Privacy Policy mega168

Mega168 ("we", "Platform" or "mega168.my") takes personal data protection very seriously. This Privacy Policy is designed to ensure every member and visitor of our platform clearly understands how their personal information is handled — from the moment it is collected through to its storage and eventual deletion.

This document applies to all users accessing the mega168.my website, the official mega168 mobile app, and all related services operating under the mega168 brand. This policy forms part of our Terms and Conditions and should be read alongside that document.

We are committed to full transparency regarding your data. If you have any questions after reading this policy, our team is available around the clock through our 24/7 support channels.

Mega168 only collects data that is genuinely necessary to provide you with a safe, seamless, and quality service. Below are the categories of data we collect and their purposes:

2.1 Data You Provide Directly

This includes all information you enter yourself during the registration process, profile updates, KYC document submission, communication with our customer support team, or when completing any form on the platform.

2.2 Data Collected Automatically

When you browse the mega168 platform, our systems automatically record certain technical information such as your IP address, browser type and version, pages visited, session duration, and other diagnostic data. This information is used solely for security purposes and to improve your user experience.

The data we collect is used responsibly and limited to legitimate purposes only. mega168 does not use your data for any unrelated purpose without obtaining your consent first.

• Account management: Creating, verifying, and maintaining your member account, including the KYC process to meet legal compliance requirements.
• Transaction processing: Managing all deposits, withdrawals, and other financial activities in your account securely and efficiently.
• Platform security: Detecting and preventing fraud, hacking, money laundering, and any suspicious activity that could compromise the security of the platform and other members.
• Service communications: Sending important notifications related to your account, policy updates, promotional information you have consented to receive, and responses to your enquiries.
• Responsible gaming: Monitoring gameplay patterns to identify signs of problem gambling and providing appropriate support when needed.
• Platform improvement: Analyzing usage data in aggregate and anonymous form to improve the design, performance, and content of the mega168 platform.
• Legal compliance: Fulfilling the reporting and compliance obligations required by relevant authorities, including financial crime prevention agencies.

Mega168 does not sell your personal data to anyone. However, in the course of operating the platform, we may share certain data with carefully selected third parties in the following situations:

4.1 Trusted Service Providers

We work with third-party service providers that help us operate the platform — such as payment processors, cloud infrastructure providers, and identity verification services. All providers are bound by strict confidentiality agreements and are only permitted to process your data under our instructions.

4.2 Legal Requirements

Mega168 may be required to disclose your personal data to the relevant authorities — including law enforcement agencies, tax authorities, or financial regulatory bodies — when legally obligated to do so by law or a valid court order.

4.3 Business Transfers

In the event of a merger, acquisition, or sale of mega168 assets, your personal data may be transferred as part of that transaction. You will be notified in advance and have the right to opt out should this occur.

Mega168 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

5.1 Types of Cookies We Use

• Essential Cookies: Required for core platform functions such as login, session security, and navigation. These cookies cannot be disabled.
• Performance Cookies: Helping us understand how visitors interact with the platform through anonymous analytics. This data is used to improve site performance.
• Functional Cookies: Saving your preferences such as language, display settings, and login information to make repeat visits more convenient.
• Security Cookies: Used exclusively to detect security threats, suspicious login attempts, and fraudulent activity.

5.2 Managing Your Cookie Preferences

You can control and manage cookies through your internet browser settings. Most modern browsers allow you to view, manage, block, or delete cookies. Please note that disabling certain cookies may affect the functionality and user experience of the mega168 platform.

For more information on how to manage cookies in your browser, please refer to the help documentation for your browser, such as Chrome, Firefox, Safari, or Edge.

Protecting your personal data from unauthorized access, loss, or misuse is a top priority for mega168. We continually invest in the latest security infrastructure to ensure your data remains protected at all times.

6.1 Technical Measures

• Data in transit is encrypted using TLS 1.3 protocol for all communications between your device and our servers.
• At-rest encryption for all sensitive information stored in our database.
• Enterprise-grade intrusion detection system (IDS) and firewall monitored 24 hours a day.
• Regular penetration testing by independent cybersecurity experts.
• Two-factor authentication (2FA) is available for all member accounts as an additional layer of protection.

6.2 Organisational Measures

• Mandatory data security awareness training for all mega168 staff.
• Access control policy based on the principle of least privilege — each staff member can only access the data required for their specific role.
• A clear and tested incident response procedure to ensure any data breach is handled swiftly and effectively.

6.3 Your Responsibilities

While mega168 takes all reasonable steps to protect your data, account security also depends on your own actions. Make sure you use a strong and unique password, never share your login credentials with anyone, and promptly report any suspicious activity to our support team.

7.1 Data Retention Period

Mega168 retains your personal data only for as long as necessary to fulfil the purposes stated in this policy or as required by applicable law. Generally, the following are our retention guidelines:

• Active account data: Retained for the duration your account remains active, plus the post-closure period required by law.
• Financial transaction records: Retained for a minimum of 7 years in accordance with accounting and anti-money laundering legal requirements.
• Security logs: Retained for 2 years for the purpose of investigating security incidents if required.
• Marketing data: Retained until you withdraw consent or request deletion.

When data is no longer needed, it will be securely deleted or anonymised so that it can no longer be linked to any individual.

7.2 Data Storage Location

Your personal data is primarily stored in data centres located in the Asia Pacific region. In some operational situations, data may be processed by service providers operating outside Malaysia. When this occurs, we ensure equivalent protection to Malaysian standards is applied through appropriate contractual agreements.

As a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding the personal data we hold:

To exercise any of the above rights, please contact our privacy team via email at [email protected]. We will process your request within 14 business days from the date we receive your complete submission.

The mega168 platform is strictly for individuals aged 18 and above. We do not knowingly collect or process any personal data from children under the age of 18.

If you are a parent or guardian and believe your minor child has provided us with personal information, please contact us immediately. We will take prompt action to delete that information from our systems and close the relevant account.

Mega168 uses an age verification process during registration and reserves the right to request proof of age at any time to ensure compliance with this requirement.

Mega168 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or technological developments. The latest version will always be displayed on this page with an updated effective date.

For changes deemed material or significant, we will notify you via the email registered to your account or through a prominent notice on the platform at least 14 days before the changes take effect. Continued use of the platform after the effective date of any changes constitutes your acceptance of the updated policy.

If you have any questions, concerns or complaints regarding this Privacy Policy or how we handle your personal data, the mega168 privacy team is ready to assist you.

You can reach us through the following channels:

• Privacy Email: [email protected]
• General Support Email: [email protected]
• Response Time: Within 14 business days for personal data-related enquiries
• 24/7 Support: Available via live chat on the platform for general inquiries

If you are not satisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia or the relevant authority in your jurisdiction.