Mega38 Privacy Policy – Data Protection Malaysian Users

Introduction

Mega38 is a digital entertainment platform fully committed to protecting the privacy and security of every user's personal data. We understand that your trust is an invaluable asset, and we do not take this responsibility lightly.

This Privacy Policy is written in plain language so you truly understand what happens with your information — not just a lengthy document nobody reads. We believe transparency is the foundation of a good relationship between a platform and its users.

---

Data We Collect

Mega38 collects information from you in several different situations. Below are the types of data we collect and their respective purposes:

Information You Provide Directly

• Registration data: Full name, date of birth, mobile number, email address, and password when registering your mega38 account.
• Identity verification (KYC) data: Copy of identity card, passport, or valid identity document; bank statement or utility bill for address verification.
• Financial data: Bank account number, account holder name, and information required to process deposits and withdrawals.
• Communication data: Messages and inquiries you send to the mega38 support team.

Information Collected Automatically

• Activity log data: Login date and time, games played, total wagering amount, wins, and session results.
• Device data: IP address, browser type, operating system, device type, and language settings.
• Cookie and session data: Information stored in cookies to maintain your login session and user preferences.
• Approximate location data: Location is derived from IP address for geographic zone verification purposes only — not precise GPS location.

---

How We Use Your Data

Mega38 uses collected data solely for the following purposes:

• Account management: Create, verify, and manage your account; process login requests and two-factor authentication.
• Transaction processing: Process deposits in Malaysian Ringgit (MYR), withdraw winnings to your bank account or e-wallet, and maintain transaction records.
• Platform security: Detect and prevent fraud, unauthorized access, money laundering, and system abuse.
• Legal compliance: Meet KYC (Know Your Customer) and AML (Anti-Money Laundering) requirements as mandated by Malaysian law.
• Customer Support: Address inquiries, resolve complaints, and provide technical support.
• Platform improvements: Analyze usage patterns in aggregate (not individually) to improve platform performance and user experience.
• Service communications: Send important notifications about your account, security, or changes to terms — not unauthorized advertising.

---

Data Storage & Security

Mega38 implements multiple layers of technical and organisational security to protect your personal data from unauthorised access, disclosure, alteration, or destruction.

Technical Security Measures

• Encryption in transit: All communications between your device and mega38 servers are protected by 256-bit SSL/TLS encryption — the padlock icon in your browser confirms this.
• Encryption at rest: Sensitive data such as bank account numbers and KYC information is stored in encrypted form within our database.
• Layered access controls: Only mega38 staff with a legitimate business need may access user data — and every access is automatically logged.
• Continuous security monitoring: Our systems are monitored 24 hours a day to detect any suspicious activity or intrusion attempts.
• Regular security audits: mega38 conducts periodic security assessments by independent third parties to ensure the highest standards are maintained.

User data is stored on servers located in data centres that comply with industry-standard physical and digital security requirements, with redundant backup systems to ensure data resilience.

---

Data Sharing with Third Parties

Mega38 does not sell, rent, or disclose your personal data to third parties except in the situations stated below:

• Payment service providers: Minimum required financial data is shared with providers such as DuitNow, FPX, Touch 'n Go, GrabPay, and Boost solely to process your transactions.
• Game providers: Required game session details are shared with registered game providers for the purposes of game operation and wins verification.
• Legal requirements: mega38 will disclose required data to Malaysian authorities when mandated by law, court order, or official investigation.
• Fraud prevention: Minimum information may be shared with fraud prevention agencies to protect the security of all platform users.

All third-party partners who receive mega38 user data are bound by strict data protection agreements and are audited regularly to ensure compliance.

---

Cookies & Tracking Technology

Mega38 uses cookies and similar tracking technologies to ensure the platform functions properly and to deliver a better experience for users.

Types of Cookies Used

• Essential cookies: Required for core platform functions such as maintaining your login session. Cannot be disabled.
• Preference cookies: Save your preferred language and display settings so you don't need to reconfigure them each visit.
• Analytics cookies: Helps us understand how users interact with the platform as a whole — data is collected in aggregate and cannot be individually identified.
• Security cookies: Helps detect suspicious activity and protect your account from unauthorized access.

You can manage cookie settings through your browser preferences. However, disabling essential cookies may affect the functionality of the mega38 platform.

---

Your Rights Over Personal Data

As a mega38 user and Malaysian citizen, you have the following rights regarding your personal data under the Personal Data Protection Act 2010 (PDPA):

---

Children's Data

Mega38 is a platform intended only for individuals aged 18 years and above. We do not knowingly collect any personal data from children or individuals under the age of 18.

If we discover that data from a person under the age of 18 has been collected, the account in question will be terminated immediately and all related data will be deleted as soon as possible. Parents or guardians who become aware that their minor child has registered at mega38 are encouraged to contact us promptly.

---

Changes to This Privacy Policy

Mega38 reserves the right to amend this Privacy Policy from time to time to reflect changes in our privacy practices, legal requirements, or new platform features. The latest update date is always displayed at the top of this document.

For significant changes — particularly those that may materially affect your privacy rights — we will send a notification via your registered email or an in-platform notice before the changes take effect. Continued use of the platform after the amendment date will be considered acceptance of the updated terms.

---

Contact Us About Privacy

Mega38 has appointed a Data Protection Officer responsible for ensuring the platform's compliance with Malaysia's PDPA and this Privacy Policy.

If you have any questions, concerns, or complaints regarding how we handle your personal data, you may contact us via:

• Privacy email: [email protected]
• General Support: [email protected]
• Response time: We aim to respond to all privacy enquiries within 3 working days.

You may also submit enquiries via the live support system available within the mega38 platform — select the "Privacy & Data" category when submitting your enquiry.