meg888 Privacy Policy

1. Data Controller

For the purposes of applicable data protection legislation, the data controller responsible for your personal information is the operator of the meg888 Platform accessible at meg888.win. References to "meg888", "we", "us", or "our" throughout this Policy refer to that operator entity.

If you have questions about how meg888 handles your personal data, or wish to exercise any of your data rights described in this Policy, you may contact our support team via live chat on the Platform or in writing to [email protected].

2. Personal Data We Collect

meg888 collects personal data from you in the following ways:

2.1 Data You Provide Directly

• Registration data: Full legal name, date of birth, Malaysian mobile number, email address (if provided), and preferred username.
• Identity verification (KYC) data: Government-issued identification document (e.g., MyKad, passport), proof of residential address, and proof of payment method ownership — required before withdrawal processing.
• Payment data: Bank account details, e-wallet identifiers (Touch n Go, Boost, GrabPay), and transaction records. Full payment card numbers are never stored by meg888 — payment processing is handled by third-party payment service providers.
• Support communications: Records of your interactions with meg888's customer support team, including chat transcripts and submitted queries.

2.2 Data Collected Automatically

• Device and technical data: IP address, browser type and version, operating system, device identifiers, and screen resolution.
• Usage data: Pages visited, games played, bets placed, session duration, and navigation paths within the Platform.
• Cookie data: As described in Section 6 of this Policy.
• Log data: Server access logs recording your interactions with the Platform's infrastructure, retained for security and fraud detection purposes.

3. How We Use Your Personal Data

meg888 uses the personal data we collect for the following purposes:

• Account creation and management: To register your Account, verify your identity, and manage your ongoing relationship with the Platform.
• Transaction processing: To process deposits, withdrawals, and bonus credits, and to maintain an accurate record of your financial activity on the Platform.
• Legal and regulatory compliance: To comply with applicable anti-money laundering (AML) obligations, Know Your Customer (KYC) requirements, and any other legal or regulatory requirements applicable to meg888's operations.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, unauthorised account access, bonus abuse, and other prohibited conduct.
• Responsible gaming: To monitor account behaviour for signs of problem gambling, to enforce self-exclusion requests, and to apply deposit and session limits where applicable.
• Platform improvement: To analyse usage patterns and player behaviour in aggregate (not on an individually-targeted basis) to improve Platform functionality, game selection, and user experience.
• Customer support: To respond to your queries, resolve disputes, and provide account assistance.
• Promotional communications: To notify you of bonuses, promotions, and platform updates, where you have not opted out of such communications. You may unsubscribe from promotional messages at any time by contacting support.

4. Legal Basis for Processing

meg888 processes your personal data on the following legal bases:

• Contract performance: Processing necessary to provide the services described in the meg888 Terms and Conditions, including account management, transaction processing, and game delivery.
• Legal obligation: Processing required to comply with AML/KYC regulations, tax reporting obligations, and other applicable legal requirements.
• Legitimate interests: Processing for fraud detection, platform security, responsible gaming monitoring, and service improvement — where our legitimate interests do not override your fundamental rights and freedoms.
• Consent: Processing for optional promotional communications, where your consent has been obtained and may be withdrawn at any time.

5. Data Sharing & Disclosure

meg888 does not sell, rent, or trade your personal data to third-party marketers. We may share your personal data with the following categories of recipients, strictly for the purposes described in this Policy:

• Payment service providers: To process deposits and withdrawals. These providers operate under their own privacy policies and contractual data processing obligations.
• Game software providers: Limited technical data may be shared with game providers to facilitate game delivery, jackpot processing, and dispute resolution.
• Identity verification services: Third-party KYC and AML screening services used to verify your identity and comply with regulatory requirements.
• Legal and regulatory authorities: Where required by applicable law, court order, or regulatory direction, meg888 may disclose personal data to law enforcement, gaming regulators, or other competent authorities.
• Group companies and service providers: Other entities within the meg888 corporate group, or third-party service providers engaged to deliver Platform-related services (e.g., hosting, customer support tools, analytics), who are bound by contractual data protection obligations.

6. Cookies & Tracking Technologies

meg888 uses cookies and similar technologies on the Platform for the following purposes:

• Essential cookies: Required for the Platform to function correctly. These include session management cookies that maintain your logged-in state and security cookies that help protect against cross-site request forgery (CSRF). Essential cookies cannot be disabled without breaking core Platform functionality.
• Analytics cookies: Used to collect aggregated, anonymised usage data that helps meg888 understand how players navigate the Platform and where improvements can be made. This data does not identify individual users.
• Preference cookies: Used to remember your language preference, display settings, and other personalisation options you have configured on the Platform.

You can control cookie settings through your browser settings. Disabling non-essential cookies will not prevent you from accessing meg888, but may affect certain personalisation features. For detailed information on browser-level cookie management, refer to your browser's help documentation.

7. Data Retention

7.1 Active Accounts. Personal data associated with an active meg888 Account is retained for as long as the Account remains open and active, plus any additional period required by law or regulation.

7.2 Closed Accounts. Upon Account closure, meg888 retains personal data for a minimum of five (5) years following closure, in compliance with AML record-keeping obligations and to enable resolution of any disputes arising from your use of the Platform.

7.3 Transaction Records. Financial transaction records are retained for the period required under applicable financial regulation and tax law, which may extend beyond the general account retention period.

7.4 Data Deletion. Where no legal obligation requires continued retention, personal data is securely deleted or anonymised upon the expiry of the applicable retention period. You may request early deletion subject to the conditions described in Section 9.

8. Data Security

meg888 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform.
• Encryption of sensitive data at rest within our database infrastructure.
• Access controls ensuring that personal data is accessible only to personnel with a legitimate operational need.
• Regular security assessments and penetration testing of Platform infrastructure.
• Multi-factor authentication requirements for administrative access to systems holding personal data.

No method of electronic transmission or storage is 100% secure. While meg888 uses commercially reasonable measures to protect your data, we cannot guarantee absolute security. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, meg888 will notify affected users in accordance with applicable law.

9. Your Data Rights

Subject to applicable law, you have the following rights with respect to your personal data held by meg888:

• Right of access: You may request a copy of the personal data meg888 holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data. Basic account data (mobile number, email) can be updated via your Account settings directly.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent (for consent-based processing). This right is subject to meg888's legal retention obligations — data required for AML/KYC compliance cannot be deleted on request during the mandatory retention period.
• Right to restriction: You may request that meg888 restrict processing of your data while a rectification or objection request is being assessed.
• Right to object: You may object to processing based on legitimate interests, including direct marketing. Objections to direct marketing will be honoured immediately.
• Right to data portability: Where processing is based on consent or contract and carried out by automated means, you may request a machine-readable copy of the data you have provided to meg888.

To exercise any of these rights, contact meg888 support via live chat or at [email protected]. Requests will be assessed and responded to within 30 days. meg888 may request identity verification before processing a data rights request.

10. Children and Minors

The meg888 Platform is strictly for adults aged 21 years or older. meg888 does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under 21, the associated Account will be permanently closed and all personal data will be deleted as soon as practicable, subject to any legal retention obligations. If you believe a minor has created an Account on meg888, please notify us immediately via support.

11. Third-Party Links

The meg888 Platform may contain references to third-party content for contextual purposes. meg888 is not responsible for the privacy practices or content of any third-party platforms. This Privacy Policy applies solely to the meg888 Platform at meg888.win. We encourage you to review the privacy policies of any third-party services you interact with independently of meg888.

12. Changes to This Privacy Policy

meg888 reserves the right to update this Privacy Policy at any time. When changes are made, the revised Policy will be published on this page with an updated "Last Updated" date. Where changes are material, meg888 will endeavour to provide notice to registered users via the Platform or to your registered mobile number or email address. Your continued use of the Platform following publication of a revised Policy constitutes your acceptance of the changes. We encourage you to review this page periodically.

13. Contact Us

For any questions, concerns, or data rights requests relating to this Privacy Policy or meg888's data practices, please contact us:

• Live Chat: Available 24/7 on the meg888 Platform — the fastest channel for account-related matters.
• Email: [email protected] — for written correspondence. Please allow up to 3 business days for email responses.

Please include your registered mobile number (last 4 digits) and a clear description of your request. Identity verification may be required before meg888 can process data rights requests.