Mega338 Privacy Policy – Personal Data Protection for Malaysian Players

1Introduction – Why Privacy Matters to mega338

Mega338 is an online casino platform built specifically for Malaysian players, and we understand that trust is the foundation of our relationship with every member. That trust goes beyond paying out winnings on time or ensuring fair play — it also comes down to how we handle the information you entrust to us.

When you register with mega338, you share your personal information with us. When you make a deposit using Touch 'n Go eWallet, GrabPay, or DuitNow, your financial information is involved. When you play slots or place bets on esports matches, we record that activity. All of this data is a responsibility we take seriously.

This Privacy Policy is not merely a legal formality — it is an honest explanation of what we do with your data, why we need it, and how you can control your personal information within the mega338 system. If you still have questions after reading this document, the mega338 support team is available via live chat 24 hours a day, 7 days a week.

2Personal Data We Collect

Mega338 collects various types of personal information from our members. Below is a detailed explanation of what data we collect, how it is collected, and why it is needed:

2.1 Information You Provide Directly

This is information you enter directly while interacting with the mega338 platform:

• Full name (as shown on your Malaysian identity card or passport)
• An active email address to be used for account communications
• A registered Malaysian mobile number
• Date of birth for age verification (18+)
• Residential address in Malaysia
• Malaysian identity card number or passport number (for identity verification)
• The account password you create (stored in encrypted form)
• Malaysian bank account or e-wallet details (for processing withdrawal of winnings)

2.2 Automatically Collected Information

When you use the mega338 platform, our systems automatically record the following information for security and service improvement purposes:

• Your device's IP address and related network information
• Device type, operating system, and web browser you are using
• Usage data including pages visited, time spent, and actions taken
• Login and logout records including date, time, and approximate geographic location
• Deposit and withdrawal transaction history via TNG, GrabPay, Boost, ShopeePay, DuitNow or FPX
• Gaming history including games played, bets placed, and game outcomes
• Cookie information and session data (see Section 6 for further details)

2.3 Information from Third Parties

In certain circumstances, mega338 may receive information about you from trusted third parties, including payment providers such as FPX processors and e-wallet providers to verify transactions, as well as anti-money laundering (AML) bodies and identity verification agencies to meet our legal compliance requirements.

3How mega338 Uses Your Personal Data

Mega338 uses the personal data we collect for specific, legitimate purposes. We will not use your data for anything beyond what is stated here:

If you do not wish to receive marketing communications from mega338, you may withdraw your consent at any time by updating your notification settings in your account profile or by contacting our support team. Withdrawing consent for marketing communications will not affect your ability to use the mega338 platform.

4Sharing Data with Third Parties

Mega338 is firmly committed to never selling or distributing members' personal data indiscriminately. That said, there are limited circumstances in the course of our business operations where we need to share certain information with trusted third parties:

4.1 Operational Service Providers

Mega338 works with third parties that provide essential services for our platform's operations. These include payment service providers that process your transactions via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX; game providers such as Pragmatic Play, PG Soft, and Evolution Gaming that operate games on our platform; and cloud service providers that store our data securely. All such third parties are bound by strict data protection agreements and are only permitted to use your data for purposes specified by mega338.

4.2 Legal Requirements

Mega338 may be required to disclose your personal information to Malaysian authorities where mandated by law, court order, or in the context of investigations into fraud, money laundering, or financial crime. In all such cases, mega338 will disclose only the minimum information necessary and will notify you of such disclosure where legally permitted.

4.3 What We Do Not Do

• Selling your personal data to any party for marketing or commercial purposes
• Sharing your data with affiliate companies that have no direct operational need for it
• Using your data for profiling unrelated to mega338's services
• Disclosing your data to third parties without a legal basis or your consent

5Data Security – How We Protect Your Information

Protecting the personal data of mega338 members is a responsibility we take very seriously. We continually invest in our cybersecurity infrastructure to ensure your information remains secure against increasingly sophisticated threats.

The technical security measures we implement at mega338 include:

• 256-bit SSL/TLS encryption for all communications between your device and mega338 servers
• Encryption at rest for all sensitive data stored in the database
• Two-factor authentication (2FA) system that all members can enable for added protection
• Round-the-clock account activity monitoring to detect and block unauthorised access attempts
• Enterprise-grade firewall and intrusion detection system (IDS)
• Regular security audits conducted by both internal and external cybersecurity teams
• Strict access controls on internal systems – only mega338 staff who require access for specific tasks are permitted
• Regular data backups to separate secure locations to ensure continuity of service

While mega338 takes all reasonable steps to protect your data, no security system is entirely infallible. You also play an important role in keeping your account safe — use a strong password, enable 2FA, do not share your login credentials, and promptly report any suspicious activity to the mega338 support team.

