How We Use Your Personal Data

mega188 uses the personal data described in Section 2 for the following purposes:

• Account Management: To create, maintain, and administer your mega188 account, verify your identity, process login authentication, and manage account security settings.
• KYC & Regulatory Compliance: To fulfil our obligations under international gaming authority regulations, including age verification (confirming all members are 21 or older), identity verification for withdrawal processing, and anti-money laundering (AML) screening.
• Transaction Processing: To process deposits and withdrawals via your selected MYR payment method, including Touch n Go eWallet, Boost, Maybank, CIMB, Public Bank, Visa, and Mastercard.
• Platform Operation & Improvement: To monitor platform performance, diagnose technical issues, analyse game and product usage patterns, and make ongoing improvements to the mega188 user experience.
• Promotions & Communications: To administer bonus campaigns, notify you of promotions relevant to your gaming preferences, and send account-related service communications. Marketing communications are subject to your opt-in consent where required.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, unauthorised account access, bonus abuse, and any other security incidents affecting the Platform or its members.
• Responsible Gaming: To monitor gaming patterns that may indicate problem gambling behaviour, enforce responsible gaming tools activated by the member, and fulfil obligations under our international gaming authority responsible gaming certification requirements.
• Legal Obligations: To comply with applicable laws, court orders, regulatory requirements, or requests from competent authorities.

4. Legal Basis for Processing

mega188 processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform the contract between you and mega188 — including account creation, game access, transaction processing, and customer support.
• Legal Obligation: Processing required to comply with applicable laws and regulatory requirements, including KYC, AML, and responsible gaming obligations under our operating licence.
• Legitimate Interests: Processing conducted for our legitimate business interests where these do not override your fundamental rights — including fraud prevention, platform security, and analytics for service improvement.
• Consent: Where you have provided explicit consent, including for marketing communications. You may withdraw consent at any time by contacting support or updating your account communication preferences.

5. Data Sharing & Disclosure

mega188 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your data in the following limited circumstances:

• Payment Processors: We share financial and identity data with our payment processing partners (including e-wallet operators and banking networks) to the extent necessary to process your deposit and withdrawal transactions.
• KYC & AML Service Providers: We may use regulated third-party identity verification and AML screening services to fulfil our regulatory obligations. These providers process data only under our instruction and are bound by strict confidentiality obligations.
• Gaming Software Providers: Game data (bet records, session data) may be shared with our licensed game content providers for the purpose of delivering game services, resolving game disputes, and conducting RNG audits.
• Regulatory Authorities: We may disclose member data to our licensing authority, financial intelligence units, or other competent authorities when required by law, court order, or regulatory demand.
• Fraud Prevention Networks: We may share data with industry fraud prevention organisations where we have reasonable grounds to suspect fraudulent activity that poses a risk to mega188 or other members.

All third parties with whom mega188 shares data are contractually required to maintain appropriate data security standards and to use member data only for the specified purpose of the data sharing arrangement.

6. Cookies & Tracking Technologies

mega188 uses cookies and similar tracking technologies on the Platform for the following purposes:

• Essential Cookies: Required for core Platform functionality including login session management, account security tokens, and payment session continuity. These cannot be disabled without impairing Platform function.
• Analytics Cookies: Used to collect aggregated data on how members interact with the Platform — including which games are most popular, how navigation flows are used, and where technical issues occur. Analytics data is used only for Platform improvement.
• Preference Cookies: Store your language, display, and communication preferences to personalise your mega188 experience across sessions.

You may manage non-essential cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of some Platform features.

7. Data Retention

mega188 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Account Data: Retained for the duration of your membership and for a minimum of five (5) years following account closure, in accordance with anti-money laundering regulatory requirements.
• Transaction Records: Retained for a minimum of seven (7) years to satisfy financial record-keeping obligations under our operating licence and applicable regulations.
• KYC Documentation: Retained for a minimum of five (5) years following the end of the business relationship, or longer where required by specific regulatory direction.
• Communications Data: Support chat and email records retained for two (2) years from the date of the communication, unless relevant to an ongoing dispute or investigation.
• Marketing Consent Records: Retained for the duration of your membership and for three (3) years following account closure as evidence of consent management compliance.

