Mega118 Privacy Policy – How We Protect Your Personal Data

Mega118 ("we", "platform") respects the privacy of every individual who uses our services. This Privacy Policy ("Policy") describes mega118's privacy practices regarding the collection, use, storage, protection, and disclosure of personal data collected through the mega118.click platform and all related services.

This policy is prepared in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA), which governs how organisations handle individuals' personal data. As a platform serving Malaysian users, mega118 is committed to fulfilling all applicable legal requirements relating to personal data protection in Malaysia.

This Privacy Policy should be read together with the Terms & Conditions and Responsible Gaming Policy of mega118. Taken together, these three documents form the complete framework governing the relationship between mega118 and every member of our platform.

Mega118 collects various types of personal data to enable us to deliver platform services securely and efficiently. The types of data we collect include:

Mega118 does not collect sensitive data categories such as health information, political affiliations, or religious beliefs unless you voluntarily provide them in a relevant context, such as a self-exclusion application related to mental health.

Mega118 collects personal data through various methods depending on how you interact with our platform:

• Account Registration: Information you provide when first registering a mega118 account, including your name, phone number, and date of birth.
• Platform Usage: Activity data automatically recorded when you log in and use the platform — games played, bets placed, session duration, and so on.
• Financial Transactions: Information relating to deposits and withdrawals made via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX, and other Malaysian payment methods we support.
• Identity Verification (KYC): Documents submitted during the identity verification process, such as a copy of your MyKad or Malaysian passport.
• Support Communications: Any information you share when interacting with the mega118 customer support team via LiveChat, email, or Telegram.
• Cookies and Similar Technologies: Technical data collected automatically via browser cookies, server sessions, and other tracking technologies while you browse the mega118 platform.
• Third-Party Sources: In limited cases, we may receive data from third-party identity verification service providers for KYC and AML compliance purposes.

Mega118 uses collected personal data solely for legitimate and transparent purposes. The primary purposes for which your data is used are as follows:

• Account Management: Creating, verifying, and managing your mega118 account, including processing registration, OTP verification, and password resets.
• Service Provision: Enabling you to access and use all features of the mega118 platform — Live Casino, Sports Betting (Malaysia Super League, EPL, badminton, e-sports), slots, lottery, and table games.
• Financial Processing: Processing deposits and withdrawals via your preferred Malaysian payment method, quickly and securely.
• Security & Fraud Prevention: Detecting and preventing fraudulent activity, money laundering, or platform abuse that could harm you or other members.
• Legal Compliance: Fulfilling KYC, AML, and financial reporting obligations as required under Malaysian law.
• Customer Support: Enables the mega118 support team to assist you effectively when you reach out via LiveChat, email, or Telegram.
• Platform Improvements: Analysing aggregate usage patterns (not individual behaviour) to improve the design, performance, and features of the mega118 platform.
• Marketing Communications: Sending promotional information, new bonuses, and platform updates — only where you have given explicit consent to receive such communications.
• Responsible Gaming: Monitoring gameplay patterns to identify members who may need support related to responsible gaming, and providing relevant self-control tools.

Mega118 will not use your data for any purpose other than those stated above without first obtaining fresh consent from you.

Mega118 does not sell, rent, or disclose members' personal data to any third party for their own commercial purposes. However, in certain circumstances, mega118 may need to share data with specific parties:

• Technology Service Providers: Companies that provide server infrastructure, cybersecurity, payment processing, and technical services required to operate the mega118 platform. All such providers are bound by strict confidentiality agreements and may only use mega118 data for agreed purposes.
• Game Providers: Gaming partners such as Evolution Gaming and Playtech may receive the minimum data required to deliver live casino games to you. Shared data is limited to session ID only — not your full personal information.
• Payment Gateway Providers: Transaction information required to process deposits and withdrawals via Malaysian eWallets and FPX is shared with the relevant payment gateway in encrypted form.
• Malaysian Authorities: mega118 may be required to disclose certain data to Malaysian authorities such as Bank Negara Malaysia, the Companies Commission of Malaysia, or law enforcement agencies if required by a valid court order or applicable legal obligation.

