megawin8 Privacy Policy — How We Collect, Use & Protect Your Data

1. Introduction

1.1 megawin8 is committed to protecting the privacy and personal data of every individual who interacts with our platform. This Privacy Policy sets out in full the basis on which personal data collected from Members — or that Members provide to megawin8 — will be processed.

1.2 This Policy applies to all personal data collected through the megawin8 website at megawin8.win, the megawin8 mobile web interface, customer support interactions (including live chat and email), and any other touchpoint through which a Member or visitor provides information to megawin8.

1.3 megawin8 operates primarily for Malaysian users and accordingly gives particular regard to obligations arising under the Malaysian Personal Data Protection Act 2010 (PDPA), which governs the processing of personal data in commercial transactions in Malaysia. Where megawin8 serves users in other jurisdictions, we apply equivalent or higher standards of data protection consistent with internationally recognised principles.

2. Personal Data We Collect

megawin8 collects the following categories of personal data from Members and, where applicable, from platform visitors:

2.1 Identity and Contact Data

• Full legal name as it appears on your government-issued identification document;
• Date of birth (for age verification purposes — all Members must be 21 or older);
• MyKad number, passport number, or equivalent national identification number;
• Residential address, including postcode and state (e.g., Selangor, Penang, Johor, Sabah, Sarawak);
• Email address and Malaysian mobile phone number.

2.2 Financial and Transaction Data

• Bank account details (account name, bank name, account number) for the purpose of processing withdrawals;
• E-wallet identifiers associated with Touch n Go eWallet, Boost, or other accepted payment methods;
• Transaction history, including deposits, withdrawals, bonus credits, wagers placed, and game results;
• Payment method verification documentation where required.

2.3 Technical and Usage Data

• IP address, browser type and version, device type, and operating system;
• Geolocation data (country and region level, derived from IP address);
• Session data including login timestamps, pages visited, and session duration;
• Device identifiers and cookie data as further described in Section 7.

2.4 Communications Data

• Records of live chat conversations, email correspondence, and support ticket exchanges between you and megawin8 support staff;
• Responses to surveys, promotions, or feedback requests where you choose to participate.

3. How We Collect Your Data

3.1 Directly from You. The majority of personal data megawin8 holds is provided directly by you at the time of account registration, during the KYC verification process, when you contact support, when you make deposits or withdrawal requests, or when you otherwise interact with the platform.

3.2 Automatically. When you visit or use the megawin8 platform, certain technical and usage data is collected automatically through server logs, cookies, and similar technologies. This data is collected to ensure platform functionality, security, and to improve the user experience.

3.3 From Third Parties. megawin8 may receive personal data about you from identity verification providers, payment processors, fraud detection services, and, where applicable, from regulatory authorities in connection with compliance obligations. Any third-party sourced data is handled in accordance with this Privacy Policy.

4. Purposes of Processing

megawin8 processes your personal data for the following purposes:

• Account administration: creating and maintaining your megawin8 member account, verifying your identity, and managing your preferences;
• Transaction processing: processing deposits, withdrawals, bonus allocations, and maintaining an accurate transaction record in MYR;
• Regulatory compliance: meeting Know Your Customer (KYC), Anti-Money Laundering (AML), and age verification obligations required by applicable gaming and financial regulations;
• Security and fraud prevention: detecting, investigating, and preventing fraudulent transactions, account abuse, and other illegal or unauthorised activity;
• Customer support: responding to your queries, resolving disputes, and maintaining records of support interactions;
• Platform improvement: analysing aggregated, anonymised usage patterns to improve platform functionality, game selection, and user experience;
• Marketing communications: with your consent, sending promotional offers, bonus notifications, and platform updates relevant to your megawin8 membership. You may opt out of marketing communications at any time.

5. Legal Basis for Processing

megawin8 processes your personal data on the following legal bases:

• Contractual necessity: processing necessary for the performance of the membership agreement between you and megawin8, including account operation and transaction processing;
• Legal obligation: processing required to comply with applicable laws, including KYC/AML obligations, data retention requirements, and regulatory reporting duties;
• Legitimate interests: processing for fraud prevention, security monitoring, and internal analytics, where such processing does not override your fundamental rights and freedoms;
• Consent: processing for marketing communications and non-essential cookies, where your explicit consent has been obtained and can be withdrawn at any time.

6. Data Sharing & Disclosure

6.1 megawin8 does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. We share personal data only in the following circumstances and only to the extent necessary:

• Service providers: trusted third-party providers who assist with platform operation — including payment processors (FPX operators, Touch n Go eWallet, Boost), identity verification services, cloud hosting providers, and IT security vendors — under contractual data processing agreements that bind them to equivalent data protection standards;
• Game providers: licensed third-party game studios whose games are accessible through the megawin8 lobby may receive anonymised session data necessary for game functionality. No personally identifiable data is shared with game providers beyond what is technically required;
• Regulatory and law enforcement authorities: where megawin8 is legally required to disclose information in response to a valid legal order, court order, regulatory request, or in connection with anti-money laundering investigations;
• Business transfers: in the event of a merger, acquisition, or sale of substantially all of megawin8's assets, personal data held by megawin8 may be transferred to the acquiring entity, subject to equivalent privacy protections and Member notification.

7. Cookies & Tracking Technologies

7.1 megawin8 uses cookies and similar tracking technologies to deliver and improve the platform experience. Cookies are small text files stored on your device when you access the platform.

7.2 megawin8 uses the following categories of cookies:

• Strictly necessary cookies: required for core platform functionality including login session management, security token validation, and fraud detection. These cannot be disabled without affecting platform operation;
• Performance cookies: collect anonymised data about how visitors use the platform to help us identify and fix performance issues and improve navigation;
• Functional cookies: remember your preferences such as language settings and display options to personalise your experience;
• Analytics cookies: used to understand aggregate user behaviour patterns through anonymised data — no individual user is identifiable from this data.

7.3 You can control non-essential cookies through your browser settings. Disabling strictly necessary cookies will impair your ability to use the megawin8 platform effectively.

8. Data Retention

8.1 megawin8 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including compliance with legal, regulatory, accounting, and reporting obligations.

8.2 As a general principle, account data and transaction records are retained for a minimum of five (5) years following account closure, in accordance with AML regulatory requirements. KYC documentation is retained for the period required by applicable gaming and financial regulations.

8.3 Where personal data is no longer required for any of the stated purposes and no legal retention obligation applies, megawin8 will securely delete or anonymise that data in accordance with its internal data lifecycle management procedures.

9. Data Security

9.1 megawin8 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Security measures include, but are not limited to: 256-bit SSL/TLS encryption for data in transit, AES-256 encryption for sensitive data at rest, multi-factor authentication for internal administrative access, regular penetration testing and security audits, and real-time fraud monitoring systems.

9.2 In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, megawin8 will notify affected Members without undue delay and in accordance with applicable notification obligations.

9.3 Notwithstanding the measures described above, no system is entirely impenetrable. Members should take their own precautions — including using a strong, unique password and enabling two-factor authentication on their megawin8 account — to reduce the risk of unauthorised access.

10. Your Data Protection Rights

Subject to applicable law and certain limitations, megawin8 Members have the following rights in relation to their personal data:

• Right of access: the right to request a copy of the personal data megawin8 holds about you;
• Right to rectification: the right to request correction of any inaccurate or incomplete personal data;
• Right to erasure: the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected and no legal retention obligation applies;
• Right to restrict processing: the right to request that megawin8 limit the processing of your data in certain circumstances;
• Right to data portability: the right to receive your personal data in a structured, commonly used, machine-readable format where technically feasible;
• Right to withdraw consent: where processing is based on your consent, the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact megawin8 support via live chat or by email to [email protected]. Requests will be acknowledged within five (5) business days and actioned within the timeframe required by applicable law.

11. Children's Privacy

11.1 The megawin8 platform is strictly intended for users aged 21 and above. megawin8 does not knowingly collect personal data from individuals under the age of 21. If megawin8 becomes aware that personal data has been collected from a person under 21, all associated data will be deleted promptly and the account will be suspended.

11.2 If you are a parent or guardian and believe that a minor in your care has created a megawin8 account, please contact us immediately at [email protected] so that appropriate action can be taken.

12. International Data Transfers

12.1 megawin8 operates infrastructure that may involve the transfer of personal data to countries outside Malaysia. Where such transfers occur, megawin8 ensures that appropriate safeguards are in place — including standard contractual clauses or equivalent transfer mechanisms — to ensure your data receives an equivalent level of protection to that afforded under Malaysian law.

12.2 megawin8 does not transfer personal data to jurisdictions that do not provide adequate levels of data protection without first implementing the appropriate legal safeguards.

13. Updates to This Privacy Policy

13.1 megawin8 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform functionality. Where material changes are made, megawin8 will notify Members via platform notification or to their registered email address.

13.2 The date of the most recent revision is displayed at the top of this page. Continued use of the megawin8 platform following notification of an updated Privacy Policy constitutes acceptance of the revised terms.

14. Contact & Data Enquiries

For any queries, concerns, or requests relating to this Privacy Policy or megawin8's data handling practices, please contact our support team via live chat (available 24/7 within the platform) or by email. Our contact email address is displayed in the footer of this page. Written data subject access requests and erasure requests are accepted via email and will be processed in accordance with applicable timelines under the Malaysian PDPA and relevant international standards.