Mega388 is committed to protecting the privacy and personal data of every player on our platform. This Privacy Policy explains what information we collect, why we collect it, how it is used and stored, and the rights you hold as a data subject under applicable privacy law.
These six principles underpin everything we do with your data at Mega388. The full legal provisions governing each commitment are set out in the sections below.
We collect only the personal information that is genuinely necessary for account management, identity verification, payment processing, and regulatory compliance. We do not collect data for its own sake.
Mega388 does not sell, rent, or trade your personal information to unaffiliated third parties for their marketing or commercial purposes. Your data is never a product we exchange for revenue.
All personal data is protected by 256-bit SSL encryption in transit and AES-256 encryption at rest. Access is restricted to authorised personnel on a strict need-to-know basis, with full audit logging.
You have the right to access, correct, port, restrict, or request deletion of your personal data. We respond to all verified data subject requests within a reasonable timeframe and without unnecessary barriers.
We retain personal data only for as long as is necessary for the purpose it was collected, or as required by applicable anti-money laundering, taxation, and gaming regulations — typically no longer than 7 years after account closure.
We write our Privacy Policy in plain, accessible English so that players in Kuala Lumpur, Penang, Johor Bahru, Shah Alam, and across Malaysia can understand exactly how their data is handled — without needing a legal degree.
This Privacy Policy ("Policy") describes how Mega388 ("Company", "We", "Us", "Our") collects, processes, stores, uses, and discloses personal data in connection with your use of the Mega388 website at mega388.cam, including all related subdomains, mobile applications, and ancillary services (collectively, the "Platform").
Mega388 is an online casino and sports betting platform primarily serving players across Malaysia, including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, and Shah Alam. As a company that processes personal data belonging to Malaysian residents and other users, we take our data protection obligations seriously.
By registering an Account, making a deposit, or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should discontinue use of the Platform.
For the purposes of this Privacy Policy, the following definitions apply:
Mega388 collects the following categories of personal data, depending on how you interact with our Platform:
| Category | Examples | Purpose |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, MyKad / Passport number | Account registration, KYC verification, age verification |
| Contact Data | Email address, phone number, residential address | Account management, transaction notifications, support communications |
| Financial Data | Payment method details (e.g., Touch 'n Go eWallet, Maybank account reference, FPX transaction ID), deposit and withdrawal history | Payment processing, fraud prevention, AML compliance |
| Transaction Data | Bet history, game activity, bonus usage, win/loss records | Account statements, dispute resolution, responsible gambling monitoring |
| Technical Data | IP address, device type, browser type and version, operating system, session timestamps | Security, fraud detection, platform optimisation |
| Usage Data | Pages visited, features used, click-stream data, referral source | Platform analytics, product improvement, personalisation |
| KYC Documents | Copies of MyKad, Passport, Driver's Licence, utility bills, selfie photographs | Identity verification, AML compliance, regulatory reporting |
| Communications Data | Live chat transcripts, email correspondence, support ticket content | Customer support, dispute resolution, service quality monitoring |
Mega388 collects personal data through the following means:
Mega388 processes your personal data on one or more of the following legal bases, depending on the purpose for which the data is used:
Mega388 uses the personal data we collect for the following purposes:
Mega388 does not sell or rent your personal data to third parties. We may, however, disclose your personal data to the following categories of recipients for the purposes described in this Policy:
Mega388 retains personal data for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. Our standard retention framework is as follows:
Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised such that it can no longer be attributed to an identifiable individual.
Mega388 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These measures include, but are not limited to:
While we take every reasonable precaution to protect your personal data, no method of transmission over the internet or electronic storage is completely infallible. You are also responsible for maintaining the security of your Account credentials and should notify us immediately if you suspect unauthorised access.
The Mega388 Platform uses cookies and similar tracking technologies (including web beacons and local storage) to enhance your user experience, analyse Platform performance, and support security functions. We use the following categories of cookies:
You can manage your cookie preferences through your browser settings. Please note that disabling certain cookie categories may affect the functionality of the Platform. Continued use of the Platform following the display of our cookie notice constitutes acceptance of our use of strictly necessary cookies.
As a Data Subject, you hold the following rights with respect to your personal data processed by Mega388. To exercise any of these rights, please contact our Data Protection team using the contact details in Section 15.
Request a copy of the personal data we hold about you, along with information on how it is being processed.
Request correction of inaccurate or incomplete personal data held in your Account or our records.
Request deletion of your personal data where it is no longer necessary for the purpose collected, subject to overriding legal retention obligations.
Request that we temporarily suspend processing of your data where you contest its accuracy or the legality of our processing.
Receive a structured, machine-readable copy of your personal data for transfer to another service provider where technically feasible.
Object to processing based on our legitimate interests, including direct marketing. We will cease such processing unless we demonstrate compelling legitimate grounds.
Mega388 will respond to all verified data subject requests within 30 days of receipt. Where requests are complex or numerous, we may extend this period by a further 60 days, of which you will be notified. We do not charge a fee for reasonable requests. We may decline requests that are manifestly unfounded, excessive, or legally prohibited.
The Mega388 Platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect, process, or store personal data relating to individuals under 21 years of age. Registration by underage individuals is strictly prohibited under our Terms & Conditions.
Where we become aware that personal data has been submitted by a person under the age of 21, we will take immediate steps to delete that data, close the associated Account, and return any deposited funds to the originating payment method. KYC verification is enforced on all accounts as an additional safeguard against underage registration.
If you believe that a person under 21 has registered an Account or provided personal data to Mega388, please contact us immediately at the details provided in Section 15.
In the course of operating the Mega388 Platform, your personal data may be transferred to and processed in jurisdictions outside of Malaysia. This may occur, for example, when we engage cloud hosting providers, KYC verification services, or fraud prevention partners whose infrastructure is located in other countries.
Where such transfers take place, Mega388 ensures that appropriate safeguards are in place to protect your personal data to a standard at least equivalent to that required under applicable Malaysian data protection law. These safeguards may include contractual clauses, standard data protection agreements, or transfers to jurisdictions that provide an adequate level of data protection as determined by relevant regulatory authorities.
Mega388 reserves the right to amend, update, or replace this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or the services we offer. Any changes will be published on this page with an updated "Last Updated" date.
Where changes are material — meaning they significantly affect how we process your personal data or the rights available to you — we will endeavour to provide advance notice via a prominent notice on the Platform or by email to the address registered on your Account. Your continued use of the Platform following the publication of a revised Privacy Policy constitutes your acceptance of the changes.
We encourage you to review this Policy periodically to stay informed about how Mega388 protects your personal information.
If you have questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by Mega388, please contact our Data Protection team. We are committed to resolving all privacy-related queries promptly and transparently.
For general support queries unrelated to privacy, please use the live chat function available on the Platform homepage. Our support team is available around the clock, 365 days a year.