Privacy Policy Mega99 — Personal Data Protection for Malaysian Players

Welcome to the mega99 Privacy Policy. This document outlines the privacy practices of the mega99 platform, which operates in mega99.click. By registering an account, using any of our services, or browsing the mega99 website, you consent to the collection and use of your information as described in this privacy policy.

Mega99 is a digital entertainment platform serving Malaysian players, and we understand how important your trust is to us when it comes to handling your personal data responsibly. This privacy policy is written in plain, clear Bahasa Melayu so you can truly understand your rights and how we handle your information — not in hard-to-follow legal language.

Mega99 collects several categories of personal data when you use our platform. Below is a detailed breakdown of the data collected, the purpose of collection, and the legal basis for processing that data.

Mega99 no collect information unrelated to the provision of our services. We also do not collect sensitive data such as your medical information, religious beliefs, or political views.

The personal data we collect is used for specific and legitimate purposes. mega99 does not use your data for any purpose not stated in this privacy policy without first obtaining your consent.

• Account management: Creating and managing your mega99 account, including identity verification during registration and withdrawal requests that require KYC.
• Financial transaction processing: Processes all MYR deposits made through Malaysian local payment methods, and all winnings withdrawals to your bank account or e-wallet.
• Platform security: Detecting and preventing fraud, unauthorised access, bonus abuse, and other suspicious activity that could compromise the security of your account or the integrity of the mega99 platform.
• Legal compliance: Complying with legal obligations including anti-money laundering (AML) requirements, Know Your Customer (KYC) requirements, and directives from relevant authorities.
• Customer support: Responding to enquiries, resolving technical issues, and delivering effective customer service in Bahasa Melayu.
• Responsible gambling: Monitoring gameplay patterns to identify signs of problem gambling and reaching out to players who may need assistance, in line with mega99's commitment to player wellbeing.
• Service improvement: Analysing usage data in aggregate (not individual information) to understand the preferences of Malaysian players and improve the user experience on the mega99 platform.
• Service communications: Sends important notifications about your account, including transaction confirmations, security alerts, and critical policy updates.
• Marketing (with consent): Sending promotions, bonus offers, and information about new games exclusively to players who have consented to receive marketing communications. You may opt out of marketing communications at any time.

Every instance of data processing at mega99 has a valid legal basis under Malaysia's Personal Data Protection Act 2010 (PDPA) — whether on the grounds of contract performance, legal obligation, mega99's legitimate interests, or consent you have provided.

Mega99 does not sell, rent, or trade your personal data to any third party. However, there are limited circumstances where mega99 needs to share your data with certain parties in order for our services to function properly.

• Payment providers: Required transaction information is shared with approved payment providers (Touch 'n Go, GrabPay, DuitNow, FPX, Boost, ShopeePay) to process your deposits and withdrawals in MYR. These providers are subject to their own privacy policies and Malaysian payment regulations.
• Game providers: Limited account information (such as player ID) is shared with licensed game providers (Pragmatic Play, PG Soft, Microgaming, and others) to enable you to play their games through the mega99 platform.
• Technology service providers: Technical infrastructure providers that support mega99 in operating the platform, including server hosting providers and analytics services. All such providers are bound by strict data processing agreements and are not permitted to use your data for their own purposes.
• Legal authorities: mega99 will disclose personal data to government authorities or law enforcement when required to do so under applicable Malaysian law, or where there is a legitimate need to protect player safety or prevent fraud.

Mega99 continually invests in the latest security infrastructure to ensure the personal data of all Malaysian players is fully protected. Below are the key security layers we have in place:

• 256-bit SSL Encryption: All data communications between your browser or app and mega99's servers are encrypted using 256-bit SSL/TLS standards. This means your data cannot be read by any third party attempting to intercept the communication.
• Stored data encryption: Sensitive data stored in the mega99 database — including financial information and authentication details — is encrypted using strong encryption algorithms, making it unreadable even in the event of a server breach.
• Strict access controls: Only mega99 staff who require access to specific data to carry out their duties are authorised to do so. All access is logged and monitored.
• Firewall and intrusion detection systems: mega99's infrastructure is protected by multi-layered firewalls and an intrusion detection system (IDS) that continuously monitors network traffic for suspicious activity.
• Two-factor authentication (2FA): mega99 provides two-factor authentication for all player accounts as an added layer of security. We strongly recommend that all players enable this feature.
• Regular security testing: mega99 conducts regular penetration testing and security audits to identify and address any vulnerabilities before they can be exploited.

