Privacy Policy

Introduction

This Privacy Policy ("Policy") is published by mega88apk ("we", "us", "our", "the Platform") and applies to all personal data collected from users ("you", "User", "Player") who access or use the mega88apk platform at mega88apk.cam, including any associated mobile applications or services.

mega88apk is an online gaming and sports betting platform serving registered adult players primarily in Malaysia. In the course of providing our services — which include casino games, live dealer tables, sports betting, lottery, and arcade games — we necessarily process personal information about our registered users. This Policy governs how we do that, in full.

By creating an Account on mega88apk, you acknowledge that you have read and understood this Privacy Policy in its entirety and that you consent to the data processing practices described herein. If you do not consent, you must not register an Account or use the Platform.

Definitions

For the purposes of this Policy, the following definitions apply:

• "Personal Data" means any information that identifies or could reasonably be used to identify a natural person, directly or indirectly — including name, identification number, contact details, financial account data, IP address, and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure by transmission, dissemination, or erasure.
• "Data Controller" means mega88apk, which determines the purposes and means by which Personal Data is processed.
• "Data Processor" means any third-party entity that processes Personal Data on behalf of mega88apk, such as payment gateway providers and KYC verification services.
• "KYC" means Know Your Customer — the mandatory identity and age verification process required of all Players prior to withdrawal or at any time mega88apk deems verification necessary.
• "Cookies" means small text files placed on your device by the Platform to store session information, preferences, and analytical data.
• "Data Subject" means the natural person (you, the Player) to whom Personal Data relates.

Data We Collect

mega88apk collects Personal Data through several channels. The categories of data we collect, the specific data points within each category, and the collection method are set out in the table below:

We do not collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, biometric data, health data, or data concerning a person's sex life or sexual orientation — except where such data forms an incidental part of identity documents submitted for KYC purposes, in which case it is processed solely for identity verification and not stored separately.

How We Use Your Data

mega88apk processes Personal Data under the following lawful bases and for the following specific purposes:

• Account Administration (Contractual Necessity): Creating, managing, and maintaining your Player Account; communicating account-related notices (password resets, security alerts, account status changes); processing deposits and withdrawals; crediting bonuses; and maintaining accurate transaction records.
• Identity & Age Verification — KYC (Legal Obligation): Verifying that you are aged 21 or above and that you are who you represent yourself to be, in compliance with anti-money-laundering (AML) and responsible gambling obligations.
• Fraud Prevention & Security (Legitimate Interest): Detecting and investigating suspicious activity, preventing unauthorised account access, monitoring for bonus abuse, and protecting the Platform from fraudulent transactions. This includes IP address analysis, device fingerprinting, and behavioural pattern monitoring.
• Regulatory Compliance (Legal Obligation): Retaining financial transaction records and KYC documentation for the periods required by applicable AML and financial services regulations; cooperating with lawful requests from regulatory bodies or law enforcement agencies.
• Customer Support (Contractual Necessity): Responding to enquiries, resolving disputes, investigating complaints, and providing assistance via live chat, email, and other support channels.
• Responsible Gambling (Legitimate Interest / Contractual): Operating self-exclusion, deposit limit, and session control tools; identifying account activity patterns that may indicate problem gambling behaviour; reaching out proactively where concern thresholds are met.
• Platform Improvement (Legitimate Interest): Analysing aggregated, anonymised usage data to understand player behaviour, improve user experience, and optimise game and feature offerings. No individually identifying data is used in this analysis without anonymisation.
• Marketing Communications (Consent): Where you have explicitly opted in, sending promotional emails, bonus notifications, and platform updates. You may withdraw this consent at any time by updating your communication preferences in your Account settings or by contacting support.

Data Sharing & Disclosure

mega88apk does not sell, rent, or trade your Personal Data to any third party for commercial purposes. We share Personal Data only in the following defined circumstances:

• Payment Processors & Banking Partners: To facilitate deposits and withdrawals, we share relevant financial and identity data with our payment processing partners, which include operators of Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and major Malaysian banks (Maybank, CIMB, Public Bank, Hong Leong, RHB). These parties are contractually bound to process your data only for payment purposes and to maintain appropriate security standards.
• KYC & Identity Verification Providers: We use accredited third-party identity verification services to conduct KYC checks. Document images and identity data are transmitted to these providers under data processing agreements that restrict use to identity verification exclusively.
• Fraud Detection Services: Usage data, device identifiers, and IP addresses may be shared with specialist fraud detection service providers to identify and prevent fraudulent activity across the Platform.
• Game Content Providers: Some game providers may receive anonymised session data (e.g., game played, bet amounts) as part of technical game integration. Personally identifying data is not shared with game providers.
• Regulatory & Law Enforcement Authorities: We will disclose Personal Data to competent authorities where required to do so by law, court order, or lawful regulatory instruction — including in connection with AML investigations, fraud enquiries, or tax compliance.
• Corporate Transactions: In the event of a merger, acquisition, or sale of substantially all of our assets, Personal Data held by mega88apk may be transferred to the acquiring entity, subject to the same data protection commitments described in this Policy.

All third-party recipients of Personal Data are subject to contractual data processing agreements that prohibit use of data beyond the specific stated purpose and require maintenance of appropriate technical and organisational security measures.

