Megawin188 Privacy Policy – Our Commitment to Protecting Players' Personal Data

1Introduction

Megawin188 is an online casino platform operating in Malaysia and serving adult players across the country — from Kuala Lumpur to Kota Kinabalu, from Johor Bahru to Kuching. In providing this service, we collect and process personal data belonging to our members. This Privacy Policy explains transparently how we handle that responsibility.

This document has been prepared in accordance with the requirements of the Malaysia Personal Data Protection Act 2010 (PDPA) and internationally recognised data protection principles. By registering and using the megawin188 platform, you acknowledge that you have read and understood this Privacy Policy.

Megawin188 acts as the "Data Controller" for all personal data collected through our platform. This means we are fully responsible for determining the purpose and manner in which your data is processed, and we take that legal responsibility seriously.

2Data We Collect

Megawin188 only collects data that is strictly necessary to provide our services to you. The following are the categories of data we collect:

Registration & Identity Data:

• Full name as per identification card (MyKad) or passport
• Active Malaysian mobile number
• Email address (if provided)
• Date of birth (for age verification)
• Residential address (for KYC verification)

Financial & Payment Data:

• E-wallet account details (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow) – linked phone number only, not passwords
• Bank account details for withdrawals via FPX (Maybank2u, CIMB Clicks, and others) – account number only
• Records of deposit and withdrawal transactions in Malaysian Ringgit (RM)
• Game history and betting records

Technical & Usage Data:

• Your device's IP address when accessing megawin188
• Web browser type and operating system
• Login and logout session data
• Usage statistics and game preferences (slots, Live Casino, sports, poker, and more)
• Website cookie and analytics data

Verification Document Data (KYC):

• Digital copy of a valid Malaysian identity card (MyKad) or passport
• Proof of current address (utility bill or bank statement not older than 3 months)
• Selfie with identification document (if requested)

A summary of the types of data we collect:

3How We Use Your Data

Data collected by megawin188 is used solely for legitimate purposes directly related to the provision of our platform services. The following are the primary purposes for which your data is processed:

• Account Management: Creating, verifying, and managing your megawin188 account, including the secure login process.
• Transaction Processing: Processing deposits and withdrawals in MYR efficiently and securely via Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and FPX.
• Identity Verification (KYC): To verify that you are an eligible individual – aged 18 or above and residing in Malaysia – to use megawin188 services.
• Customer Service: Enabling megawin188's 24/7 support team to assist you effectively with any account, transaction, or game-related issues.
• Security & Fraud Prevention: Detecting and preventing unauthorised access, fraud attempts, money laundering, and platform abuse.
• Platform Improvement: Analysing aggregated usage patterns to improve website performance, enhance user experience, and offer you more relevant games.
• Legal Compliance: Fulfilling megawin188's obligations under Malaysian law and the requirements of gambling regulatory authorities.
• Service Communications: Sending important account notices, terms updates, and security information via SMS or email.

Megawin188 does not use your data for automated profiling that produces legal effects on you without human involvement. Any decision that significantly affects your account (such as a suspension) will be reviewed by a responsible human team.

4Legal Basis for Data Processing

Under the Malaysia Personal Data Protection Act 2010 (PDPA), megawin188 has a valid legal basis for each category of data processing we carry out:

• Contract Performance: Processing required to provide megawin188's services to you under the account agreement you entered into – including transaction processing, account management, and identity verification.
• Legitimate Interest: Processing to prevent fraud, maintain platform security, and improve megawin188 services – where our legitimate interests do not override your fundamental rights.
• Legal Obligations: Processing required to comply with Malaysian legal obligations, including financial record-keeping, anti-money laundering (AML) compliance, and regulatory authority directives.
• Consent: For optional processing such as marketing communications and in-depth behavioural analytics, we rely on your explicit consent, which you may withdraw at any time.

5Data Sharing with Third Parties

Megawin188 does not sell, rent, or disclose your personal data to third parties for their own marketing purposes. Full stop. However, in the course of operating our platform, we may share data with the following categories of third parties for legitimate reasons:

• Payment Service Providers: E-wallet providers (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow) and local Malaysian banks via FPX are required to receive the minimum transaction information necessary to process your deposits and withdrawals in Malaysian Ringgit (MYR).
• Game Providers: Companies such as Pragmatic Play, Evolution Gaming, Playtech, and other providers that supply slots, Live Casino, and other games on megawin188 may receive your game session ID, which contains no personally identifiable information.
• Technology Service Providers: Companies providing secure server infrastructure, cybersecurity systems, and aggregate analytics services – all bound by strict Data Protection Agreements (DPAs) with megawin188.
• Regulatory Bodies & Law Enforcement: megawin188 will disclose required data to Malaysian authorities when mandated by a court order, regulatory directive, or valid legal requirement.

All third parties involved in processing your data on megawin188's behalf are bound by confidentiality agreements and data protection obligations that meet at least the same standards we hold ourselves to.

