Privacy Policy

Privacy Policy mega8
Your Data, Our Protection

At Mega8, your privacy is not merely a legal obligation — it is a core value we uphold. We want you to fully understand how your personal data is collected, used and protected at all times.

Last updated: 1 January 2026  |  Effective immediately
1. Introduction

This Privacy Policy explains how Mega8 ("we", "Platform" or "Company") collects, stores, uses and protects your personal information when you register and use our online gaming platform services at mega8.app.

We understand that personal information is sensitive and we take this responsibility very seriously. This Privacy Policy is formulated in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and the highest international standards in user data management.

By registering or using the Mega8 platform, you agree to the collection and use of information as described in this Privacy Policy. If you do not agree, please discontinue use of our platform immediately. If you have any questions, our team is available to assist you at any time via 24/7 customer support.

Important Note: This Privacy Policy should be read together with Terms and Conditions mega8, which forms part of the overall agreement between you and our platform.
2. Personal Data We Collect

Mega8 only collects information that is genuinely necessary to provide a safe, seamless service that complies with legal requirements. The following are the categories of data we collect:

Identity & Registration Data

  • Full name as stated on official identity documents
  • National Identity Card (MyKad) number or passport number
  • Date of birth and gender
  • Email address and mobile number
  • Username and encrypted password

Financial & Transaction Data

  • Bank account details and account numbers
  • Digital wallet details (Touch 'n Go eWallet, GrabPay)
  • Deposit and withdrawal history
  • Transaction records and wagering activity

Technical & Usage Data

  • IP address and device information
  • Type and version of web browser used
  • General location data (non-precise) based on IP address
  • Activity logs and platform usage patterns
  • Cookie and user session data
Data Minimisation Principle: mega8 only collects data that is genuinely necessary for the stated purposes. We do not collect personal information that is unrelated to the services we provide.
3. How We Use Your Data

Every piece of data collected by mega8 has a clear and specific purpose. We will not use your information for any other purpose without obtaining your consent first. The following table summarises how your data is used:

Purpose of Use Data Type Legal Basis
Member registration & account management Identity, email, phone number Contract performance
Deposit & withdrawal processing Financial & transaction data Contract performance
Identity verification (KYC) Identity documents, financial data Legal obligation
Fraud detection & security Technical data, activity logs Legitimate interests
Customer support & communications Email, phone number Contract performance
Product improvement & user experience Usage & technical data Legitimate interests
Legal compliance & reporting All data categories Legal obligation
Promotions & personalised offers (with consent) Email, usage patterns User consent

Mega8 does not use your personal data to make automated decisions that have a significant impact on you without human review. Any risk assessments or account-related decisions directly involve our compliance team.

4. Information Sharing & Disclosure

Mega8 does not sell, rent, or trade your personal data to any third party for marketing purposes. However, there are limited situations where we need to share your information with certain parties to ensure our services operate properly and remain legally compliant.

  • Payment Service Provider: Transaction information is shared with authorised payment processors such as FPX and DuitNow gateways to enable deposits and withdrawals to be processed securely.
  • Identity Verification Provider: KYC data is shared with approved identity verification partners to meet anti-money laundering (AML) compliance requirements.
  • Regulatory Authority: mega8 is required to comply with any official requests from competent authorities in accordance with applicable Malaysian law.
  • Technical Service Provider: Cloud infrastructure and cybersecurity providers bound by strict confidentiality agreements.
  • Data Analytics Provider: Anonymised and aggregated data that cannot identify any individual may be shared for research and platform improvement purposes.

All third parties working with mega8 are required to comply with data protection standards equal to or higher than those we uphold ourselves. Legally binding data processing agreements are signed with each such partner.

5. Your Data Security

Mega8 continually invests in the latest security infrastructure to ensure your personal and financial data is always protected. We employ multiple layers of protection working simultaneously to defend against any cyber threats.

  • 256-bit SSL encryption for all communications between your device and mega8 servers
  • At-rest data encryption for all information stored in the database
  • Two-factor authentication (2FA) available for all member accounts
  • 24/7 continuous security monitoring by our cybersecurity team
  • Regular penetration testing by independent third parties
  • Strict access controls — only authorised personnel may access sensitive data
  • Secure data backup and comprehensive disaster recovery plan
Shared Responsibility: While we employ every reasonable security measure, the security of your account also depends on your own actions. Please use a strong password, enable 2FA, and never share your login credentials with anyone.
6. Cookies & Tracking Technologies

Mega8 uses cookies and similar tracking technologies to enhance user experience, analyse usage patterns, and maintain the security of your session. The following are the types of cookies we use:

  • Essential Cookies: Required for core platform operations such as login authentication and session security. These cookies cannot be disabled.
  • Performance Cookies: Collects anonymous data on how you use the platform to help us make improvements.
  • Functional Cookies: Saves your preferences such as language and display settings so you do not need to reconfigure them each time.
  • Security Cookies: Helps detect suspicious activity and protect your account from unauthorised access.

