Privacy Policy

Introduction

megawin8 ("megawin8", "we", "us", or "our") operates the online gaming platform accessible at megawin8.cam. We are committed to safeguarding the privacy of all individuals who interact with our platform, including registered members, prospective users, and visitors to our website.

This Privacy Policy ("Policy") describes in full and transparent terms: the categories of personal data we collect; the purposes for which we process that data; the parties with whom we may share data; how long we retain data; and the rights you hold in respect of your personal data.

This Policy applies to all data processing activities undertaken by megawin8 in connection with the operation of its platform and the provision of its gaming services to users located in Malaysia and other eligible jurisdictions. It should be read alongside our Terms & Conditions, which are incorporated herein by reference.

Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" — any information relating to an identified or identifiable natural person. This includes, but is not limited to, name, identification number, location data, email address, and online identifiers such as IP addresses.
• "Processing" — any operation performed on personal data, including collection, recording, organisation, storage, adaptation, retrieval, use, disclosure, transmission, erasure, or destruction.
• "Data Controller" — the entity that determines the purposes and means of processing personal data. In the context of this Policy, megawin8 is the Data Controller.
• "Data Processor" — a third party that processes personal data on behalf of megawin8 in accordance with its instructions (e.g., payment processors, KYC service providers).
• "User" / "Member" — any natural person who has registered an account on the megawin8 Platform.
• "KYC Data" — identity verification documents and associated information collected pursuant to Know Your Customer obligations.
• "Cookies" — small text files placed on a user's device by a website to store information about browsing sessions and preferences.

Data Controller

megawin8, operating through its digital platform at megawin8.cam, acts as the Data Controller in respect of personal data collected from users and prospective members. As Data Controller, megawin8 is responsible for establishing the purposes for which personal data is processed and for ensuring that all processing is conducted in accordance with applicable data protection principles.

All data subject requests, privacy concerns, and related inquiries should be directed to megawin8 using the contact details set out in Section 16 of this Policy.

Categories of Personal Data We Collect

megawin8 collects personal data across several categories, depending on how you interact with the Platform. The table below summarises the main data categories and examples of specific data points within each:

megawin8 does not collect special categories of personal data (such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data) except where required by applicable law for age verification or anti-money laundering purposes.

How We Collect Personal Data

megawin8 collects personal data through the following channels:

• Direct Provision: Information you supply directly when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated Technical Collection: Technical and usage data collected automatically when you access the Platform, including IP address, browser type, session data, and interaction logs gathered via cookies and server-side analytics.
• Third-Party Verification Services: Identity and address data confirmed or augmented through licensed KYC verification providers during the account verification process.
• Payment Processors: Transaction reference data and payment confirmation details received from payment processing partners including DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, and Malaysian bank partners (Maybank, CIMB, Public Bank, Hong Leong Bank).

Purposes of Data Processing

megawin8 processes personal data for the following defined purposes. We do not use your personal data for any purpose not listed here without first obtaining your explicit consent:

• Account Administration: Creating, maintaining, and managing your megawin8 member account, including processing login credentials, updating account settings, and enforcing the one-account-per-person policy.
• Payment Processing: Facilitating deposits and withdrawals in MYR via approved payment channels; verifying payment method ownership; preventing fraudulent transactions.
• Identity Verification (KYC): Confirming your identity and age (21+ requirement) in compliance with applicable regulatory obligations, including anti-money laundering and counter-terrorist financing requirements.
• Service Delivery: Providing access to our full range of gaming services including casino games, live dealer tables, sports betting (Liga Super Malaysia, EPL, UFC, and other markets), and promotional features.
• Fraud Prevention & Security: Detecting, investigating, and preventing fraud, cheating, account abuse, money laundering, and other prohibited conduct on the Platform.
• Responsible Gambling: Monitoring gaming activity to identify potential indicators of problem gambling behaviour; administering self-exclusion, deposit limits, and cool-off periods; ensuring the 21+ age restriction is enforced.
• Customer Support: Responding to queries, resolving disputes, processing complaints, and providing account assistance in English via our 24/7 live chat service.
• Legal Compliance: Meeting obligations under applicable Malaysian and international laws and regulations, including data retention requirements, anti-money laundering obligations, and regulatory reporting duties.
• Platform Improvement: Analysing aggregated, anonymised usage data to improve the Platform's performance, user interface, and gaming experience for Malaysian members.
• Marketing (with consent): Sending promotional offers, bonus notifications, and platform news to members who have opted in to receive marketing communications. You may opt out at any time.

