Privacy Policy

Privacy Policy megga — Your Data, Our Responsibility

Megga takes the protection of every player's personal data seriously. This document transparently explains how we collect, use, store, and protect your information in line with international security standards.

Updated: January 2026  |  SSL 256-bit Protected

Megga's Six Data Protection Principles

Megga builds its platform with data security as the foundation. Here are the six core principles that guide how we handle your personal information.

High-Level Encryption

All data transmitted between your device and megga servers is protected by 256-bit SSL encryption — the same security standard used by leading banking institutions worldwide. Your data cannot be read by any unauthorized party while in transit.

Strict Access Controls

Only specifically authorised megga staff may access players' personal data, and only for the purposes required. All access is logged and periodically audited to ensure no misuse occurs from within our organisation.

No Data Sales

Megga has never and will never sell, rent, or trade players' personal data to any third party for marketing or commercial purposes. Your data belongs to you — it is not a tradeable business asset.

Secure & Audited Servers

Player data is stored in high-grade data centres with layered physical and digital protection. Our servers undergo regular security audits by independent third parties to identify and address any vulnerabilities before they can be exploited.

Full Control in Your Hands

Megga players have full rights to access, correct, or request deletion of their personal data. We provide a straightforward and transparent process for managing your privacy preferences without unnecessary bureaucracy.

Immediate Breach Notification

In the event of any security incident involving player data, megga is committed to notifying affected players in a timely manner and taking immediate remedial action to minimize any negative impact.

Important Note: This Privacy Policy applies to all players who register or use the megga platform at megga.win. By using our platform, you agree to the collection and use of information as described in this policy. Please read this document carefully before registering.

1

Information We Collect

Megga collects your personal information through several channels — directly when you register or use our services, and automatically through technologies used within the platform. Below are the categories of information we collect:

Identity Information: Full name, date of birth, identification card or passport number, residential address, mobile number, and email address. This information is required for identity verification (KYC) and industry compliance standards.

Financial Information: Bank account details, account holder name, account number (in encrypted format), and records of deposit and withdrawal transactions. We do not store full credit or debit card numbers.

Technical Information: IP address, device and browser type, operating system, general geolocation data, login activity logs, and in-platform usage data. This information is collected automatically for security and service improvement purposes.

All information you provide to megga must be accurate and up to date. You are responsible for updating your details whenever changes occur, especially contact information and financial details.

Data Category Data Examples Purpose of Collection
Personal Identity Name, IC number, date of birth KYC verification, fraud prevention
Contact Data Email, phone number Service communications, security OTP
Financial Data Bank account details, transaction records Deposit & withdrawal processing
Technical Data IP, device, browser Security, fraud detection
Gaming Data Betting records, gaming activity Compliance, responsible gaming
2

How We Use Your Data

Every piece of data collected by megga is used for a legitimate and specific purpose. We do not use your data for any purpose outside the scope stated below without obtaining your consent first:

  • Account Management: Register, verify, and manage your player account including the KYC process required by online gambling industry standards.
  • Transaction Processing: Process deposits, withdrawals, and any other financial transactions related to your account securely and efficiently.
  • Service Communications: Send you important account-related notifications, OTP verification, security alerts, and relevant policy updates.
  • Fraud Detection: Monitor account activity to identify suspicious patterns, prevent unauthorised access, and protect the overall security of the platform.
  • Platform Improvements: Analyse usage data in aggregate and anonymised form to understand how players use the platform and make meaningful improvements.
  • Legal Compliance: Meet applicable legal and regulatory obligations, including Anti-Money Laundering (AML) and Counter-Terrorism Financing (CTF) requirements.
  • Promotions & Offers: With your consent, we may send you information about megga promotions, bonuses, and exclusive offers that may interest you. You can unsubscribe at any time.

megga's Guarantee: Your data will not be used to make automated decisions that have a significant impact on your rights or interests without human involvement. Any significant decisions such as account suspension involve manual review by our team.

3

Data Sharing & Disclosure

Megga does not share players' personal information with external parties except in limited and legitimate circumstances as outlined below. In all cases, we ensure that receiving parties comply with data protection standards equal to or higher than our own:

  • Payment Service Providers: Required financial data is shared with licensed payment processors such as the FPX gateway, Touch 'n Go, and GrabPay solely to enable your transactions to be processed securely.
  • Game Software Providers: Limited information required to conduct game sessions and verify wins is shared with our licensed game providers using secure protocols.
  • Legal Requirements: megga will disclose player information when required by a valid court order, law enforcement directive, or other applicable legal obligation.
  • Fraud Prevention: Limited information may be shared with fraud prevention agencies or relevant industry platforms to protect the platform and other players from criminal activity.

Important Clarification: megga never sells, rents, or provides players' personal data to advertisers, marketing companies, or any third party for commercial purposes. Any marketing communications you receive from megga are based solely on your own consent.

4

Data Storage & Security Measures

Megga continuously invests in security infrastructure to ensure player data is always protected to the highest standard. Here is a comprehensive overview of how we store and safeguard your information:

  • Stored Data Encryption: All sensitive data is encrypted using AES-256 before being stored in our database. Passwords are never stored in plain text — only cryptographic hashes are retained.
  • Server Infrastructure: Data is stored in high-grade data centres with strict physical access controls, automated fire suppression systems, redundant backup power, and 24-hour monitoring.
  • Regular Backups: Full data backups are performed on a regular schedule with encryption, stored across geographically separate locations to ensure service continuity in any emergency.
  • Retention Period: Active account data is retained for as long as your account remains active. After account closure, data is kept for the period required by law or audit obligations, after which it is securely deleted.
  • Penetration Testing: Our security systems undergo regular penetration testing by independent security experts to identify and address any potential vulnerabilities.

