User Data Protection

Privacy Policy mega168 — Our Commitment to Your Data Security

Your privacy is more than a legal obligation for mega168 — it is a core value we uphold. This document clearly explains how we collect, use, store, and protect your personal information.

Updated: January 2026

Mega168's Six Data Protection Principles

End-to-End Encryption

All data transmitted between your device and mega168 servers is protected with 256-bit SSL encryption — the same standard used by Malaysian banking institutions.

Minimum Data Collection

We only collect data that is genuinely necessary to operate our services. No excess data is collected purely for statistical purposes or commercial gain.

Full Control in Your Hands

You have the right to access, correct, or request deletion of your personal data at any time. This can be done directly through your account or via customer support.

No Data Sales

Mega168 has never and will never sell, rent, or exchange your personal information to third parties for marketing or any other commercial purpose.

Restricted Internal Access

Only authorized personnel with a clear job-related need can access your data. All internal access is audited and recorded automatically.

Data Breach Notification

In the event of any security incident involving your data, mega168 is committed to notifying you in a timely manner through official channels.

Important Note: This Privacy Policy applies to all mega168 services including the official website and mobile app. By using our platform, you agree to the terms set out in this document. This policy should be read together with Terms & Conditions us.

Introduction

Mega168 ("we", "Platform") takes user privacy very seriously. As an online gaming platform operating for users in Malaysia, we are committed to managing your personal data with full integrity and in accordance with best data protection practices.

This Privacy Policy transparently explains how mega168 collects information when you use our platform, how that information is used in our day-to-day operations, and what rights you have regarding your personal data. We believe transparency is the foundation of trust, and your trust is something we do not take lightly.

This policy applies to all users accessing mega168 through any method — whether via a web browser on a computer, the Android app, or the iOS app. It also applies to individuals who simply browse our website without registering as a member.

Data We Collect

Mega168 collects two main categories of information: information you provide directly to us, and information collected automatically as you use the platform.

Information You Provide Directly

  • Full name as per your identity card or passport.
  • Date of birth for age verification purposes.
  • Email address and phone number for account communications.
  • Bank or e-wallet details for deposit and withdrawal purposes.
  • Copies of identity documents (KYC) such as MyKad or passport when required.
  • Any information you submitted when contacting our customer support.

Automatically Collected Information

  • IP address and general location information (state/country).
  • Device type, operating system, and web browser version.
  • Game session data including start time, end time, and wagering values.
  • Deposit and withdrawal transaction history.
  • Activity logs within the platform for security and service improvement purposes.
Data Type Purpose of Collection Retention Period
Identity Information KYC verification, fraud prevention Throughout active account + 5 years
Financial Information Deposit & withdrawal processing 7 years (audit requirements)
Game Session Data Game records, dispute resolution 2 years from the session date
Technical Log Security, system debugging 90 days of activity
Cookie Data User preferences, login sessions Up to 12 months

How We Use Your Data

The data we collect is used for specific and legitimate purposes. mega168 does not use your data beyond the scope described here without obtaining additional consent from you.

  • Account Operations: Creates and manages your account, processes logins, and retains your preferences within the platform.
  • Transaction Processing: Processes all deposits and withdrawals, including payee verification and legally required financial records.
  • KYC Verification: Verifies your identity and age in accordance with platform operating requirements.
  • Platform Security: Detects and prevents fraud, account abuse, and suspicious activity.
  • Customer Support: Provides assistance when you contact our support team and resolves any disputes.
  • Service Communications: Sends important notifications related to your account, transactions, and policy changes.
  • Platform Improvement: Analyzes usage patterns to improve the interface, performance, and overall user experience.

mega168 only uses your data for the purposes stated above. We do not make automated decisions that have a serious impact on you based solely on data processing without human involvement.

Data Sharing with Third Parties

Mega168 does not sell, rent, or trade your personal information. However, under certain limited circumstances, we may share data with specific parties to carry out our operations:

Payment Service Providers

To process deposits and withdrawals, transaction information must be shared with our payment processors (such as FPX gateways and DuitNow providers). These providers are bound by strict data protection agreements and are not permitted to use your data for any other purpose.

Game Providers

Third-party game providers such as Evolution Gaming and Playtech receive only the minimum game session data required to run the games. They do not receive your full financial or identity information.

Legal Requirements

Mega168 will disclose data when required by law or upon direction from the relevant authorities, including in investigations involving financial crime or money laundering. We will notify you of any such request unless prohibited from doing so by law.

mega168 does not share your data with advertising companies, data aggregators, or any party without a legitimate operational need. Any third parties we work with are bound by strict confidentiality agreements.

Data Security

Mega168 continually invests in security infrastructure to protect your data from unauthorized access, disclosure, alteration, or destruction. The security measures we implement include:

  • Data Encryption in Transit: All communications between your browser or app and our servers are secured with TLS 1.3 protocol and 256-bit SSL encryption.
  • Data Encryption at Rest: Sensitive data such as banking information and KYC documents are stored in encrypted form using AES-256 algorithms.
  • Tiered Access Control: A layered authorization system ensures each staff member can only access the data required for their role.
  • 24/7 Monitoring: A threat detection system operates around the clock to identify suspicious activity in real time.
  • Regular Backups: Data is regularly backed up to a secure location to ensure continuity of service.
  • Security Testing: Security audits and penetration testing are conducted regularly by independent third parties.

While we take all reasonable measures, no digital system can be guaranteed 100% secure against every threat. You also play an important role in your account's security by keeping your password confidential and not sharing it with anyone.

Data Retention

Mega168 retains your data only for as long as necessary for the original purpose of collection or as required by law. Our principle is to limit data retention to the minimum period necessary.

Once your account is closed, we will delete or anonymize your personal data within a reasonable period, except:

  • Financial data and transaction records are retained for 7 years for audit and legal compliance purposes.
  • KYC verification records that may need to be retained longer to comply with anti-money laundering regulations.
  • Any data related to active disputes or investigations still in progress.

Cookies and Tracking Technologies

Mega168 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

Types of Cookies We Use

  • Essential Cookies: Required for core platform functions such as maintaining login sessions and language preferences. These cookies cannot be disabled.
  • Performance Cookies: Collects information about how you use the platform to help us improve performance and user experience.
  • Functional Cookies: Remembers your preferences such as notification settings and game choices to deliver a more personalized experience.
  • Security Cookies: Helps identify and prevent fraudulent activity and ensures secure sessions.

You can manage or delete cookies through your web browser settings. However, disabling certain cookies may affect the functionality of the mega168 platform.

Your Rights Regarding Personal Data

As a mega168 user, you have certain rights regarding your personal data. We are committed to respecting and facilitating the exercise of these rights:

1

Right to Access

You have the right to know what data we hold about you and to request a copy of it.

2

Right to Rectification

You may request correction of any inaccurate or incomplete data.

3

Right to Erasure

You may request deletion of your data under certain circumstances permitted by law.

4

Right to Restriction

You may request that we restrict the processing of your data under certain circumstances.

5

Right to Portability

You may request your data in a machine-readable format for portability.

6

Right to Object

You may object to the processing of your data for marketing purposes at any time.

To exercise any of the above rights, contact the mega168 support team via live chat or email. We will process your request within 30 business days. Some requests may require additional identity verification.

Children's Privacy

Mega168 does not target our services at individuals under the age of 18. We do not knowingly collect personal information from children or minors below the stipulated age limit.

If we determine that personal data has been collected from someone under the age of 18 without adequate verification, we will take immediate steps to delete that data and close the associated account. Parents or guardians with concerns about a child's use of the platform are encouraged to contact us promptly.

Changes to This Privacy Policy

Mega168 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or improvements to the way we protect your data. Every update will be marked with the latest revision date at the top of this document.

For significant changes — particularly those involving how your data is used or disclosed — mega168 will provide clear notice via in-platform notifications or email to all registered users before the changes take effect. You are encouraged to review this Privacy Policy periodically.

Continued use of the mega168 platform after any changes constitutes your acceptance of the updated policy.

Contact Us About Privacy

If you have any questions, concerns, or wish to exercise your rights regarding this Privacy Policy, our team is ready to assist you:

  • Live Chat: Available on the mega168 app or website, 24 hours a day, 7 days a week — the fastest way to get a response.
  • Privacy Email: [email protected] — for more detailed inquiries regarding your personal data (response within 3 business days).

When submitting a privacy-related inquiry, please clearly state the type of request (data access, correction, deletion, etc.) and include sufficient information for us to verify your identity. This is an important step to ensure we protect your data from unauthorized access by anyone impersonating you.

mega168 is committed to addressing every privacy inquiry seriously and within a reasonable timeframe. Your trust is the foundation of everything we do.

Your Data is Safe at mega168

Play with peace of mind knowing your information is protected to the highest security standards. Register today and experience the difference of a platform that truly cares about your privacy.

Bahasa Melayu