Privacy
Policy
mega8 takes your privacy seriously. This Privacy Policy explains exactly what personal data we collect, why we collect it, how it is used and protected, and the rights available to you as a player on our platform.
How mega8 Protects Your Data
A plain-language summary of our core privacy commitments. The full policy below contains the legally binding details.
256-Bit SSL Encryption
All data transmitted between your device and mega8's servers is protected using industry-standard 256-bit SSL encryption — the same technology used by major banks and financial institutions in Malaysia.
No Data Sold to Third Parties
mega8 does not sell, rent, or trade your personal data to any external parties for marketing purposes. Your information is collected solely to deliver and improve our gaming services to you.
Lawful Basis for All Processing
Every instance of data processing at mega8 is grounded in a clear legal basis — whether contractual necessity, legal obligation, legitimate interest, or your explicit consent. We process nothing without justification.
Your Rights Are Respected
You have the right to access, correct, restrict, and request deletion of your personal data at any time. mega8 will respond to all data rights requests within a reasonable and legally compliant timeframe.
Data Kept Only As Long As Necessary
mega8 retains your personal data only for as long as it is required to fulfil the purposes outlined in this Policy, or as mandated by applicable legal and regulatory obligations.
Breach Notification Protocol
In the event of a data security incident that poses a risk to your rights, mega8 maintains a formal breach response protocol and will notify affected users and relevant authorities in accordance with applicable obligations.
Introduction
This Privacy Policy ("Policy") is issued by mega8 ("mega8", "we", "us", "our") and governs the collection, use, storage, disclosure, and protection of personal data relating to individuals ("you", "Player", "User") who access or use the mega8 online gaming platform at https://mega8.cam and any related services.
mega8 is committed to protecting the privacy and personal data of all players, including those based in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and all other locations from which our platform accepts registrations. This Policy has been drafted to reflect our obligations under applicable data protection principles and our international gaming licence requirements.
By registering an Account on mega8, accessing the platform, or otherwise providing us with your personal data, you acknowledge that you have read and understood this Policy and consent to the processing of your data as described herein. If you do not agree with any aspect of this Policy, you should not use the mega8 platform.
This Privacy Policy should be read alongside our Terms & Conditions, which govern the overall use of the mega8 platform and are incorporated herein by reference.
Definitions
For the purposes of this Privacy Policy, the following terms shall have the meanings assigned to them below:
- "Personal Data" means any information that relates to an identified or identifiable natural person, including but not limited to name, identification number, contact details, financial information, device identifiers, and behavioural data.
- "Processing" means any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure, or destruction.
- "Data Controller" means mega8, which determines the purposes and means of Processing your Personal Data.
- "Data Processor" means any third party that Processes Personal Data on behalf of mega8 under a data processing agreement.
- "Consent" means any freely given, specific, informed, and unambiguous indication of your agreement to the Processing of your Personal Data.
- "Cookie" means a small text file placed on your device by the mega8 platform for the purposes described in Section 8 of this Policy.
- "KYC" (Know Your Customer) means the identity and age verification process required to validate your Account and comply with anti-money laundering obligations.
Data We Collect
mega8 collects the following categories of personal data from players and users of the platform:
| Data Category | Specific Examples | Required? |
|---|---|---|
| Identity Data | Full name, date of birth, nationality, MyKad or passport number, photograph | Mandatory (KYC) |
| Contact Data | Email address, mobile number, residential address (city, state, postcode) | Mandatory |
| Account Data | Username, encrypted password, account preferences, language settings | Mandatory |
| Financial Data | Payment method details (e-wallet IDs, bank account references), deposit and withdrawal transaction records, MYR balance history | Mandatory |
| Gaming Activity Data | Bet history, game session records, wagering patterns, win and loss records, bonus redemption history | Automatic |
| Technical Data | IP address, device type, browser type and version, operating system, session timestamps, referral URLs | Automatic |
| Communications Data | Records of live chat interactions, email correspondence, support ticket content | Where applicable |
| Marketing Preferences | Promotional opt-in/opt-out status, communication channel preferences | Optional |
mega8 does not deliberately collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data beyond what may be incidentally captured in responsible gambling self-assessment processes.
How We Collect Your Data
mega8 collects personal data through the following channels and methods:
4.1 — Direct Collection
Data provided directly by you when you register an Account, complete the KYC process, make a deposit or withdrawal using a Malaysian payment method (such as Touch 'n Go eWallet, Boost, GrabPay, Maybank FPX, CIMB, or Public Bank), contact our support team, respond to surveys, or opt into promotional communications.
4.2 — Automated Collection
Data collected automatically during your use of the mega8 platform, including through cookies, web beacons, server logs, and similar tracking technologies. This includes technical data such as your IP address, device information, and session activity, as well as gaming activity data generated by your interaction with our games and betting markets.
