mega198 Privacy Policy

1. Introduction

mega198 ("we", "us", "our") is committed to protecting the privacy and personal data of all users of the mega198 platform. This Policy describes our practices regarding the collection, use, disclosure, retention, and protection of personal information in connection with your use of our online gaming and sports betting services.

We process personal data in accordance with applicable data protection legislation, including obligations arising under our international gaming licence conditions. We take our data protection obligations seriously and have implemented technical and organisational measures proportionate to the sensitivity of the data we process.

2. Who We Are

mega198 is an online gaming operator providing casino, live dealer, slot, and sportsbook services to eligible adult players. mega198 operates under international gaming licensing and is accessible at mega198.co.

For the purposes of applicable data protection law, mega198 is the data controller in respect of personal data collected through the Platform. For data-related enquiries, contact our support team at the details set out in Section 15 of this Policy.

3. Data We Collect

3.1 Data You Provide Directly

When you register an account, make deposits, request withdrawals, contact support, or otherwise interact with mega198, we may collect the following categories of personal data:

• Identity data: Full legal name, date of birth, gender, nationality
• Contact data: Email address, mobile phone number, residential address
• Verification data: Government-issued photo identification, proof of address, selfie or video verification where required for KYC compliance
• Financial data: Payment method details (e-wallet account references, bank account numbers as applicable), transaction history, deposit and withdrawal records
• Account data: Username, account preferences, responsible gaming settings, communication preferences

3.2 Data Collected Automatically

When you use the mega198 platform, certain technical data is collected automatically, including:

• IP address and approximate geographic location
• Device type, operating system, and browser version
• Session timestamps, pages visited, features used, and bet history
• Cookie identifiers and similar tracking technologies (see Section 7)
• Referral source and navigation paths within the platform

3.3 Data from Third Parties

We may receive personal data about you from third parties, including identity verification service providers, payment processors, fraud detection services, and where you use a linked payment method (such as Touch n Go eWallet or Boost), from those payment service providers as necessary to complete transactions.

4. How We Use Your Data

mega198 uses personal data for the following purposes:

5. Legal Basis for Processing

mega198 processes personal data on the following legal grounds, depending on the purpose:

• Contractual necessity: Processing required to provide the services you have registered for, including account operation, payment processing, and game provision
• Legal obligation: Processing required to comply with applicable laws, including KYC/AML requirements and gaming licence obligations
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and aggregate analytics, where these do not override your fundamental rights
• Consent: Processing for direct marketing communications, where you have expressly opted in. You may withdraw consent at any time without affecting the lawfulness of prior processing

6. Data Sharing & Disclosure

mega198 does not sell, rent, or trade personal data to third parties for their own marketing purposes. We may share personal data with the following categories of recipients, strictly as necessary:

• Service providers: Identity verification providers, payment processors, fraud detection services, cloud hosting providers, and customer support platform operators — all operating under data processing agreements with mega198
• Gaming software providers: Game studios and platform providers whose games are integrated into mega198, to the extent necessary for game operation and audit purposes
• Regulatory and law enforcement authorities: Where required by applicable law, court order, or regulatory obligation — including reporting obligations under anti-money laundering legislation
• Business successors: In the event of a merger, acquisition, or restructuring, personal data may be transferred as part of the business assets, subject to equivalent privacy protections

All third-party recipients are required to handle personal data in accordance with applicable data protection standards. We do not authorise recipients to use your data for purposes beyond those for which it was shared.

7. Cookies & Tracking Technologies

mega198 uses cookies, web beacons, and similar technologies on the Platform for the following purposes:

• Essential cookies: Required for core platform functionality, including login sessions, game state, and transaction security. These cannot be disabled without affecting platform usability.
• Analytics cookies: Used to understand how users navigate the platform — pages visited, session duration, error events — on an aggregate, anonymised basis to improve platform performance.
• Security cookies: Support fraud detection and bot prevention systems that protect platform integrity.
• Preference cookies: Store your language, display, and notification preferences between sessions.

You may manage or disable non-essential cookies through your browser settings. Note that disabling cookies may affect your ability to use certain features of the mega198 platform, including maintaining a login session.

8. Data Retention

mega198 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following considerations:

• Account data is retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with anti-money laundering record-keeping requirements
• Transaction records are retained for a minimum of seven (7) years as required under applicable financial record-keeping obligations
• KYC verification documents are retained for a minimum of five (5) years from the date of collection or from the date of the last transaction, whichever is later
• Marketing consent records are retained until consent is withdrawn, plus a reasonable period thereafter to evidence the basis for prior communications

Following the expiry of applicable retention periods, personal data is securely deleted or anonymised. Anonymised, aggregate data may be retained indefinitely for analytical purposes.

9. Data Security

mega198 has implemented technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and mega198 servers
• Encryption of sensitive data fields (including payment data) at rest in our databases
• Access controls limiting personal data access to staff and systems with a legitimate operational need
• Two-factor authentication options for account access
• Continuous monitoring for suspicious access patterns and anomalies
• Regular security assessments of platform infrastructure and third-party service providers

While mega198 takes data security seriously, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your own login credentials and for securing your own devices. In the event of a security incident affecting your data, mega198 will notify you in accordance with applicable legal requirements.

10. Your Rights

Subject to applicable law and certain exceptions, you have the following rights in relation to your personal data held by mega198:

• Right of access: Request a copy of the personal data mega198 holds about you
• Right to rectification: Request correction of inaccurate or incomplete personal data
• Right to erasure: Request deletion of your personal data, subject to legal retention obligations and ongoing account operation requirements
• Right to restrict processing: Request that we limit the processing of your data in certain circumstances
• Right to object: Object to processing of your personal data on grounds of legitimate interests, including profiling for direct marketing
• Right to data portability: Request a structured, machine-readable copy of personal data you have provided to us, where technically feasible
• Right to withdraw consent: Withdraw consent to marketing communications at any time through your account notification settings or by contacting support

To exercise any of these rights, contact mega198 support via live chat or email at the details in Section 15. We will respond to verifiable requests within thirty (30) days. Identity verification may be required before processing your request.

11. International Data Transfers

mega198 operates internationally and may transfer your personal data to servers or service providers located outside Malaysia. Where such transfers occur, mega198 ensures that adequate safeguards are in place — including contractual data transfer agreements incorporating standard data protection clauses — to ensure that your personal data receives a level of protection equivalent to that required under applicable Malaysian data protection standards.

12. Children's Privacy

The mega198 platform is strictly for adults aged 21 and above. mega198 does not knowingly collect personal data from individuals under 21 years of age. If we become aware that personal data has been collected from an underage individual, we will take immediate steps to delete that data and close the associated account. If you believe an underage person has registered on mega198, please notify us immediately at the contact details in Section 15.

13. Third-Party Links

The mega198 platform may contain links to third-party websites or services. This Privacy Policy applies solely to mega198 and does not extend to any third-party platforms. mega198 is not responsible for the privacy practices or content of any third-party sites. We encourage you to review the privacy policies of any third-party services you access.

14. Changes to This Policy

mega198 may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal obligations, or platform features. The "Last Updated" date at the top of this page indicates when the Policy was most recently revised. Where changes are material, we will provide reasonable notice to registered users via email or an on-platform notification. Your continued use of the mega198 platform after the effective date of any update constitutes acceptance of the revised Policy.

15. Contact Us

For privacy-related enquiries, data subject requests, or concerns regarding how mega198 handles your personal data, please contact us through the following channels:

• Live Chat: Available daily from 8 AM to 2 AM MYT via the mega198 platform
• Email: [email protected]

Privacy and data protection requests will be acknowledged within five (5) business days and addressed within thirty (30) days. Where we are unable to fulfil a request within thirty days, we will notify you of the reason and an expected resolution timeline.