Updated: June 2026 Malaysia PDPA Compliance 256-bit SSL

Privacy Policy mega128 – Malaysian Member Personal Data Protection

At mega128, your privacy is more than a legal obligation — it is a moral responsibility we take seriously. This policy clearly explains how we handle every detail of your information.

Six Pillars Data Protection mega128

This is mega128's concrete commitment to protecting the privacy and personal data security of every member in Malaysia.

Full 256-bit SSL Encryption

All data transmitted between your device and mega128's servers is encrypted using 256-bit SSL — the same highest-grade standard used by Malaysia's leading banks.

Data Not Sold to Third Parties

Mega128 never sells, rents or transfers your personal information to any third party for marketing purposes without your explicit consent.

Full Account Control Is Yours

You have full rights to access, amend, download, or request deletion of your personal data from the mega128 platform at any time.

Secure & Integrated Data Storage

Your data is stored in data centers protected by physical access controls, multi-layered firewalls, and intrusion detection systems operating around the clock.

Malaysia PDPA Compliance

Mega128 operates in accordance with Malaysia's Personal Data Protection Act (PDPA) 2010, ensuring all our data handling practices meet local legal requirements.

Immediate Data Breach Notification

In the unlikely event of a data breach, mega128 is committed to notifying affected members within 72 hours via email or in-platform notice.

Important Notice: This Privacy Policy describes the data collection and management practices of mega128 ("we", "Platform"). By using the mega128.win platform, you agree to the terms of this policy. Please contact us if you have any questions before using our services.
1

Introduction & Scope of This Policy

Mega128 takes our members' privacy very seriously. This Privacy Policy is crafted to provide full clarity on how we collect, store, use and protect your personal information while you use the mega128.win platform.

This policy applies to all users of the mega128 platform, including website visitors, registered members, and former members who still have transaction history in our system. It covers all your interactions with the platform — from account registration and gaming activity to financial transactions and communications with our support team.

Mega128 operates in compliance with Malaysia's Personal Data Protection Act (PDPA) 2010. We are committed to ensuring all our data handling practices meet the highest local legal standards. If at any time you disagree with any aspect of this policy, you have the right to stop using the platform and request deletion of your account.

2

Personal Data We Collect

Mega128 only collects data necessary to provide you with a safe, fair and quality service. Below is a summary of the types of data we collect and their purposes:

Data Type Example Purpose
Identity Data Full name, IC number, date of birth KYC / Verification
Contact Data Email, phone number Account Communications
Financial Data Bank account number, transaction history Deposit & Withdrawal
Technical Data IP address, device type, web browser Security & Fraud Detection
Gaming Data Wagering history, wins record Records & Responsible Gaming
Cookie Data Session cookies, preference cookies User Experience

Mega128 never requests credit/debit card information directly through the platform. All financial transactions are handled through fully encrypted, certified third-party payment processors.

3

Purpose of Your Personal Data Use

Every piece of data we collect has a clear and legitimate purpose. mega128 uses your personal data only for the following purposes:

  • Account management: To create, verify and maintain your member account, including the required KYC process.
  • Transaction processing: To process deposits, withdrawals and all financial transactions on the platform securely and swiftly.
  • Platform security: To identify and block fraudulent activity, money laundering and unauthorised access.
  • Service communications: To send important notifications related to your account, transactions, bonuses and platform updates.
  • Service improvement: To understand usage patterns and improve the user experience on the mega128 platform.
  • Responsible gaming: To monitor wagering patterns and provide early alerts to members who may need self-control assistance.
  • Legal compliance: To fulfil reporting obligations to the relevant authorities in accordance with applicable Malaysian law.
Our guarantees: mega128 does not use your data for third-party marketing purposes without your consent. You may opt out of marketing communications from mega128 by contacting our support team at any time.
4

Data Sharing with Third Parties

Mega128 takes a highly restricted approach to member data sharing. We never sells your personal data. Data is shared only in the following limited circumstances:

  • Technical service providers: Server infrastructure providers, payment systems, and game providers that require limited data access to deliver their services to mega128. All such providers are bound by strict confidentiality agreements.
  • Payment processors: FPX, DuitNow, and e-wallet providers that process your financial transactions. They receive only the data necessary to process payments.
  • KYC verification body: Third-party identity verification services used to authenticate member identity documents during the KYC process.
  • Legal authorities: In cases where we are required by law, court order, or direction from a lawful authority to disclose certain information.
Important: mega128 does not share member data with competing game providers, third-party marketing platforms or data broker companies under any circumstances.
5

Data Security & Technical Protection

Mega128 continually invests in the latest security infrastructure to ensure your personal data is always protected. The technical protection measures we implement include:

  • 256-bit SSL/TLS encryption for all communications between your browser and mega128 servers.
  • Encryption at rest for all databases containing members' personal information.
  • Multi-layered firewall and intrusion detection system (IDS/IPS) operating 24/7.
  • Continuous security monitoring by the mega128 cybersecurity team.
  • Least-privilege access control — staff can only access the data required for their specific role.
  • Regular security audits by independent third parties to identify and address potential vulnerabilities.
  • Two-factor authentication (2FA) available for all mega128 member accounts.

While we take all reasonable steps to protect your data, no system in the world can guarantee 100% absolute security. We therefore strongly encourage you to take your own security precautions, particularly by using a strong, unique password and enabling 2FA.

6

Cookies & Tracking Technologies

Mega128 uses cookies and similar tracking technologies to enhance your experience on the platform. Cookies are small text files stored on your device when you visit our website.

We use three main types of cookies:

  • Necessary cookies: Session cookies essential for core platform functions such as login, session management, and security. These cookies cannot be disabled.
  • Preference cookies: Saving your settings such as preferred language and display preferences. This allows the platform to remember your choices between sessions.
  • Analytics cookies: Helping us understand how members use the platform so we can continuously improve the user experience. This data is collected in aggregate and cannot identify you individually.

You can manage cookie settings through your web browser preferences. However, disabling required cookies may affect the functionality of the mega128 platform.

7

Your Rights as a mega128 Member

In compliance with Malaysia's PDPA and international data protection best practices, you as a mega128 member have the following rights regarding your personal data:

Right of Access
You have the right to request a copy of all personal data we hold about you.
Right to Rectification
You may request correction of any inaccurate or outdated data in our records.
Right to Erasure
You may request deletion of your personal data, subject to legal retention obligations.
Right to Portability
You may request your data in a machine-readable format for transfer to another platform.
Right to Restrict Processing
You may request that we restrict the processing of your data under certain circumstances.
Right to Object
You have the right to object to the processing of your data for direct marketing purposes at any time.

To exercise any of the above rights, please contact the mega128 Privacy Officer by email at [email protected] or via the platform's live chat. We will respond within 30 business days of receiving your request.

8

Data Retention & Deletion Period

Mega128 retains your personal data only for as long as it is needed for the purposes stated in this policy, or as required by applicable Malaysian law.

  • Active account data: Retained for as long as your account remains active or a legitimate business need exists.
  • Financial transaction records: Retained for a minimum of seven (7) years in accordance with Malaysia's anti-money laundering legal requirements.
  • Customer support communication logs: Retained for three (3) years for service quality and dispute resolution purposes.
  • Analytics cookie data: Anonymized and aggregated after 90 days; identifiable raw data is deleted within that period.
  • After account closure: Identity and contact data will be anonymized within 12 months of account closure, unless required for legal purposes.
9

Child Data Protection

The mega128 platform is intended exclusively for individuals aged 18 years and above. We do not intentionally collect or process personal data of individuals under 18 years of age.

If we discover that personal data of a minor has been collected unknowingly, we will take immediate steps to delete that data and close the associated account. Parents or guardians who believe their child has registered an account at mega128 are encouraged to contact us right away.

10

Changes to This Privacy Policy

Mega128 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements or platform developments.

When significant changes occur, we will:

  • Updating the "Last Updated" date at the top of this policy.
  • Sending email notifications to all registered members.
  • Displaying a clear notice within the platform at least seven (7) days before changes take effect.

Continued use of the mega128 platform after the effective date of any changes constitutes your acceptance of the updated policy.

11

Contact the mega128 Privacy Officer

If you have any questions, concerns, or requests regarding how mega128 handles your personal data, please contact our Data Protection Officer (DPO):

  • Privacy Email: [email protected] (plain text — no clickable link)
  • General Support Email: [email protected] (plain text — no clickable link)
  • Live Chat: Available 24/7 via the platform — state "Privacy Inquiry" in your first message to be routed to the right team.

We are committed to responding to all privacy inquiries within 30 working days. For complaints involving suspected data breaches, we will respond within 72 hours.

mega128's commitment: Privacy is not just a box to check — it is a core value that shapes how we build and operate this platform. Your trust in us is something we take seriously every single day.

Your Data is Safe With mega128

Register a free account and enjoy a platform that puts your privacy, security, and trust first.

Bahasa Melayu