Privacy Policy Mega888 PNG – Personal Data Protection for Malaysian Players

This Privacy Policy explains how mega888 png (operating under the domain mega888png.xyz) collects, uses, stores, protects, and discloses your personal information when you use our platform. This document applies to all platform users, including visitors, registered users, and former customers.

mega888 png committed to complying with Malaysia's Personal Data Protection Act 2010 (PDPA), which governs how organisations handle individuals' personal data in this country. We believe that player trust is the foundation of a sustainable business, and privacy protection is central to that trust.

By registering an account or using the platform mega888 png, you grant us consent to collect and use your personal information in accordance with the terms set out in this Privacy Policy. If you do not agree with these terms, please discontinue use of the platform and contact us to request account deletion.

mega888 png only collects data that is strictly necessary to deliver our services safely and effectively. Below are the categories of data we collect, along with examples and the reasons for collection:

We may also collect data you provide voluntarily, such as survey feedback, customer support enquiries, and any other information you choose to share with us. This data is used solely to improve the quality of our services.

mega888 png uses the personal data collected for the following purposes only, and will not use that data for any other purpose without first obtaining your consent:

• Account Management: Creating and managing your account, verifying your identity, and processing deposits and withdrawals via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX.
• Service Provision: Grants access to all platform games and features, including slots, live casino, Malaysia Super League and EPL Sports Betting, as well as MPL Malaysia e-sports betting.
• Security & Fraud Prevention: Detecting and preventing unauthorised access, multi-account use, bonus abuse, money laundering, and other fraudulent activity.
• Legal Compliance: Complying with KYC (Know Your Customer), AML (Anti-Money Laundering), and reporting obligations to the relevant authorities as required under Malaysian law.
• Service Communications: Sending important notifications regarding your account, transactions, policy changes, promotions you have opted in to receive, and security alerts.
• Service Improvement: Analysing usage patterns in aggregated, anonymised form to improve the interface, platform performance, and overall user experience.
• Customer Support: Enables the mega888 png support team to resolve queries and disputes efficiently based on your complete account history.

mega888 png processes your personal data on one or more lawful legal bases under Malaysia's Personal Data Protection Act 2010 (PDPA):

• Your Consent: When you register an account and agree to our Terms & Conditions and Privacy Policy, you provide explicit consent for data processing for the stated purposes. You have the right to withdraw this consent at any time, though doing so may mean you are no longer able to use the platform.
• Contract Performance: Processing is necessary to fulfil the service contract between you and mega888 png — including processing deposits, paying out winnings, and providing access to the games you have paid for.
• Legitimate Interests: We have a legitimate interest in preventing fraud, maintaining platform security, and protecting other players from activities that could compromise their experience.
• Legal Obligations: Some data processing is mandatory to fulfil legal obligations, including KYC, AML, and financial reporting requirements as prescribed under Malaysian law.

mega888 png never sells, rents, or trades players' personal data to third parties for marketing purposes. However, there are limited situations where we need to share data with selected third parties to keep the platform running effectively:

• Payment Processors: Payment platforms such as DuitNow, FPX, Touch 'n Go eWallet, GrabPay, Boost, and ShopeePay processors receive the transaction information necessary to process your deposits and withdrawals. All these processors are bound by strict confidentiality agreements and PCI DSS security standards.
• Game Software Providers: Game providers such as Pragmatic Play and Evolution Gaming receive only the minimum session data necessary to enable gameplay. They do not receive your personally identifiable information.
• KYC Services: Third-party identity verification service providers assist us in validating documents for KYC compliance. They do not use this data for any purpose other than verification.
• Authorities: If required by law, court order, or a valid request from Malaysian authorities, we may be obliged to disclose certain data. We will notify you of any such request unless we are legally prohibited from doing so.
• Professional Advice: Our lawyers, accountants, and auditors, who are bound by professional confidentiality obligations, may access certain data in the course of providing advice to mega888 png.

