Privacy Policy mega8 –
Personal Data Protection for Malaysia Members

01 Introduction

Mega8 values the privacy of every individual who uses our platform. This Privacy Policy is crafted to provide complete clarity on how we handle your personal information — from the point of collection through to storage and, where necessary, deletion.

We understand that your trust is our most valuable asset. That is why we do not take privacy lightly. Every data-related decision is made with the interests and safety of our members in mind, especially users from Malaysia who form the backbone of the mega8 community.

This document applies to all users who access the mega8 website, use the mega8 mobile app, or interact with any services provided by us.

02 Data We Collect

Mega8 collects personal information necessary to provide services that are safe, seamless, and compliant with regulatory requirements. The following are the categories of data we collect:

03 How We Use Your Data

Every piece of information you provide to mega8 is used responsibly and only for the stated purposes. We do not use your data arbitrarily. The following are the primary purposes of data use:

• Account Management: Securely creating, verifying, and maintaining your member account.
• Transaction Processing: Processing deposits, withdrawals, and any financial transactions related to your account.
• Identity Verification (KYC): Meeting regulatory requirements by verifying member identity before permitting withdrawals or high-risk activities.
• Fraud Prevention: Monitoring account activity to detect and prevent unauthorized access, money laundering, or suspicious behavior.
• Customer Support: Providing technical support and resolving complaints or inquiries more efficiently using records of prior interactions.
• Legal Compliance: Fulfilling reporting and record-keeping obligations required by applicable laws or regulatory bodies.
• Platform Enhancement: Analyzing aggregated usage patterns to improve user experience, platform performance, and game offerings.
• Marketing Communications: Sending promotional information, bonus offers, and platform updates – provided you have consented to receive such communications.

We consistently ensure that all purposes for data use are lawful, reasonable, and consistent with what a member of a trusted online gaming platform would reasonably expect.

04 Sharing Information with Third Parties

Mega8 does not sell or trade your personal data. However, in certain limited situations, we may share your information with trusted third parties as follows:

• Payment Service Providers: Transaction information is shared with integrated payment gateways and banks to securely process your deposits and withdrawals.
• Game Platform Providers: Minimum technical information is shared with third-party game providers supplying game content on the mega8 platform, solely for the purpose of game operations.
• Identity Verification Services: Identity data is shared with certified KYC service providers for document verification and fraud prevention purposes.
• Regulatory & Law Enforcement Bodies: mega8 will disclose information to the relevant authorities when required by law or a valid court order.
• Analytics Services: Anonymised and aggregated usage data may be shared with analytics tools for platform improvement purposes without revealing individual identities.

05 Data Security

The security of your personal data is a core technical priority at mega8. We continuously invest in security infrastructure to ensure your information remains protected against increasingly sophisticated cyber threats.

• Data Encryption in Transit: All communications between your device and mega8 servers are secured with tamper-proof TLS 1.3 / SSL 256-bit encryption.
• Data Encryption at Rest: Sensitive data such as financial information and identity documents is stored in encrypted format on secure servers with multi-layered access controls.
• Two-Factor Authentication (2FA): Members are encouraged to enable two-factor authentication to add an extra layer of security to their account.
• Continuous Threat Monitoring: The mega8 security system monitors account activity and network traffic 24 hours a day to detect any anomalies or intrusion attempts.
• Regular Security Testing: Our infrastructure undergoes regular penetration testing and security audits conducted by independent security experts.
• Staff Training: All mega8 staff who handle personal data receive regular data protection training and are bound by strict confidentiality agreements.

While we implement industry-best security measures, no system can be guaranteed to be entirely free from threats. In the event of any security incident involving your data, we are committed to notifying you within the timeframe required by applicable law.

06 Cookies & Tracking Technologies

Mega8 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you browse a website.

• Essential Cookies: Required for core platform functions such as login, session verification, and security. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collecting information about how you use the platform – such as most frequently visited pages – to help us improve website performance.
• Preference Cookies: Saving your preference settings such as language, theme, and display preferences so you don't need to reconfigure them each time you log in.
• Analytics Cookies: Helping us understand aggregated usage patterns through analytics tools that use anonymized data.

You can manage your cookie settings through your web browser. However, disabling certain cookies may affect the functionality and your experience on the mega8 platform.

07 Your Rights as a Data Subject

As a mega8 member and an individual engaging with our platform, you have certain rights regarding your personal data that we fully respect:

• Right of Access: You have the right to request a copy of the personal data we hold about you. Requests will be processed within 30 business days.
• Right to Rectification: If any information we hold is inaccurate or outdated, you have the right to request a correction free of charge.
• Right to Erasure: Under certain circumstances, you have the right to request the deletion of your personal data. Please note that some data may need to be retained for legal compliance purposes.
• Right to Restriction of Processing: You may request that the processing of your data be restricted under certain circumstances, for example while an investigation into data accuracy is ongoing.
• Right to Object: You have the right to object to the processing of your data for direct marketing purposes at any time.
• Right to Data Portability: You have the right to receive your personal data in a structured, machine-readable format for transfer to another platform where applicable.

To exercise any of the above rights, please contact the mega8 data protection team through the available support channels. We will handle your request seriously and within a reasonable timeframe.

08 Children's Data

The mega8 platform is exclusively for individuals who are of age 18 years and above. We do not knowingly collect or process personal data from minors. Should we discover that a child's data has been collected without our knowledge, it will be deleted immediately and the associated account will be closed.

Parents or guardians who become aware that their minor child has registered an account on mega8 are requested to contact our support team immediately so that appropriate action can be taken.

09 Cross-Border Data Transfers

In operating an international-standard online gaming platform, mega8 may need to transfer your personal data to servers or service providers located outside Malaysia. When such transfers occur, we ensure:

• The recipient country or region maintains a level of data protection equivalent to or exceeding Malaysia's standards.
• Appropriate and binding data protection agreements have been signed with data recipients to ensure your data remains protected.
• Data transfers are carried out only when strictly necessary to deliver the services you use, and never for unrelated purposes.

10 Data Retention & Deletion

Mega8 retains your personal data only for as long as it is needed for the purposes stated in this policy or as required by law. The following are general data retention period guidelines:

• Active Account Data: Retained for as long as your account is active and for the required period following account closure for regulatory compliance purposes.
• Financial Transaction Records: Retained for a minimum of 7 years as required by applicable financial and anti-money laundering legislation.
• Security Logs: Retained for 12 months for security incident investigation and fraud prevention purposes.
• Support Communication Records: Retained for 3 years for complaint resolution reference and service quality improvement.

Once the retention period expires, your data will be securely deleted or anonymised using procedures that ensure the data cannot be recovered.

11 Changes to This Privacy Policy

Mega8 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our data processing practices, new regulatory requirements, or service improvements. When material changes are made:

• A notice will be displayed on the mega8 platform's home page at least 14 days before any changes take effect.
• Registered members will be notified via email or in-app notification.
• The "Last Updated" date at the top of this document will be updated each time changes are made.

Continued use of the mega8 platform after changes take effect will be considered acceptance of the updated privacy policy terms. If you do not agree with the changes, please stop using the platform and contact us to close your account.

12 Contact Our Data Protection Officer

If you have any questions, concerns, or complaints regarding how mega8 handles your personal data, our team is ready to assist:

We are committed to addressing every privacy enquiry seriously and within a reasonable timeframe. Your satisfaction and trust are our top priority.