6Cookies & Tracking Technologies

The mega338 platform uses cookies and similar tracking technologies to enhance your user experience and ensure the platform functions correctly. Cookies are small text files stored on your device when you visit a website.

6.1 Types of Cookies Used by mega338

• Essential Cookies: Required for core mega338 platform functions such as login authentication, session management, and transaction security. These cookies cannot be disabled without affecting platform functionality.
• Analytics Cookies: Helps mega338 understand how players interact with the platform — which pages are most popular, how long players spend in each section, and common navigation paths. This data is used solely for platform improvement.
• Preference Cookies: Saving your preferences — such as language, display settings, and favourite games — to deliver a more personalised experience each time you log in to mega338.
• Security Cookies: Used to detect and prevent fraudulent activity, ensure that only legitimate account owners can log in, and protect against cyber attacks.

6.2 Managing Your Cookie Preferences

You can manage or disable analytics and preference cookies through your web browser settings. Please note that disabling essential cookies may affect the functionality of the mega338 platform. For guidance on managing cookies across different browsers, refer to your browser's help documentation.

7Cross-Border Data Transfers

Mega338 stores the majority of its operational data on servers located in the Asia region. In the course of our operations, data may be transferred to and processed at locations outside Malaysia – particularly in connection with services provided by international gaming providers such as Evolution Gaming and global payment processors.

When your personal data is transferred outside Malaysia, mega338 ensures that protection equivalent to Malaysia's PDPA standards is applied through comprehensive data protection agreements with all parties involved. mega338 will not transfer your data to jurisdictions with inadequate data protection without appropriate additional safeguards in place.

8Your Rights Regarding Personal Data

Under Malaysia's Personal Data Protection Act 2010 and the privacy principles adopted by mega338, you have the following rights in relation to your personal data held in our systems:

To exercise any of the above rights, please contact the mega338 support team via 24/7 live chat or email at support@mega338.bid. We will process your request within 14 business days. In complex cases, this period may be extended to 30 business days, with prior notice given to you. All privacy rights requests are handled free of charge.

9Child Privacy – Protection of Minors

The mega338 platform is an adult service restricted to individuals aged 18 and above, without exception. mega338 does not knowingly collect or process the personal data of any individual under the age of 18.

If mega338 discovers that personal data belonging to an individual under the age of 18 has been collected inadvertently, we will take immediate steps to delete that data and close the account in question. If you believe your child or any underage individual has registered an account with mega338, please contact us immediately at support@mega338.bid so we can take appropriate action without delay.

Mega338 also encourages parents and guardians to use parental control software on devices shared with children to prevent unintended access to online gambling platforms.

10Data Retention Period

Mega338 retains your personal data only for as long as necessary for the purposes set out in this Privacy Policy. The following is a general guide to the retention periods we apply:

• Active account data: retained for the duration of your active membership with mega338
• Closed account data: retained for 5 years after account closure for AML compliance requirements and resolution of any disputes that may arise
• Financial transaction records (deposits, withdrawals, winnings): retained for 7 years in accordance with Malaysian accounting and tax legislation
• Security logs and identity verification records: retained for 5 years from the date of last activity
• Login and session data: retained for 90 days for security and incident investigation purposes
• Customer support communications: retained for 3 years from the date of last communication

Once the retention period expires or data is no longer needed, mega338 disposes of it securely and irreversibly, using data deletion methods that comply with industry standards.

11Changes to This Privacy Policy

Mega338 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our data practices, applicable legislation or platform improvements. When we make material changes to this Policy, we will:

• Updating the "Last Updated" date at the top of this page
• Displaying a prominent notice on the mega338 platform homepage for no less than 7 days
• Sending notification emails to all active mega338 members with a summary of key changes
• For highly material changes, requesting your renewed consent before the changes take effect

We encourage you to review this Privacy Policy periodically to stay informed about how mega338 handles your personal data. The current version in force is always available on this page.

12Contact Us About Privacy

If you have any questions, concerns or requests regarding this Privacy Policy or how mega338 handles your personal data, please do not hesitate to get in touch. Our dedicated team will respond to privacy enquiries within a reasonable timeframe:

• 24/7 Live Chat: The fastest way to reach us — via the chat icon at the bottom right of the mega338 platform, with responses in under 5 minutes during peak hours
• Email: support@mega338.bid – for complex privacy enquiries or data rights requests that require written processing
• Frequently Asked Questions: Visit mega338 FAQ page for instant answers to the most frequently asked privacy questions by Malaysian players

When contacting us regarding privacy matters, please provide your account username (not your password), a clear description of your request, and where applicable, your account number or registered email address to help us process your request efficiently. All privacy-related communications are confidential and handled by staff trained in data protection.