Mega118 implements multiple layers of technical and organisational security controls to protect members' personal data from unauthorised access, loss, alteration, or unintended disclosure:

• Encryption in Transit: All communications between your browser and mega118's servers are protected with TLS 1.3 / 256-bit SSL, ensuring no sensitive data can be intercepted in transit.
• Encryption at Rest: Sensitive data stored on mega118 servers — including identity and financial information — is encrypted using AES-256 encryption standards.
• Multi-Layer Access Control: Only staff who require access to specific data to carry out their duties are permitted to do so. All access is logged and monitored.
• Two-Factor Authentication (2FA): 2FA is available to all mega118 member accounts and is mandatory for all internal staff access to systems containing sensitive data.
• Continuous Monitoring: An intrusion detection system (IDS/IPS) and round-the-clock monitoring by the mega118 security team ensure any threats are identified and addressed promptly.
• Regular Security Audits: mega118 conducts regular security audits and penetration testing by independent third parties to identify and address any system vulnerabilities.
• Password Hashing: Member passwords are never stored in plain text — only a one-way cryptographic hash is stored, making recovery impossible even for mega118 staff.

While mega118 takes all reasonable steps to protect your data, no security system can be guaranteed 100% safe against every threat. You also play an important role in keeping your account secure — use a strong, unique password, enable 2FA, and never share your login details with anyone.

Mega118 uses the following types of cookies:

• Essential Cookies: Required for core platform functions — session authentication, security, and language preferences. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collects anonymised data on how you use the platform — most frequently visited pages, load times, and errors encountered. This data is used to improve the performance of the mega118 platform.
• Functional Cookies: Saving your preferences such as interface language, display settings, and game preferences so you don't need to reconfigure them each time you log in.
• Analytics Cookies: mega118 uses first-party analytics tools to understand platform usage patterns at an aggregate level — no individual personal information is shared with any external analytics platform.

You can manage cookie settings through your browser preferences. However, disabling essential cookies may affect the functionality of the mega118 platform, including the login process and session security.

As a mega118 member based in Malaysia, you have certain rights regarding your personal data held by us, in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia:

To exercise any of the rights above, please contact the mega118 support team by email at support@mega118.click or via LiveChat. State the right you wish to exercise and provide sufficient information for us to verify your identity before processing your request.

Mega118 retains your personal data only for as long as necessary for the purposes described in this Policy, or as required by applicable Malaysian law:

• Active Account Data: Retained for the duration your account remains active on the mega118 platform, plus any minimum retention period required by law.
• Financial Transaction Data: Deposit, withdrawal, and game history records are retained for a minimum of 7 years in compliance with Malaysia's financial regulations and AML requirements.
• KYC Data: Identity verification documents are retained for the duration of membership and for at least 5 years after account closure for legal compliance purposes.
• Security Logs: Access logs and security activity records are retained for 12 months for investigation purposes if required.
• Support Communications: LiveChat transcripts and support emails are retained for 2 years to ensure service continuity and historical issue reference.

Once the retention period expires or data is no longer needed, mega118 will securely delete or anonymise it in a manner that is permanent and unrecoverable. Deletion is carried out using methods that ensure the data cannot be accessed or restored by any party.

The mega118 platform is strictly for individuals aged 18 and above. mega118 does not knowingly collect, store, or process the personal data of anyone under the age of 18.

Mega118 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or changes in how we handle personal data.

When material changes are made to this Policy, mega118 will:

• Updating the "Last Updated" date at the top of this page.
• Displaying a clear notice on the mega118 platform's main page for at least 14 days before the amendments take effect.
• Sending emails to all registered members to notify them of important changes, where applicable.

It is your responsibility to review this page periodically. Your continued use of the mega118 platform following any amendment to this Privacy Policy constitutes your acceptance of the revised policy.

If you have any questions, concerns, or complaints about how mega118 handles your personal data, or wish to exercise any of your privacy rights, please contact us through the following channels:

• Privacy Email: support@mega118.click (please mark the email subject as "Privacy Enquiry" or "Data Request")
• LiveChat: Available 24 hours a day, 7 days a week via the mega118 platform
• Telegram: Contact our support team for immediate enquiries

For data rights requests, please provide the following information so we can process your request accurately and efficiently:

• Full name as registered with mega118.
• The mobile number linked to your mega118 account.
• The type of right you wish to exercise (access, rectification, deletion, etc.).
• Specific details of your request where applicable.

If you are dissatisfied with mega118's response to any privacy concern, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP), the regulatory body established under the Personal Data Protection Act 2010.