Upon expiry of the applicable retention period, mega188 will securely delete or anonymise the relevant personal data.

8. Data Security

mega188 implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the mega188 Platform;
• Encrypted storage of sensitive personal and financial data at rest;
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis;
• Regular third-party penetration testing and security auditing of Platform infrastructure;
• Intrusion detection and anomalous activity monitoring systems operating continuously;
• Multi-factor authentication requirements for privileged system access;
• Documented incident response procedures for breach notification and remediation.

While mega188 takes all reasonable measures to protect your data, no digital system can guarantee absolute security. In the event of a data breach that poses a risk to your rights, mega188 will notify affected members and relevant authorities in accordance with applicable regulatory requirements.

9. Your Data Rights

Subject to applicable law and our regulatory retention obligations, you have the following rights in respect of your personal data held by mega188:

• Right of Access: You may request a copy of the personal data we hold about you at any time.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data in your Account.
• Right to Erasure: You may request deletion of your personal data where we no longer have a lawful basis for processing it — subject to our regulatory retention obligations, which may override this right in certain circumstances.
• Right to Restriction: You may request that we restrict the processing of your data while a dispute about its accuracy or lawfulness is resolved.
• Right to Data Portability: You may request a machine-readable copy of personal data you have provided to mega188 for the purpose of transferring it to another service provider.
• Right to Object: You may object to processing based on legitimate interests, including direct marketing. Marketing opt-outs take effect immediately upon request.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of these rights, please contact the mega188 Data Privacy team via live chat or email. Requests will be acknowledged within 48 hours and resolved within 30 days where technically and legally feasible.

10. Children & Minors

mega188 strictly prohibits access to or use of the Platform by any person under the age of 21. We do not knowingly collect, store, or process personal data belonging to minors. If mega188 becomes aware that a minor has registered an Account or that personal data of a minor has been collected, that Account will be immediately suspended, the data will be deleted, and any balance held will be subject to review and potential forfeiture in accordance with our Terms & Conditions.

If you believe that a person under the age of 21 has registered on mega188, please contact our support team immediately via live chat.

11. Third-Party Services

The mega188 Platform may incorporate third-party services such as licensed game content from software providers, payment gateway infrastructure, and analytics tools. These third-party services operate under their own privacy policies and data handling practices. mega188 is not responsible for the privacy practices of third parties, though all third-party providers integrated into the Platform are vetted to ensure they maintain standards consistent with our own data protection obligations.

Links within the mega188 Platform that navigate to internal pages of the site do not involve third-party data transfer. mega188 does not incorporate links to external third-party websites within its Platform pages.

12. International Data Transfers

mega188 may process or store personal data in jurisdictions outside Malaysia, including in the jurisdiction where our Platform servers and licensed game content infrastructure are hosted. In all cases, mega188 ensures that appropriate safeguards are in place for international data transfers, including contractual protections with data processors that are equivalent in standard to those required under applicable data protection law.

13. Updates to This Privacy Policy

mega188 reserves the right to update this Privacy Policy at any time. Updated versions will be published on this page with a revised effective date. Where changes are material to your rights or to how we process your data, we will notify registered members via email or in-platform notification prior to the changes taking effect.

Your continued use of the mega188 Platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not accept the updated Policy, you should cease using the Platform and contact support to arrange Account closure.

14. Contact & Data Privacy Enquiries

For any questions, concerns, or requests relating to this Privacy Policy or to the personal data mega188 holds about you, please contact our Data Privacy team:

• Live Chat: Available 24/7 via the mega188 Platform — the fastest way to reach us.
• Email: [email protected] — responses within two (2) hours.

Formal data subject access requests and erasure requests should be submitted by email with the subject line "Data Privacy Request" along with your Account username and a copy of your identity document for verification purposes.