Mega 8 Privacy Policy – Protecting Your Personal Data Is Our Priority

Mega 8 ("Platform", "us", "Company") operates an online entertainment platform encompassing live casino, Sports Betting, poker, and other digital games offered to users in Malaysia. We understand that your trust in us depends not only on the quality of the games we offer, but also on how we handle your personal information.

This Privacy Policy ("Policy") provides a clear and detailed explanation of:

• The types of personal data that Mega 8 collect from you.
• The purpose and legal basis for processing that data.
• Which parties may receive or access your data.
• The security measures we take to protect your data.
• Your rights as a data subject and how to exercise them.

This Policy is to be read together with Terms & Conditions which is the complete contract governing your use of the platform. In the event of any conflict between the two documents on matters of privacy, this Privacy Policy shall take precedence.

Mega 8 collects various types of data depending on how you interact with our platform. Below is a full breakdown of the data categories collected:

Data We Do Not Collect

Mega 8 does not store your full credit or debit card number. Payment information is processed directly by third-party payment providers that comply with PCI-DSS security standards. We also do not collect biometric information such as fingerprints or facial recognition data.

Mega 8 does not collect your personal data without a clear purpose. Every piece of data we collect is processed on a lawful basis and for a specific purpose. The primary purposes of data processing are as follows:

3.1 Account Management & Services

We use your data to create and manage your account Mega 8 your account, process deposits and withdrawals via Malaysian payment methods such as Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX, verify your identity during the KYC process, and enable you to access all games and services on the platform.

3.2 Security & Fraud Prevention

Technical and usage data are analysed to detect and prevent fraudulent activity, money laundering (AML), unauthorised access, and bonus abuse. This is to safeguard the interests of all Mega 8 members.

3.3 Legal Compliance

As a licensed platform, Mega 8 is required to retain certain records and report suspicious activities to the relevant authorities in accordance with legal requirements. This includes compliance with anti-money laundering laws.

3.4 Service Improvement

Usage data (anonymised where appropriate) helps us understand how members interact with the platform Mega 8 and make the necessary improvements to enhance the user experience.

Mega 8 does not sell, rent, or trade your personal data to any third party for their own commercial purposes. This is a commitment we uphold firmly. However, there are limited circumstances in which your data may be shared:

4.1 Trusted Service Providers

We work with carefully selected third-party service providers to handle specific functions, including:

• Payment Providers: To process transactions via Touch 'n Go, GrabPay, DuitNow, FPX, and others. Data is shared only to the extent necessary to complete the transaction.
• Game Providers: To operate live casino games, slots, and poker. Minimal data is shared for in-game account verification.
• Analytics Services: To understand platform usage patterns (in the form of anonymised aggregate data).

All these third-party service providers are bound by strict confidentiality agreements and are only permitted to use your data for purposes specified by Mega 8.

4.2 Legal Requirements

We may disclose your data to government authorities or law enforcement agencies when required to do so by applicable law, court order, or a legitimate official investigation.

The security of your personal data is something we take Mega 8 take completely seriously. We continuously invest in the latest security infrastructure to ensure your data remains protected at all times. The key security measures we have in place are as follows:

• 256-bit SSL/TLS Encryption: All communications between your browser or app and the Mega 8 servers are encrypted using 256-bit SSL/TLS — the same encryption standard used by Malaysia's leading banks, including Maybank and CIMB.
• Stored Data Encryption: Sensitive data stored in our databases is encrypted to ensure it remains unreadable even in the unlikely event of unauthorised access.
• Two-Factor Authentication (2FA): Members are encouraged to enable 2FA for an additional layer of security that protects their account from unauthorised access.
• 24/7 Monitoring: Our security systems monitor for suspicious activity around the clock and will take immediate action whenever an anomaly is detected.
• Regular Security Audits: Mega 8 undergoes regular penetration testing and security audits conducted by independent cybersecurity experts.
• Staff Training: All Mega 8 staff with access to user data undergo comprehensive information security training and are bound by strict confidentiality agreements.

Platform Mega 8 uses cookies and similar tracking technologies to enhance your experience. Cookies are small text files stored on your device by your web browser. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login authentication and session security. These cookies cannot be disabled.
• Preference Cookies: Stores your preferences such as language settings and display theme for a seamless browsing experience.
• Analytics Cookies: Helps us understand how members use the platform (most visited pages, session duration, etc.) in the form of aggregated data that does not personally identify any individual.
• Performance Cookies: Used to optimise platform loading speed and detect technical issues.

You can manage or delete cookies through your web browser settings. Please note, however, that disabling certain cookies may affect the functionality of the platform Mega 8 and your gaming experience.

As a member Mega 8, you hold important rights regarding your personal data. We respect and facilitate the exercise of all these rights:

• Right to Access: You have the right to request a copy of the personal data we hold about you.
• Right to Rectification: If your data is inaccurate or incomplete, you have the right to request a correction. Much of this information can be updated directly through your account settings.
• Right to Erasure ("Right to be Forgotten"): Under certain circumstances, you may request Mega 8 delete your personal data. This request is subject to any applicable legal retention obligations.
• Right to Object to Marketing: You may opt out of marketing communications at any time via the "unsubscribe" link in our emails or through your account settings.
• Right to Data Portability: You have the right to request your data in a structured, machine-readable format for transfer to another service.

Mega 8 does not retain your personal data longer than necessary for the purposes stated in this Policy or as required by law. General data retention periods are as follows:

• Active Account Data: Retained for as long as your account is active and for a period of 7 years after account closure (for anti-money laundering compliance requirements).
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysian financial regulatory requirements.
• Support Communication Logs: Retained for 3 years for reference and dispute resolution purposes.
• Technical & Log Data: Retained for 90 days for security and technical troubleshooting purposes.
• Marketing Data (with consent): Retained until you withdraw consent or for a maximum period of 3 years.

Once the retention period expires, personal data will be securely deleted or anonymised so that it can no longer be linked to you.

Platform Mega 8 is intended for adults aged 18 and above only. We do not knowingly collect personal data from individuals under the age of 18. Should we discover that we have inadvertently collected data from a minor, we will delete such data immediately and close the account in question.

Parents and guardians who suspect their child may have registered an account Mega 8 should contact our support team immediately at support@mega8.bet. We will investigate and take the appropriate action without delay.

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way Mega 8 handles your personal data, please do not hesitate to contact us through the following channels:

• Privacy Email: support@mega8.bet (please state "Data Privacy Enquiry" in the email subject line)
• LiveChat: Available 24/7 via the Mega 8 platform
• Target Response Time: We aim to respond to all privacy-related enquiries within 5 business days, and to formal data rights requests within 30 business days.

Mega 8 has appointed a Data Protection Officer (DPO) responsible for ensuring the platform's compliance with applicable data protection laws and policies. Any complaints that cannot be resolved through our internal channels may be referred to the relevant regulatory authority.