Privacy Policy — How Mega8888 Handles Your Data

This Privacy Policy ("Policy") is published by Mega8888 ("the Platform", "we", "us", "our") and applies to all personal data collected from individuals ("Player", "User", "you") who access or use the Mega8888 website atmega8888.cam and any related sub-domains or services.

Mega8888 is operated under an internationally issued gaming licence and is committed to handling personal data responsibly, transparently, and in accordance with internationally recognised data protection principles. We recognise that the players who trust us with their information — whether they are in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, or elsewhere in Malaysia — deserve clear and honest communication about how that data is used.

By registering an account, making a deposit, or continuing to use the Mega8888 platform, you acknowledge that you have read, understood, and agreed to the data practices described in this Policy. This Policy should be read alongside our Terms & Conditions and our Responsible Gambling Policy.

The following terms have specific meanings throughout this Policy:

• Personal Data: Any information that identifies or could reasonably be used to identify a living individual, including name, email address, device identifiers, and payment account details.
• Processing: Any operation performed on Personal Data, including collection, storage, use, disclosure, or deletion.
• Data Controller: Mega8888, which determines the purposes and means of processing Personal Data collected through the Platform.
• Data Processor: A third party that processes Personal Data on behalf of Mega8888 under a contractual obligation, such as payment service providers and KYC verification partners.
• KYC: Know Your Customer — the identity verification process required before a Player's first withdrawal or upon Mega8888's reasonable request.
• Cookies: Small text files stored on a user's device by a web browser, used to retain session information and platform preferences.
• Sensitive Data: A subset of Personal Data requiring heightened protection, including government-issued identification numbers, financial account details, and data relating to health or gambling behaviour.

Mega8888 collects the following categories of Personal Data from players:

We collect Personal Data through the following means:

• Direct Collection: Information you provide when registering an account, completing KYC, making a deposit or withdrawal request, contacting our support team, or responding to a promotion.
• Automated Collection: Technical and behavioural data collected automatically through cookies, pixel tags, server logs, and analytics tools as you interact with the Platform.
• Third-Party Sources: Identity and fraud-risk data received from KYC verification service providers, payment processors, and fraud prevention databases. We may verify the information you provide against these sources.
• Public Sources: In some cases, we may supplement your profile with information from publicly available sources for the purpose of AML screening or sanctions checking.

Mega8888 processes your Personal Data for the following purposes:

1. Account Management: To create, maintain, and administer your player account, including processing login sessions, updating account settings, and applying account-level controls such as deposit limits and self-exclusion.
2. Payment Processing: To process deposits and withdrawals via your chosen payment method — whether Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, or cryptocurrency — and to reconcile transaction records.
3. Identity Verification (KYC): To verify your identity, confirm your age (21+), and confirm the legitimacy of your payment method, as required by our licensing obligations and AML policy.
4. Legal and Regulatory Compliance: To meet our obligations under applicable law, including anti-money-laundering (AML) requirements, sanctions screening, and reporting obligations under our gaming licence.
5. Fraud Prevention and Security: To detect, investigate, and prevent fraudulent transactions, account takeovers, collusion, bonus abuse, and other prohibited conduct described in our Terms & Conditions.
6. Responsible Gambling: To monitor player behaviour for indicators of problem gambling and to administer responsible gambling tools (deposit limits, session limits, self-exclusion) in accordance with our Responsible Gambling Policy.
7. Customer Support: To respond to enquiries, resolve disputes, and provide technical assistance through our 24/7 live support service.
8. Platform Improvement: To analyse aggregate usage patterns, identify technical issues, and improve the performance, stability, and user experience of the Platform.
9. Marketing Communications: To send promotional messages, bonus notifications, and platform updates to players who have not opted out of marketing. You may withdraw consent to marketing at any time by contacting our support team.

Mega8888 processes your Personal Data under the following legal bases:

• Contractual Necessity: Processing required to perform our obligations under the agreement created when you register an account and accept our Terms & Conditions — including payment processing, account management, and customer support.
• Legal Obligation: Processing required to comply with applicable law, including AML regulations, KYC obligations under our gaming licence, and sanctions screening.
• Legitimate Interests: Processing necessary for our legitimate business interests, including fraud prevention, platform security, responsible gambling monitoring, and analytics — provided those interests are not overridden by your rights and freedoms.
• Consent: Where we rely on your explicit consent, such as for marketing communications or the use of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

Mega8888 does not sell, rent, or trade your Personal Data to third parties for their independent marketing purposes. We share Personal Data only in the following circumstances and only to the extent strictly necessary:

