Privacy Policy Mega288 – Our Commitment to Protecting Malaysian Players' Data

1Introduction & Scope of Privacy Policy

Mega288 ("we", "platform", or "mega288") respects the privacy of every player and user on our platform. This Privacy Policy outlines our practices and commitments in handling the personal information we collect from you when you use the mega288.im website and all related services.

This policy is prepared in accordance with the requirements of Malaysia's Personal Data Protection Act 2010 (PDPA) and applies to all individuals who register, browse, or use the Mega288 platform from within Malaysia. By using our platform, you acknowledge that you have read and understood this Privacy Policy.

Mega288 acts as the data controller for all personal information collected through our platform. This means we are fully responsible for ensuring your information is handled in accordance with the data protection principles set out under PDPA 2010 and international best practices.

This Privacy Policy should be read together with Mega288's Terms & Conditions, which together form the complete agreement between you and us. In the event of any conflict between the Privacy Policy and the Terms & Conditions on matters of privacy, this Privacy Policy shall take precedence.

2Types of Personal Information We Collect

Mega288 collects various categories of personal information depending on how you interact with our platform. The types of information collected are as follows:

Personal Identification Information:

Financial Information:

Platform Usage Information:

Technical Information:

3How We Collect Personal Information

Mega288 collects personal information through a number of different channels and methods:

• Account Registration: When you register a Mega288 account, you are required to provide basic information such as your name, email address, phone number, and date of birth. This information is necessary for creating and managing your account.
• Identity Verification (KYC): To comply with legal requirements and process withdrawals, we may request a copy of your MyKad, bank statement, or other supporting documents to verify your identity.
• Financial Transactions: Each time you make a deposit via Touch 'n Go eWallet, GrabPay, Boost, DuitNow, FPX, or any other Malaysian payment method, our system records the relevant transaction details for your account records.
• Platform Usage: Our system automatically logs your activity on the platform, including games played, bets placed, login times, and interactions with platform features.
• Support Communications: When you contact Mega288's support team via Live Chat or email, we retain records of those communications for the purposes of issue resolution and service improvement.
• Cookies & Tracking Technologies: Our platform uses cookies and similar technologies to automatically collect usage data for the purpose of enhancing user experience and platform security.

Mega288 does not collect personal information from third-party sources such as social media unless you have voluntarily given consent to do so during the registration process or through your account settings.

4Purpose of Personal Information Use

Mega288 uses the personal information collected for the following purposes:

Mega288 will not use your personal information for any purpose other than those stated in this Privacy Policy without first obtaining your additional consent. If you have previously consented to receiving marketing communications but later wish to withdraw that consent, you may do so at any time by using the unsubscribe link in any promotional email we send, or by contacting our support team.

5Sharing & Disclosure of Personal Information

Mega288 does not sell, rent, or trade players' personal information to any third party for marketing or commercial purposes. However, there are certain situations where we may need to share your information with specific parties:

• Service Providers: We share necessary data with third-party service providers who assist us in operating the platform, including payment processors (such as FPX, Touch 'n Go, and GrabPay gateways), gaming software providers, and cloud service providers. All such providers are bound by strict data protection agreements and are only permitted to use your data for the specific services they provide to Mega288.
• Legal Compliance: Mega288 may be required to disclose your personal information to Malaysian authorities — including the Royal Malaysia Police, Bank Negara Malaysia, or the courts — when required by law, court order, or valid legal process. In such circumstances, we have no discretion to refuse the request.
• Fraud Prevention: In certain cases, Mega288 may share information with other platforms in the industry for the purposes of joint fraud prevention, anti-money laundering, or other criminal activity prevention. Such sharing is carried out only within recognized and regulated industry information-sharing frameworks.
• Business Transfer: Should Mega288 be involved in any merger, acquisition, or sale of assets, player personal information may be transferred as part of that transaction. In such circumstances, we will notify you via email or an in-platform notice before your data is transferred and becomes subject to a different Privacy Policy.

6Data Security & Protection Measures

Mega288 invests seriously in technical and organizational security to protect your personal information from unauthorized access, disclosure, alteration, or destruction. Key security measures we have implemented include:

• SSL/TLS Encryption: All communications between your web browser and Mega288's servers are protected with TLS 1.3 and 256-bit SSL encryption — the same technology used by major financial institutions such as Maybank and CIMB.
• Encryption of Data at Rest: Sensitive data stored in our databases, including financial information and identification numbers, is encrypted using AES-256 encryption standards.
• Strict Access Controls: Access to player personal data within Mega288's internal systems is strictly limited to staff with a legitimate business need. All access is logged and audited on a regular basis.
• Two-Factor Authentication: All Mega288 internal systems containing player data require two-factor authentication (2FA) for access, reducing the risk of unauthorized access even in the event of a password breach.
• Continuous Monitoring: Our security systems monitor all platform activity 24/7 to automatically detect suspicious patterns or attempted data breaches.
• Independent Security Audits: mega288 undergoes regular security audits and penetration testing conducted by independent security experts to identify and address any security vulnerabilities.
• Staff Training: All Mega288 staff who handle players' personal data undergo regular data protection and information security training.

