Quick Summary of This Policy
meg888 only collects data required to operate our services. We do not sell your data. You may request a copy, correction, or deletion of your data at any time. All data is protected with encryption and securely stored in accordance with industry standards.
1 Introduction
Meg888 ("we", "Platform", or "meg888") takes our responsibility for the privacy and personal data protection of every member using our platform seriously. This Privacy Policy is crafted to transparently explain how meg888 collects, uses, stores, processes, and protects your personal information.
This policy applies to all users of the meg888 platform, including website visitors, registered members, and any individual who interacts with meg888's services via the website, mobile app, or other official communication channels.
By registering an account or continuing to use the meg888 platform, you acknowledge that you have read, understood, and agreed to the terms of this Privacy Policy. If you do not agree with any part of this policy, you are advised to discontinue use of the meg888 platform.
This Privacy Policy may be updated from time to time. Any material changes will be communicated to you via in-app notification or email. The date of the latest update is shown at the top of this document.
Legal Basis
meg888 processes personal data in accordance with the Malaysia Personal Data Protection Act (PDPA) 2010. We ensure that every data processing activity has a lawful basis and a clearly defined purpose.
2 Data We Collect
Meg888 only collects data that is genuinely necessary to provide a safe, fair, and high-quality service. The following are the categories of data we collect:
2.1 Data You Provide Directly
- Identity information: Full name, date of birth, identity card number (MyKad) or passport number.
- Contact information: Email address, active Malaysian mobile number.
- Account information: Username, password (stored in encrypted hashed form), security questions.
- KYC verification documents: ID card photo, selfie for biometric verification, bank statement.
- Financial information: Bank account number and account holder name for withdrawal purposes.
2.2 Data Collected Automatically
- Technical data: IP address, web browser type, device operating system, screen resolution.
- Usage data: Pages visited, session duration, games played, total bets and wins.
- Location data: IP-based location for verifying permitted geographic regions.
- Cookie data: Session cookies, preference cookies and analytics cookies — explained further in Section 6.
2.3 Data from Third Parties
- Verification information from trusted third-party KYC service providers.
- Transaction verification data from payment providers such as FPX, DuitNow, and supported digital wallets.
- Public records related to identity verification and AML (Anti-Money Laundering) compliance.
Summary of data types and collection purposes:
| Data Category |
Example |
Tujuan Utama |
| Identity |
Name, IC, date of birth |
Age verification & KYC |
| Contact |
Email, phone |
Communication & account recovery |
| Financial |
Bank account, payment methods |
Deposit & withdrawal processing |
| Technical |
IP, browser, device |
Security & fraud detection |
| Usage |
Games played, wagering |
Analytics & product improvement |
3 How We Use Your Data
Personal data collected by meg888 is used exclusively for the following purposes. We will not use your data for any other purpose without notifying you in advance:
- Service provision: Managing your account, processing deposits and withdrawals, and providing access to games and platform features.
- Verification and security: Conducting the KYC process, verifying member identity, detecting and preventing fraud and illegal activities.
- Legal compliance: Fulfilling compliance obligations under Malaysia's PDPA, AML regulations and reporting requirements to relevant authorities.
- Communication: Sending important account-related notifications, security updates, transaction confirmations and responses to your customer support inquiries.
- Marketing: Sending information about promotions, bonuses and special offers — only to members who have given their consent. You may unsubscribe at any time.
- Platform improvements: Analysing usage patterns in aggregate to improve the interface, performance and overall user experience.
- Responsible gaming: Monitoring betting patterns to identify early signs of problem gambling and provide appropriate support.
Direct Marketing
You have the right to withdraw consent to marketing communications at any time at no cost. Click the "Unsubscribe" link in any of our marketing emails or contact customer support to update your communication preferences.
4 Data Sharing
Meg888 does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. However, there are limited situations where we need to share data with certain parties to keep the platform running properly:
4.1 Trusted Service Providers
We share necessary data with selected third-party service providers who assist us in operating the platform, including:
- Payment solution providers (FPX, DuitNow, digital wallet providers) to process financial transactions.
- KYC service providers for identity verification and AML compliance.
- Gaming service providers that supply game content on the meg888 platform.
- Cloud and IT infrastructure providers that host platform data at high security standards.
All third-party service providers are required to sign data protection agreements that prohibit them from using your data for any purpose other than those specified.
4.2 Legal Requirements
Meg888 may need to disclose your personal data to the relevant authorities when required by Malaysian law, including:
- Valid court orders or subpoenas.
- Requests from law enforcement agencies in criminal investigations.
- Reporting obligations to the Personal Data Protection Department or relevant regulatory bodies.
Our Commitment
In all data sharing situations, meg888 shares only the minimum necessary information and ensures that data recipients are bound by confidentiality and data protection obligations equivalent to or stricter than our own.
5 Data Storage & Security
Meg888 implements multiple layers of technical and organisational security measures to protect your personal data from unauthorised access, loss, destruction, or accidental disclosure:
5.1 Technical Security Measures
- 256-bit SSL/TLS Encryption for all data transmitted between your device and meg888's servers.
- Encryption at rest for all personal data stored in meg888's databases.
- Passwords stored in hashed form (bcrypt) — no one, including meg888 staff, can view your original password.
- Two-factor authentication (2FA) available for account access and mandatory for high-value financial actions.
- Firewall and intrusion detection system (IDS) that monitors platform traffic 24 hours a day.
- Regular vulnerability scanning and penetration testing conducted by independent security experts.
5.2 Data Retention Period
Meg888 retains your personal data for as long as your account is active and for any additional period required by law or legitimate business needs:
- Active account data: For as long as your account remains active.
- Financial transaction data: Minimum 7 years in accordance with Malaysia's accounting legal requirements.