4.3 — Third-Party Sources
Data received from third parties where permitted by law, including identity verification service providers used for KYC purposes, payment processors, fraud prevention services, and analytics providers. mega8 ensures that any third-party data sources operate under equivalent data protection standards.
Data Processing & Legal Basis
mega8 processes your personal data only where a valid legal basis exists. The applicable legal bases for our data processing activities are as follows:
- Contractual Necessity: Processing required to fulfil our contractual obligations to you as a registered player, including account management, processing deposits and withdrawals in MYR, and providing gaming services.
- Legal Obligation: Processing required to comply with applicable legal and regulatory requirements, including anti-money laundering (AML) obligations, age verification requirements, and gaming licence conditions.
- Legitimate Interests: Processing carried out in the legitimate interests of mega8 that do not override your fundamental rights, including fraud prevention, platform security, service improvement, and responsible gambling monitoring.
- Consent: Processing based on your explicit, freely given consent, such as sending you promotional communications or using non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.
How We Use Your Data
mega8 uses the personal data we collect for the following specific purposes:
- To create, verify, and maintain your Account, including completing KYC identity and age verification to confirm you meet the minimum age requirement of 21 years.
- To process deposits and withdrawals through your chosen payment method, including Malaysian e-wallets (Touch 'n Go eWallet, Boost, GrabPay), bank transfers via FPX (Maybank, CIMB, Public Bank, Hong Leong Bank), DuitNow QR, USDT TRC20, and 7-Eleven Cliqq.
- To deliver our gaming services, including slots, live dealer casino, sports betting (EPL, Liga Super Malaysia, UFC, and other markets), lottery, and other products available on the mega8 platform.
- To detect, investigate, and prevent fraud, money laundering, bonus abuse, and other prohibited conduct as defined in our Terms & Conditions.
- To comply with our obligations under our international gaming licence, including responsible gambling monitoring, player protection obligations, and AML reporting requirements.
- To provide customer support via live chat and email, and to maintain records of your communications with our team.
- To send you transactional communications, including deposit confirmations, withdrawal notifications, and security alerts. These are not optional as they are essential to the service.
- To send you marketing communications about promotions, bonuses, and new features — but only where you have provided your consent to receive such communications. You may opt out at any time.
- To analyse platform usage, improve our products, personalise your experience, and conduct research and statistical analysis on an aggregated or anonymised basis.
Data Sharing & Disclosure
mega8 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may, however, share your data with carefully selected third parties in the following limited circumstances:
7.1 — Service Providers & Data Processors
We engage trusted third-party service providers who process data on our behalf under formal data processing agreements. These include payment processors (including Malaysian payment gateway operators), identity verification (KYC) providers, fraud detection services, cloud infrastructure providers, and customer support platform operators. All processors are contractually bound to handle your data only as instructed by mega8 and to maintain appropriate security standards.
7.2 — Gaming Software Providers
To deliver certain games and betting markets, limited technical data (such as player ID and session tokens, but not full identity data) may be transmitted to our licensed game content providers. These providers operate under their own data protection obligations and do not receive full personal profiles of our players.
7.3 — Legal & Regulatory Disclosure
mega8 may disclose your personal data to regulatory authorities, law enforcement agencies, or licensing bodies where required to do so by applicable law, court order, or regulatory direction — including disclosures required under anti-money laundering legislation.
7.4 — Business Transfers
In the event of a merger, acquisition, restructuring, or sale of all or substantially all of mega8's assets, your personal data may be transferred to the relevant successor entity. We will notify you of any such transfer that materially affects your data rights.
Confirmation: mega8 does not sell your personal data to data brokers, advertisers, or any other commercial third party for their independent use. Your data is shared only where strictly necessary to deliver our services or meet legal obligations.
Cookies & Tracking Technologies
The mega8 platform uses cookies and similar tracking technologies to ensure the platform functions correctly, to maintain your session, and to gather analytical data that helps us improve your experience. The categories of cookies we use are as follows:
- Strictly Necessary Cookies: Essential for the operation of the platform. These include session management cookies, authentication tokens, and security cookies. These cannot be disabled as the platform cannot function without them.
- Functional Cookies: Remember your preferences, such as your language settings and the last game category you viewed, to personalise your experience on subsequent visits.
- Analytics Cookies: Allow us to collect anonymised data about how players use the mega8 platform — which pages are visited most frequently, where users navigate from, and how long sessions typically last. This data is used solely to improve the platform.
- Marketing Cookies: Used only where you have given explicit consent, to track the effectiveness of promotional campaigns and to serve relevant offers. You may withdraw consent for marketing cookies at any time.
