Privacy Policy mega999 – Malaysia Player Data Protection

Mega999 collects several categories of information from our players, depending on how you interact with the platform. We ensure that only the data that is necessary is collected at each stage:

Information you provide directly:

• Registration Information: Full name, date of birth, email address, phone number, username, and password when creating your account.
• KYC Information: A copy of your national ID (MyKad) or passport, a facial photo (selfie), and a proof-of-address document such as a bank statement or utility bill dated within the last 3 months.
• Financial Information: Bank name, bank account number, or e-wallet details (such as Touch 'n Go eWallet or GrabPay) used for deposits and withdrawals.
• Communications: Any messages, complaints, or other information you submit to our support team via live chat, email, or other channels.

Information collected automatically:

• Technical Data: IP address, device type, operating system, browser type, screen resolution, and language settings.
• Usage Data: Pages visited, session time and duration, games played, betting history, and actions taken on the platform.
• Cookie Data: Information collected via cookies and similar tracking technologies as described in section 6.
• Location Data: General location information based on IP address for compliance and fraud detection purposes.

All information is collected for clear and legitimate purposes, and processed in a manner that does not infringe on your privacy beyond what is reasonably necessary.

Mega999 uses the information collected for a variety of legitimate purposes. Below is a summary table describing the purposes of data use and the associated legal bases:

Mega999 will not use your data for any other purpose not stated in this policy without obtaining your consent first. If you have agreed to receive marketing communications from us, you may withdraw that consent at any time by contacting our support team.

Mega999 processes your personal data on a valid legal basis. Depending on the type of processing and its purpose, we rely on the following bases:

• Contract Performance: Processing required to provide the services you request, including account management, payment processing, and bonus delivery.
• Legal Obligation: Processing required to comply with applicable Malaysia laws, including anti-money laundering (AML) requirements, identity verification (KYC), and reporting to the relevant authorities.
• Legitimate Interests: Processing for fraud prevention, platform security, service improvement, and business risk management that does not affect your fundamental rights.
• Consent: Processing for which you have given explicit consent, such as receiving marketing communications and the use of certain cookies. You may withdraw this consent at any time.

If you would like to know the specific legal basis for any particular processing activity involving your data, please contact the mega999 support team for further clarification.

Mega999 does not sell or rent players' personal data to any third party. However, in the course of operating the platform, we may share data with the following limited and controlled categories of third parties:

• Payment Service Provider: FPX, Touch 'n Go eWallet, GrabPay, and local bank providers that process your deposit and withdrawal transactions. Data sharing is limited to the information required to complete each transaction.
• KYC Service Provider: Trusted third-party identity verification companies that help us carry out the KYC process securely and efficiently.
• Game Provider: Game developer companies that provide game content on the mega999 platform. Data shared is limited to technical requirements only.
• Cloud Service Provider: Infrastructure and data storage providers that support the operation of the mega999 platform. All providers are bound by strict data processing agreements.
• Authority: Government agencies, regulatory bodies, or law enforcement authorities when required by law or a valid court order.

All third parties that receive personal data from mega999 players are bound by strict confidentiality agreements and data protection obligations. They are only permitted to use that data for the purposes specified in their agreement with mega999.

Mega999 implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, loss, destruction, or disclosure. The measures we take include:

• 256-bit SSL Encryption: All data communications between your browser and mega999 servers are protected by industry-standard SSL/TLS encryption.
• Data Encryption at Rest: Sensitive data such as banking information and KYC documents are encrypted at rest in our database.
• Role-Based Access Control: A strict access control system ensures that only authorised personnel can access players' personal data, and only to the extent required for their role.
• Continuous Security Monitoring: A 24/7 cyber threat monitoring system that detects and responds to any suspicious activity promptly.
• Regular Security Audits: mega999 conducts regular penetration testing and security audits by independent third parties to ensure our systems remain up to date and secure.
• Two-Factor Authentication (2FA): An additional authentication layer to protect player accounts from unauthorised access.

While we take all reasonable precautions, no security system is completely impenetrable. We encourage players to use strong passwords, not share their login credentials, and notify us immediately if they suspect any unauthorised activity on their account.

Mega999 uses cookies and similar technologies to enhance the user experience, ensure platform security, and understand how players interact with our website. The types of cookies we use are as follows:

• Essential Cookies: Cookies required for core platform functions such as login authentication, secure sessions, and fraud prevention. These cookies cannot be disabled as they are essential for platform operation.
• Performance Cookies: Cookies that help us understand how players use the platform, which pages are most popular, and where players encounter issues. This data is used in aggregated, anonymized form to improve our services.
• Functional Cookies: Cookies that remember your preferences such as language, display settings, and login details for a smoother experience.
• Marketing Cookies: Cookies used to deliver relevant advertisements to you based on your interests. Use of these cookies requires your consent.

You can manage your cookie settings through your web browser at any time. Please note that disabling certain cookies may affect the functionality of the mega999 platform. For more information on managing cookies, please refer to your web browser's help guide.

Mega999 respects your rights as the owner of your personal data. You have the following rights regarding the data we hold about you:

To exercise any of these rights, please contact the mega999 support team via live chat or email at [email protected]. We will process your request within 30 business days. Please note that certain rights may be limited in specific circumstances, such as when data processing is required for legal compliance.

Mega999 retains your personal data only for as long as necessary to fulfil the purposes for collection stated in this policy, or as required to comply with legal obligations. Our general data retention guidelines are as follows:

• Active Account Data: Retained for the duration that your mega999 account remains active.
• Financial Transaction Data: Retained for a minimum of 7 years in accordance with Malaysian legal requirements relating to financial records and anti-money laundering.
• KYC Documents: Retained for a minimum of 5 years after the business relationship ends, in accordance with current legal requirements.
• Closed Account Data: Basic data is retained for 5 years after account closure for dispute management and legal compliance purposes.
• Log & Security Data: Retained for 12 months for security and fraud investigation purposes.
• Marketing Data: Retained until you withdraw your consent to receive marketing communications.

Once the applicable retention period has expired, your personal data will be securely deleted or anonymised so that it can no longer be linked to you personally.

Mega999 reserves the right to amend or update this Privacy Policy from time to time to reflect changes in our privacy practices, legal requirements, or service improvements. When any material changes occur, we will:

• Updating the "Last Updated" date at the top of this page.
• Displaying a clear notice on the mega999 homepage or within your account.
• Sending a notification via email to your registered address (for material changes).

We encourage you to review this Privacy Policy page periodically to stay informed about how we protect your information. Continued use of the mega999 platform after any amendments take effect will be considered your acceptance of the updated policy.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact the mega999 support team:

If you are not satisfied with our response, you have the right to lodge a complaint with the relevant data protection regulatory authority in Malaysia.