Cookies & Tracking Technologies

mega88apk uses cookies and similar technologies (including local storage and session identifiers) to operate the Platform, maintain your session, remember your preferences, and gather usage analytics. The categories of cookies we use are:

• Strictly Necessary Cookies: Required for core Platform functionality — login session management, security tokens, and language preferences. These cannot be disabled without affecting Platform usability.
• Functional Cookies: Remember your Platform preferences such as game display settings, communication language, and responsible gambling tool configurations between sessions.
• Analytical Cookies: Collect anonymised data about how Players interact with the Platform — pages visited, features used, session durations — to help us understand usage patterns and improve the product.
• Security & Fraud Prevention Cookies: Store device identifiers and session fingerprints used by our fraud detection systems to identify anomalous account activity.

You may manage your cookie preferences through your browser settings. Disabling strictly necessary cookies will affect your ability to use the Platform. For other cookie categories, your browser's cookie management tools allow you to review and selectively delete stored cookies.

Data Security

mega88apk implements comprehensive technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers.
• Encryption of sensitive data fields (financial data, identity documents) at rest using industry-standard encryption algorithms.
• Role-based access controls limiting staff access to Personal Data strictly to those whose job function requires it.
• Two-factor authentication (2FA) enforced for all internal staff access to systems holding Player data.
• Regular third-party security audits and penetration testing of Platform infrastructure.
• Incident response procedures ensuring that any data breach is identified, contained, investigated, and — where required by applicable law — reported to relevant authorities and affected data subjects within the legally required timeframe.

Data Retention

mega88apk retains Personal Data only for as long as is necessary to fulfil the purpose for which it was collected or as required by applicable regulatory obligations. Our standard retention schedule is as follows:

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual. Anonymised data may be retained indefinitely for statistical and analytical purposes.

Your Rights as a Data Subject

Subject to applicable law and certain regulatory exceptions, you hold the following rights in respect of Personal Data that mega88apk holds about you:

• Right of Access: You may request a copy of the Personal Data we hold about you, along with information about how it is being processed.
• Right to Rectification: Where Personal Data we hold is inaccurate or incomplete, you have the right to request correction. Many fields can be updated directly within your Account settings; others require submission to customer support.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your Personal Data. Note that this right is subject to limitations where retention is required by law (e.g., AML record-keeping obligations) or where data is necessary for the defence of legal claims.
• Right to Restriction of Processing: In certain circumstances (e.g., while a data accuracy dispute is pending), you may request that we restrict processing of your Personal Data without deleting it.
• Right to Data Portability: Where processing is based on your consent or contractual necessity and is carried out by automated means, you may request your Personal Data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing based on our legitimate interests. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of these rights, please submit a written request to [email protected] with the subject line "Data Subject Rights Request". We will acknowledge receipt within 5 business days and provide a substantive response within 30 calendar days. We may require identity verification before processing your request.

Children & Minors

mega88apk is strictly an adult platform. We do not knowingly collect Personal Data from persons under the age of 21. Our registration process includes mandatory age declaration and is subject to KYC age verification.

If we become aware that Personal Data has been collected from a person under 21, we will immediately close the associated Account, securely delete all Personal Data relating to that individual (subject to any mandatory retention requirements), and return any deposited funds after completing required AML checks.

If you are a parent or guardian and believe that your child may have accessed or registered on mega88apk, please contact us immediately at [email protected]. We take underage access extremely seriously and will investigate all such reports promptly.

International Data Transfers

mega88apk's primary data processing infrastructure is located within or close to the region in which we operate. However, some third-party processors and service providers (including certain KYC and fraud detection platforms) may be located in, or process data within, countries outside Malaysia.

Where Personal Data is transferred internationally, mega88apk ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under applicable Malaysian data protection law. These safeguards may include:

• Contractual data protection clauses binding the recipient to equivalent privacy and security standards.
• Transfers only to jurisdictions that have been assessed as providing adequate data protection.
• Explicit consent where other transfer mechanisms are unavailable and the transfer is necessary for the performance of your contract with mega88apk.

You may request details of specific international transfers and the applicable safeguards by contacting our support team.

Third-Party Links

The mega88apk Platform may contain references or links to third-party websites or services (for example, links to payment provider information pages). This Privacy Policy applies solely to data processed by mega88apk. We have no control over the data practices of third-party websites, and accessing such sites is entirely at your own discretion.

We encourage you to review the privacy policy of any third-party service before providing personal information to them. mega88apk accepts no responsibility or liability for the privacy practices or content of third-party sites.

Amendments to This Policy

mega88apk reserves the right to amend this Privacy Policy at any time to reflect changes in our data processing practices, regulatory requirements, or platform features. Where amendments are material, we will notify registered Players via email or a prominent in-platform notification at least 14 days before the changes take effect.

The revised Policy will be published at mega88apk.cam/privacy-policy with an updated "Last Updated" date. Your continued use of the Platform after the effective date of any revision constitutes your acceptance of the updated Policy. If you do not accept the revised terms, you must cease using the Platform and may request Account closure.

We maintain an internal version history of this Policy. If you wish to review a prior version, you may request it by contacting our support team.

Contact Us & Data Requests

For any queries, concerns, or requests relating to this Privacy Policy or your Personal Data, please contact the mega88apk Data Protection team through the following channels:

• Email (Data & Privacy Enquiries): [email protected] — please use the subject line "Privacy / Data Request" for prioritised handling.
• Live Chat: Available 24/7 on the Platform. For formal data subject rights requests, please follow up in writing via email to create a documented record.

Response times for privacy-related enquiries: acknowledgement within 5 business days; substantive response within 30 calendar days. Complex requests (e.g., data portability exports, erasure requests requiring regulatory verification) may take up to 90 days — we will notify you of any extension within the initial 30-day window.

This Privacy Policy was last reviewed and updated on 1 January 2026 and supersedes all prior versions.