Privacy Policy megawin8 –
Your Data, Our Responsibility

Megawin8 collects members' personal data only when there is a clear and legitimate need. We do not collect data excessively or for undisclosed purposes. Below are the categories of data we collect and the reasons for doing so:

Data collected by megawin8 is used for specific, pre-identified purposes prior to collection. Every use of data has a valid legal basis under Malaysia's PDPA 2010.

• Account Management: Creating, maintaining, and ensuring your account functions properly, including the login process, security, and account recovery.
• Transaction Processing: Processing all deposits and withdrawals quickly and securely through your chosen payment method.
• Fraud Prevention: Detecting and preventing suspicious activity, unauthorized account access, and any fraud attempts.
• Service Improvement: Understanding how players use the platform to continuously improve the gameplay experience, interface, and technical performance.
• Service Communications: Sending important account-related notifications, relevant promotions, and system updates that affect you.
• Legal Compliance: Meeting reporting and compliance requirements under applicable laws, including anti-money laundering (AML) requirements.

Megawin8 is highly selective about who can access our members' data. We do not share your personal data except in the following clearly defined and transparent circumstances:

• Trusted Service Providers: Payment technology providers, identity verification services, and cloud infrastructure providers that help us operate the platform — all bound by strict confidentiality agreements.
• Game Providers: Game providers may receive the minimum information required to run a game session — not full financial or identity details.
• Authorities: When required by law or a valid court order, megawin8 will comply with requests from the relevant authorities.
• Business Transfer: In the event of any business merger or acquisition, member data may be transferred to the new entity — with prior notice given to members.

Your data is stored on secure servers with strict access controls and continuous monitoring. megawin8 employs multiple layers of security to ensure your data is always protected.

• 256-bit SSL Encryption for all data in transit between your device and our servers.
• At-rest data encryption for all data stored in our databases using the AES-256 algorithm.
• Role-based access control — only authorised staff with a specific job requirement may access members' personal data.
• Audit log for all data access and changes — enabling us to detect any unauthorised access quickly.
• Periodic security audits by an independent cybersecurity team to identify and patch any vulnerabilities.

Your personal data is retained for the duration of your active account plus 7 years after account closure to comply with legal requirements. After that period, data will be securely deleted.

Megawin8 uses cookies and similar technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

• Essential Cookies: Required for core functions such as login authentication and session security. Cannot be disabled as the platform will not function properly without it.
• Performance Cookies: Collecting information on how you use the platform to help us improve overall performance and user experience.
• Functional Cookies: Remembering your preferences such as language, display settings, and login details for a smoother repeat experience.
• Analytics Cookies: Helping us understand aggregate usage patterns — without identifying you as an individual.

You can manage your cookie preferences through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of some parts of the megawin8 platform.

As a responsible platform, megawin8 complies with all applicable legal and compliance requirements. The KYC (Know Your Customer) and AML (Anti-Money Laundering) processes are part of our commitment to lawful and ethical operations.

• KYC identity verification is mandatory before your first withdrawal and whenever there are significant changes to your account information.
• Megawin8 automatically monitors suspicious transaction patterns as part of our AML programme.
• KYC documents are stored securely and accessed only by authorised compliance staff.
• In cases where fraud investigations or anti-money laundering inquiries are required, megawin8 will cooperate fully with the relevant authorities.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have certain rights regarding your personal data held by megawin8. We fully respect and support the exercise of these rights.

Megawin8 is an adult platform restricted to users aged 18 and above. We do not knowingly collect any personal data from individuals under the age of 18.

• The megawin8 registration process includes age verification and KYC to ensure only adults register and use the platform.
• If we find that children's data has been collected inadvertently, it will be deleted immediately and the associated account will be closed.
• Parents or guardians who believe their child has registered an account using false information may contact us for immediate action.

Megawin8 reserves the right to update this Privacy Policy from time to time to reflect changes in our business practices, legal requirements, or data protection improvements.

• Significant changes will be communicated to all active members via in-app notifications, email, or a pop-up at login.
• The "Last Updated" date at the top of this page will be updated each time a change is made.
• For major changes affecting how we use or share your data, we will obtain fresh consent from members where required by law.
• Continued use of the megawin8 platform after a policy change takes effect is considered acceptance of the updated policy.

If you have any questions, concerns, or complaints regarding how megawin8 handles your personal data, our data protection team is ready to assist.

• Contact megawin8 customer support via Live Chat in the app or on the website for general privacy inquiries.
• For official requests regarding data rights (access, correction, deletion), please state "Data Rights Request" as the subject when contacting us.
• We aim to respond within 14 working days for all privacy-related inquiries — urgent cases such as suspected data breaches will be prioritised and resolved within 24 hours.

Official email for privacy-related matters: [email protected]