1 Introduction
mege888 ("we", "us", "our", or the "Company") operates the online gaming platform accessible at mege888.org (the "Platform"). We are committed to protecting the privacy and personal data of all individuals who use our Platform, including registered players and casual visitors.
This Privacy Policy (the "Policy") sets out in plain terms how mege888 collects, uses, stores, discloses, and protects your personal data. It also describes the rights you have in relation to your personal data and how you may exercise those rights.
This Policy should be read in conjunction with the mege888 Terms & Conditions. By registering an account or using the Platform, you acknowledge that you have read and understood this Policy.
2 Data Controller
mege888 is the data controller in respect of personal data collected through the Platform. As data controller, mege888 determines the purposes and means of processing your personal data and is responsible for ensuring that processing is carried out lawfully and in accordance with applicable data protection requirements under international gaming authority licensing standards.
If you have any questions about how your data is handled, you may contact us at any time using the details provided in Section 14 of this Policy.
3 Data We Collect
mege888 collects the following categories of personal data:
3.1 Registration and Identity Data
- Full legal name as it appears on your identity document;
- Date of birth (used to verify minimum age of 21);
- Malaysian identity card number (MyKad) or passport number;
- Residential address;
- Email address;
- Mobile phone number.
3.2 Financial Data
- Payment method details (e-wallet identifiers, bank account details) used to facilitate deposits and withdrawals in Malaysian Ringgit (MYR);
- Transaction history including deposits, withdrawals, wagers, and winnings;
- Wallet balance records.
3.3 Technical and Usage Data
- IP address and approximate geographic location;
- Device type, operating system, and browser information;
- Session duration, pages visited, and features accessed;
- Login timestamps and frequency of access.
3.4 Communications Data
- Records of live chat conversations and email correspondence with mege888 support;
- Feedback, complaints, and dispute records.
3.5 Responsible Gaming Data
- Deposit limits, session limits, and self-exclusion preferences you set in your account;
- Records of responsible gaming interventions applied to your account.
4 How We Collect Your Data
mege888 collects personal data through the following means:
- Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or update your account settings;
- Automatically — through the use of cookies, server logs, and similar technologies when you browse or interact with the Platform;
- From third-party service providers — including identity verification agencies, payment processors (such as those facilitating Touch n Go eWallet, Boost, Maybank, CIMB, and Public Bank transactions), and fraud prevention services, as necessary to deliver the Platform's services and comply with licensing obligations;
- From public sources — where necessary for regulatory compliance, including sanctions screening databases.
5 Purposes of Processing
mege888 processes your personal data for the following purposes:
- Creating and managing your account, including verifying your identity and age (21+ requirement);
- Processing deposits and withdrawals in MYR through supported payment methods;
- Delivering gaming services — sportsbook, live casino, slots, arcade, and lottery — through the Platform;
- Detecting, investigating, and preventing fraud, money laundering, and other criminal activity;
- Complying with obligations under international gaming authority licensing requirements, including anti-money laundering (AML) and know-your-customer (KYC) rules;
- Providing customer support and resolving disputes;
- Sending service notifications, security alerts, and account updates;
- Sending promotional communications where you have opted in to receive them;
- Administering responsible gaming tools and interventions;
- Improving the Platform through analysis of usage patterns and technical performance data.
6 Legal Basis for Processing
mege888 processes your personal data on the following legal bases:
- Contract performance — processing necessary to fulfil our contractual obligations to you as a registered mege888 player, including account management and transaction processing;
- Legal obligation — processing required by international gaming authority licensing requirements, AML regulations, and other applicable laws, including KYC verification and sanctions screening;
- Legitimate interests — processing for fraud prevention, platform security, and service improvement, where such interests are not overridden by your fundamental rights and freedoms;
- Consent — processing for optional purposes such as direct marketing communications, where you have provided explicit consent. You may withdraw consent at any time by updating your account communication preferences.