While mega99 takes all reasonable security measures, no system is 100% immune to every threat. Players also play an important role in keeping their accounts secure by using strong passwords, not sharing login credentials, and promptly reporting any suspicious activity to us.

Mega99 uses cookies and similar tracking technologies to enhance your experience on our platform. Below is an explanation of the types of cookies we use and their purposes:

• Essential cookies: These cookies are necessary for the mega99 platform to function properly. They include login session cookies, security verification, and language preferences. These cookies cannot be disabled, as the platform will not function without them.
• Performance cookies: These cookies collect information about how players use the mega99 platform — which pages are visited most frequently, how long players stay on the platform, and where they exit. This information is used in aggregate to improve platform performance and design.
• Functionality cookies: These cookies remember the preferences you have set — such as your preferred language and display settings — so you don't have to reconfigure them every time you visit the mega99 platform.
• Targeting cookies: If you have consented to receive marketing communications, these cookies help us display relevant promotions based on your activity on the mega99 platform. We do not use cookies to track your activity on other websites.

You can manage or delete cookies through your web browser settings. However, disabling certain cookies may affect the functionality of the mega99 platform. For more information on managing cookies, refer to your browser's help documentation (Chrome, Firefox, Safari, Edge).

As a registered mega99 player in Malaysia, you have the following rights regarding your personal data under the Personal Data Protection Act 2010 (PDPA) Malaysia:

To exercise any of these rights, submit a written request to the mega99 privacy team via email support@mega99.click clearly stating the right you wish to exercise and the information required to verify your identity. We will respond within 30 business days of receiving your request.

Mega99 retains your personal data only for as long as necessary to fulfil the original purpose of collection or to comply with legal requirements. The following are the key retention period guidelines we adhere to:

• Active account data: Your personal data is retained for as long as your mega99 account remains active. Once an account is closed at your request, basic account data will be deleted within 90 days, subject to the legal retention requirements outlined below.
• Financial transaction records: All financial transaction records (MYR deposits and withdrawals) are retained for a minimum of 7 years from the transaction date, in compliance with Malaysian financial and anti-money laundering (AML) legal requirements.
• KYC records (identity verification): Identity verification documents are retained for 5 years after account closure, or for the duration that the account remains active, whichever is longer, in line with legal compliance requirements.
• Customer support records: Support communication history is retained for 3 years to allow us to reference past cases when needed and for staff training purposes.
• Security log data: Security and access activity logs are retained for 12 months for security audit and incident investigation purposes.

Once the retention period has expired, your data will be securely deleted or anonymised (stripped of all personally identifying information) using methods that comply with industry standards.

The mega99 platform is strictly for adults aged 18 and above. mega99 does not knowingly collect personal data from individuals under the age of 18.

If we discover or are informed that we have collected data from an individual under the age of 18 without valid parental or guardian consent verification, we will take immediate steps to delete that data and close the associated account.

Mega99 reserves the right to update or amend this privacy policy from time to time to reflect changes in our privacy practices, new legal requirements, or technological developments that affect how we handle personal data.

When material changes are made to this privacy policy, mega99 will:

• Updating the "Last Updated" date at the top of this document.
• Notifying all registered players via email or in-platform notifications at least 14 days before any changes take effect.
• In cases involving significant changes that require fresh consent, we will seek your explicit agreement before proceeding to process your data under the new terms.

We encourage you to review this privacy policy periodically to stay informed about how we protect your information. Continued use of the mega99 platform following notification of any changes constitutes acceptance of the updated privacy policy.

If you have any questions, concerns, or requests regarding this privacy policy or the way mega99 handles your personal data, our team is here to help.