Legal Basis for Processing

megawin8 processes personal data on one or more of the following legal grounds:

• Contractual Necessity: Processing required to perform the contract between megawin8 and the User, including account operation, payment processing, and service delivery.
• Legal Obligation: Processing required to comply with applicable laws, including KYC obligations, anti-money laundering regulations, and data retention mandates.
• Legitimate Interests: Processing necessary for megawin8's legitimate business interests, including fraud detection, platform security, and service improvement, where such interests are not overridden by the rights and interests of the data subject.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — primarily applicable to marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

Data Sharing & Third-Party Disclosure

megawin8 does not sell, rent, or trade personal data to third-party marketers or commercial data aggregators under any circumstances. Personal data may be shared with third parties only in the following limited circumstances:

• Payment Processors: Financial transaction data is shared with licensed payment processors (including those operating DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay integrations, and Malaysian banking partners) solely for the purpose of processing deposits and withdrawals.
• KYC Verification Providers: Identity documentation may be processed by licensed third-party identity verification platforms to confirm the accuracy of submitted KYC documents. These providers are bound by strict data processing agreements.
• Game Content Providers: Aggregated, anonymised gameplay data may be shared with our licensed game studio partners for the purpose of game quality management and RTP auditing. No personally identifiable data is shared for this purpose.
• IT Infrastructure & Security Providers: Cloud hosting, cybersecurity, and platform infrastructure providers may have access to data stored on megawin8 servers in the course of providing their contracted services, subject to confidentiality obligations.
• Legal and Regulatory Authorities: Where megawin8 is required by law, court order, or regulatory directive to disclose personal data to governmental, law enforcement, or regulatory bodies, we will comply with such requirements and notify the affected User to the extent permitted by law.
• Business Transfers: In the event of a merger, acquisition, or sale of substantially all of megawin8's assets, personal data may be transferred to the acquiring entity, subject to equivalent data protection obligations.

Cookies & Tracking Technologies

megawin8 uses cookies and similar tracking technologies to operate and improve the Platform. By continuing to use megawin8.cam following notification of our cookie practices, you consent to the use of cookies as described below.

Types of cookies we use:

• Strictly Necessary Cookies: Essential for the Platform to function. These cookies enable authentication, session management, fraud prevention, and core platform security. They cannot be disabled without impairing Platform functionality.
• Performance Cookies: Collect anonymised data on how Users interact with the Platform (pages visited, errors encountered, session duration). This data is used solely to improve Platform performance and is not associated with individual identities.
• Functional Cookies: Store User preferences such as language settings, display preferences, and last-visited game categories to personalise the Platform experience.
• Analytics Cookies: Used to analyse aggregate traffic patterns, identify popular features, and support Platform development decisions. All data is anonymised before analysis.

You may manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality and performance of the Platform.

Data Retention

megawin8 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention principles apply:

• Active Account Data: Personal data associated with an active account is retained for the duration of the account's operation plus a minimum period following closure, in compliance with applicable regulatory obligations.
• KYC & Identity Documents: Retained for a minimum period required by anti-money laundering regulations following account closure, typically five to seven years depending on applicable jurisdiction requirements.
• Transaction Records: Financial transaction records including deposit and withdrawal history are retained for a minimum of five years following the transaction date to satisfy regulatory and audit requirements.
• Customer Support Records: Live chat transcripts and support correspondence are retained for a reasonable period following the resolution of the relevant inquiry to facilitate quality assurance and dispute resolution.
• Marketing Data: Marketing preferences and associated data are retained until you withdraw consent or close your account, whichever is earlier.
• Technical & Log Data: Server access logs and technical session data are retained for a limited period solely for security monitoring and fraud prevention purposes.

