Privacy Policy — mega888h5

1 Introduction

Mega888h5 ("we", "us", "our", or "the Platform") is committed to protecting the privacy and personal data of all individuals who access or use our online gaming and sports betting services at mega888h5.cam. This Privacy Policy ("Policy") sets out in clear, structured terms how we collect, process, store, share, and protect personal data, and the rights available to you as a data subject.

This Policy applies to all registered Users and visitors of the mega888h5 Platform, regardless of location, including players accessing the Platform from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and other locations throughout Malaysia and internationally.

By registering an Account, accessing the Platform, or otherwise providing personal data to mega888h5, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

2 Definitions

For the purposes of this Policy, the following terms are defined as follows:

• "Personal Data" — Any information relating to an identified or identifiable natural person, including but not limited to name, identification number, contact details, payment information, IP address, and device identifiers.
• "Processing" — Any operation performed on Personal Data, whether automated or manual, including collection, recording, storage, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" — Mega888h5, which determines the purposes and means of processing Personal Data collected through the Platform.
• "Data Processor" — A third-party entity that processes Personal Data on behalf of mega888h5 under a data processing agreement, such as payment service providers, KYC verification vendors, and cloud infrastructure providers.
• "Data Subject" — Any natural person whose Personal Data is processed by mega888h5 — in the context of this Platform, this is primarily the registered User or Platform visitor.
• "Sensitive Data" — A subset of Personal Data attracting heightened protection, including government-issued identification numbers (such as MyKad numbers), financial account details, and biometric verification data.
• "Cookie" — A small text file stored on a User's device by the Platform's web server for purposes including session management, preference retention, and analytics.
• "KYC" — Know Your Customer; the regulatory and risk-management process by which mega888h5 verifies the identity of registered Users.

3 Data We Collect

Mega888h5 collects the following categories of Personal Data:

Category	Examples	Purpose
Identity Data	Full legal name, date of birth, nationality, MyKad or passport number	Account registration, KYC compliance, age verification
Contact Data	Email address, mobile phone number, residential address	Account communication, support, security alerts
Financial Data	Bank account numbers, e-wallet identifiers (Touch 'n Go, Boost, GrabPay), transaction history	Processing deposits and withdrawals, fraud prevention
Gameplay Data	Game sessions, wager amounts, win/loss records, bonus usage, sports bets placed	Account management, responsible gambling monitoring, dispute resolution
Technical Data	IP address, device type, operating system, browser type, session timestamps	Security, fraud detection, platform performance
Communications Data	Live chat transcripts, email correspondence, WhatsApp message records	Customer support, quality assurance, compliance record-keeping
Verification Documents	MyKad photographs, selfie images, proof of address documents	KYC identity verification, anti-money laundering compliance

We do not collect Personal Data beyond what is necessary for the purposes described in this Policy (the principle of data minimisation).

4 How Data Is Collected

Personal Data is collected through the following mechanisms:

• Direct Submission: Data you actively provide during account registration, KYC verification, deposit and withdrawal requests, support interactions, and promotional opt-ins.
• Automated Collection: Technical data collected automatically when you access the Platform, including via cookies, session tokens, server logs, and browser fingerprinting tools used for fraud detection.
• Payment Partners: Transaction confirmation data shared with mega888h5 by verified Malaysian payment processors including DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, Touch 'n Go eWallet, Boost, and GrabPay, following your initiation of a financial transaction.
• KYC Verification Vendors: Identity verification data returned by third-party KYC service providers following your submission of identification documents.
• Third-Party Referrals: If you access mega888h5 via a referral link, limited referral attribution data may be shared with us by the referring party.

