Privacy Policy mega38 – Data Protection & Member Security Malaysia

1Introduction

This Privacy Policy is published by mega38 ("we", "Platform") to clearly explain how we collect, use, store, and protect your personal data when you use the platform, website, mobile app, and all related services provided by mega38.

Mega38 takes data protection responsibility seriously. We understand that your trust in us depends largely on how we handle the personal information you share with us. That is why we are committed to always being transparent about our privacy practices and fully respecting your rights as a user.

By registering a mega38 account or using any of our services, you are deemed to have read, understood, and agreed to this Privacy Policy. If you do not agree with any part of this policy, please do not use our platform.

2Personal Data Collected

Mega38 collects various types of personal data required to provide safe, legitimate, and quality services to all members. The following are the categories of data we collect:

2.1 Account Registration Information

• Full name as stated on your official identity document
• Date of birth for age verification
• Active email address
• Mobile phone number
• Your chosen username
• Current residential address

2.2 Identity Verification Information (KYC)

• Copy of identity card (MyKad) or passport
• Proof of address such as a recent utility bill or bank statement
• Selfie or photo with identity document (when required)

2.3 Financial Information

• Bank account number and bank name (for withdrawal processing purposes)
• Deposit and withdrawal transaction history on the mega38 platform
• Payment method used

2.4 Platform Usage Data

• Gaming history and wagering activity
• IP address and device information
• Geographic location data (country level only)
• Web browser and operating system information
• Access logs and session duration

3How Your Personal Data Is Used

Personal data collected by mega38 is used for the following purposes:

• Service Provision – Manages your account, processes deposits and withdrawals, provides access to games, and updates account information.
• Identity Verification – Conducts KYC processes to ensure regulatory compliance and prevent fraud.
• Platform Security – Detects and prevents fraudulent activity, duplicate account usage, and system abuse.
• Customer Support – Helps you resolve issues, answer enquiries, and process complaints more efficiently.
• Platform Improvement – Analyses usage patterns to improve user experience, usability, and platform performance.
• Responsible Gaming – Monitors wagering patterns to identify signs of problem gambling and provide appropriate support.
• Communications – Sends important notifications related to your account, transactions, promotions (with your consent), and policy updates.
• Legal Compliance – Fulfils legal obligations, regulations, and directions from relevant authorities.

4Third-Party Data Sharing

Mega38 does not sell, rent, or disclose your personal data to third parties except in the following limited circumstances:

4.1 Service Providers

We work with carefully selected third-party service providers to support platform operations – such as payment processors, game providers, identity verification services, and cloud infrastructure. All these providers are bound by strict confidentiality agreements and may only use your data for purposes specified by mega38.

4.2 Legal Requirements

Mega38 may disclose personal data when required by law, court order, or direction from a legitimate regulatory authority. In such cases, we will endeavour to notify you in advance unless prohibited from doing so by law.

4.3 Protection of Interests

In cases involving fraud, financial crime, or threats to the security of the platform or other users, mega38 reserves the right to share relevant information with the appropriate authorities.

5Data Security

Mega38 continuously invests in security infrastructure to ensure your personal data is always protected. The security measures we implement include:

• Encryption in Transit – All communications between your browser and mega38's servers are secured with the latest TLS/SSL protocol using 256-bit encryption.
• Storage Encryption – Sensitive data stored in our databases is encrypted using industry-standard encryption algorithms.
• Access Controls – Access to members' personal data is restricted to staff who require that information for legitimate operational duties only.
• Security Auditing – Our security systems are regularly audited by independent parties to identify and address any vulnerabilities.
• 24/7 Monitoring – mega38's infrastructure is monitored around the clock to detect and respond to any intrusion attempts or unauthorised access.

While we take all reasonable precautions, no security system can be guaranteed 100% foolproof. We encourage you to also play your part in protecting your account by using a strong password and enabling two-factor authentication (2FA).

6Cookies & Tracking Technologies

Mega38 uses cookies and similar tracking technologies to enhance the user experience on our platform. Cookies are small text files stored on your device when you browse our website.

6.1 Types of Cookies Used

• Essential Cookies – Required for core platform functions such as login and session security. Cannot be disabled.
• Performance Cookies – Collects anonymised data on how users interact with the platform for improvement purposes.
• Functional Cookies – Remembers your preferences such as language, display settings, and login details for ease of use.
• Analytics Cookies – Helps us understand platform usage patterns to make better-informed improvement decisions.

You can manage or disable optional cookies through your web browser settings at any time. Please note that disabling certain cookies may affect some features on the mega38 platform.

7Your Rights

As a mega38 member, you have a range of rights regarding your personal data. We respect and facilitate the exercise of these rights:

8Data Retention Period

Mega38 retains your personal data for as long as necessary to fulfil the purpose of collection or as required by law. Generally:

• Active account data is retained for as long as your account remains active and in use.
• Financial transaction records are retained for a minimum of seven (7) years to comply with financial and tax regulations.
• KYC documents are retained in accordance with applicable regulatory requirements, typically no less than five (5) years after account closure.
• Activity logs and usage data are typically retained for two (2) years for security and platform improvement purposes.

Once the retention period ends, data will be securely deleted or anonymised using methods that ensure it cannot be recovered.

9International Data Transfers

Mega38 operates on infrastructure that may involve data processing across multiple geographical locations. If your data is transferred outside your country of origin, we ensure that such transfers are carried out with adequate protective measures in place.

All international data transfers are carried out with appropriate safeguards, including standard data processing agreements, data protection impact assessments, and compliance with recognised international privacy standards. mega38 only works with infrastructure providers that have a proven security track record.

10Child Protection

The mega38 platform is strictly for individuals aged 21 and above. We do not knowingly collect, process, or store personal data from individuals below the stipulated age limit.

Should we discover that personal data belonging to an individual below the age limit has been collected inadvertently, we will take immediate steps to delete that data and close the associated account. If you have reason to believe that a child's data has been collected by mega38, please contact us immediately.

11Privacy Policy Amendments

Mega38 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our privacy practices, legal requirements, or new platform features. Changes will take effect once the updated version is published on our website.

For significant amendments that affect how we process your data, we will endeavour to provide reasonable notice via the email address registered to your account or through platform notifications before the changes take effect. Continued use of the mega38 platform after amendments are published will be considered your acceptance of the updated policy.

12Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or how mega38 handles your personal data, please contact us through the following channels:

• Live chat on the mega38 platform (available 24/7)
• Email the privacy team: [email protected]
• General support email: [email protected]

We also encourage you to read Terms and Conditions mega38 for a comprehensive understanding of platform usage, as well as the Responsible Gaming us for information on available self-control tools.