6Data Security – How We Protect Your Information

Megawin188 takes the security of your personal data extremely seriously. We continually invest in security infrastructure to keep your data protected against cyber threats, unauthorised access, and data breaches. The key security measures we employ include:

• SSL 256-Bit Encryption: All communications between your browser or app and megawin188's servers are encrypted using TLS 1.3 with 256-bit SSL keys — the same security standard employed by major Malaysian banking institutions such as Maybank and CIMB.
• Data-at-Rest Encryption: Sensitive data stored in the megawin188 database — including payment information and KYC documents — is encrypted at rest using AES-256.
• Strict Access Controls: Access to members' personal data is restricted to megawin188 staff with a legitimate need based on their job responsibilities. All access is logged and monitored.
• 24/7 Threat Monitoring: Megawin188's security systems continuously monitor the platform to detect suspicious activity, intrusion attempts, and anomalies that may indicate a security incident.
• Penetration Testing: The megawin188 platform undergoes regular security audits by independent cybersecurity specialists to identify and address vulnerabilities before they can be exploited.
• Two-Factor Authentication (2FA): Megawin188 offers a 2FA option for an added layer of security on your account. We strongly encourage all members to enable this feature.

While megawin188 takes all reasonable steps to protect your data, no system is entirely impenetrable. In the event of a security incident involving your data, we are committed to notifying you within 72 hours of confirming the incident, in line with international best practices.

7Data Retention Period

Megawin188 does not retain your personal data for longer than necessary. The following are our retention policies by data category:

• Active Account Data: Retained for as long as your megawin188 account remains active.
• Data After Account Closure: Retained for 7 years after the account closure date – this is required to fulfil Malaysia's financial record-keeping and legal obligations, including audit requirements related to anti-money laundering (AML) compliance.
• Financial Transaction Records: Retained for 7 years in accordance with the requirements of the Malaysian Companies Act and applicable tax regulations.
• Security & Activity Logs: Retained for 12 months for the purposes of security investigations and dispute resolution.
• Customer Support Communications: Retained for 3 years for training, compliance, and reference purposes in the event of recurring disputes.
• KYC Documents: Retained for the duration of the active account period, plus 7 years after account closure.

Once the retention period expires, your data will be securely deleted from all megawin188 systems using non-recoverable deletion methods. Data that has been fully anonymised — where you can no longer be identified — may be retained for ongoing aggregate analytics purposes.

8Your Rights Under PDPA 2010

As a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by megawin188. All requests may be submitted to us through the channels listed in Section 13:

9Cookies & Tracking Technologies

The megawin188 website uses cookies – small text files stored on your device when you visit our platform. Cookies allow megawin188 to recognise your device, maintain your login session, and enhance your experience on the platform. The following are the types of cookies we use:

You can manage or delete megawin188 cookies through your web browser settings. Please note that disabling essential cookies may affect platform functionality, including your ability to log in to your megawin188 account. For guidance on managing cookies in major browsers (Chrome, Safari, Firefox), refer to the relevant browser's help documentation.

10Cross-Border Data Transfers

Megawin188 operates server infrastructure that may include locations outside Malaysia. This means your personal data may be transferred to or stored on servers located outside Malaysia. Where such transfers occur, megawin188 ensures adequate protection through:

• Ensuring that the recipient country or region maintains a level of data protection equivalent to or higher than Malaysia's.
• Implementing contractually binding data transfer agreements that require the receiving party to comply with megawin188's data protection standards.
• Data encryption in transit using the highest security protocols available at the time of transfer.

The Malaysian payment service providers used by megawin188 — including Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and FPX — all operate under Malaysia's regulatory framework, and payment transaction processing takes place within Malaysia in accordance with each provider's operating procedures.

11Child Protection

Megawin188 services are exclusively available to individuals aged 18 years of age and above. Megawin188 does not knowingly collect personal data from individuals under 18 years of age. We take active steps to ensure this, including:

• Requiring date of birth verification during the account registration process.
• Conducting age verification checks during the KYC process for new accounts.
• Monitoring account activity for patterns that may indicate use by underage individuals.

Parents or guardians who believe their child has registered on megawin188 or has provided us with their personal data without authorisation are urged to contact our support team immediately at support@megawin188.my for immediate action.

12Privacy Policy Amendments

Megawin188 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new Malaysian legal requirements, or relevant technological developments. The date of the latest update and version number are shown at the top of this document.

For significant changes that materially affect your privacy rights or how we use your data, megawin188 will provide additional notice via:

• A prominent notice on the megawin188 platform homepage for a period of at least 30 days.
• SMS to the mobile number registered on your account (for highly significant changes).

Continued use of the megawin188 platform after an updated Privacy Policy is published will be considered acceptance of the revised policy. It is your responsibility to check this page periodically. If you do not agree with any amendments, you have the right to close your account and request deletion of your data in accordance with the procedure set out in Section 8.

13How to Contact Us Regarding Privacy

For any enquiries, requests, or complaints relating to this Privacy Policy or how megawin188 handles your personal data, you may contact us through:

• Privacy Email: support@megawin188.my – use the subject line "Privacy Inquiry" or "PDPA Data Rights Request" for faster handling.
• Live Chat: Click the chat icon at the bottom-right corner of the megawin188 site – for general privacy inquiries, our support team can assist within 2 minutes, 24/7.
• Communication Language: All privacy-related communications are handled exclusively in English.

Megawin188 is committed to addressing all privacy enquiries and complaints within 14 business days from the date of receipt. For more complex requests, such as full data access or deletion requests, we may require up to 21 business days.

If you are dissatisfied with megawin188's response to your privacy complaint after going through our internal process, you have the right to refer the matter to the Department of Personal Data Protection (PDPD) Malaysia or the relevant authority under applicable Malaysian law.