Privacy Policy – Mega 8's Commitment to Protecting the Personal Data of Malaysian Users

Welcome to Our Privacy Policy Mega 8. We understand that entrusting your personal data to any online platform is a significant decision, and we do not take that responsibility lightly. This Privacy Policy is written in clear, plain language so that every Malaysian user — regardless of their level of digital literacy — can fully understand how their data is managed by Mega 8.

Mega 8 is an online casino platform operating for users in Malaysia. In running this platform, we collect and process certain personal data belonging to our users. This Privacy Policy explains:

• Types of personal data we collect from you
• The purpose of data collection and how that data is used
• Parties that may receive your data under certain circumstances
• The security measures we take to protect your data
• Your rights regarding your personal data and how to exercise them

This Privacy Policy applies to all services provided by Mega 8 through the mega8.my website and all associated domains or subdomains, as well as any mobile applications or other software we may release in the future.

Mega 8 collects your personal data through several different channels. Below are the categories of data we collect and how we collect them:

a) Data you provide directly to us:

• Registration information: Full name, email address, Malaysian phone number, date of birth, and account password during the registration process on Mega 8.
• Identity verification (KYC) information: A copy of your MyKad, passport or other official identification document when required for account verification or withdrawal processing.
• Financial information: Details of the payment methods you use for deposits and withdrawals at Mega 8, including digital wallet account names (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay) and bank account information for FPX transfers. We do not store your full credit or debit card number.
• Support communications: The content of chats, emails and support tickets you submit to the Mega 8 support team.

b) Data collected automatically when you use the platform:

• Login data: IP address, browser type, device operating system, access date and time, and login session details.
• Gaming activity data: Game history, bet amounts, wins and losses, game preferences, and time spent playing on the Mega 8 platform.
• Transaction data: A full history of deposits and withdrawals, including the payment method used, amounts and transaction status.
• Cookie and tracking technology data: Information collected through cookies, web beacons, and other tracking technologies we use on the Mega 8 platform (see section 7 for more details).

The personal data we collect is used only for legitimate and specific purposes. Mega 8 uses your data to:

Mega 8 will not use your data for any purpose not listed above without first notifying you and obtaining your consent where required under applicable law.

Mega 8 does not sell your personal data. However, in the course of operating the platform, we may need to share your data with a limited number of third parties in the following circumstances:

• Payment service providers: To process your deposits and withdrawals via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and the FPX system, we are required to share the necessary transaction information with these service providers. They are bound by their own privacy policies and data security agreements.
• Game service providers: Game studios and software providers that supply games on the Mega 8 platform may receive game data necessary to operate their respective games.
• Regulatory authorities and enforcement bodies: Mega 8 may be required to disclose your personal data to Malaysian authorities (such as the police, courts or regulatory bodies) when mandated by law or a valid court order.
• Technical service providers: Companies that help us manage the platform's technical infrastructure — including cloud computing services, cybersecurity, and analytics — all of whom are bound by strict confidentiality agreements.

Mega 8 continuously invests in the latest security technologies and practices to protect your personal data from unauthorised access, disclosure, alteration or destruction. Key security measures we have in place include:

• 256-Bit SSL/TLS Encryption for all communications between your device and Mega 8's servers — no data is transmitted in plain text.
• Stored data encryption — sensitive data such as passwords and financial information is stored in encrypted format using modern cryptographic algorithms.
• Two-factor authentication (2FA) available to all Mega 8 user accounts, adding an extra layer of security beyond your standard password.
• 24/7 security monitoring by our cybersecurity team to detect and respond to any threats or suspicious activity promptly.
• Penetration testing conducted regularly by independent security experts to identify and address any system vulnerabilities before they can be exploited.
• Strict access controls — only Mega 8 employees who require access to specific data in order to perform their duties are permitted to do so, and all access is logged and monitored.

While we take all reasonable measures to protect your data, no online security system can guarantee absolute 100% protection. We encourage you to also take precautions on your end — such as using a strong password, keeping your login credentials private, and enabling two-factor authentication.

Mega 8 retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy, or as required by applicable laws in Malaysia. Our data retention guidelines are as follows:

• Active account data: Retained for the entire duration your Mega 8 account remains active, plus any additional period required by law following account closure.
• Financial transaction data: Retained for a minimum of 7 years from the transaction date, in line with financial record-keeping requirements under Malaysian law.
• Identity verification (KYC) data: Retained for the duration of the active account plus 5 years following account closure to fulfil anti-money laundering (AML) obligations.
• Support communication logs: Retained for 3 years for dispute resolution and service improvement purposes.
• Anonymous analytics data: May be retained for a longer period for platform improvement purposes, but only in a form that cannot be attributed to any specific individual.

When data is no longer needed and there is no legal obligation to retain it, Mega 8 will securely delete or anonymise that data using industry-recognised methods.

Platform Mega 8 uses cookies and similar tracking technologies to enhance the user experience, maintain platform security, and gather analytical data that helps us improve our services. Below are the categories of cookies we use: