meg888 Privacy Policy

1. Introduction

meg888 ("we", "us", "the Operator") is committed to protecting the privacy and personal data of every individual who registers for, accesses or otherwise interacts with the meg888 Platform at meg888.cam. This Privacy Policy ("Policy") describes our data practices in accordance with applicable international data protection standards and the requirements of the jurisdiction in which the Operator holds its gaming licence.

This Policy should be read alongside the meg888 Terms and Conditions. By creating an account or continuing to use the Platform after the effective date shown above, you acknowledge that you have read and understood this Policy and consent to the data practices described herein to the extent required by applicable law.

2. Definitions

In this Policy, the following terms carry the meanings defined below:

• "Personal Data" means any information that relates to an identified or identifiable natural person, including but not limited to name, email address, financial account details, device identifiers and usage records.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, erasure or destruction.
• "Data Controller" means the Operator, who determines the purposes and means of Processing Personal Data in connection with the meg888 Platform.
• "Data Processor" means a third party engaged by the Operator to Process Personal Data on the Operator's behalf, including payment service providers and KYC verification partners.
• "Account Holder" means a natural person who has registered a verified account on the Platform and is aged 21 years or above.
• "Cookies" means small text files placed on a user's device by the Platform to facilitate session management, analytics and personalisation.

3. Personal Data We Collect

meg888 may collect and process the following categories of Personal Data depending on your interaction with the Platform:

3.1 Identity and Contact Information

At registration and KYC stages, we collect your full legal name, date of birth, nationality, residential address (which may include references to Malaysian cities such as Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya or Shah Alam), email address and mobile telephone number.

3.2 Financial and Transaction Data

To process deposits and withdrawals in MYR, meg888 collects payment instrument identifiers associated with your chosen method, including Touch'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank, DuitNow, FPX or selected cryptocurrency wallet addresses. Full card or bank account numbers are not stored on the Platform; payment processing is handled by regulated third-party payment service providers.

3.3 Identity Verification Documents

For KYC compliance, we may collect copies of government-issued identity documents such as a Malaysian MyKad or passport, proof of address and, where required, source-of-funds declarations. These documents are handled with heightened security controls.

3.4 Technical and Usage Data

When you use the Platform, we automatically collect device and session data including IP address, device type, operating system, browser type, pages visited, game sessions, login timestamps and error logs. This data is used primarily for security monitoring, fraud detection and Platform optimisation.

3.5 Communication Records

If you contact meg888 through live chat, email or any other support channel, we retain a record of the interaction including your message content and any attachments you voluntarily provide.

4. How We Collect Personal Data

meg888 collects Personal Data through the following means:

• Direct provision: Information you enter into registration forms, KYC uploads, support requests or account settings screens.
• Automated technologies: Cookies, server logs, pixel tags and similar tools that operate when you access the Platform.
• Third-party service providers: KYC verification partners, payment processors and fraud-detection services may share verification outcomes or transaction references with meg888 for account management purposes.
• Publicly available sources: In limited circumstances relevant to fraud prevention or AML compliance, we may reference publicly accessible information to supplement identity verification.

5. Legal Basis for Processing

meg888 processes Personal Data only where a lawful basis exists. The primary bases applied are:

• Contractual necessity: Processing required to create your account, facilitate deposits and withdrawals, settle wagers and deliver Platform services you have requested.
• Legal obligation: Processing required to comply with applicable anti-money laundering (AML), counter-terrorism financing (CTF) and gaming regulatory requirements.
• Legitimate interests: Processing undertaken for fraud prevention, Platform security, abuse detection and business analytics, where those interests are not overridden by your privacy rights.
• Consent: Where required by applicable law and not covered by another basis, we will seek your explicit consent, for example for certain direct marketing communications. Consent may be withdrawn at any time.

6. Data Processing Activities

Your Personal Data may be used for the following purposes:

• Creating, verifying and managing your meg888 account.
• Processing deposits and withdrawals through your chosen MYR payment method.
• Conducting KYC and AML checks as required by the Operator's licensing obligations.
• Detecting, investigating and preventing fraudulent activity, collusion or other prohibited conduct.
• Operating responsible gambling controls including deposit limit management, cooling-off periods and self-exclusion.
• Providing customer support and resolving account disputes.
• Sending transactional account notifications such as deposit confirmations, withdrawal updates and security alerts.
• Analysing Platform performance and improving user experience.
• Complying with applicable legal and regulatory requirements.

7. Disclosure to Third Parties

meg888 does not sell or rent your Personal Data to third parties for their own commercial purposes. We may share your data with the following categories of recipient where necessary:

• Payment service providers: To process MYR deposits and withdrawals through methods including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank and Hong Leong Bank, and selected cryptocurrency networks.
• KYC and identity verification partners: Regulated third-party services engaged to conduct identity, age and document verification checks.
• Fraud prevention and security vendors: Technology providers engaged to detect suspicious behaviour, protect account integrity and prevent money laundering.
• Regulatory and law enforcement authorities: Where meg888 is legally required to disclose information pursuant to a valid legal order, regulatory request or applicable AML/CTF obligation.
• Professional advisers: Legal counsel, auditors and compliance consultants engaged under appropriate confidentiality obligations.
• Corporate successors: In the event of a merger, acquisition or asset sale, Personal Data may be transferred to the acquiring entity subject to equivalent data protection commitments.

All third-party recipients are required to handle your data in a manner consistent with applicable data protection standards and the terms of their engagement with meg888.

8. International Data Transfers

The meg888 Platform operates under an international licensing framework and may process or store Personal Data on servers located outside Malaysia. Where data is transferred to a country that does not provide a level of data protection equivalent to that applicable in your jurisdiction, meg888 will apply appropriate safeguards, which may include contractual clauses approved under relevant international data protection frameworks or binding internal policies.

By using the Platform, you acknowledge that your Personal Data may be transferred to and processed in jurisdictions other than Malaysia for the purposes described in this Policy.

9. Data Retention

meg888 retains Personal Data for no longer than is reasonably necessary for the purpose for which it was collected, or as required by applicable law. Key retention periods are:

• Identity and KYC documents: duration of account plus a minimum of five years following account closure, in line with AML obligations.
• Financial transaction records: seven years post-transaction, consistent with standard AML record-keeping requirements.
• Support communication records: three years from the date of the most recent interaction.
• Technical usage logs: a rolling 13-month period unless a specific investigation requires longer retention.
• Marketing preference records: until consent is withdrawn or the account is closed, whichever occurs first.

On expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised so that it can no longer be attributed to any identifiable individual.

10. Security Measures

meg888 maintains a combination of technical and organisational security controls designed to protect Personal Data against accidental or unlawful access, disclosure, alteration or destruction. These controls may include:

• Encrypted data transmission using TLS protocols for all web sessions.
• Access controls restricting internal data access to authorised personnel on a need-to-know basis.
• Secure storage of KYC documents in access-controlled environments separate from general Platform infrastructure.
• Monitoring systems designed to detect and respond to unusual access patterns or potential security incidents.
• Periodic review of security procedures and staff training on data handling obligations.

11. Cookies and Similar Technologies

The meg888 Platform uses cookies and similar tracking technologies to support core functionality and improve user experience. The main categories of cookies used are:

• Essential cookies: Required for basic Platform operations such as maintaining your login session and remembering security settings. These cannot be disabled without affecting Platform functionality.
• Performance and analytics cookies: Used to collect aggregated, anonymised data on how visitors interact with the Platform, helping us identify technical issues and improve page performance.
• Functional cookies: Used to remember your preferences such as language settings or display configurations to improve your experience across sessions.
• Security cookies: Used to detect fraudulent activity, prevent automated abuse and maintain session integrity.

You may control non-essential cookies through your browser settings. Disabling certain cookies may affect Platform functionality or your ability to access account features. Continued use of the Platform with cookies enabled constitutes acceptance of this Cookie notice unless a separate opt-out mechanism is provided.

12. User Rights

Subject to applicable law and the operational requirements of the Platform, Account Holders may exercise the following rights in relation to their Personal Data by submitting a written request to meg888 support: