Mega388 Privacy Policy – Our Commitment to Protecting Malaysian Members' Personal Data

Mega388 collects several categories of information from members and visitors to our platform. All data collection is carried out transparently and solely for the purposes stated in this policy.

1.1 Data You Provide Directly

When you register a Mega388 account, you will be asked to provide the following information:

• Identity information: Full name, identification card number (MyKad), date of birth, gender.
• Contact information: Malaysian mobile number, email address, residential address.
• Financial information: Payment methods used (Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, FPX bank account numbers such as Maybank or CIMB), along with deposit and withdrawal records.
• Verification documents: A copy of your MyKad or bank statement (only when required for identity verification).

1.2 Automatically Collected Data

When you use the Mega388 platform, our systems automatically record:

• IP address and device information (device type, operating system, web browser).
• Game and betting history – games played, bet amounts, and outcomes.
• Login and logout timestamps.
• Usage data – pages visited, time spent on each page, and navigation patterns.
• Cookie data and similar tracking technologies (see Section 6).

The personal data we collect is used solely for lawful purposes necessary to deliver Mega388's services. We do not use your data for any purpose beyond the scope described below.

2.1 Platform Operations

• Creating and managing your member account.
• Processing deposits and withdrawals in MYR (RM) via your preferred payment method.
• Verifying your identity and age to meet legal compliance requirements.
• Providing access to all Mega388 games and services – from PG Soft slots and Evolution Gaming live dealer tables to BWF badminton betting odds.

2.2 Security & Anti-Fraud

• Detecting and preventing fraudulent activity, money laundering, or system abuse.
• Identifying suspicious login attempts and protecting your account.
• Complying with legal requirements and disclosing information to authorities when required by law.

2.3 Service Improvements

• Analysing usage patterns to improve the Mega388 platform's interface and overall user experience.
• Developing new features based on the needs and preferences of Malaysian members.
• Ensuring the platform maintains optimal technical performance.

2.4 Member Communications

• Sending important account notifications – including deposit confirmations, withdrawal approvals, and security alerts.
• Notifying you of promotions and bonuses you are eligible for (only if you have agreed to receive marketing communications).
• Providing customer support via live chat, WhatsApp, and email.

Mega388 does not sell, rent, or trade members' personal data to any third party. However, there are limited circumstances in which we may need to share certain information with other parties, subject to strict boundaries:

3.1 Technical Service Providers

Mega388 works with carefully selected third-party service providers to carry out certain aspects of our operations, including game providers (such as Pragmatic Play, PG Soft, and Evolution Gaming), payment processors (Malaysian e-wallet providers), and cloud infrastructure service providers. All such providers are bound by strict data protection agreements and are only permitted to use your data for purposes specified by Mega388.

3.2 Legal Requirements

Mega388 may disclose a member's personal data to the relevant authorities in the following circumstances:

• Required by a court order or Malaysian law.
• Required to support investigations related to fraud, money laundering, or financial crime.
• In emergency situations involving a threat to public safety.

3.3 What We Do Not Do

• We do not share your data with third-party advertisers without your explicit consent.
• No selling of data to marketing companies or email list brokers.
• No sharing of your betting records or financial history with any party other than those stated above.

Mega388 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction.

4.1 Technical Security

• 256-bit SSL Encryption: All communications between your device and Mega388's servers are encrypted using the same 256-bit SSL standard employed by Malaysian internet banking systems.
• Hashed password: Your account password is never stored in plain text — it is stored using a one-way cryptographic hashing function that cannot be reversed.
• Two-Factor Authentication (2FA): Available to all accounts and highly recommended.
• Automated monitoring: Our threat detection system runs 24/7 to identify and block suspicious activity.

4.2 Organisational Security

• Only a limited number of staff have access to members' personal data, and all have signed confidentiality agreements.
• Privacy awareness and data security training is conducted regularly for all Mega388 staff.
• Internal security audits are conducted on a quarterly basis.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by Mega388:

To exercise any of the rights above, please contact our Privacy Officer at privacy@mega388.ws. No charge is applied for reasonable requests made for the first time within a 12-month period.

Mega388 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

6.1 Types of Cookies We Use

• Essential Cookies: Required for core platform functions such as login and session management. Cannot be disabled as the platform will not function without them.
• Performance Cookies: Collecting information on how you use the platform (most visited pages, time spent) to help us improve our services.
• Functional Cookies: Remembering your preferences such as language, display settings, and game preferences to deliver a more personalised experience.

6.2 Managing Cookies

You can manage and delete cookies through your web browser settings. Please note that disabling all cookies may affect the functionality of certain areas of the Mega388 platform. Instructions for managing cookies are available in your browser's help documentation (Chrome, Firefox, Safari, Edge).

Mega388 retains your personal data only for as long as necessary to fulfil the purposes set out in this Privacy Policy, or as required under Malaysian law.

• Active account data: Retained for the duration your account is active and for 5 years after account closure (to meet anti-money laundering legal requirements).
• Financial transaction records: Retained for 7 years from the transaction date in accordance with Malaysian financial compliance requirements.
• Security and technical logs: Retained for 12 months and then automatically deleted.
• Marketing data: Retained until you withdraw your consent, then deleted within 30 days.

Once the retention period has expired, data will be securely deleted using methods that ensure it cannot be recovered.

Mega388 has appointed a Data Protection Officer (DPO) responsible for ensuring our platform complies with applicable privacy laws and handling all personal data-related enquiries.

If you have any enquiries, complaints, or wish to exercise any of your privacy rights, please contact us through the following channels:

• Privacy Email: privacy@mega388.ws
• General Support Email: support@mega388.ws
• Live Chat: Available 24 hours a day via the Mega388 platform
• WhatsApp: Number available within the platform after logging in

We are committed to responding to all privacy-related enquiries within 7 working days. For more complex cases involving data access or deletion requests, we will provide an estimated resolution timeline in our initial response.