You can manage your cookie settings through your web browser. However, disabling essential cookies may affect platform functionality. We recommend keeping essential and security cookies active for the best and safest experience.

7. Data Retention & Deletion

Mega8 does not retain your personal data longer than is necessary for the purpose it was collected, or as required by applicable Malaysian law. Retention periods vary by data type:

  • Active account data: Retained for the duration your account is active plus 7 years after account closure for legal compliance purposes
  • Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysia's financial regulatory requirements
  • KYC and identity verification data: Retained for 7 years after the business relationship ends
  • Customer support communication logs: Retained for 3 years
  • Technical data and system logs: Retained for 90 days to 1 year depending on data type

Once the retention period expires, your data will be securely deleted using methods that ensure it cannot be recovered. For data stored in physical format, secure document destruction procedures will be followed.

8. Your Rights as a User

As a mega8 member and data subject under Malaysia's PDPA, you have certain rights regarding your personal data. We are committed to making it easy for you to exercise these rights in a simple and hassle-free manner.

Your Data Rights

Mega8 respects and facilitates the exercise of each member's personal data rights in accordance with applicable legislation.

Right of Access

You have the right to know what personal data we hold about you and to request a copy at any time through our customer support.

Right to Rectification

If any of your information is inaccurate or outdated, you may request a correction through the account profile section or by contacting customer support.

Right to Erasure

You may request the deletion of your personal data, subject to data retention obligations set out by applicable law.

Right to Object

You may object to the processing of your data for direct marketing purposes at any time without providing any reason.

Right to Data Portability

You have the right to receive your personal data in a machine-readable format for transfer to another service provider if required.

Right to Restriction of Processing

In certain circumstances, you may request that we temporarily restrict the processing of your data while an issue is being resolved or verified.

How to Submit a Request: To exercise any of the above rights, please contact the mega8 customer support team via Live Chat or our official email. We will process your request within 14 business days.
9. Children's Data

The mega8 platform is strictly for users aged 18 and above. We do not intentionally collect or store any personal data from individuals under the age of 18. If you believe a child has provided us with personal information without parental or guardian consent, please contact us immediately and we will take prompt action to delete that information without delay.

Mega8 conducts age verification during the registration and KYC process to ensure only eligible individuals can access our platform. Accounts found to belong to underage individuals will be closed immediately and all related data will be deleted in accordance with established procedures.

10. Privacy Policy Amendments

Mega8 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements. Any significant changes will be communicated to you via in-platform notifications or your registered email at least 14 days before the changes take effect.

The "Last Updated" date at the top of this page indicates when this Privacy Policy was last revised. We encourage you to review this page periodically. Continued use of the mega8 platform following any revision constitutes acceptance of the updated privacy terms.

Related Policies: For a full overview of your rights and responsibilities, please also refer to Terms and Conditions and page Responsible Gaming ours.
11. Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please do not hesitate to contact us. Our data protection team is ready to assist you.

  • In-platform Live Chat — customer support available 24 hours a day, 7 days a week
  • Official email: [email protected]
  • We are committed to responding to all privacy-related enquiries within 3 business days
  • For more serious complaints, matters may be referred to the Personal Data Protection Commissioner of Malaysia

We take every privacy complaint seriously and will thoroughly investigate each case before providing a full response. Your satisfaction and trust are our top priority.

Why Your Privacy Is Safe with mega8

We do not merely comply with the law — we cultivate a data protection culture that extends across the entire mega8 organisation.

Bank-Grade Encryption

All your data is protected with 256-bit SSL encryption — the same technology used by leading financial institutions worldwide. No one can intercept your information while it is in transit.

No Data Sales

Mega8 has never and will never sell your personal data to any third party for marketing purposes. Your data belongs to you — we only use it to provide the services you use.

Data Protection Team

Mega8 has a dedicated compliance and data protection team to ensure all our data handling practices consistently comply with Malaysia's PDPA and the highest international standards.

Regular Security Audits

Our security infrastructure is regularly audited by independent, accredited third parties. This ensures our data protection systems consistently meet the highest standards and remain current with industry best practices.

Strict Access Controls

Access to sensitive member data is strictly limited to staff who require it to perform their duties. All access is logged and continuously monitored.

Data Breach Notification

In the event of any data breach affecting your information, mega8 is committed to notifying you within the timeframe required by law and taking immediate steps to mitigate the impact.

Trusted Platform

Privacy Assured, Peace of Mind Gaming
With Mega8

Knowing your personal data is fully protected, you can focus on what matters most — enjoying the best online gaming experience in Malaysia with Mega8.

PDPA Compliant SSL 256-bit No Data Sales 18+ Only
Bahasa Melayu