• Payment Service Providers: We share financial and identity data with payment processors (including e-wallet operators, FPX/DuitNow infrastructure providers, and cryptocurrency processing services) to facilitate deposits and withdrawals.
• KYC and Identity Verification Partners: We share identity documents and biographical data with authorised KYC service providers for the purpose of identity verification, age confirmation, and fraud screening.
• AML and Fraud Prevention Services: We may share transaction data and identity information with AML screening services and sanctions databases as required by our compliance obligations.
• Technology and Infrastructure Providers: Hosting, data storage, analytics, and security service providers may process data on our behalf under contractual data processing agreements that require them to maintain appropriate security standards.
• Regulatory and Law Enforcement Authorities: We will disclose Personal Data to regulators, law enforcement agencies, or courts where legally required to do so, or where we believe disclosure is necessary to protect the rights, property, or safety of Mega8888, our players, or the public.
• Corporate Transactions: In the event of a merger, acquisition, or sale of assets, Personal Data may be transferred to the acquiring entity, subject to equivalent privacy protections.

Mega8888 uses cookies and similar tracking technologies to operate the Platform and to improve your experience. The following types of cookies may be set when you visit the Platform:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session management cookies that keep you logged in and security tokens that protect against cross-site request forgery. These cookies cannot be disabled without impairing core functionality.
• Functional Cookies: Used to remember your preferences, such as your chosen language, display settings, and responsible gambling tool configurations, so you do not need to re-enter them on each visit.
• Analytics Cookies: Used to collect aggregate, anonymised data about how players navigate the Platform — which pages are visited most frequently, where sessions begin and end, and what features are most used. This data informs platform improvement decisions.
• Security and Fraud Prevention Cookies: Used to detect and prevent fraudulent activity, including the use of automation tools, VPNs, and duplicate account creation attempts.

You may control non-essential cookies through your browser settings. Please note that disabling certain cookies may reduce the functionality of the Platform. Mega888 does not use third-party advertising cookies or behavioural tracking for the purpose of third-party ad targeting.

Mega8888 retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, subject to the following retention principles:

• Active Accounts: All Personal Data associated with an active player account is retained for the lifetime of the account and for a minimum period of 5 years following account closure, in compliance with AML record-keeping obligations.
• KYC Documents: Identity verification documents are retained for a minimum of 5 years from the date of the last transaction or account closure, whichever is later, as required by applicable AML and gaming regulatory requirements.
• Transaction Records: Financial transaction records (deposits, withdrawals, bets) are retained for a minimum of 5 years to support regulatory auditing, AML obligations, and dispute resolution.
• Communications: Support communications and live chat transcripts are retained for up to 3 years from the date of the interaction for quality assurance and dispute resolution purposes.
• Marketing Data: Where you have consented to marketing, your contact preferences are retained until you withdraw consent. We will honour opt-out requests within 10 business days.

Upon the expiry of the applicable retention period, Personal Data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual.

Mega8888 implements a range of technical and organisational security measures designed to protect your Personal Data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• Transport Encryption: All data transmitted between your device and the Mega8888 servers is encrypted using TLS (Transport Layer Security) — the same technology used by major financial institutions.
• Data Encryption at Rest: Sensitive personal and financial data stored in our databases is encrypted at rest using industry-standard encryption algorithms.
• Access Controls: Access to systems holding Personal Data is restricted to authorised personnel on a strict need-to-know basis. All access is logged and subject to regular review.
• Fraud Monitoring: Automated systems monitor for unusual account activity, multiple login attempts, and other indicators of compromise on a continuous basis.
• Vendor Security: Third-party processors and technology partners are required to demonstrate appropriate security standards as condition of engagement with Mega8888.

Subject to applicable law and any overiding legal obligations (such as AML record-keeping requirements), you have the following rights in respect of your Personal Data held by Mega8888:

To exercise any of these rights, please contact our support team (see Section 12). We aim to respond to all data subject requests within 30 days. We may need to verify your identity before processing your request.

If you have any questions about this Privacy Policy, wish to exercise your data rights, or have concerns about how your Personal Data is being handled, please contact the Mega8888 support team through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week directly through the Platform. This is the fastest channel for urgent data concerns.
• Email (plain text — not a clickable link): [email protected]

We aim to acknowledge all privacy-related enquiries within 2 business days and to provide a substantive response within 30 days. Where a request is complex or we receive a high volume of requests, we may extend this period by a further 30 days, in which case we will notify you accordingly.

Mega8888 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or platform functionality. Where changes are material — for example, a new category of data collection or a significant change to how data is shared — we will notify registered players by email or by displaying a prominent notice on the Platform at least 7 days before the change takes effect.

For non-material changes (such as corrections of typographical errors or clarifications that do not alter the substance of the Policy), the updated version will take effect upon publication without prior notice.

Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Policy. The version currently in force is the version dated1 January 2026. Previous versions are available on request by contacting our support team.