Privacy Policy mega887 – Malaysia Player Data Protection

Mega887 ("we", "Platform") is committed to protecting the privacy of every member and user who uses our services on mega887.app, our mobile app, and all related platforms we operate.

This Privacy Policy is drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and clearly outlines how your personal data is collected, used, disclosed, and protected. It also explains the rights you hold regarding that data.

We believe transparency is the foundation of trust. That is why this document is written in plain, easy-to-understand language — not dense legal jargon. Our goal is for you to genuinely understand what happens to your personal information when you use mega887.

Mega887 collects several categories of information to enable us to provide services that are safe, fair, and compliant with legal requirements. This information falls into three main categories:

A. Information You Provide Directly

• Full name as shown on a valid identification document.
• Date of birth for age verification purposes.
• An active email address for account communications.
• Mobile phone number for two-factor authentication (2FA).
• Bank account details or payment methods used for deposits and withdrawals.
• Identity documents (national ID, passport) during the KYC process.

B. Information Collected Automatically

• The IP address of the device you use to access the platform.
• The type and version of the web browser or app being used.
• Your device's operating system information.
• General location data based on IP address (not precise GPS location).
• History of gaming activity, betting, and transactions on the platform.
• The time and duration of your login sessions.

C. Information from Third-Party Sources

• Verification information from the KYC service providers we use.
• Payment verification data from authorised payment processors.
• Information from financial sanctions list databases.

Every piece of information we collect is used for a specific and legitimate purpose. We do not use your data beyond what is necessary to provide the services you registered for. The following are the primary purposes of data use:

• Service provision: Managing your account, processing deposits and withdrawals, and granting access to games and platform features.
• Identity verification (KYC): Verifying that you meet the age and legal eligibility requirements to use the mega887 platform.
• Platform security: Detecting and preventing fraud, money laundering, account abuse, and other illegal activities.
• Account communications: Sending transaction notifications, security updates, and important information related to your account.
• Customer support: Enabling our support team to assist you when needed with the necessary context.
• Legal compliance: Meeting the reporting and compliance obligations required by relevant authorities.
• Platform improvements: Analyzing usage patterns to improve the overall user experience.

Here is a brief overview of how your personal data flows within the Mega887 ecosystem from the moment you register:

Mega887 does not sell, rent, or share your personal data with third parties for marketing purposes. However, there are limited situations where we need to share your data with certain parties to keep the platform running:

• KYC providers: For identity verification as required by law. These providers are bound by strict confidentiality agreements.
• Payment processors: Financial data required to process your deposits and withdrawals via your chosen payment method.
• Technical service providers: Companies that help us manage our technical infrastructure, subject to strict data processing agreements.
• Legal authority: Only when required by law, court order, or a competent law enforcement authority.

Mega887 invests significantly in security infrastructure to ensure your personal data is always protected against unauthorized access, loss, or destruction. The security measures we implement include:

• 256-bit SSL/TLS encryption for all data transmissions between client and server.
• Encryption of sensitive data in databases using the latest industry-standard encryption algorithms.
• Strict role-based access control (RBAC) for internal staff.
• Regular security audits by independent third parties.
• Active 24/7 intrusion detection (IDS) and intrusion prevention (IPS) systems.
• Two-factor authentication (2FA) for staff account and user account logins.
• Regular data backups and tested disaster recovery procedures.

While we take all reasonable precautions, no security system can be guaranteed 100% secure. In the event of a data breach affecting your rights and freedoms, we will notify you within 72 hours of detecting the incident.

Mega887 uses cookies and similar tracking technologies to enhance the user experience and ensure platform security. The types of cookies we use are as follows:

• Essential Cookies: Required for core platform functions such as login session authentication and security. This cannot be disabled.
• Performance Cookies: Collecting information about how you use the platform to help us improve the user experience.
• Functional Cookies: Saving your preferences such as language and display settings so you do not need to reconfigure them every time you log in.

You can manage your cookie preferences through your web browser settings. Please note that disabling certain cookies may affect the functionality of the Mega887 platform.

As a data subject under Malaysia's PDPA, you have the following rights regarding your personal data held by mega887. You may submit requests related to these rights through our support team:

We will process your request within 30 calendar days of receipt. For complex or high-volume cases, we may extend this period with prior notice to you. Please note that these rights are not absolute and are subject to certain legal exemptions.

In the course of our operations, your personal data may be processed or stored on servers located outside Malaysia. This may occur in the following situations:

• Use of cloud computing services whose servers are located in other countries.
• Transfer of data to third-party service providers operating in various countries.
• Maintenance of data backups at geographically separate data centers.

When data is transferred outside Malaysia, Mega887 ensures that data protection standards equivalent to or higher than Malaysia's PDPA are upheld by the recipient through appropriate data transfer agreements.

Mega887 does not retain your personal data longer than necessary. Retention periods depend on the type of data and its purpose:

• Active account data: Retained for the duration of the active account plus any legally mandated period following account closure.
• Financial transaction records: Retained for a minimum of 7 years as required by Malaysia's tax and anti-money laundering laws.
• KYC Documents: Retained for the period required by the relevant authorities, typically no less than 5 years after the business relationship ends.
• Support communication logs: Retained for 3 years for reference and dispute resolution purposes.

When data is no longer needed and there is no legal requirement to retain it, it will be securely disposed of using procedures that ensure the data cannot be recovered.

The mega887 platform is strictly for individuals aged 21 and above. We do not intentionally collect or process personal data from individuals under the age of 21. Our KYC process is designed to detect and prevent underage registration.

If we determine that personal data of a child or individual under 21 has been collected without proper verification, we will take immediate steps to delete that data and close the account in question.

Mega887 reserves the right to update this Privacy Policy from time to time in response to changes in law, industry practices, or how we operate our services. When material amendments are made:

• The "Updated" date at the top of this page will be refreshed.
• A prominent notice will be displayed within the platform or sent via email to affected members.
• You will be given sufficient time to review any changes before they take effect.

We encourage you to review this page regularly. Your continued use of the mega887 platform after any amendments take effect constitutes your acceptance of the updated Privacy Policy.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, the mega887 data protection team can be reached through the following channels:

• In-platform Live Chat — for immediate questions, available 24 hours a day, 7 days a week.
• Privacy email at [email protected] for formal written complaints or requests.
• Section FAQ us for the most frequently asked questions about privacy and data security.

We are committed to responding to all privacy-related inquiries within 14 business days of receipt. For more complex data subject requests, the response period is 30 calendar days.