Privacy Policy

1Introduction

This Privacy Policy ("Policy") describes how mega888fd ("Company", "Platformwe", "us", "our") — the operator of the online gaming and sports betting platform accessible athttps://mega888fd.cam — collects, uses, stores, shares, and protects the personal data of individuals who register for and use the mega888fd Services ("Users", "you").

mega888fd takes your privacy seriously. We process personal data only to the extent necessary to deliver our Services safely, comply with applicable regulatory and licensing requirements, and continuously improve the user experience for our community of Malaysian players. We do not process your data for purposes beyond those described in this Policy without your prior consent.

This Policy forms part of the overall legal framework governing your use of mega888fd, alongside our Terms & Conditions and Responsible Gambling Policy.

2Definitions

The following definitions apply throughout this Privacy Policy:

• "Personal Data" means any information relating to an identified or identifiable natural person ("Data Subject"), including but not limited to a name, identification number, location data, online identifier, or one or more factors specific to the physical, economic, or social identity of that natural person;
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure, or destruction;
• "Data Controller" means mega888fd, as the entity that determines the purposes and means of processing Personal Data;
• "Data Processor" means any third party that processes Personal Data on behalf of mega888fd pursuant to a written data processing agreement;
• "KYC Data" means identity verification documentation submitted by a User in connection with the Know Your Customer (KYC) process, including government-issued identity documents and biometric verification materials;
• "Cookies" means small data files placed on a User's device by the mega888fd platform for session management, analytics, and personalisation purposes;
• "Services" has the meaning given to it in the mega888fd Terms & Conditions.

3Personal Data We Collect

mega888fd collects the following categories of Personal Data in connection with the operation of the platform and delivery of the Services:

When you create an account on mega888fd, we collect: your full legal name (as it appears on your MyKad or passport), username, date of birth, email address, and Malaysian mobile phone number. This data is required to establish and manage your account and to verify your eligibility to use the Services.

Prior to processing any withdrawal request, we collect identity verification documents including: a copy of your Malaysian MyKad or passport (front and back), and where required, a live selfie for facial matching purposes. This data is used exclusively for age and identity verification in compliance with our licensing obligations and anti-money-laundering (AML) requirements.

We collect information necessary to process deposits and withdrawals in Malaysian Ringgit (MYR), including: your payment method identifier (e.g., bank account number, e-wallet registered phone number), transaction amounts, timestamps, and transaction reference numbers. We do not store full bank account credentials or card numbers on our systems — payment processing is handled by certified third-party payment processors operating under their own data security standards.

We record data about your activity on the platform including: games played, bet amounts, outcomes, session durations, bonus claims, and wagering history. This data is used for account management, dispute resolution, responsible gambling monitoring, and regulatory compliance purposes.

We automatically collect technical data when you access the platform, including: IP address, device type, browser type and version, operating system, screen resolution, referal URL, and session timestamps. This data is used for security monitoring, fraud detection, and platform performance optimisation.

We retain records of communications between you and the mega888fd support team, including live chat transcripts, WhatsApp message logs (where applicable), and email correspondence. These records are maintained for quality assurance, dispute resolution, and compliance purposes.

4How We Collect Your Data

mega888fd collects Personal Data through the following methods:

5Purposes of Data Processing

mega888fd processes your Personal Data for the following specific purposes:

• Account Management: To create, maintain, and administer your mega888fd account, including managing your balance denominated in MYR, processing login authentication, and maintaining your account history;
• Identity & Age Verification: To verify that you meet the 21+ age requirement and that your identity matches the information you have provided during registration and KYC, in compliance with our licensing obligations;
• Payment Processing: To process deposits and withdrawals via FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, and cryptocurrency channels as selected by you;
• AML & Fraud Prevention: To monitor transactions for signs of money laundering, terrorist financing, bonus abuse, and fraudulent activity, in compliance with applicable AML obligations;
• Regulatory Compliance: To fulfil obligations under our international gaming licence, including maintaining transaction records, player activity logs, and KYC documentation for the required retention periods;
• Responsible Gambling: To monitor gambling behaviour for indicators of problem gambling, enforce self-exclusion orders and deposit limits, and provide timely intervention where required;
• Personalisation & Promotions: To deliver personalised bonus offers, rewards, and communications relevant to your activity on the platform, subject to your marketing preferences;
• Customer Support: To respond to your enquiries, process complaints, and resolve disputes through our 24/7 Live Chat, WhatsApp, and email channels;
• Platform Security & Integrity: To detect and prevent unauthorised access, multi-accounting, collusion, and other forms of platform abuse;
• Analytics & Improvement: To analyse aggregated usage patterns and improve the performance, design, and features of the mega888fd platform.

