Mega918 Privacy Policy – Personal Data Protection for Malaysian Members

Mega918 ("we", "our platform") is committed to protecting the privacy and security of the personal data of every individual who uses our services. This Privacy Policy is formulated in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practice standards in data management.

We believe you deserve to know exactly what we do with your information — not vague generalities, but a clear, straightforward, and honest explanation of every aspect of how mega918 handles your data. That is why this document is written in plain language, not confusing legal jargon.

This policy covers all information we collect through the mega918.bet website, mobile applications (where available), email communications, live chat conversations, and all other interactions between you and the mega918 platform.

Mega918 only collects data that is strictly necessary to provide you with a safe, fair, and quality service. We do not collect information that is unnecessary or irrelevant.

Data we not collect:

• Plaintext passwords — your password is stored as a one-way hash that no one can read, including mega918 staff.
• Full credit or debit card details — mega918 does not store complete card numbers. All payments are processed through PCI-DSS certified third-party payment gateways.
• Biometric data such as fingerprints or facial recognition.
• Medical or health information, unless you voluntarily disclose it when applying for a self-exclusion on health grounds.

Every piece of data we collect has a clear and legitimate purpose. mega918 does not use your data for any purpose not stated in this policy without first obtaining your consent.

• Account Operations: Creating, managing, and securing your mega918 account. This includes login verification, password recovery, and session management.
• Transaction Processing: Processing deposits via Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay and FPX online banking, as well as withdrawals to the same account.
• Security & Fraud Prevention: Detecting and preventing illegal activity, including money laundering, identity fraud, and platform abuse. mega918 is required to comply with the requirements of Malaysia's Anti-Money Laundering Act.
• Customer Support: Assists you in resolving technical issues, transaction enquiries, or game-related questions. Communication records are retained for quality control purposes.
• Product Improvement: Anonymised usage data is used to understand how Malaysian players use the mega918 platform and to make relevant improvements.
• Marketing Communications: Sending information about mega918 promotions, new bonuses and special offers — only if you have opted in to receive such communications. You may opt out at any time.
• Legal Compliance: Fulfilling legal obligations and complying with directives from legitimate regulatory authorities.

Mega918 does not sell your personal data. However, in the course of operating the platform, we may need to share certain data with trusted third parties in specific, limited situations.

• Payment Service Providers: Transaction information is shared with certified payment processors (Touch 'n Go, GrabPay, DuitNow, FPX providers) to process your deposits and withdrawals. They are bound by strict confidentiality agreements.
• Game Software Providers: Usernames and session data may be shared with software providers such as Evolution Gaming, Pragmatic Play or Playtech to enable you to play their games within the mega918 platform.
• Cloud Service Provider: Data is stored on secure cloud servers. Our cloud provider is bound by a data processing agreement that meets international standards.
• Law Enforcement Authorities: mega918 will disclose the required data if ordered to do so by a court or legitimate authority under Malaysian law or the relevant jurisdiction.
• Anti-Fraud Services: Limited technical data (IP address, device fingerprint) may be shared with third-party fraud detection systems to protect all mega918 members.

Mega918 invests heavily in security infrastructure to ensure your data is always protected. The following are the key security measures we have in place:

• 256-bit SSL Encryption: All data transmitted between your device and mega918's servers is encrypted using TLS 1.3 — the same standard used by Malaysia's leading banks.
• Strict Access Controls: Only mega918 staff who require access to specific data in order to perform their duties are permitted to access it. All access is logged and monitored.
• Two-Factor Authentication (2FA): mega918's internal systems require two-factor authentication for all administrative access to the member database.
• Regular Security Audits: mega918 undergoes periodic independent security audits by accredited cybersecurity firms to identify and address any vulnerabilities.
• 24/7 Monitoring: mega918's automated monitoring system detects unauthorised access attempts or suspicious activity and responds immediately.
• Incident Response Plan: mega918 has a clearly defined incident response procedure. In the event of a data breach affecting members, we will notify those impacted within 72 hours.

Mega918 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device by your web browser.

You can control or delete cookies through your browser settings at any time. However, disabling essential cookies may affect the functionality of the mega918 platform, including your ability to stay logged in.

Mega918 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required under Malaysian law.

• Active account data: Retained for as long as your mega918 account is active, plus a post-closure retention period of 5 years in accordance with Malaysian financial regulatory requirements.
• Financial transaction records: Stored for 7 years in accordance with the requirements of the Anti-Money Laundering Act and Malaysian financial regulations.
• Support communication logs: Stored for 2 years from the date of your last interaction.
• Technical log data: Automatically deleted after 90 days unless a security investigation is currently ongoing.
• Marketing records: Stored for as long as you remain an active member, or until you withdraw your marketing consent.

Mega918's primary servers are hosted in secure data centres. Any cross-border data transfers comply with internationally recognised data protection standards and are safeguarded by legally binding data protection agreements.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have certain rights regarding your personal data, all of which mega918 is committed to upholding.

Mega918 takes the protection of minors extremely seriously. Our platform is strictly for adults aged 18 and above.

• Mega918 does not accept registrations from individuals under the age of 18. Age verification is carried out during registration and upon the first withdrawal request.
• We do not knowingly collect, process, or store the personal data of minors.
• Should we discover that a minor's data has been collected inadvertently, we will promptly delete that data and close the account in question.
• Parents or guardians who suspect their minor child has registered a mega918 account should contact us immediately at support@mega918.bet for prompt action.

The mega918 platform may contain links to third-party websites or services in certain contexts. mega918's Privacy Policy does not apply to those external websites or services.

• Mega918 is not responsible for the privacy practices of other websites you visit, even if accessed via links from our platform.
• We encourage you to read the Privacy Policy of every website you visit before providing any personal information.
• Third-party game providers operating within the mega918 platform (such as Evolution Gaming, Pragmatic Play) have their own privacy policies governing data use when you play their games.

Mega918 may update this Privacy Policy from time to time to reflect changes in our services, applicable laws or industry best practices.

• Material amendments to the Privacy Policy will be communicated to members via email notification or a prominent notice on mega918.bet at least 14 days before taking effect.
• The "Updated" date at the top of this page will always reflect the current version in effect.
• Your continued use of the mega918 platform after any amendments take effect will be considered your acceptance of the revised policy.
• You may request a copy of any previous version of this Privacy Policy by contacting us via email.

If you have any questions, concerns, or requests regarding mega918's Privacy Policy or how we handle your personal data, please contact us through the following channels: