Mega338 Privacy Policy – How We Protect the Personal Information of Our Members as a Malaysia Online Casino

Mega338 is an online casino entertainment platform operating for Malaysian players. When you register an account, make a deposit via Touch 'n Go or GrabPay, play slots or blackjack, or simply browse our website — there is certain information we need to collect to keep everything running safely and smoothly.

This Privacy Policy sets out transparently: what data we collect about you, why we collect it, how it is used, how long it is retained, who can access it, and what your choices and rights are as the owner of that data. We have written this document in plain English because we believe you have every right to fully understand how your personal information is handled — not just to know that a privacy policy exists somewhere.

By using the Mega338 platform, you agree to the collection and use of data as described in this document. This Privacy Policy should be read together with Terms & Conditions Mega338 constitutes the entire agreement between you and the platform.

Mega338 collects various types of data depending on how you interact with our platform. Below is a full breakdown of the data categories we collect:

Mega338 does not collect sensitive data such as medical information, political views, or religious beliefs. We also do not collect sensitive financial data such as full credit card numbers or banking passwords — all transactions go through local Malaysian e-wallet and FPX methods, which process payments through their own security systems.

Every piece of data we collect has a specific and legitimate purpose. Mega338 does not use data for purposes outside the scope of platform operations. The following outlines how we use your data:

• Account management: Verifying your identity at login, processing password change requests, and ensuring that only you can access your account.
• Transaction processing: Processing MYR deposits via Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and FPX; verifying withdrawals; and maintaining accurate transaction records.
• Security and fraud prevention: Detecting suspicious activity, preventing unauthorised access, identifying duplicate accounts, and preventing money laundering through the platform.
• Legal compliance: Meeting Know Your Customer (KYC) requirements, reporting suspicious transactions to the relevant authorities as required by law, and retaining financial records for the prescribed period.
• Customer support: Handling enquiries, resolving disputes, and providing technical support in Bahasa Melayu.
• Platform improvement: Understanding usage patterns in aggregate and anonymised form to improve the interface, load speeds, and overall user experience.
• Important communications: Sending account security notifications, updates to terms and conditions, or promotional information you consented to receive upon registration.

Mega338 does not sell, rent, or trade members' personal data to third parties for marketing or commercial purposes. This is a commitment we do not compromise on. However, there are limited situations where data sharing is necessary to operate the platform or fulfil legal obligations:

• Technical service providers: Cloud service providers, game software providers such as Evolution Gaming and Pragmatic Play, and payment processing providers receive only the minimum data necessary to perform their services. All such third parties are bound by strict data confidentiality agreements with Mega338.
• Legal authorities: Mega338 is legally required to disclose certain information to the relevant authorities when there is a valid court order, a financial crime investigation, or compliance obligations under anti-money laundering (AML) laws.
• Independent auditing body: Auditing parties that verify game fairness and industry standards compliance may need access to aggregate transaction records — but never to members' personal identity data.
• Business transfer: In the event of any future corporate restructuring, merger, or acquisition of Mega338, member data may be transferred to a successor entity subject to equivalent privacy protections.

In all data-sharing situations described above, Mega338 ensures that recipients are bound by adequate data protection obligations. We do not permit third parties to use member data for their own purposes beyond the scope of services they provide to Mega338.

Mega338 continuously invests in security infrastructure to ensure member data remains protected at all times. The technical and organisational security measures we implement include:

• Transit encryption: All communications between your device and Mega338's servers are encrypted using TLS 1.3 with a 256-bit SSL certificate. This means that even if someone manages to intercept data in transit, they will not be able to read it.
• Storage encryption: Sensitive data stored in Mega338's databases, including passwords hashed using bcrypt, is encrypted to the AES-256 standard.
• Layered access controls: Access to member data among Mega338 staff operates on a "need-to-know" basis — only personnel who require access to carry out their duties are authorised, and every access instance is automatically logged.
• Two-factor authentication: Mega338's internal systems require 2FA for all staff with access to member personal data. We also offer 2FA for member accounts as an optional added layer of protection.
• Penetration testing: Mega338 conducts regular cybersecurity testing through independent penetration testers to identify and remediate vulnerabilities before they can be exploited.
• Incident response plan: In the event of a data security breach, Mega338 has clear response procedures in place — including notification to affected members within 72 hours of the breach being identified.