- KYC records: Minimum 5 years after account closure, in accordance with AML regulations.
- System and security logs: rolling 12 months.
Once the retention period expires, data will be securely deleted using methods that ensure it cannot be recovered.
Data Breach Notification
In the event of a data breach involving your personal information, meg888 will notify you and the relevant authorities within 72 hours of becoming aware of the incident, in line with industry best practices.
6 Cookies & Tracking Technologies
Meg888 uses cookies and similar tracking technologies to enhance your experience on the platform. The following are the types of cookies used:
-
Essential Cookies: Required for core platform functions such as login session management, security, and navigation. These cookies cannot be disabled as the platform will not function without them.
-
Preference Cookies: Saving your preferences such as interface language, display settings and game preferences so you do not need to reset them each time.
-
Analytics Cookies: Collecting usage data in aggregate and anonymised form to help us understand how members use the platform for improvement purposes.
-
Security Cookies: Detecting suspicious activity, protecting against CSRF attacks and helping identify unauthorised login attempts.
You can manage cookie settings through your web browser. However, disabling essential cookies may affect your ability to use certain features of the meg888 platform.
7 Your Rights
Under Malaysia's Personal Data Protection Act (PDPA) 2010, you have the following rights regarding your personal data held by meg888:
-
Right of Access: You have the right to request a copy of the personal data we hold about you. Requests will be processed within 21 working days.
-
Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data.
-
Right to Erasure: You may request the deletion of your personal data under certain circumstances, subject to applicable legal retention obligations.
-
Right to Object: You have the right to object to the processing of your data for direct marketing purposes at any time.
-
Right to Restrict Processing: In certain situations, you may request that the processing of your data be temporarily restricted while a dispute is being resolved.
-
Right to Data Portability: You may request that your data be provided in a machine-readable format for transfer to another platform.
To exercise any of the above rights, please contact the meg888 privacy team via Live Chat or support email. We will verify your identity before processing any request to protect the security of your account.
Response Time
meg888 is committed to responding to all privacy rights requests within 14 business days. For more complex requests, we will notify you within that period and provide a more accurate estimated resolution time.
8 Children's Privacy
The meg888 platform is intended exclusively for individuals aged 21 years and above. We do not knowingly collect any personal data from individuals below the stipulated minimum age.
If we discover that personal data of a minor has been collected without our knowledge, we will take immediate action to:
- Closing the associated account immediately.
- Removing all personal data of the individual from our systems.
- Cancelling all associated balances and bonuses.
Parents or guardians who suspect that their minor child has registered or is using the meg888 platform are advised to contact us immediately via customer support.
9 Cross-Border Data Transfer
In the course of platform operations, some of your personal data may be processed or stored on servers located outside Malaysia — particularly in connection with international cloud infrastructure and global gaming service providers.
In all such circumstances, meg888 ensures that:
- Data transfers only occur to countries or entities that provide a level of data protection equivalent to or stricter than Malaysia's PDPA.
- Legally binding data processing agreements are signed with all data recipients outside Malaysia.
- Transferred data remains protected by the same encryption and access controls as data stored locally.
Important Note
Your KYC information and identity verification documents are processed and stored on secure servers compliant with ISO 27001 standards. You may request further details about your data storage location by contacting the meg888 privacy team.
10 Contact Us
If you have any questions, concerns, or complaints regarding this Privacy Policy or how meg888 handles your personal data, please contact us through the following channels:
- Live Chat: Available on the meg888 app and website — 24 hours a day, 7 days a week.
- Privacy Email: [email protected] (please state "Privacy Request" in your email subject line)
- FAQ Section: Visit FAQ page us for frequently asked questions related to privacy and data security.
We are committed to addressing every privacy inquiry seriously and providing a satisfactory response within the stipulated timeframe. If you are not satisfied with our response, you have the right to lodge a complaint with the Personal Data Protection Department of Malaysia.
Support Operating Hours
meg888's privacy and customer support team operates 24 hours a day, 7 days a week. Written requests via email are responded to within 1–3 business days. Urgent requests related to account security are prioritised and responded to within 2 hours.
No. meg888 has never and will never sell, rent, or trade members' personal data to any third party for marketing or commercial purposes. Your data is only shared with selected service providers for platform operational purposes — such as payment providers and KYC services — and only to the extent necessary to perform those functions.
All your financial information is transmitted using 256-bit SSL encryption and stored in encrypted form within meg888's secure database. For payment transactions, sensitive financial information is sent directly to certified payment providers and is never stored within meg888's systems. meg888 staff have no access to your bank account number or full card details.
Yes, you have the right to request deletion of your personal data. Please note, however, that certain data must be retained to comply with Malaysian legal requirements — for example, financial transaction records must be kept for 7 years under accounting law, and KYC records for 5 years under AML regulations. Data not subject to legal retention requirements will be deleted within 30 days of receiving your request.
When you close your account, meg888 will deactivate your profile immediately. Your personal data will be retained only for the period required by law (financial records for 7 years, KYC records for 5 years). After that period, all data will be permanently and securely deleted. You will receive an email confirmation once the account closure process is complete.
You can unsubscribe from marketing emails in three ways: (1) Click the "Unsubscribe" link at the bottom of any meg888 marketing email; (2) Update your communication preferences in your account settings; or (3) Contact meg888 customer support via Live Chat. Requests will be processed within 5 working days. Please note that account security and transaction-related emails cannot be disabled as they are essential to your account's security.
Yes, meg888 fully complies with Malaysia's Personal Data Protection Act (PDPA) 2010. This includes ensuring data is collected with explicit consent, used only for stated purposes, protected with appropriate security measures, and not retained longer than necessary. We also ensure data subject rights — including the right of access, correction, and objection — are fully respected.