Upon expiry of the applicable retention period, personal data is securely deleted, anonymised, or rendered irreversibly unidentifiable in accordance with industry-standard data disposal procedures.

Data Security

megawin8 implements a comprehensive suite of technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and megawin8 servers is encrypted using industry-standard SSL/TLS protocols. The padlock symbol and HTTPS in your browser confirm this protection is active.
• Encrypted Data Storage: Personal data and financial records are encrypted at rest using AES-256 encryption on secured servers with restricted access controls.
• Access Controls: Access to systems containing personal data is restricted on a strict need-to-know basis. All personnel with access to personal data are subject to confidentiality obligations and regular security training.
• Intrusion Detection & Monitoring: Real-time monitoring systems are deployed to detect and respond to unauthorised access attempts, anomalous traffic patterns, and potential data breach events.
• Regular Security Audits: Our Platform and data handling infrastructure undergoes periodic security reviews and penetration testing to identify and remediate vulnerabilities.

Your Data Rights

As a data subject, you hold the following rights in respect of the personal data megawin8 holds about you. To exercise any of these rights, please contact our support team using the details in Section 16.

megawin8 will respond to all verified data subject requests within a reasonable period, typically within 30 days. We reserve the right to request proof of identity before processing a data access or erasure request to prevent fraudulent submissions.

Children's Privacy — 21+ Policy

megawin8 is an adult gaming platform. Access to the Platform and its services is restricted to individuals aged 21 years and above. We do not knowingly collect, store, or process personal data from individuals under 21 years of age.

Age verification is a mandatory component of our KYC process. Where megawin8 discovers or is notified that an Account has been registered by a person under the age of 21, we will:

• Immediately suspend the Account;
• Void any wagers placed and refund any verifiable real-money deposits;
• Permanently delete all personal data associated with the Account, to the extent not required for regulatory reporting; and
• Take such further steps as may be required by applicable law.

If you become aware that a minor has accessed megawin8, please notify us immediately via our 24/7 live chat support.

Third-Party Services & External Links

The megawin8 Platform may reference or incorporate services from third-party payment providers (such as DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, and licensed Malaysian commercial banks) for the purpose of processing financial transactions. These services are governed by the privacy policies of their respective providers.

megawin8 is not responsible for the data handling practices of third-party service providers or payment platforms. We recommend that you review the privacy policies of any third-party payment service before initiating a transaction.

Updates to This Privacy Policy

megawin8 reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. The version of this Policy published at megawin8.cam/privacy-policy at any given time constitutes the current, binding Policy.

Where amendments are material — meaning they significantly affect how we collect, use, or share your personal data — megawin8 will provide advance notice via a platform-level notification and/or an email to your registered address. Non-material amendments (such as typographical corrections or clarificatory language changes) may be made without prior notice.

Your continued use of the Platform following publication of an updated Policy constitutes your acceptance of the revised terms. If you do not agree to any amendment, you should cease using the Platform and contact our support team to request Account closure.

Contact Us — Privacy Inquiries

For all privacy-related inquiries, data subject access requests, consent withdrawal requests, or concerns regarding megawin8's data handling practices, please contact us through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week directly on the megawin8 Platform. Our English-speaking support team operates on Malaysian Time (MYT, UTC+8) and can assist with privacy matters immediately.
• Email: [email protected] — for formal data subject requests, please include "Privacy Request" in the subject line and provide your registered account username. Allow up to 30 calendar days for a substantive response.
• Coverage: We serve members across Malaysia including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, Bangsar, Kota Kinabalu, Kuching, and all other states and territories.

When submitting a formal data subject request, please be prepared to provide verification of your identity (such as your registered email address and Account username) to enable us to locate your data accurately and respond securely.