In all instances of data sharing, we ensure that the receiving party has adequate data protection measures in place and uses the data solely for the stated purpose.

mega888 png implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Below is an overview of our core security infrastructure:

• 256-bit SSL Encryption: All communications between your device and the mega888 png servers — including logins, financial transactions, and gaming activity — are encrypted using the latest TLS protocol with 256-bit keys.
• Database Encryption: Personal data stored in our databases is protected with at-rest encryption. Even if someone were to gain physical access to our servers, the data would be unreadable without the encryption key.
• Access Control: Access to player data within mega888 png's internal systems is restricted to staff who require it to carry out their job responsibilities, based on the principle of least privilege.
• 24/7 Monitoring: Our security systems operate 24 hours a day, 7 days a week to detect any anomalies or intrusion attempts. All security alerts are responded to within 15 minutes.
• Penetration Testing: We conduct regular security assessments, including penetration testing by independent security experts, to identify and address vulnerabilities before they can be exploited.
• Incident Management: We have a tested incident response procedure in place for data breach scenarios. Should a breach occur that affects your data, we will notify you within the timeframe required by the PDPA.

Platform mega888 png uses cookies and similar tracking technologies to enhance the user experience, analyse traffic, and ensure essential technical functionality. Below are the types of cookies we use:

• Essential Cookies: Required for core platform functionality, including maintaining your login session, remembering your preferences, and ensuring session security. These cookies cannot be disabled without affecting platform functionality.
• Analytics Cookies: Helping us understand how players use the platform — which pages are visited most, how long players spend on the site, and common navigation paths. This data is used in aggregated, anonymised form only.
• Functional Cookies: Remembering your preferences such as language settings, frequently played games, and display options to deliver a more personalised experience.
• Security Cookies: Used to detect suspicious login attempts, bot activity, and any abnormal usage patterns that may indicate fraud or an intrusion attempt.

You can manage your cookie preferences through your browser settings. However, disabling certain cookies may affect platform functionality. For more information on managing cookies in your browser, refer to your browser's help documentation.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by mega888 png. To exercise any of these rights, please contact us through the channels listed in Section 12.

In the context of the platform's operations mega888 png, some data may be processed or stored on servers located outside Malaysia, including in data centres in other Southeast Asian countries. Such cross-border data transfers occur only when necessary for platform operations and are subject to adequate safeguards.

mega888 png ensures that all cross-border data transfers comply with Malaysia's PDPA requirements — limited to countries or territories that offer a comparable level of data protection to Malaysia, or where adequate contractual safeguards are in place through standard data processing agreements.

Platform mega888 png is intended strictly for individuals aged 18 and above. We do not knowingly collect personal data from anyone under the age of 18. Our registration process includes age checks and identity verification measures designed to prevent sign-ups by minors.

Should we discover that personal data belonging to a person under 18 has been collected inadvertently, we will take immediate steps to delete that data and close the account in question. Any deposits made by an underage account will be returned to the original owner of the funds.

Parents and guardians are responsible for ensuring that minors in their care do not access this platform. If you suspect that a minor is using the mega888 png platform, please contact us immediately through our support channels.

mega888 png reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, legal requirements, or relevant technological developments. We are committed to notifying you of any significant changes.

When material changes are made to this Privacy Policy, we will notify you via your registered email at least 14 days before the changes take effect, and display a prominent notice within the platform. For minor changes that do not significantly affect your privacy rights, we may simply update the revision date at the top of this document.

Continued use of the platform mega888 png after the effective date of any amendment will be considered your acceptance of the updated Privacy Policy. If you do not agree with the changes, you have the right to close your account and request deletion of your data before the effective date.

For any enquiries, concerns, or requests relating to your privacy and personal data at mega888 png, you may contact our Data Protection Officer (DPO) through the following channels. All requests will be responded to within 7 business days.

• DPO Email: support@mega888png.xyz – please include "Privacy Request" in the subject line of your email
• Live Chat: Available 24/7 via the platform – select the "Privacy & Data" category
• WhatsApp: Number available after logging in to your account from the Support section

When submitting a privacy request, please include your full name, account number or registered phone number for identity verification, the type of request you are making (access, correction, deletion, etc.), and any additional relevant details to help us process your request efficiently.