5 Purposes of Processing

Mega888h5 processes your Personal Data for the following purposes:

1. Account Administration: To create, manage, and maintain your Account, including processing login authentication, session management, and account preference settings.
2. Payment Processing: To process deposits and withdrawals via Malaysian payment partners, verify transaction legitimacy, and maintain accurate financial records.
3. Identity Verification (KYC): To verify your identity and age in compliance with anti-money laundering (AML) and counter-terrorism financing (CTF) obligations applicable to online gaming operators.
4. Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, multi-accounting, unauthorised access, and other security incidents.
5. Responsible Gambling Compliance: To monitor gameplay patterns for indicators of problem gambling and to administer self-exclusion, deposit limit, and loss limit tools in accordance with your instructions and our Responsible Gambling Policy.
6. Customer Support: To respond to enquiries, resolve disputes, and provide technical assistance through our live chat, email, and WhatsApp support channels.
7. Legal and Regulatory Compliance: To maintain records required by applicable law, respond to lawful requests from regulatory or law enforcement authorities, and fulfil our obligations under applicable gaming and financial regulations.
8. Platform Improvement: To analyse aggregate, anonymised usage data for the purpose of improving Platform performance, game selection, and user experience.
9. Marketing Communications: Where you have given explicit consent, to send you promotional offers, bonus notifications, and relevant Platform updates. You may withdraw this consent at any time.

6 Legal Basis for Processing

Mega888h5 processes your Personal Data on the following legal bases:

• Contractual Necessity: Processing required to fulfil the user agreement between you and mega888h5, including account administration, payment processing, and customer support.
• Legal Obligation: Processing necessary to comply with applicable legal and regulatory requirements, including KYC, AML, and CTF obligations.
• Legitimate Interests: Processing carried out in the legitimate interests of mega888h5, such as fraud prevention, platform security, and responsible gambling monitoring — where those interests are not overridden by your fundamental rights.
• Consent: Processing based on your freely given, specific, and informed consent — applicable to direct marketing communications. You may withdraw your consent at any time without affecting the lawfulness of prior processing.

7 Data Sharing & Disclosure

Mega888h5 does not sell, rent, or commercially transfer your Personal Data to third parties. We may share your data with the following categories of recipients only to the extent necessary for the stated purposes:

• Payment Service Providers: Malaysian payment partners including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and banking partners (Maybank, CIMB, Public Bank, Hong Leong, RHB) — strictly for the processing of financial transactions.
• KYC and Identity Verification Vendors: Third-party compliance service providers who process identity documents on our behalf under data processing agreements that impose equivalent data protection standards.
• Cloud Infrastructure Providers: Hosting and infrastructure partners who store Platform data under contractual data security obligations.
• Regulatory and Law Enforcement Authorities: Where required by applicable law, court order, or lawful regulatory directive, we may disclose your data to competent authorities. We will notify you where legally permitted to do so.
• Professional Advisers: Legal counsel, auditors, and compliance consultants engaged under professional confidentiality obligations, where necessary for operational or legal purposes.

8 Data Retention

Mega888h5 retains your Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following indicative retention periods apply:

• Account and Identity Data: Retained for the duration of your Account and for a minimum of five (5) years following account closure, in compliance with AML record-keeping requirements.
• Financial Transaction Records: Retained for a minimum of seven (7) years from the date of each transaction, in accordance with financial record-keeping obligations.
• KYC Verification Documents: Retained for the duration of your Account and for five (5) years following account closure.
• Gameplay Records: Retained for the duration of your Account and for three (3) years following account closure, or longer where required for dispute resolution or regulatory compliance.
• Support Communications: Retained for three (3) years from the date of each communication, or until the resolution of any related dispute.
• Marketing Consent Records: Retained for as long as consent remains active, plus three (3) years following withdrawal of consent.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in a manner that prevents re-identification.

9 Data Security

Mega888h5 implements a range of technical and organisational security measures designed to protect your Personal Data against unauthorised access, disclosure, alteration, or destruction. These include:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and our servers.
• AES-256 encryption for Personal Data stored in our database systems.
• Role-based access controls, ensuring that only authorised personnel can access Personal Data, limited to the minimum necessary for their function.
• Multi-factor authentication (MFA) for all internal administrative system access.
• Regular penetration testing and security audits conducted by independent cybersecurity professionals.
• Automated fraud detection systems that monitor Account activity for anomalous patterns indicative of unauthorised access or fraudulent use.

