Privacy Policy megawin888 — Malaysia Member Data Protection

Welcome to the megawin888 Privacy Policy. This document outlines the privacy practices of the megawin888 platform, accessible via megawin888.vin and our official mobile app. megawin888 is the data controller for all personal information collected through this platform.

We understand that trust is the foundation of our relationship with every member. Privacy is not merely a legal obligation for megawin888 — it is a core value we have upheld since the platform was established in 2018. Every decision involving data processing is made with our members' interests and privacy rights in mind.

This policy applies to all users of the megawin888 platform, including website visitors, registered members, and former members whose information remains in our system within the prescribed retention period. This policy should be read together with Terms and Conditions megawin888.

Megawin888 collects personal data from various sources to enable us to provide a secure, efficient, and personalised service to every member. Below is a detailed table of the types of data we collect:

We only collect data that is genuinely necessary for the stated purposes. megawin888 does not request irrelevant or excessive information from members. If you do not provide certain required data (such as KYC verification), we may be unable to process withdrawal requests or fully activate your account's features.

Every piece of personal data collected by megawin888 is used on a legitimate need basis with a specific purpose. We do not process your data for purposes beyond those stated without first obtaining your consent.

The primary purposes for which personal data is used at megawin888 include:

• Account Management: Creating and maintaining your account, processing registration and identity verification, and ensuring your account security at all times.
• Transaction Processing: Processing deposits, verifying payments, and safely and promptly releasing your winning withdrawals.
• Platform Security: Detecting and preventing fraud, money laundering, account breaches, and any suspicious activity on the megawin888 platform.
• Service Communications: Sending important account-related notifications, promotions you have opted in to receive, and policy updates that affect you.
• Legal Compliance: Meeting legal compliance obligations, including anti-money laundering (AML) requirements, tax reporting, and cooperation with competent authorities when required.
• Service Improvement: Analysing usage patterns in aggregate (without identifying individuals) to improve platform features, performance, and the overall user experience.
• Responsible Gaming: Monitoring wagering patterns to identify signs of problem gambling and offering appropriate self-control tools to members who need them.

Megawin888 does not sell, rent, or trade member personal data to any third party for marketing or commercial purposes. Your data is only shared in limited circumstances and solely to enable us to provide you with a better service.

The parties that may receive your personal data in a limited context are:

• Payment Providers: FPX, DuitNow, e-wallet operators, and crypto payment processors used to carry out your deposit and withdrawal transactions. They receive only the minimum data necessary to process payments.
• Technology Service Providers: Companies providing technical infrastructure such as cloud services, server hosting, and security detection tools — all bound by strict confidentiality agreements with megawin888.
• Game Providers: Game development companies that need to verify member eligibility to grant access to their games within the megawin888 platform.
• Legal Authorities: Government agencies, law enforcement bodies, or courts that require your data for legitimate legal purposes — we only disclose data that is specifically ordered.

All third parties receiving data from megawin888 are bound by data processing agreements that require them to protect your data to a standard consistent with this Privacy Policy.

Protecting members' personal data and financial information is the top priority of megawin888. We continuously invest in cybersecurity infrastructure to ensure your data remains protected against increasingly sophisticated threats.

The technical security measures we implement include:

• AES-256 Encryption of Data at Rest: All personal data and financial information stored in the megawin888 database is protected using AES-256 encryption — the same standard used by leading banking and financial institutions worldwide.
• TLS 1.3 Protocol: All data transmitted between your browser or app and megawin888 servers is encrypted using TLS 1.3, ensuring no third party can intercept or read your data in transit.
• Two-Factor Authentication (2FA): Our 2FA system adds an extra layer of security to the login and withdrawal process, ensuring only you can access your account even if your password is compromised.
• Real-Time Threat Monitoring: Our automated monitoring system operates 24/7 to detect any suspicious activity, intrusion attempts, or fraudulent patterns on the platform.
• Data Segregation: Member funds and personal data are stored in an environment isolated from megawin888's internal operating systems, minimising the risk of exposure.
• Regular Security Audits: The megawin888 platform undergoes periodic independent security audits by third-party cybersecurity firms to identify and address any potential vulnerabilities.

Megawin888 uses cookies and similar tracking technologies to enhance the user experience, analyse platform performance, and ensure proper security functionality. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login session authentication, language preference memory, and security. These cookies cannot be disabled without affecting platform functionality.
• Analytics Cookies: Helping us understand how members interact with the platform — such as the most frequently visited pages and time spent — for improvement purposes. This data is processed in aggregate and does not identify individuals.
• Preference Cookies: Saving your personal settings such as display theme, game preferences, and other configurations so your experience is more comfortable in future sessions.
• Security Cookies: Used to detect suspicious login attempts, helping prevent unauthorised access and protect your account.

You can manage your cookie settings through your internet browser. However, disabling certain cookies may affect the functionality and user experience of the megawin888 platform.

Megawin888 retains your personal data only for as long as necessary to fulfil the stated purpose of collection or to comply with applicable legal obligations.

• Active Account Data: Stored for the duration your account remains active at megawin888 and updated whenever you update your personal information.
• Financial Transaction Data: Retained for 7 years after the transaction is completed, in line with anti-money laundering compliance and financial reporting requirements.
• Closed Account Data: After account closure, basic personal data is retained for 5 years for legal compliance purposes and to resolve any disputes that may subsequently arise.
• Security Log Data: Security activity logs are retained for 2 years to assist in security incident investigations if required.
• Cookie Data: Session cookies expire automatically when you close your browser, while persistent cookies have a set expiry period ranging from 30 days to 1 year.

Upon expiry of the applicable retention period, your data will be securely deleted or de-identified from all megawin888 systems using methods that comply with industry standards.

As a megawin888 member, you have certain rights regarding your personal data. We are committed to respecting and facilitating the exercise of these rights:

To exercise any of the above rights, please contact the megawin888 support team via Live Chat on the platform. We will process your request within 30 business days and provide written feedback.

The megawin888 platform is exclusively for individuals aged 18 and above. We do not knowingly collect, process, or store any personal data from individuals under the age of 18.

Megawin888 enforces a strict age verification process during registration and before any financial transaction is processed. This includes checks based on valid identification documents submitted during the KYC process.

If we discover that personal data of an underage child has been collected unintentionally, we will take immediate action to delete that data and close the associated account. Parents or guardians who believe their child may have registered on the megawin888 platform are urged to contact our support team immediately.

Megawin888 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, new legal requirements, or platform feature enhancements. The latest version of this Privacy Policy will always be available on this page.

For significant changes that materially affect how we process your data, we will notify you via email notification or a prominent in-platform notice at least 14 days before the changes take effect, giving you sufficient time to review and consider your options.

Continued use of the megawin888 platform after changes to the Privacy Policy are published will be considered acceptance of the updated terms. If you disagree with the changes made, you have the right to close your account and request deletion of your personal data in accordance with the procedures set out.