Privacy Policy 88mega — Personal Data Protection for Malaysian Members

88mega takes the privacy of its members very seriously. This Privacy Policy explains how 88mega collects, uses, stores, protects, and in certain circumstances discloses your personal information when you use our platform at https://88mega.click.

This document is drafted in accordance with the requirements of Personal Data Protection Act 2010 (PDPA) Malaysia, as the primary legislation governing the handling of individuals' personal data in the context of commercial transactions in Malaysia.

By registering an account with 88mega, using any of our services, or continuing to use the platform after updates, you agree to 88mega's handling of your personal data as described in this Privacy Policy. If you do not agree, please discontinue use of the platform and contact us to close your account.

88mega collects various types of data depending on how you interact with our platform. We only collect data that is necessary for legitimate, identified purposes.

For identity verification (KYC) purposes, we may request supporting documents such as a copy of your national identity card, driving licence, or other official identification. These documents are handled with enhanced protection measures and accessed only by authorised personnel.

Payment method details — such as the account holder name for Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, or FPX accounts (Maybank2u, CIMB Clicks) — are stored securely and used solely to process your deposits and withdrawals.

88mega uses collected personal data solely for legitimate purposes directly related to operating the platform. Below is a complete list of the ways your data is used:

• Account management: Creating, verifying, and managing your 88mega account, including registration processing and login.
• Processing of financial transactions: Processing deposits via Touch 'n Go, GrabPay, DuitNow, FPX, and other local payment methods, as well as handling your withdrawal requests.
• KYC and AML Compliance: Verifying member identity to meet Know Your Customer (KYC) requirements and applicable anti-money laundering (AML) laws in Malaysia.
• Provision of gaming services: Enables you to play baccarat, blackjack, roulette, slots, e-sports, lottery, and use Sports Betting services on 88mega.
• Customer support: Responding to enquiries, resolving complaints, and providing technical support related to your account.
• VIP programme and promotions: Calculating VIP points, cashback, bonus eligibility, and crediting rewards you are entitled to.
• Security and fraud prevention: Detecting and investigating suspicious activity, fraudulent attempts, or multiple account usage.
• Platform improvements: Analysing usage patterns in aggregate (without identifying individuals) to improve the 88mega platform experience.
• Important communications: Sending transaction notifications, security updates, changes to terms, and other important account-related information.

88mega values the trust you place in us when you register and use the platform. We do not sell, rent, or transfer your personal data to third parties for marketing purposes. Data disclosure occurs only in the following limited circumstances:

• Payment service providers: Transaction information that must be shared with payment providers such as Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and FPX-participating banks to process your deposits and withdrawals. These providers are bound by their own confidentiality obligations.
• Gaming technology providers: Third-party game software providers that operate certain games on the 88mega platform may receive the game session data necessary to run those games. They are bound by strict confidentiality agreements with 88mega.
• Legal authorities: 88mega will disclose personal data to Malaysian authorities or law enforcement bodies when required to do so by court order, official request, or applicable legislation.
• Auditors and inspectors: Independent auditors verifying 88mega's privacy policy and security compliance may require access to certain data within a restricted scope and are bound by confidentiality agreements.

88mega takes its security infrastructure seriously to ensure your personal data is always protected against unauthorised access, alteration, or disclosure.

Technical security measures we employ:

• 256-bit SSL/TLS Encryption for all data transmitted between your device and 88mega's servers — including login credentials, financial transactions, and personal information.
• Data encryption at rest — data stored in 88mega's databases is also encrypted for additional protection, even when at rest.
• Role-based access control — only authorised personnel with a legitimate business need may access members' personal data. All access is logged and monitored.
• Two-factor authentication (2FA) for internal staff access to systems storing sensitive member data.
• Regular security audits by independent parties to identify and address any system vulnerabilities.
• Incident response plan to handle any data breaches swiftly and effectively, including notifying affected parties where required.

While we take all reasonable precautions, no security system can be guaranteed to be 100% secure in the digital world. You also play a role in keeping your account safe — use a strong and unique password, enable two-factor authentication, and never share your login credentials with anyone.

88mega uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit a website.

You can manage or delete cookies at any time through your web browser settings. Please note, however, that disabling Essential cookies will affect the core functionality of the 88mega platform and may prevent you from logging in or completing transactions.

As a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by 88mega:

To exercise any of the rights above, please contact our data protection team at support@88mega.click clearly stating your request along with sufficient proof of identity.

88mega retains your personal data only for as long as necessary to fulfil the original purpose of collection or to meet applicable legal and regulatory requirements.

• Active account data: Retained for as long as your 88mega account remains active.
• Data following account closure: Core records (name, email, transaction history) are retained for a minimum of 7 years following account closure to satisfy anti-money laundering and financial audit requirements.
• KYC records: Identity verification documents are retained for 5 years after the business relationship ends, as required under Malaysian law.
• Support communication logs: Customer support conversation records are retained for 3 years for reference and dispute resolution purposes.
• Analytics cookie data: Deleted after 2 years or when you clear cookies through your browser.

Once the retention period expires, data is securely deleted using methods that ensure the information cannot be recovered by any party.

In operating the 88mega platform, certain personal data may be processed or stored on servers located outside Malaysia — particularly in relation to technology infrastructure or international service providers used by 88mega.

In all cases of cross-border data transfers, 88mega ensures that protection equivalent to Malaysia's PDPA standards is upheld through:

• Binding data processing agreements with service providers in the countries concerned.
• Selecting technology partners that operate in countries or regions with data protection laws recognised as equivalent to or stricter than Malaysia's.
• Data encryption in transit to ensure protection even during cross-border transfers.

The 88mega platform is strictly intended for individuals aged 18 and above. 88mega does not knowingly collect or process personal data from anyone under the age of 18.

If 88mega becomes aware that a child's personal data has been collected inadvertently, immediate action will be taken to delete that data and close the account in question. Parents or guardians who discover that their child has registered an account with 88mega should contact us immediately at support@88mega.click.

The 88mega platform may, from time to time, contain links to third-party websites or services. This Privacy Policy applies solely to the 88mega platform and does not cover the privacy practices of any third-party sites or services you may access through those links.

88mega is not responsible for the privacy policies, content, or data handling practices of any third-party websites. We recommend reading the privacy policy of any third-party site before providing them with your personal information.

88mega reserves the right to update this Privacy Policy from time to time to reflect changes in data handling practices, legal requirements, or platform functionality.

Where material changes occur, we will provide notice in the following ways:

• Sending notification emails to your registered email address.
• Displaying a prominent notice on the 88mega homepage for at least 14 days before the changes take effect.
• Updating the "Last Updated" date at the top of this document.

Continued use of the 88mega platform after any changes take effect will be considered your acceptance of the updated Privacy Policy. We encourage you to review this page periodically.

If you have any questions, concerns, or requests regarding this Privacy Policy or 88mega's handling of your personal data, please contact our Data Protection Officer through the following channels:

• Email: support@88mega.click
• Platform: Via the Live Chat feature within the 88mega platform — available 24/7

All privacy-related complaints and requests will be acknowledged within 3 business days and resolved within the timeframe stipulated under Malaysia's PDPA 2010.

We are committed to addressing every privacy enquiry with the seriousness and respect your rights as a data subject deserve.