10 Cookies & Tracking Technologies

Mega888h5 uses cookies and similar tracking technologies to operate the Platform effectively and to improve user experience. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. These cannot be disabled without affecting Platform functionality.
• Functional Cookies: Used to remember your preferences such as language settings, preferred payment methods, and session display options. These improve your experience but are not essential to core functionality.
• Analytics Cookies: First-party analytics cookies that help us understand how Users interact with the Platform — including pages visited, session duration, and feature usage. This data is collected in aggregated, anonymised form and is not linked to individual identities.
• Security Cookies: Used by our fraud detection and bot-prevention systems to distinguish legitimate Users from automated threats. These operate in the background and do not affect your visible experience.

Mega888h5 does not use third-party advertising cookies or cross-site tracking cookies. You can manage or disable non-essential cookies through your browser settings. Please be aware that disabling certain cookies may affect the functionality of the Platform.

11 Your Data Rights

As a data subject, you have the following rights with respect to your Personal Data held by mega888h5. To exercise any of these rights, contact our support team via live chat or email at [email protected]. Requests will be acknowledged within 24 hours and fulfilled within 30 days, subject to identity verification.

Please note that certain rights may be limited where processing is required for legal compliance, fraud prevention, or the exercise or defence of legal claims. Where we are unable to fulfil a request in full, we will explain the reasons in writing.

12 Minors & Age Gating

Mega888h5 operates a strict 21+ minimum age policy for all gambling activities. We do not knowingly collect, process, or retain Personal Data from individuals under 21 years of age. Our registration and KYC processes are specifically designed to identify and prevent underage access.

Where we identify, or are notified, that Personal Data has been provided by or on behalf of an individual under 21 years of age, we will:

• Immediately suspend and permanently close the associated Account.
• Void and forfeit all associated balances.
• Securely delete all Personal Data collected in connection with the Account as soon as is reasonably practicable, subject to any overriding legal retention obligations.

If you are a parent or guardian and believe that your child has registered an Account on mega888h5, please contact our support team immediately at [email protected] so that we may take prompt action.

13 International Data Transfers

Mega888h5 operates primarily within the Malaysian market and prioritises the use of Malaysian payment infrastructure and locally relevant service providers. Where Personal Data is processed by Data Processors located outside Malaysia — for example, by cloud infrastructure providers or KYC verification vendors operating international data centres — such transfers are governed by appropriate contractual safeguards, including data processing agreements that require equivalent standards of data protection to those applied within Malaysia.

We do not transfer Personal Data to jurisdictions that do not provide an adequate level of data protection without implementing appropriate protective measures as described above.

14 Third-Party Links & Services

The mega888h5 Platform may include references or links to third-party services, such as payment gateway interfaces. Once you leave the mega888h5 Platform and interact with a third-party service, your data is subject to that third party's privacy policy, over which mega888h5 has no control.

We encourage you to review the privacy policies of any third-party services you interact with. Mega888h5 accepts no responsibility or liability for the privacy practices of third-party operators.

15 Policy Amendments

Mega888h5 reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in applicable law, our data processing practices, or the services we offer. The date of the most recent revision is published prominently at the top of this page.

Where amendments are material — meaning they meaningfully affect how we collect or use your data — we will notify registered Users via the email address associated with their Account and/or via a prominent in-Platform notification, with at least seven (7) days advance notice where practicable.

Your continued use of the Platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree to the revised Policy, you must cease use of the Platform and contact support to arrange account closure.

16 Contact & Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data, please contact our Data Protection team through the following channels:

• Email: [email protected]
• Live Chat: Available 24/7 via the Platform in English, Bahasa Melayu, and Chinese.
• WhatsApp: Available 24/7. Access details are provided in the Platform's Support section.
• Response Commitment: All privacy-related requests will be acknowledged within 24 hours and responded to substantively within 30 calendar days.

If you are dissatisfied with our response to a privacy complaint, you may have the right to escalate the matter to the relevant data protection authority in your jurisdiction. Our support team can provide guidance on the appropriate escalation route for players based in Malaysia.