You may configure your browser settings to refuse or delete cookies at any time. Please note that disabling strictly necessary cookies may impair your ability to use certain features of the mega8 platform.
Data Retention
mega8 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or licensing obligations.
- Active Account Data: Retained throughout the lifetime of your Account and for a period of at least five (5) years following account closure, in compliance with anti-money laundering record-keeping requirements.
- Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in line with standard financial record-keeping obligations under our gaming licence.
- KYC Documentation: Retained for a minimum of five (5) years from submission, or longer if required by regulatory instruction.
- Support Communications: Retained for a period of two (2) years from the date of the last interaction, unless related to a dispute or investigation that requires longer retention.
- Marketing Preferences & Consent Records: Retained until you withdraw consent or close your Account, plus a reasonable period thereafter to demonstrate compliance with consent obligations.
Following the expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of your identity.
Data Security
mega8 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:
- 256-bit SSL (Secure Sockets Layer) encryption for all data transmitted between your browser and our servers.
- Encryption of sensitive data at rest, including payment method references and identity document data stored on our systems.
- Strict access controls limiting Personal Data access to authorised personnel on a need-to-know basis only, with role-based permissions and access logging.
- Regular security assessments, vulnerability testing, and penetration testing of platform infrastructure.
- Formal incident response procedures to identify, contain, and remediate any potential data security incidents promptly.
While mega8 takes all commercially reasonable steps to protect your data, no system is entirely immune from risk. You also bear responsibility for protecting your own account credentials — please use a strong, unique password for your mega8 Account and do not share your login details with any third party.
Your Rights
As a player on the mega8 platform, you have the following rights with respect to your personal data. To exercise any of these rights, please contact our support team as described in Section 14.
Right of Access
You have the right to request a copy of the personal data mega8 holds about you, together with information about how that data is being used and on what legal basis.
Right to Rectification
You have the right to request correction of any personal data we hold about you that is inaccurate or incomplete. You may also update certain information directly through your Account settings.
Right to Erasure
You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (and no other legal basis applies), or where the data has been processed unlawfully. This right is subject to mega8's overriding legal and regulatory retention obligations.
Right to Restriction of Processing
You have the right to request that mega8 restricts the processing of your personal data in certain circumstances, such as while the accuracy of data is disputed or where you have objected to processing pending verification of legitimate grounds.
Right to Object
You have the right to object to the processing of your personal data where mega8 relies on legitimate interests as its legal basis, and where your interests, rights, or freedoms override those legitimate interests. You may also object at any time to the processing of your data for direct marketing purposes.
Right to Withdraw Consent
Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
To exercise any of your data rights, please contact mega8 by email at [email protected] with the subject line "Data Rights Request". We will acknowledge your request within 72 hours and aim to fulfil it within 30 days.
Children & Minors
The mega8 platform is strictly restricted to persons aged 21 years and above. mega8 does not knowingly collect, process, or retain personal data from individuals under the age of 21.
Age verification is a mandatory component of the KYC process for all registered players. Any Account found to belong to an individual under the age of 21 will be immediately suspended. All personal data associated with that Account will be deleted in accordance with our data retention procedures, and any deposits will be returned to the original payment method following investigation.
Parental Notice: If you believe a minor has accessed or registered on the mega8 platform, please contact our support team immediately at [email protected]. We will take immediate action to close the Account and delete any associated data.
Policy Updates
mega8 reserves the right to amend or update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. The date of the most recent revision is clearly displayed at the top of this page.
Where changes to this Policy are material — for example, if we introduce a new category of data processing or a new third-party data sharing arrangement — we will endeavour to provide advance notice to affected players via their registered email address and/or through a prominent notice on the mega8 platform.
Your continued use of the mega8 platform following publication of a revised Privacy Policy constitutes your acceptance of the updated terms. We encourage you to review this page periodically to remain informed of how your data is being handled.
Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by mega8, please contact our team through the following channels:
- Email: [email protected] — For all data rights requests, please use the subject line "Privacy / Data Rights Request". We will acknowledge receipt within 72 hours.
- Live Chat: Available directly on the mega8 platform, 24 hours a day, 7 days a week. For data rights matters, we recommend email to ensure a full written record.
For general questions about our Terms of Use, please refer to our Terms & Conditions page. For responsible gambling queries or self-exclusion requests, please refer to our Responsible Gambling page.
mega8 is committed to handling all privacy-related correspondence with diligence, confidentiality, and a genuine commitment to your data rights. We will never penalise you for exercising your rights under this Policy.
Your Privacy Is Protected at mega8
Play with confidence knowing your personal data is secured, never sold, and handled in full compliance with our privacy commitments. mega8 — Malaysia's trusted gaming platform.