Mega288login Privacy Policy – Malaysia User Data Protection

1Introduction and Scope of This Privacy Policy

Mega288login ("we", "Platform") is the data controller responsible for processing personal information collected through our platform. This Privacy Policy is drafted to clearly and transparently explain how we handle your personal data — from how it is collected, what it is used for, who it is shared with, and how long it is retained.

We understand that entrusting personal information to any online platform requires strong confidence. At mega288login, we take this data stewardship responsibility very seriously and are committed to ensuring your information is handled with integrity and transparency at all times.

This Policy applies to all information collected through the mega288login website, Android and iOS mobile apps, email communications, and any other channels you use to interact with our platform.

2Types of Personal Data We Collect

Mega288login collects personal data in two main ways — data you provide directly to us, and data collected automatically as you use the platform.

Data You Provide Directly:

• Identity information — full name, date of birth, identification card or passport number.
• Contact information — email address, mobile number, and residential address.
• Financial information — bank name, bank account number or digital wallet number for deposit and withdrawal purposes.
• Login information — username and password stored in a secure hashed format.
• KYC verification documents — copies of identity card, passport, or relevant documents for identity verification.

Automatically Collected Data:

• Technical data — IP address, device type, operating system, browser type, and screen resolution.
• Usage data — pages visited, session duration, click actions, and navigation paths within the platform.
• Transaction data — deposit history, withdrawals, wagering, wins, and losses.
• Game data — game history, game preferences, play time, and session data.
• Communication data — records of interactions with the customer support team.

3Purpose of Using Your Personal Data

Personal data collected by mega288login is used for legitimate and necessary purposes in operating the platform. We do not use your data for unrelated purposes without your consent.

• Account Management: Creating, verifying and managing your user account including the login process, account security and profile updates.
• Transaction Processing: Processing deposits, verifying withdrawal requests and maintaining accurate financial records.
• Identity Verification (KYC): Meeting compliance requirements by verifying user age and identity to prevent fraud and platform abuse.
• Customer Support: Handling user inquiries, complaints and support requests effectively.
• Platform Security: Detecting and preventing fraud, money laundering, bonus abuse and other suspicious activities.
• Platform Improvement: Analyzing usage patterns to improve platform features, user interface and overall experience.
• Communications: Sending important notifications, policy updates, account information and — with your consent — promotional offers.
• Responsible Gaming: Monitoring gameplay patterns to identify users who may need assistance related to gaming addiction.

4Legal Basis for Data Processing

Mega288login processes your personal data on valid legal bases. Depending on the context of processing, the following bases may apply:

• Contract Performance: Processing required to fulfill our obligations to you as a platform user — including account management, transaction processing and the provision of gaming services.
• Legal Obligation: Processing required to comply with applicable legislation such as KYC requirements, financial reporting and anti-money laundering prevention.
• Legitimate Interest: Processing for platform security, fraud prevention, usage analytics and service improvement purposes, where these interests do not override your fundamental rights.
• Consent: For certain processing activities such as marketing communications, we require your explicit consent, and you have the right to withdraw that consent at any time.

5Disclosure of Data to Third Parties

Mega288login does not sell user personal data to any party. However, in the course of platform operations, we may need to share certain data with selected third parties within strict limits:

• Payment Providers: Transaction information that must be shared with providers such as DuitNow, FPX and digital wallets to process deposits and withdrawals.
• Game Providers: Basic game data required by game providers to run your game session.
• Technology Service Providers: Cloud infrastructure, cybersecurity and analytics providers that help us operate the platform, subject to strict data confidentiality agreements.
• Legal Basis: When required by law, court order, or a legitimate law enforcement authority.

All third parties receiving mega288login user data are required to handle it in accordance with privacy standards equal to or stricter than our own.

6Data Security Measures We Practice

Mega288login invests in comprehensive security infrastructure to protect your personal data from unauthorized access, use, disclosure, alteration, or destruction.

Technical Protection:

• 256-bit SSL/TLS encryption for all communications between your device and our servers.
• Passwords are stored using strong cryptographic hashing algorithms — we cannot read your password ourselves.
• The user database is protected by multiple layers of access controls.
• Intrusion detection and prevention system (IDS/IPS) active 24/7.
• Continuous security monitoring and periodic security audits by internal security teams and external parties.

Access Control:

• Access to user data by mega288login staff is granted strictly on a need-to-know basis.
• All staff with access to user data are subject to privacy training and confidentiality agreements.
• User data access activity is logged and continuously monitored.

7Cookies, Tracking Technologies and Your Choices

Mega288login uses cookies and similar tracking technologies to enhance your experience on the platform. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

• Essential Cookies: Required for core platform functions such as login, session security, and language preference memory. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collecting information about how users use the platform to help us identify issues and improve the user experience.
• Functional Cookies: Saving your preferences such as language, currency denomination and display settings to deliver a more personalized experience.

You can manage or disable cookies through your web browser settings. Please note that disabling certain cookies may affect the functionality or experience of using the mega288login platform.

8Your Rights Regarding Personal Data

As a mega288login user, you have certain rights regarding your personal data. We fully respect and support these rights:

To exercise any of the above rights, please contact the mega288login support team via live chat in your account or by email at [email protected]. We will process your request within 30 business days.

9Data Retention Period

Mega288login does not store your personal data indefinitely. Retention periods are determined based on the purpose of collection and legal requirements:

• Active Account Data: For as long as your account remains active and in use. Data will be reviewed periodically and deleted when no longer needed.
• Financial Transaction Data: Retained for a minimum of 7 years to comply with legal requirements relating to financial and tax records in Malaysia.
• KYC Documents: Retained for the period prescribed by anti-money laundering legislation, typically 5–7 years.
• Security Logs: Retained for 90 days for security investigation and fraud prevention purposes.
• Support Communication Data: Retained for 2 years for reference and service improvement.
• Closed Accounts: Closed account data is retained for the period required to fulfil legal obligations before being securely deleted.

10Changes to This Privacy Policy

Mega288login reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or new platform features. We are committed to notifying you of any material changes.

When we make significant changes to this Policy, we will:

• Updating the "Last Updated" date at the top of this page.
• Displaying clear notices on the platform at least 14 days before changes take effect.
• Sending notification emails to your registered email address for the most material changes.

We encourage you to review this Privacy Policy periodically. Continued use of the platform after changes take effect constitutes your acceptance of the updated Privacy Policy.