Mega777 Privacy Policy – Our Commitment to Protecting Members' Personal Data

Mega777 collects your personal information from various sources throughout your use of our platform. This collection is carried out transparently and only for legitimate purposes, enabling us to provide the best service to you as our member.

There are two main categories of information we collect:

A. Information You Provide Directly

• Full name as shown on a valid identity card or passport.
• Identity card number (MyKad) or passport number.
• Date of birth for age verification.
• An active and reachable mobile phone number.
• A valid and active email address.
• Your full current residential address.
• Bank account details including bank name, account number, and account holder name.
• E-wallet details such as Touch 'n Go, GrabPay, Boost, or ShopeePay if used.
• Username and password chosen during registration.

B. Information Collected Automatically

• Your device's IP address when accessing the platform.
• Web browser type, operating system, and device model in use.
• Geographic location data based on IP address (country/city level only).
• Gaming activity records including wagering, wins, and session duration.
• Financial transaction records including deposits, withdrawals, and bonuses.
• Login and logout timestamps along with account activity records.
• Cookie and browser session data to enhance the user experience.

Every piece of information we collect is used for a clear and legitimate purpose. mega777 does not use your data for any purpose beyond the scope described below without first obtaining your consent.

Mega777 will not use your data to make automated decisions that materially affect your rights or interests without appropriate human intervention. Profiling is conducted solely for the purpose of personalizing your gaming experience and fraud detection.

Mega777 does not sell or trade your personal information. However, in operating the platform, there are limited situations where data sharing with trusted third parties is necessary and permitted:

• Payment gateway providers: DuitNow, FPX, Touch 'n Go, GrabPay, Boost, ShopeePay, and USDT providers require basic information to process your financial transactions securely. This sharing is kept to the minimum necessary.
• Game platform providers: Game providers integrated with mega777, such as Pragmatic Play, Evolution Gaming, and Playtech, may receive anonymized user identifiers for technical purposes only.
• Analytics services: Anonymised usage data is used to improve platform performance through trusted third-party analytics tools.
• Competent authorities: mega777 will disclose required information if ordered by a court, regulatory body, or legitimate law enforcement agency under Malaysian legal requirements.
• Third-party KYC verification: During the identity verification process, your documents may be processed through a certified automated KYC verification system that complies with international standards.

All third-party partners who receive mega777 user data are required to sign strict data protection agreements and may only use that data for the specified purposes.

Your data security is an absolute priority for mega777. We continuously invest in the latest security infrastructure to ensure your information is always protected against unauthorized access, loss, misuse, or unlawful disclosure.

The protection layers we implement cover technical, administrative, and physical aspects:

• Transit encryption: All communications between your browser and mega777 servers use TLS 1.3 protocol with AES-256 encryption. No data is transmitted in plain text.
• Storage encryption: Sensitive data such as banking information and KYC documents are stored in encrypted form using AES-256 encryption at the database level.
• Tiered access control: Only staff who require access to specific data to perform their duties are permitted. All access is logged and continuously monitored.
• Two-factor authentication (2FA): We provide 2FA for all member accounts as a highly recommended additional security layer.
• 24/7 Monitoring: Intrusion detection systems (IDS) and intrusion prevention systems (IPS) monitor network traffic in real time around the clock.
• Regular penetration testing: mega777 conducts regular security audits by independent third-party security firms to identify and patch any vulnerabilities before they can be exploited.
• Data backup: User data is automatically backed up to a secure, separate location to ensure data availability even in the event of technical disruptions.

Mega777 uses cookies and similar tracking technologies to enhance user experience, analyze usage patterns, and ensure platform security. Below is a detailed explanation of the types of cookies we use:

You can manage your cookie settings through your web browser at any time. Please note that disabling essential cookies may affect certain functions of the mega777 platform, such as the ability to stay logged in or save your preferences.

Mega777 also uses web beacon technology (tracking pixels) in promotional emails to determine whether emails have been opened and links clicked. This data is used solely to measure the effectiveness of our marketing campaigns and improve the content we send to you.

As a data subject under the Malaysia Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal information held by mega777:

To exercise any of the rights above, please contact our Data Protection Officer (DPO) by email at [email protected] or via live chat in your account. We will verify your identity before processing any request for your security.

Mega777 retains your personal data for as long as necessary to fulfill the purpose of collection, comply with legal obligations, or resolve any related disputes. Below are our data retention guidelines:

• Active account data: Retained for the duration of your active membership with mega777.
• Closed account data: Basic information and transaction records are retained for a minimum of 7 years after account closure to meet legal and financial reporting requirements.
• KYC documents: Retained for 5 to 7 years after the end of the business relationship in line with Malaysia's AML/KYC legal requirements.
• Activity and security logs: Retained for 2 years for security investigation and digital forensics purposes.
• Support communication data: Conversation records with the support team are retained for 2 years for reference and evidence purposes.
• Cookies and session data: Automatically deleted in accordance with the set cookie expiry period (see Section 5).

Once the designated retention period has elapsed, your data will be securely deleted using an irreversible deletion method. We ensure that no data no longer required is retained in our systems any longer than necessary.

Mega777 is an online betting platform permitted only for individuals aged 18 and above. We do not knowingly collect, store, or process any personal information from individuals under the age of 18.

Steps we take to protect minors:

• The registration process requires date of birth verification, and we reserve the right to request proof of age at any time.
• If we determine that personal information of a child has been collected inadvertently, we will promptly delete that information and close the relevant account.
• Parents or guardians who discover that their child has registered on mega777 without consent are required to contact us immediately via email [email protected] for immediate action.
• Mega777 fully supports the Responsible Gaming including parental control tools and self-exclusion options to protect vulnerable individuals.

Mega777 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or platform improvements. We are committed to notifying you of any material changes.

Policy change notification methods:

• An in-account notification will be displayed upon your next login.
• Email sent to your registered address for significant or material changes.
• Update the "Effective date" at the top of this document.
• A notification banner on the homepage for a defined period following each update.

Continued use of the mega777 platform after any Privacy Policy changes take effect constitutes your acceptance of the updated terms. If you disagree with the changes, please contact us to discuss your options, including account closure if necessary.

We encourage you to review this page periodically, at least every 3 to 6 months, to ensure you are always informed of how we handle your personal information.

If you have any questions, concerns, or complaints regarding how we handle your personal data, we encourage you to contact our Data Protection Officer (DPO) directly.

• DPO email: [email protected] (response within 2 business days)
• Live Chat: Available in your account, 24 hours a day, 7 days a week.
• Correspondence address: mega777 Data Protection Officer, mega777.bz, Malaysia.

We aim to respond to all privacy-related inquiries within 5 business days. For formal complaints, please clearly state the right you wish to exercise and the relevant information so we can process your request efficiently and promptly.