88mega Privacy Policy – How We Protect Malaysian Players' Personal Data

88mega operates as an online entertainment platform offering Sports Betting, Live Casino, slots and poker. In providing these services, we need to collect and process certain personal data from our users. We do so responsibly and within the boundaries permitted under Malaysian law.

As a company operating for the Malaysian market, 88mega fully complies with the provisions of Personal Data Protection Act 2010 (PDPA) which governs how personal data of individuals in Malaysia is collected, held, used and disclosed by organisations in the commercial sector.

We also adhere to the seven Data Protection Principles set out in the PDPA, namely the General Principle, Notice and Choice, Disclosure, Security, Retention, Data Integrity, and Access.

88mega collects only the data genuinely necessary to manage your account and deliver the services you request. We do not collect excessive or irrelevant data.

For financial information, we only retain the details necessary to process your deposit and withdrawal transactions through the Malaysian payment methods you use – such as Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow or FPX. We do not store your full credit or debit card number – any card processing is handled through a third-party PCI-DSS certified payment gateway.

Your personal data is collected through several different channels as you interact with the platform 88mega:

• Registration form: Information you enter directly when opening a new account at 88mega.
• Financial transactions: Data automatically generated when you make a deposit or withdrawal via TNG, GrabPay, DuitNow, or FPX.
• In-platform activity: Betting history, game logs and activity records captured while you use 88mega's services.
• Cookies and tracking technologies: Technical data collected automatically when you visit the 88mega website or use the app.
• Support communications: Information you provide when contacting the 88mega support team via live chat, email or WhatsApp.
• KYC process: Identity verification documents you submit when required for the account verification process.

88mega processes your personal data only for the purposes stated below. We will not use your data for any other purpose without first notifying you and obtaining your consent where required.

• Account management: Registering, verifying and managing your player account at 88mega.
• Payment processing: Processing deposits via TNG, GrabPay, DuitNow, FPX and managing your withdrawal of winnings.
• Security and verification: To verify your identity and prevent fraud, money laundering, and unauthorized access.
• Legal compliance: Fulfilling applicable legal and regulatory obligations, including anti-money laundering (AML) requirements.
• Customer support: Providing assistance and resolving any issues you encounter while using the platform.
• Service improvements: Analysing usage patterns to improve the player experience and 88mega's products.
• Responsible gaming: Monitoring betting patterns to identify players who may need support.
• Marketing communications: Sending relevant promotional and bonus notifications – you may opt out at any time.

88mega does not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. This is our absolute commitment.

However, in the course of operating the platform, we may need to share your data with the following limited categories of third parties, and only to the extent necessary:

• Payment providers: Touch 'n Go, GrabPay, Boost and FPX/DuitNow gateways to securely process your financial transactions.
• Technology service providers: Companies that help us operate the platform's technical infrastructure, bound by strict confidentiality agreements.
• Relevant authorities: Law enforcement agencies or regulatory bodies when we are required by Malaysian law to do so.
• Identity verification service providers: For KYC and fraud prevention purposes, minimal data may be shared with recognised verification providers.

The security of your data is the highest technical priority at 88mega. We continually invest in our security infrastructure to ensure your data is protected against both internal and external threats.

• 256-bit SSL/TLS encryption: All data transmitted between your device and 88mega's servers is encrypted using industry-standard SSL/TLS.
• Data-at-rest encryption: Sensitive data stored in our databases is also encrypted using recognised algorithms.
• Two-factor authentication (2FA): An additional security layer for login and important financial transactions.
• Internal access controls: Only staff with a legitimate business need are permitted to access user data, supported by a detailed audit log system.
• 24/7 security monitoring: An automated threat detection system operates around the clock to identify and respond to suspicious activity.
• Regular security audits: Penetration testing and security audits are conducted periodically by independent experts.

88mega does not retain your personal data for longer than necessary. Retention periods are determined based on the purpose of collection, legal requirements and platform operational needs.

• Active account data: Retained for as long as your account remains active and for a reasonable period after account closure for compliance purposes.
• Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysian financial legislation.
• Support communication logs: Retained for 3 years for quality assessment and dispute resolution purposes.
• KYC Data: Retained for the period required under applicable AML regulations, typically 5–7 years.

When your data is no longer needed, we will securely delete or anonymise it using industry-recognised disposal procedures.

As a Malaysian-resident 88mega user, you have the following rights under PDPA 2010 with respect to your personal data. We respect and facilitate the exercise of each of these rights:

88mega uses cookies and similar tracking technologies to enhance your experience, understand how the platform is used, and deliver relevant content. Below are the types of cookies we use:

The 88mega platform is strictly for individuals aged 18 and above. We do not knowingly collect or process personal data of children under the age of 18.

If we discover that data belonging to an underage individual has been collected without our knowledge, we will take immediate steps to delete that data and close the account in question. If you believe we may hold data relating to a minor, please contact us immediately at privacy@88mega.ws.

88mega reserves the right to amend this Privacy Policy from time to time to reflect changes in our data practices, legal developments or business requirements. Any material amendments will be communicated to you via:

• An email notification to your registered email address at least 14 days before changes take effect.
• A prominent notice on the 88mega platform homepage during the notification period.
• Update the "Last Updated" date at the top of this page.

Continued use of the 88mega platform after the effective date of any changes constitutes acceptance of the amended Privacy Policy. We encourage you to review this page periodically.

If you have any questions, concerns or complaints regarding this Privacy Policy or how we handle your personal data, you may contact the 88mega Data Protection Officer (DPO) through the following channels: