1. Introduction & Scope of Privacy Policy
Mega 8 ("we", "our platform") respects the privacy of all users and members of our platform. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use mega8.click and all related services.
This policy applies to all individuals who access or use the mega 8 platform, including registered members, visitors who browse the website, and those who interact with us through other channels such as email or live chat.
By registering as a mega 8 member or continuing to use our platform after any changes to this Privacy Policy are published, you are deemed to have read and agreed to the terms set out in this document.
2. Types of Personal Data We Collect
Mega 8 collects various types of personal data to enable us to provide you with a secure, efficient, and personalised service. The following are the categories of data we collect:
2.1 Data You Provide Directly
- Full name as stated in your official identification document
- National identification number (MyKad) or passport number
- Date of birth and gender
- Email address and phone number
- Malaysian residential address
- Payment method details (bank account number, digital wallets such as Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay)
- Username and password (stored in encrypted hash form)
2.2 Automatically Collected Data
- IP address and device information (device type, operating system, web browser)
- General location data based on IP address
- Betting history and gaming activity
- Session start times and duration
- Pages visited and links clicked
- Cookie data and similar tracking technologies
2.3 Data from Third Parties
In certain cases, mega 8 may receive data from legitimate third parties such as payment service providers (to verify transactions) and identity verification bodies (for KYC/AML purposes).
| Data Categories | Primary Purpose | Legal Basis |
|---|
| Identity Data | Identity verification, fraud prevention | Legal Obligations |
| Contact Data | Communications, customer support | Contract Performance |
| Financial Data | Deposit/withdrawal processing | Contract Performance |
| Technical Data | Security, platform improvements | Legitimate Interest |
| Activity Data | Personalise experience, responsible gaming | Consent |
3. How mega 8 Uses Your Data
Mega 8 uses the personal data collected solely for the following purposes:
- Account Management: Creating, verifying, and managing your member account on the mega 8 platform.
- Transaction Processing: Processing all deposits via Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, FPX (Maybank2u, CIMB Clicks) and withdrawal of winnings.
- Identity Verification (KYC): Meeting Know Your Customer (KYC) requirements and preventing money laundering (AML).
- Customer Support: Responding to inquiries, resolving complaints, and providing technical assistance.
- Platform Security: Detecting and preventing fraud, unauthorised access, and other illegal activities.
- Responsible Gaming: Monitoring gameplay patterns to identify players who may need assistance and to enforce responsible gaming limits.
- Service Communications: Sending important notifications relating to your account, security, and changes to our terms.
- Service Improvement: Analysing usage patterns (in aggregate and anonymised form) to improve the platform and user experience.
- Legal Compliance: Maintaining records as required under Malaysian law, including PDPA and financial regulations.
Marketing Communications: mega 8 will only send marketing communications (such as promotional updates and exclusive offers) if you have given your consent to receive them. You may unsubscribe at any time via the unsubscribe link included in every marketing email.
4. Data Sharing with Third Parties
Mega 8 does not sell or trade members' personal data. However, in certain circumstances, we may share personal data with the following categories of third parties to enable us to deliver our services:
- Payment Service Providers: Information required to process transactions via DuitNow, FPX, Touch 'n Go eWallet, GrabPay, and other Malaysian payment platforms.
- Game Software Providers: Minimum information required to enable access to games from providers such as Pragmatic Play, PG Soft, and NetEnt.
- Cloud Service Providers: Infrastructure providers that store data on behalf of mega 8 under strict confidentiality agreements.
- Identity Verification Body: Third-party services that assist us in verifying member identities in accordance with KYC/AML requirements.
- Legal Authorities: When required by law, court order, or a lawful request from Malaysian authorities.
All third parties that receive personal data from mega 8 are bound by data protection agreements requiring them to uphold security standards equivalent to or exceeding Malaysia's PDPA requirements.
5. Data Storage & Security
Mega 8 implements comprehensive technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or accidental disclosure.
5.1 Technical Security Measures
- 256-bit SSL/TLS encryption for all data in transit
- AES-256 encryption for stored sensitive data
- Active intrusion detection system (IDS/IPS)
- Multi-layer firewall and network segmentation
- Two-factor authentication (2FA) for internal access
- 24/7 security monitoring by our cybersecurity team
5.2 Organisational Security Measures
- Access to personal data is restricted on a need-to-know basis
- Data protection training for all mega 8 staff
- Documented security incident management procedures
- Annual independent security audit
5.3 Data Retention Period
Mega 8 retains your personal data for as long as your account remains active. For closed accounts, data is kept for the period stipulated by Malaysian law (typically 7 years) for audit and legal compliance purposes before being securely deleted.
6. Cookie Policy
Mega 8 uses cookies and similar tracking technologies to enhance your experience on our platform. We use several types of cookies:
Essential Cookies
Required for core platform functions such as login sessions and security. Cannot be disabled.
Analytics Cookies
Helps us understand how users interact with the platform so we can improve it. Can be disabled in settings.
Preference Cookies
Saves your preferences such as language, theme and display settings. Can be disabled.
Security Cookies
Helps detect fraudulent activity and protect your account. Required for platform security.
You can manage your cookie settings through your web browser at any time. Please note that disabling certain cookies may affect the functionality of the mega 8 platform.
7. How to Exercise Your Personal Data Rights
To exercise any of your data protection rights under Malaysia's PDPA, you may:
- Send an email to support@mega8.click with the subject line "Personal Data Rights Request"
- Reaching us via 24/7 live chat on the mega 8 platform
- Writing to us via the enquiry form on the Frequently Asked Questions
All requests will be attended to within 14 business days. For complex cases, we may require up to 30 days and will notify you accordingly. No fees are charged for reasonable requests.
We may need to verify your identity before processing your request to ensure your data is not disclosed to unauthorised parties.
If you are dissatisfied with how mega 8 handles your personal data, you have the right to lodge a complaint with Department of Personal Data Protection Malaysia (JPDP) which is the PDPA enforcement authority in Malaysia.
8. Changes to the Privacy Policy
Mega 8 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our services, legal requirements, or industry best practices.
Members will be notified of any material changes via their registered email or in-platform notification at least 14 days before the changes take effect. The "Updated" date at the top of this document will be revised to reflect the date of the latest review.
We encourage you to review this page periodically to stay informed about how mega 8 protects your information. Continued use of the platform after any changes are made constitutes acceptance of the updated terms.
9. Contact Our Data Protection Officer
Mega 8 has appointed a Data Protection Officer (DPO) responsible for ensuring PDPA compliance across all our operations. For any enquiries, concerns, or complaints relating to privacy and data protection, please contact:
mega 8 Data Protection Officer
Email: support@mega8.click
Live Chat: 24 hours a day, 7 days a week
Response Time: <3 minutes (live chat) · 1–2 business days (email)
Resolution Period: 14 business days
mega 8 Privacy FAQ
Absolutely not. mega 8 has never and will never sell, rent, or trade members' personal data to any third party for marketing or other commercial purposes. Your data is shared only with service providers who help us operate the platform (such as payment processors) and only when required by law.
To close your account and request deletion of your personal data, contact mega 8 customer support via live chat or email at support@mega8.click. Please note that we are required under Malaysian law to retain certain financial records for 7 years for audit and legal compliance purposes, even after an account has been closed.
mega 8 does not store your full bank card details or digital wallet passwords (Touch 'n Go, GrabPay, DuitNow, etc.). All payment transactions are processed through secure, certified payment gateways. We only retain the information necessary to verify and record transactions, such as your bank name and the last 4 digits of your account number.
mega 8 is committed to notifying all affected members within 72 hours of detecting any data breach that poses a risk to their rights and freedoms, in accordance with PDPA requirements. The notification will describe the type of data involved, the actions being taken, and the steps you can take to protect yourself.