Privacy Policy 888 Mega –
Data Protection & Member Privacy

As a trusted online gaming platform, 888 mega collects your personal information through three primary methods: information you provide directly during registration, information generated through your use of the platform, and information received from trusted third parties.

Information you provide directly:

• Full name, date of birth, and gender
• Active phone number and email address
• Current residential address
• Identity card or passport number (for the KYC process)
• Bank account or digital wallet details for deposits and withdrawals
• Any information you share when contacting our support team

Information automatically generated when you use the platform:

• IP address and device information (operating system, phone model, browser version)
• Login session data including date, time, and duration of use
• Deposit and withdrawal transaction history, and betting history
• Gaming preferences and platform usage patterns
• General geolocation data based on IP address

Collected data is used responsibly for the following purposes only. 888 Mega never uses your data for purposes not stated in this policy without first obtaining your consent.

For promotional communications, you may withdraw your consent at any time through your account settings or by contacting our support team. Withdrawing consent will not affect any data processing that occurred prior to your request.

888 Mega processes your personal data on lawful bases recognised under applicable data protection legislation. Our data processing falls under one of the following bases:

• Contract Performance: Data processing required to deliver the services you request — including account registration, transaction processing, and bonus management.
• Legitimate Interests: We process certain data based on our legitimate interests in operating a secure platform, detecting fraud, and improving service quality.
• Legal Compliance: Some processing is mandatory to comply with legal requirements, including Anti-Money Laundering (AML) and KYC procedures.
• Consent: For marketing communications and optional cookie usage, we only process your data after obtaining your clear and freely given consent.

888 Mega understands that your personal data is a trust we hold with full responsibility. We do not sell, rent, or trade your personal data to third parties. However, there are limited situations where data sharing is necessary and lawful:

• Payment Providers: Transaction information is shared with payment service providers such as FPX, Touch 'n Go eWallet, and GrabPay to process your deposits and withdrawals. These providers are bound by strict confidentiality agreements.
• Game Providers: Usernames and session information may be shared with third-party game providers (such as Pragmatic Play and Evolution Gaming) to enable access to their games on our platform.
• KYC Services: Identity verification documents are shared with licensed KYC service providers for verification purposes only.
• Legal Authorities: We may need to disclose information to competent authorities when required by law, court order, or a valid criminal investigation.
• Technical Infrastructure: The cloud and hosting infrastructure providers we use comply with international security standards and are bound by comprehensive data processing agreements.

The security of your personal data is 888 mega's highest priority. We continually invest in the latest security infrastructure to ensure your information is always protected against ever-evolving cyber threats.

• Encryption in Transit: All communications between your device and the 888 mega platform are secured with TLS 1.3 protocol and 256-bit SSL encryption.
• Encryption at Rest: Sensitive data such as banking information and KYC documents are encrypted using AES-256 before being stored in our database.
• Strict Access Controls: Access to member personal data is restricted to staff who require it to perform their duties. All access is logged and monitored.
• Regular Security Testing: Our platform undergoes regular penetration testing and vulnerability assessments conducted by independent security experts.
• 24/7 Monitoring: A real-time threat monitoring system operates around the clock to detect and respond to any suspicious activity.
• Two-Factor Authentication: We encourage all members to enable two-factor authentication (2FA) for an additional layer of account protection.

888 Mega uses cookies and similar tracking technologies to enhance the user experience, analyse platform performance, and ensure the security of your session. There are several categories of cookies we use:

• Essential Cookies (Required): Required for core platform functions such as maintaining your login session, saving language preferences, and enabling security features. These cookies cannot be disabled.
• Performance Cookies: Collects information about how you use the platform — pages visited, time spent, and any errors encountered — to help us improve our services.
• Functional Cookies: Allows the platform to remember your preferences such as display settings, gaming preferences, and interface language.
• Analytics Cookies: Helps us understand aggregated usage patterns to make better product development decisions. This data cannot be used to identify any individual.

You can manage your cookie preferences through your browser settings at any time. However, disabling essential cookies may affect your ability to use certain platform features. Session cookies are deleted automatically when you close your browser, while persistent cookies have a set expiry period.

888 Mega adheres to the principle of data minimisation — we only retain your data for as long as is genuinely necessary for the stated purpose or to comply with legal requirements.

• Active Account Data: Retained for the duration your account remains active and in use.
• Transaction Records: Retained for a minimum of 7 years after a transaction occurs, in accordance with financial and anti-money laundering legal requirements.
• KYC Documents: Retained for 5 years after the business relationship ends, or as required by applicable law.
• Security Logs: Retained for 12 months to facilitate security incident investigations when necessary.
• Closed Account Data: After account closure, personal data that is no longer required will be deleted or anonymised within 90 days, except for data subject to legal retention requirements.

888 mega's operations involve the use of technology infrastructure that may be located outside Malaysia. When your personal data needs to be transferred overseas, we ensure adequate protections are always in place.

• All cross-border data transfers are carried out with appropriate protection safeguards, including the use of standard contractual clauses or recognised transfer mechanisms.
• Overseas service providers that handle your data are bound by data processing agreements that set security standards equivalent to or higher than those we apply locally.
• We partner with infrastructure providers that hold internationally recognised security certifications such as ISO 27001 and SOC 2.

By using the 888 Mega platform, you acknowledge that your data may be processed in countries with data protection laws that differ from Malaysia. We ensure that all such transfers comply with high data protection standards regardless of the processing location.

As an 888 mega member, you have protected privacy rights. We fully respect and facilitate the exercise of these rights:

• Access Rights: You have the right to request a copy of the personal data we hold about you. We will provide it in a readily readable format within 14 business days.
• Right to Rectification: If your data is inaccurate or incomplete, you have the right to request immediate correction. Basic profile information can be updated directly through your account settings.
• Right to Erasure: Under certain circumstances, you have the right to request the deletion of your personal data. This right is subject to legal retention requirements that we are unable to override.
• Right to Restrict Processing: You may request that we restrict how we process your data while any complaint or dispute is under investigation.
• Data Portability Rights: You have the right to receive the data you have provided to us in a structured, machine-readable format.
• Right to Object: You may object to data processing based on our legitimate interests, including the use of your data for direct marketing purposes.

The 888 mega platform is intended for individuals aged 18 years and above only. We do not knowingly collect or process personal data from individuals under the age of 18.

During the KYC process, we verify each member's age through valid identity document checks. If we discover that data from an underage individual was collected without our knowledge, it will be deleted immediately and the account closed.

The 888 mega platform may contain links to third-party websites or services, including our game providers and technology partners. This Privacy Policy applies solely to the 888 mega platform.

888 Mega is not responsible for the privacy practices of third-party websites that you may access through our platform. We encourage you to read the privacy policy of each website you visit separately, especially before providing any personal information to them.

888 Mega reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or added platform features. When significant changes are made:

• The "Updated" date at the top of this document will be revised to reflect the date of the most recent changes.
• You will be notified via in-platform notification or your registered email for changes that materially affect how your data is used.
• Continued use of the 888 mega platform after a change notice is considered your acceptance of the updated policy.

We encourage you to review this Privacy Policy page periodically to stay informed about how we protect your information.

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, the 888 mega privacy team is here to help.

• Privacy Email: [email protected]
• Live Chat: Available 24 hours a day, 7 days a week via the 888 mega platform
• Response Time: We aim to respond to all privacy enquiries within 3 business days

When contacting us regarding a privacy request, please include your registered username and a brief description of your request so we can process your case more quickly and accurately.