Privacy Policy mega888app — Platform User Data Protection

1 Introduction

Mega888app ("we", "our platform") takes user privacy very seriously. This Privacy Policy document explains how we collect, process, use, store, and protect your personal information when you use the website mega888app.win, our mobile app, and all related services.

This Privacy Policy applies to all users who register an account, visit our website, or interact with our platform in any way. We comply with Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable data protection legislation in the jurisdictions where we operate.

2 Data We Collect

Mega888app collects your personal information through several methods. The following are the categories of data we collect and the reasons for their collection:

We may also collect information you voluntarily provide when contacting our support team, completing surveys, or participating in certain promotional programmes on the mega888app platform.

3 How We Use Your Data

The personal data we collect is used responsibly for the following purposes:

• Account Management: Opening, verifying, and managing your user account on the mega888app platform, including the KYC process and identity verification.
• Transaction Processing: Processing all deposits, withdrawals, and other financial transactions accurately and securely through supported payment methods.
• Platform Security: Detecting and preventing fraud, money laundering, unauthorized access, and other suspicious activities that could compromise the security of the platform and other users.
• Legal Compliance: Fulfilling applicable legal and regulatory obligations, including reporting requirements to the relevant authorities.
• Service Improvement: Analyzing usage patterns to improve platform features, enhance the user experience, and develop better new products.
• Communication: Sending important account-related notifications, security updates, relevant promotions, and service information to you via email or in-app notifications.
• Responsible Gaming: Monitoring gameplay patterns to identify users who may need support related to responsible gaming, in line with Responsible Gaming Policy us.

4 Sharing Data with Third Parties

Mega888app does not sell, rent, or disclose your personal data to third parties for marketing purposes without your consent. However, we may share your information in the following limited circumstances:

• Trusted Service Providers: Companies that help us operate the platform — including payment gateway providers, game software providers, and cloud service providers — are all bound by strict confidentiality agreements and may only use data for specified purposes.
• Legal Requirements: When required by law, court order, or direction from a legitimate regulatory authority, we will disclose the necessary information.
• Fraud Prevention: We may share information with identity verification agencies or industry fraud prevention networks to protect our platform and users from illegal activity.
• Business Transfers: In the event of a merger, acquisition, or asset transfer, user data may be transferred as part of the business assets, subject to an equivalent or stricter Privacy Policy.

5 Data Security Measures

The security of your personal data is the absolute priority of mega888app. We implement multiple layers of technical and organisational protection to keep your data safe:

• Encryption of Data in Transit: All communications between your device and our servers are secured by TLS 1.3 protocol with 256-bit SSL encryption, ensuring no third party can intercept your data in transit.
• Encryption of Data at Rest: Sensitive data such as financial information and identity documents is encrypted using AES-256 standards within our database.
• Two-Factor Authentication (2FA): The mega888app platform supports two-factor authentication for all user accounts, providing a significantly enhanced layer of security.
• 24/7 Monitoring: Our security team monitors the platform around the clock to detect suspicious activity, intrusion attempts, or anomalies in data access patterns.
• Regular Security Testing: We conduct regular penetration testing and security audits involving independent third-party security experts.
• Staff Training: All staff who handle user data receive comprehensive data protection training and are bound by strict confidentiality agreements.

While we take all reasonable measures to protect your data, no system can be guaranteed 100% secure. In the event of any data breach involving your information, we will notify you within the timeframe required by applicable law.

6 Cookies & Tracking Technologies

Mega888app uses cookies and similar tracking technologies to enhance the user experience and analyse platform performance. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login verification and session security. These cookies cannot be disabled without affecting platform functionality.
• Preference Cookies: Saving your preferences such as language, display theme, and other personal configurations to provide a more comfortable experience.
• Analytics Cookies: Helping us understand how users interact with our platform, which pages are most popular, and where improvements are needed. This data is collected in aggregate and does not personally identify individuals.
• Security Cookies: Used to detect suspicious activity, prevent fraud, and protect user accounts from unauthorised access.

You can manage cookie settings through your web browser preferences. However, disabling essential cookies may affect the functionality and security of the mega888app platform.

7 Data Retention Period

Mega888app retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. Our general data retention guidelines are as follows:

• Active Account Data: Retained for as long as your account is active and for an additional period as required by law following account closure.
• Financial Transaction Records: Retained for a minimum of seven (7) years in accordance with Malaysia's financial and taxation legal requirements.
• KYC Documents: Retained for a minimum of five (5) years after the termination of the business relationship, in line with anti-money laundering legal requirements.
• Security Logs: Retained for twelve (12) months for security incident investigation and digital forensics purposes.
• Support Communication Data: Retained for two (2) years for reference and service quality improvement purposes.

Once the applicable retention period expires, your data will be securely deleted or anonymised using industry-approved procedures.

8 Your Rights as a User

As a mega888app user, you have the following rights regarding your personal data, in accordance with Malaysia's PDPA and our privacy policy:

To exercise any of the above rights, please contact the mega888app support team via live chat within the platform. We will process your request within 14 business days. Please note that some requests may be subject to additional identity verification to ensure the security of your account.

9 Children's Privacy

Mega888app is a platform intended exclusively for individuals aged 18 and above. We do not knowingly collect or process personal data from minors. Should we discover that we have inadvertently collected data from an underage individual, we will take immediate steps to delete that data and close the associated account.

10 Amendments to the Privacy Policy

Mega888app reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform developments. Any material changes will be communicated to you via:

• Prominent notices within the mega888app platform or app.
• Email to the address registered on your account.
• Update the "Last Updated" date at the top of this page.

We encourage you to review this Privacy Policy page periodically. Continued use of the mega888app platform after any amendments are published constitutes your acceptance of the updated policy.

11 Contact Us

If you have any questions, concerns, or wish to exercise your rights regarding your personal data, please contact the mega888app Data Protection Officer (DPO) team through the following channels:

• Live Chat: Available 24/7 directly within the mega888app platform or app — the fastest way to get a response.
• Email: [email protected] — for written enquiries requiring official documentation.
• FAQ: Visit page Frequently Asked Questions us for answers to the most frequently asked privacy questions.

We are committed to responding to all privacy-related enquiries within three (3) business days. For more complex matters such as data deletion requests or formal complaints, the processing period is 14 business days.