While we take all reasonable steps to protect your data, no security system can be guaranteed 100% risk-free. You also play an important role in keeping your account secure — use a strong password, never share your login credentials, and enable the 2FA feature available in your account settings.

7Data Retention Period

Mega288 retains your personal information for as long as necessary to fulfil the purposes outlined in this Privacy Policy and to comply with applicable legal obligations. Our general data retention guidelines are as follows:

• Active Account Data: Retained for the duration your account remains active with Mega288 and for 7 years after account closure, in accordance with Malaysian legal requirements for financial records.
• Financial Transaction Records: Retained for a minimum of 7 years from the transaction date, in accordance with Malaysia's Financial Services Act and Anti-Money Laundering legislation.
• Support Communication Records: Retained for 3 years from the date of communication for reference and dispute resolution purposes.
• Technical Log Data: Access logs and technical security records are retained for 12 months from the date of creation.
• Cookie Data: This depends on the type of cookie — session cookies are deleted when you close your browser, while persistent cookies have a set expiry period ranging from 30 days to 2 years.

When your personal data is no longer required for any legitimate purpose, mega288 will securely delete or anonymise it in accordance with industry standards, ensuring that deleted data cannot be recovered or reused.

8Cookies & Tracking Technology

Mega288 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored in your web browser when you visit our website. We use several types of cookies:

• Essential Cookies: Required for core platform functions such as secure login, session management, and transaction processing. These cookies cannot be disabled, as the platform will not function properly without them.
• Performance Cookies: Collects information on how you use the platform, such as pages visited, time spent, and errors encountered. This data is used in aggregate to improve platform performance.
• Functional Cookies: Saves your preferences such as language, display settings, and other choices so you do not have to reconfigure them each time you visit.
• Analytics Cookies: Helps us understand overall platform usage patterns to make better-informed product improvement decisions. This data does not contain information that can identify any individual specifically.

You can manage and delete cookies through your web browser settings. Please note, however, that disabling certain cookies may affect the functionality of the Mega288 platform. For instructions on managing cookies in popular web browsers, please refer to your browser's help documentation.

9Your Rights under PDPA 2010

As an individual protected under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding the personal information we hold about you:

To submit any request relating to your privacy rights, contact us at support@mega288.im and clearly state your request. mega288 will respond within 21 business days of receiving your request. For complex cases, this period may be extended to up to 60 business days, and we will notify you of any such delay.

Please note that these rights are not absolute and are subject to certain exemptions under PDPA 2010 — for example, we may be unable to delete your data if it is required to fulfill a legal obligation or to defend a legal claim. We will clearly explain any applicable limitations when responding to your request.

10Protection of Children's Data

Mega288 is an online entertainment platform intended strictly for individuals aged 18 and above. We do not knowingly collect or process any personal information from children under the age of 18.

If we discover that personal information belonging to a child under the age of 18 has been collected without our knowledge, we will take immediate steps to delete that information from our systems, close the associated account, and refund any deposited funds.

11Links to Third-Party Sites

The Mega288 platform may contain links or references to third-party websites and services, including game providers, sports news channels for the Malaysia Super League or EPL, and payment providers. This Privacy Policy does not apply to those third-party websites or services.

Mega288 is not responsible for the privacy practices of third-party websites that you may access via links on our platform. We recommend reading the Privacy Policy of each third-party website you visit to understand how they handle your personal information. Accessing any third-party website is entirely at your own risk.

Please note that third-party payment providers you use for deposits and withdrawals — such as Touch 'n Go eWallet, GrabPay, Boost, or your own bank — have their own Privacy Policies governing how they handle your transaction data. Mega288 only receives the minimum transaction information necessary to record and process your payment.

12Changes to the Privacy Policy

Mega288 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, legislative developments, or platform improvements. We will notify you of any material changes through:

• A clear notice on our platform's main page
• Notification emails sent to the email address registered to your account
• An in-platform pop-up notification when you log in after changes have been made

The "Updated" date shown at the top of this page will always reflect the date of the most recent revision. We encourage you to review this Privacy Policy periodically to stay informed about how we handle your personal information. Your continued use of the Mega288 platform following any changes to this Privacy Policy constitutes your acceptance of the latest version.

13Contact Us – Data Protection Officer

For any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data by Mega288, please contact our team:

• Privacy Email: support@mega288.im (please include "Privacy Enquiry" in the email subject line)
• Live Chat: Available 24/7 directly within the Mega288 platform
• Response Time: Within 2 business days for general privacy inquiries; 21 business days for formal privacy rights requests

Mega288's data protection team handles all privacy inquiries with the utmost seriousness and confidentiality. We are committed to providing clear, informative, and helpful responses to every inquiry relating to our players' data privacy.

If you are not satisfied with our response to your privacy inquiry or complaint, you have the right to refer the matter to the Personal Data Protection Commissioner of Malaysia or the relevant regulatory body in Malaysia.