256-bit SSL Encryption: All communication between your browser or app and megga servers uses TLS 1.3 protocol with 256-bit encryption. You can verify this by checking the padlock icon in your browser's address bar when visiting megga.win.

5

Cookies & Tracking Technologies

The megga platform uses cookies and similar tracking technologies to enhance the user experience, maintain secure login sessions, and understand how players interact with our platform. The following are the types of cookies we use:

Cookie Type Function Validity Period
Essential Cookies Maintain login sessions, CSRF security, and basic preferences Session / 30 days
Performance Cookies Analyse page traffic and platform feature usage 12 months
Functional Cookies Save language preferences, theme, and display settings 12 months
Security Cookies Detect suspicious login attempts and device verification 90 days

You can control and manage cookie settings through your web browser preferences. Please note that disabling essential cookies may affect platform functionality, including the ability to stay logged in or access certain security features.

6

Your Rights as a Player

As a megga player, you hold the following rights regarding your personal data. megga is committed to respecting and facilitating the exercise of these rights within a reasonable timeframe:

Right of Access

Request a copy of the personal data we hold about you in a readable format.

Right to Rectification

Correct any inaccurate or incomplete information in your account.

Right to Erasure

Request deletion of your personal data, subject to relevant legal obligations.

Right to Object

Object to the processing of your data for marketing purposes or in certain other circumstances.

Right to Data Portability

Receive your data in a structured format that can be transferred to another platform.

Right to Restrict Processing

Request restriction of your data processing in certain situations permitted by law.

To exercise any of the rights above, contact the megga support team via Live Chat or email at [email protected]. We aim to process privacy rights requests within 30 business days. In complex cases, this period may be extended with prior notice to you.

7

Child Data Protection

The megga platform is strictly for individuals aged 18 and above. We do not knowingly collect or process personal data from anyone under 18. If we discover that a child's data has been collected inadvertently, we will promptly delete it and close the associated account.

Parental Advisory: If you believe your child under the age of 18 has registered an account on megga, please contact us immediately at [email protected]. We will take prompt action to close the account and delete all associated data.

8

International Data Transfers

In the course of its operations, megga may need to transfer players' personal data to servers or service providers operating outside Malaysia. Any such transfers are carried out with strict safeguards to ensure your data remains secure regardless of the physical server location.

  • Data Processing Agreement: All partners who receive player data are required to sign a data processing agreement specifying the security and privacy standards they must uphold.
  • Protection Standards: megga ensures that any international data transfers are protected by safeguards equivalent to local data protection standards.
  • Primary Servers in Malaysia: Primary data for Malaysian players is stored on servers based in the Asia region to minimise latency and facilitate compliance with local regulations.
9

Changes to This Privacy Policy

Megga reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or service improvements. The last updated date is always displayed at the top of this document.

For significant changes — particularly those affecting how your data is used or shared — megga will notify you via in-platform notification or your registered email at least 14 days before the changes take effect. Continued use of the platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy.

Recommendation: We encourage you to review this Privacy Policy page regularly, at least once every three months, to ensure you are always aware of how we manage your personal data.

10

Contact Us Regarding Privacy

If you have any questions, concerns, or complaints regarding how megga handles your personal data, our privacy team is ready to assist. We take every privacy enquiry seriously and will provide a thorough and timely response.

  • Privacy Email: Send privacy and data protection enquiries to [email protected] with the subject line "Privacy Enquiry". We aim to respond within 2 business days.
  • Live Chat: For general privacy enquiries, our 24/7 support team can provide initial guidance and help you submit a formal request if needed.
  • FAQ: Browse page FAQ us for answers to the most frequently asked questions about privacy and data security.

Megga Privacy FAQ

Here are answers to the most frequently asked questions from our players regarding our privacy policy and data protection practices.

Absolutely not. megga has never and will never sell, rent, or trade players' personal data to any third party for marketing or commercial purposes. Your data is only shared with selected service providers directly involved in operating our platform, such as payment processors, and only the minimum necessary information is shared.

megga uses 256-bit SSL encryption for all financial data transmissions. Your bank account details are stored in encrypted format using AES-256, and full credit or debit card numbers are never stored in our systems. All transactions are processed through licensed payment gateways that comply with PCI-DSS security standards.

Yes, you may request deletion of your personal data by contacting the megga support team. Please note, however, that certain data may need to be retained for a specified period to fulfill legal obligations, audit requirements, or to resolve any outstanding transactions. Once the mandatory retention period ends, your data will be permanently and securely deleted.

If you suspect unauthorised activity on your account, please contact the megga support team via Live Chat immediately. Change your password right away and enable two-factor authentication (2FA) if you have not already done so. Our security team will review your account activity logs and take appropriate action to protect your account and funds.

After an account is closed, megga retains your personal data for the period required by law and audit obligations applicable to the online gambling industry. This typically covers financial transaction records and identity data for AML and CFT compliance purposes. Once the mandatory retention period ends, all data is securely deleted using irreversible deletion methods.

megga only sends marketing communications based on consent you provided during registration or through your account settings. You can opt out of promotional emails or notifications at any time by updating your communication preferences in your account settings or by contacting our support team. We do not use your data for third-party advertising.

Your Data Is Protected — Play with Peace of Mind at megga

Register a free account today and enjoy a safe, transparent, and exciting gaming experience with over 500 games to choose from. A welcome bonus of up to RM 1,500 awaits you.

SSL 256-bit Data Protected 24/7 Support Secure KYC
Bahasa Melayu