6Legal Basis for Processing

mega888fd processes your Personal Data on the following legal bases:

• Contractual Necessity: Processing required to fulfil our obligations under the Terms & Conditions you accepted upon registration, including account management, payment processing, and game delivery;
• Legal Obligation: Processing required to comply with our international gaming licence conditions, AML regulations, KYC verification requirements, and applicable data protection laws;
• Legitimate Interests: Processing undertaken for the legitimate purposes of fraud prevention, platform security, business analytics, and responsible gambling monitoring, where those interests do not override your fundamental rights;
• Consent: Processing for marketing communications and non-essential cookies, where your prior consent has been obtained. You may withdraw this consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

7Data Sharing & Disclosure

mega888fd does not sell, rent, or trade your Personal Data to any third party for commercial purposes. We share Personal Data only in the following strictly limited circumstances:

We share transaction-relevant data with licensed payment processors who facilitate your deposits and withdrawals, including the operators of DuitNow, FPX, and partner e-wallet platforms (Touch 'n Go eWallet, Boost, GrabPay). These providers process payment data under their own privacy policies and security standards and are contractually bound to process data only for the purposes of completing your transactions.

We engage certified third-party KYC service providers to verify the authenticity of identity documents and conduct facial verification. These providers process your KYC Data under strict confidentiality obligations and may not use it for any purpose other than identity verification on our behalf.

We may disclose Personal Data to government authorities, regulatory bodies, or law enforcement agencies where we are legally required to do so, including in response to a valid court order, regulatory investigation, or AML reporting obligation. Such disclosures are made only to the extent required by applicable law.

We may share limited data with fraud prevention networks and AML screening databases for the purpose of detecting and preventing fraudulent activity and financial crime. This processing occurs on the basis of our legitimate interests and applicable legal obligations.

In the event of a merger, acquisition, asset sale, or restructuring involving mega888fd, Personal Data held by the Company may be transferred to the relevant successor entity, subject to that entity maintaining privacy protections equivalent to those described in this Policy.

8Data Retention

mega888fd retains Personal Data for as long as necessary to fulfil the purposes described in this Policy, comply with applicable legal and regulatory obligations, and resolve any disputes that may arise. The following indicative retention periods apply:

Upon expiry of the applicable retention period, Personal Data will be securely deleted or anonymised in manner that prevents re-identification. Where data cannot be immediately deleted due to ongoing legal proceedings, regulatory investigations, or dispute resolution processes, it will be retained until those processes are concluded.

9Data Security

mega888fd implements a comprehensive suite of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL Encryption: All data transmitted between your device and the mega888fd platform is encrypted using TLS/SSL protocols, preventing interception in transit;
• Data Encryption at Rest: Sensitive Personal Data stored on our servers — including password hashes, KYC documents, and payment identifiers — is encrypted at rest using industry-standard encryption algorithms;
• Access Controls: Access to Personal Data within mega888fd is restricted to authorised personnel who require it for the performance of their specific job functions. Access rights are reviewed periodically and revoked upon role change or termination of employment;
• Two-Factor Authentication: Internal systems containing Personal Data are protected by multi-factor authentication requirements for all staff access;
• Intrusion Detection: Our platform is monitored continuously by automated intrusion detection and prevention systems. Suspicious activity triggers immediate alerts to our security team;
• Vendor Security Standards: All third-party processors engaged by mega888fd are required to demonstrate and maintain security standards comensurate with the sensitivity of the data they handle.

10Cookies & Tracking Technologies

mega888fd uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small text files stored on your device when you visit the platform. The following categories of cookies are used:

• Essential / Session Cookies: Strictly necessary for the operation of the platform, including maintaining your login session, storing your account preferences, and enabling secure payment flows. These cookies cannot be disabled without impairing platform functionality;
• Analytics Cookies: Used to collect aggregate information about how Users navigate the platform — including pages visited, session duration, and feature usage — to help us identify performance bottlenecks and improve the user experience. Analytics data is processed in aggregated, non-personally-identifiable form;
• Security Cookies: Used by our fraud detection systems to identify suspicious device behaviour and detect automated bot activity. These cookies process limited technical fingerprint data and do not track personal browsing behaviour;
• Preference Cookies: Used to remember your language settings, display preferences, and notification choices so that you do not need to reconfigure them on each visit.

