Privacy Policy MegaWin888 – Personal Data Protection for Malaysian Players

MegaWin888 is an online betting and casino platform committed to protecting the privacy of all our users. This Privacy Policy describes our data collection and usage practices, which apply to all users who access the megawin888.ws website, the MegaWin888 mobile app for iOS and Android, and any other services we provide under the MegaWin888 brand.

We understand that trust is the foundation of the relationship between MegaWin888 and every one of our players. Nothing matters more to us than ensuring that your personal data — from your name and phone number to your financial transaction details — is handled with full responsibility, transparency, and the highest possible level of security.

This MegaWin888 Privacy Policy has been prepared in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). We encourage you to read this document carefully in its entirety. If any part is unclear or you have questions, MegaWin888's customer support team is available 24 hours a day via live chat or email.

MegaWin888 collects your personal data through several means: directly when you register or use our platform, automatically via tracking technologies, and in certain cases, from legitimate third-party sources. Below is a full breakdown of the types of data we collect:

• Identity data such as MyKad numbers and passport details are only collected as part of the KYC (Know Your Customer) process, which is required for AML compliance and MegaWin888's licensing obligations.
• MegaWin888 does NOT store full credit or debit card details. Payment transactions via Touch 'n Go, DuitNow, FPX (Maybank2u, CIMB Clicks), GrabPay, ShopeePay, and Boost are processed securely through PCI-DSS certified payment gateways.
• Biometric data such as fingerprints or facial recognition is not collected by MegaWin888 at this time.

MegaWin888 uses the personal data we collect solely for legitimate purposes directly related to providing our services to you. We do not use your data for any purpose you have not consented to, or that is not permitted under applicable law.

• Identity Verification & KYC — To verify your identity during registration and withdrawal processes in order to meet AML compliance requirements under Malaysian law.
• Platform Service Delivery — Operates and maintains your account, processes deposits and withdrawals in MYR via local payment methods, and ensures uninterrupted access to all MegaWin888 games and features.
• Fraud Prevention & Security — Detecting and investigating suspicious activity, protecting the integrity of the platform, and ensuring every player enjoys a fair and secure gaming experience.
• Personalise Your Experience — Tailors game recommendations, promotional offers, and platform content based on your preferences and playing habits — for example, suggesting Malaysia Super League matches if you regularly follow football betting.
• Service Communications — Sends important notifications regarding your account, transactions, security updates, and policy changes via email or in-app notifications.
• Legal Compliance — Fulfils all legal obligations applicable to MegaWin888's operations, including PDPA, AML, and gambling licensing requirements.
• Platform Upgrade — Analysing usage data in aggregate (not at an individual level) to understand how players use the platform and identify areas for improvement.

MegaWin888 does not sell, rent, or trade players' personal data to third parties for marketing purposes. However, there are certain circumstances in which we need to share your personal data with other parties to keep the platform running and to fulfil our legal obligations.

MegaWin888 continuously invests in the latest security infrastructure to protect our players' personal data. Our security approach is multi-layered — meaning that even if one line of defence is breached, additional layers remain in place to safeguard your data.

All MegaWin888 servers are housed in certified data centres equipped with multi-layered physical security, including biometric access controls, 24/7 CCTV surveillance, on-site security personnel, and automated fire suppression systems. Access to servers storing players' personal data is strictly limited to staff who require it to perform their duties.

While we take all reasonable steps to protect your data, it is important to remember that no internet security system is completely infallible. We encourage MegaWin888 players to play their part in protecting their accounts — use a strong and unique password, enable 2FA, and never share your login credentials with anyone.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have several rights regarding the personal data held by MegaWin888. Below are those rights and how to exercise them:

• Right of Access — You have the right to request a copy of the personal data we hold about you. We will provide a copy in a readable format within 14 working days of receiving a valid request.
• Right to Rectification — If any personal data we hold about you is inaccurate or incomplete, you have the right to request a correction. All corrections will be processed within 14 business days.
• Right to Erasure — Under certain circumstances, you may request the deletion of your personal data. Please note that we may need to retain certain data to fulfil legal obligations even after your account is closed.
• Right to Object — You may object to the processing of your personal data for specific purposes, particularly direct marketing. You can opt out of marketing communications at any time through your account settings or by contacting us.
• Right to Data Portability — You may request to receive your personal data in a structured, machine-readable format for transfer to another service provider, where it is technically feasible.

MegaWin888 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website or use our app. Below are the types of cookies we use, and you can choose which ones you allow:

You can manage your cookie settings at any time through the privacy settings in your MegaWin888 account or via your browser settings. Please note that disabling certain cookies may affect the functionality or your experience on our platform.

MegaWin888 is a responsible entertainment platform restricted to individuals aged 21 and above only. Our platform is not designed for, nor do we knowingly collect personal data from, individuals under the age of 21.

Some of MegaWin888's service providers operate outside Malaysia. This means your personal data may be transferred to, stored in, or processed in countries outside Malaysia. In all such cases, MegaWin888 ensures that your data receives protection equivalent to or greater than that afforded under Malaysia's PDPA.

The safeguards we apply to international data transfers include: data processing agreements incorporating standard protection clauses, ensuring the recipient country has a recognised data protection framework, and in certain cases, obtaining your explicit consent prior to the transfer.

MegaWin888 does not retain personal data longer than is necessary for the purpose it was collected, or beyond the period required by law. The following is a general guide to our data retention periods:

• Active Account Data — Retained for as long as your account remains active and for 7 years following account closure, in accordance with Malaysia's financial compliance requirements.
• Transaction Records & KYC — Retained for 7 years in compliance with Malaysia's AML legal requirements. This covers all deposit and withdrawal records in MYR as well as identity verification documents.
• Activity & Security Logs — Retained for 2 years for security purposes, fraud investigation, and dispute resolution.
• Support Communication Data — Conversations with MegaWin888 customer support are retained for 3 years for quality control and dispute resolution purposes.
• Analytics Data (Anonymised) — Anonymised usage data may be retained for a longer period as it no longer contains information that can identify an individual.

Once the applicable retention period has elapsed, your personal data will be securely deleted using methods that ensure it cannot be recovered. MegaWin888 conducts regular reviews of stored data to ensure that any data past its retention period is promptly deleted.

MegaWin888 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, new legal requirements, or developments in the technology we use. Any changes take effect immediately upon publication of the updated Privacy Policy on our platform.

For material changes — those that significantly affect your privacy rights — we will endeavour to notify you in advance via an in-app notification or by email to the address registered with your MegaWin888 account. We encourage you to review this Privacy Policy page periodically to stay informed of our latest data practices.

MegaWin888 has appointed a Data Protection Officer (DPO) responsible for overseeing our compliance with Malaysia's PDPA and handling all privacy-related enquiries and requests.

• DPO Email: privacy@megawin888.ws — for all privacy-related enquiries and requests, including access, correction, or deletion of data.
• General Support Email: support@megawin888.ws — for general enquiries about the MegaWin888 platform that are not specifically related to data privacy.
• Live Chat: Available 24/7 within the MegaWin888 platform for immediate enquiries. Response time under 2 minutes.
• FAQs: Visit our FAQ to find answers to our most frequently asked privacy questions.