Mega338 uses cookies and similar tracking technologies to enhance your experience on the platform. Cookies are small text files stored on your device when you visit our website. We use several types of cookies for different purposes:

• Essential cookies (required): These cookies are required for the platform's core functions — such as maintaining your login session, storing in-game chips, and ensuring transactions run smoothly. Without them, the platform cannot function properly. These cookies cannot be disabled.
• Performance cookies: Used to collect information about how visitors use the platform — which pages are visited most frequently, page load times, and any error messages that appear. All information is collected in aggregate and anonymised. This helps us continuously improve the platform.
• Preference cookies: These cookies allow the platform to remember your preferences — such as your preferred language, game display order, and other personal settings — so you don't have to reconfigure them each time you log in.
• Analytics cookies: Mega338 uses anonymously collected analytics data to understand broader platform usage patterns — for example, the most popular games, peak usage times, and the most commonly used devices.

You can manage cookie usage through your web browser settings. However, disabling certain cookies may affect the functionality of the Mega338 platform. For more information on how to manage cookies in your browser, refer to the "Help" section of the browser you are using.

Mega338 does not retain your personal data for longer than necessary for the purposes it was collected, or longer than required by law. The following are our data retention guidelines for key data categories:

• Active account data: For as long as your account remains active with Mega338. Following account closure, basic identity data is retained for 5 years to comply with anti-money laundering legal requirements.
• Financial transaction records: 7 years from the transaction date, in line with financial and tax compliance requirements commonly applicable to platforms in this industry.
• Game records: 90 days for dispute resolution purposes. After 90 days, game records are permanently deleted or anonymised.
• Support communication records: 2 years from the date of last interaction, for quality assurance purposes and to resolve any subsequent complaints.
• Technical log data: 90 days for security and fraud detection purposes. Log data related to active investigations may be retained for longer until the investigation is concluded.
• Cookie data: Depending on the type of cookie — session cookies are deleted when you close your browser, while preference cookies persist for 12 months or until you manually delete them.

Once the relevant retention period has expired, your personal data will be securely deleted or anonymised so that it can no longer be linked to you as an individual.

As an individual whose personal data is processed by Mega338, you have the following rights, which you may exercise at any time by contacting us at support@mega338.wine:

Mega338 is a platform restricted to individuals aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18. Our platform employs an age verification process to ensure all members meet this minimum age requirement.

Should we discover that we have inadvertently collected data from an individual under the age of 18, we will take immediate steps to delete that data and close the account in question. Accounts found to belong to underage individuals will be closed immediately and any remaining balance will be returned in accordance with platform policy.

If you are a parent or guardian and believe that your child under the age of 18 has registered on Mega338, please contact us immediately at support@mega338.wine and we will address the matter as our highest priority within 24 hours.

Mega338 reserves the right to update this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or changes in how we operate. We are committed to notifying you of significant changes in the following ways:

• Notable changes: All active members will be notified by email at least 14 days before changes take effect, and via prominent in-platform notifications.
• Minor changes: May be implemented immediately, with the "Last Updated" date at the top of this page updated accordingly.
• Changes required by law: May take effect immediately without prior notice to members.

The latest version of this Privacy Policy is always available on this page at mega338.wine/privacy-policy. We encourage you to check this page from time to time. Continued use of the Mega338 platform after any changes constitutes acceptance of the updated policy.

If you have any questions, concerns, or complaints about how Mega338 handles your personal data, we want you to reach out to us directly. Our data privacy team is fully proficient in Bahasa Melayu and ready to assist you.

If you are not satisfied with how Mega338 has handled your privacy complaint after contacting us directly, you have the right to escalate the matter to the relevant data protection authority. We respect this process and will cooperate fully with any investigation by a legitimate authority.