You may manage cookie preferences through your browser settings. Most browsers allow you to view, delete, or block cookies from specific websites. Please note that disabling essential cookies will impair your ability to use core platform features, including logging in and placing bets.

11Your Rights as a Data Subject

As a registered User of mega888fd, you hold the following rights in relation to your Personal Data. To exercise any of these rights, please submit a written request to our support team via email at [email protected] or via Live Chat, including your registered account username and sufficient detail to identify and process your request.

• Right of Access: You have the right to request a copy of the Personal Data we hold about you, including the categories of data collected, the purposes for which it is processed, and any third parties with whom it has been shared;
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete Personal Data we hold about you. Some data corrections may require re-submission of identity verification documents;
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations. Data that must be retained for regulatory compliance (e.g., KYC documents and transaction records) cannot be deleted before the applicable retention period expires;
• Right to Restrict Processing: You may request that we restrict the processing of your Personal Data in certain circumstances, such as where you contest the accuracy of the data or object to a specific processing activity;
• Right to Data Portability: You may request that we provide your Personal Data in a structured, machine-readable format for transfer to another service provider, where technically feasible;
• Right to Object: You have the right to object to processing carried out on the basis of our legitimate interests, including direct marketing. Upon receipt of a valid objection, we will cease the relevant processing unless we can demonstrate compelling legitimate grounds that override your interests;
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing undertaken prior to withdrawal.

We will acknowledge your request within 3 business days and aim to fulfil it within 30 calendar days. Where a request is complex or involves multiple data categories, we may extend this period by up to a further 30 days, in which case we will notify you of the extension and the reason for it.

12Marketing Communications

With your prior consent, mega888fd may send you promotional communications about bonuses, new games, special events, and other platform updates via email, SMS, WhatsApp, and in-platform notification. These communications are personalised based on your activity and preferences on the platform.

You may opt out of marketing communications at any time by:

• Clicking the unsubscribe link included in any marketing email;
• Updating your notification preferences in your account settings;
• Contacting our support team via Live Chat or email and requesting removal from our marketing list.

Opting out of marketing communications will not affect your receipt of transactional communications (e.g., deposit confirmations, withdrawal receipts, KYC request notifications, security alerts) which are necessary for the operation of your account and cannot be disabled.

13Children & Minors

The mega888fd platform is strictly for persons aged 21 years and above. We do not knowingly collect Personal Data from individuals under the age of 21. If we become aware that Personal Data has been collected from a person under 21, we will immediately suspend the relevant account, delete the data, and return any associated funds.

If you are a parent or guardian and believe that a minor in your care has created an account or submitted Personal Data to mega888fd, please contact us immediately at [email protected]. We will investigate promptly and take appropriate action.

We encourage parents and guardians in Malaysia to use device-level parental control software and internet filtering tools to prevent minors from accessing online gambling platforms.

14International Data Transfers

mega888fd operates infrastructure that may involve the transfer of Personal Data to servers or processors located outside Malaysia. Where such transfers occur, we ensure that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Policy, including through the use of contractual data protection clauses with all international data processors.

Specific categories of data that may be processed outside Malaysia include KYC verification data (processed by our certified identity verification partners) and gaming activity logs (processed by our platform infrastructure providers). In all cases, these transfers occur under contractual obligations that require the recipients to maintain security and privacy standards consistent with this Policy.

15Updates to This Privacy Policy

mega888fd may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Where changes are material, we will notify registered Users via email or an in-platform notification at least 7 days before the updated Policy takes effect.

The date of the most recent update is displayed at the top of this Policy. We encourage you to review this Policy periodically to stay informed about how we protect your data. Your continued use of the mega888fd platform following any update constitutes your acceptance of the revised Policy.

16Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data by mega888fd, please contact our Data Protection team through the following channels:

• Email: [email protected] — include "Privacy Request" in the subject line for fastest routing;
• Live Chat: Available 24/7 in English, Bahasa Melayu, and Chinese through the mega888fd platform;
• WhatsApp Support: Available 24/7 for registered users with an active account.

We aim to acknowledge all privacy-related correspondence within 3 business days and to resolve substantive requests within 30 calendar days. For complex requests involving multiple data categories or significant volume of Personal Data, we may require up to 60 calendar days, in which case we will notify you of the extended timeline.