7 Sharing of Personal Data
mege888 does not sell, rent, or trade your personal data to third parties for commercial purposes. We may share your personal data with:
- Payment processors and e-wallet providers — to facilitate MYR deposits and withdrawals via Touch n Go eWallet, Boost, Maybank, CIMB, Public Bank, and other approved payment methods;
- Identity verification and KYC service providers — to verify your identity and age in compliance with licensing requirements;
- Fraud prevention and AML screening services — to detect and prevent financial crime and protect the integrity of the Platform;
- Game software providers — limited technical data necessary for game delivery and fairness certification purposes;
- Regulatory and licensing authorities — as required by applicable law or our operating licence, including mandatory reporting obligations;
- Law enforcement agencies — where required by court order, warrant, or applicable statutory obligation.
All third-party service providers engaged by mege888 are required to process personal data only in accordance with mege888's instructions and applicable data protection standards.
8 Data Retention
mege888 retains personal data for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, regulatory, accounting, and licensing obligations.
Specifically:
- Account and transaction data is retained for a minimum of five (5) years following account closure, in accordance with AML record-keeping requirements under our operating licence;
- Customer support communications are retained for a minimum of three (3) years;
- Technical log data is retained for up to twelve (12) months;
- Data subject to ongoing dispute or investigation will be retained until the matter is fully resolved.
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised.
9 Security Measures
mege888 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:
- 256-bit SSL/TLS encryption for all data in transit between your device and the Platform;
- Salted password hashing — your account password is never stored in plaintext;
- Two-factor authentication (2FA) availability for all registered accounts;
- Access controls restricting personal data access to authorised personnel on a need-to-know basis;
- Automated monitoring for unusual login activity and suspicious transactions;
- Regular security assessments and penetration testing of Platform infrastructure.
While mege888 takes all reasonable steps to secure your data, no system can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials. If you suspect your account has been compromised, contact mege888 support immediately.
10 Cookies and Similar Technologies
mege888 uses cookies and similar tracking technologies to operate and improve the Platform. The types of cookies used include:
- Strictly necessary cookies — required for the Platform to function, including maintaining your login session and securing transactions. These cannot be disabled without impairing Platform functionality;
- Performance cookies — used to collect anonymised data about how players use the Platform, enabling mege888 to identify technical issues and improve the user experience;
- Functional cookies — used to remember your preferences such as language settings and display options.
mege888 does not use advertising or behavioural profiling cookies for external marketing networks. You may manage cookie preferences through your browser settings; however, disabling strictly necessary cookies may prevent you from using the Platform properly.
11 Your Data Rights
Subject to applicable law and our regulatory obligations, you have the following rights in relation to your personal data held by mege888:
- Right of access — you may request a copy of the personal data mege888 holds about you;
- Right to rectification — you may request correction of inaccurate or incomplete personal data;
- Right to erasure — in certain circumstances, you may request deletion of your personal data, subject to retention obligations under our operating licence and applicable law;
- Right to restriction — you may request that mege888 restrict processing of your data in certain circumstances;
- Right to data portability — you may request a copy of data you have provided to mege888 in a structured, commonly used format;
- Right to withdraw consent — where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.
To exercise any of these rights, please contact mege888 using the details in Section 14. mege888 will respond to all valid data subject requests within the timeframe required by applicable regulation.
12 Minors
The mege888 Platform is strictly intended for individuals aged 21 and above. mege888 does not knowingly collect personal data from persons under the age of 21. If mege888 becomes aware that personal data has been collected from a person under 21, that account will be immediately closed, all associated data will be deleted in accordance with our retention policy, and any funds held in the account will be handled in compliance with licensing authority requirements. If you believe a minor has registered on the Platform, please notify mege888 support immediately.
13 Changes to This Privacy Policy
mege888 reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or Platform operations. Where an amendment is material, mege888 will notify registered players via email or on-Platform notification prior to the change taking effect. The "Last updated" date at the top of this Policy will be revised accordingly. Your continued use of the Platform following notification of any amendment constitutes your acceptance of the revised Policy.