Mega999 Privacy Policy

1 Introduction

Mega999 ("the platform", "we", "us", "our") operates an online casino and sports betting service accessible through the Mega999 website. This Privacy Policy sets out the basis on which we collect, process, share and retain personal data submitted or generated by players ("you", "your") who register, deposit, play or otherwise interact with the Mega999 platform.

By creating a Mega999 account, depositing funds or using any feature of the platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this document, please do not register or continue using Mega999. This policy applies alongside our Terms & Conditions and Responsible Gambling information, which are available on separate pages of this site.

We review and update this Privacy Policy from time to time to reflect operational, technological or legal changes. The effective date at the top of this page indicates when the current version was last revised. Continued use of Mega999 after publication of an update constitutes acceptance of the revised policy.

2 Definitions

For the purposes of this Privacy Policy, the following definitions apply:

• Personal Data — any information that identifies or could reasonably identify a natural person, including name, email address, phone number, residential address, payment details and device identifiers.
• Processing — any operation performed on personal data, including collection, recording, storage, use, disclosure or deletion.
• Data Subject — the identified or identifiable natural person to whom personal data relates; in the context of Mega999, this means the registered player.
• Third Party — any entity other than Mega999 and the data subject, including payment processors, game providers, identity verification services and analytics providers.
• KYC — Know Your Customer; the identity and age verification process required before certain account functions are enabled.
• Cookies — small text files placed on your device by the Mega999 website to support functionality, security and analytics.

3 Personal Data We Collect

Mega999 collects personal data through the registration form, identity verification procedures, payment transactions, gameplay activity, support interactions and automated technical means. The categories of data we may collect are set out below.

We do not knowingly collect personal data from individuals under the age of 21. If we become aware that a registered account belongs to a person below the minimum age requirement, we will suspend the account, conduct a review and return any eligible funds before closing it.

4 Legal Basis and Purposes of Processing

Mega999 processes personal data on the following legal bases and for the corresponding purposes:

• Contract performance: to register your account, process deposits and withdrawals in MYR, settle wagers, administer bonuses and deliver customer support.
• Legal obligation: to conduct KYC and age verification, apply responsible gambling controls, retain financial records for the applicable statutory period, and respond to lawful requests from competent authorities.
• Legitimate interests: to prevent fraud, money laundering and technical abuse; to maintain platform security; to improve game offerings; and to analyse aggregated usage patterns that help us serve Malaysian players more effectively.
• Consent: to send promotional communications about Mega999 offers, Deepavali seasonal promotions, Liga Super Malaysia odds updates and EPL betting features where you have opted in. You may withdraw consent at any time through account settings or by contacting support.

We do not make solely automated decisions that produce significant legal effects in relation to your account without human review where required.

5 Cookies and Tracking Technologies

The Mega999 website uses cookies and similar technologies to provide core functionality, maintain session security, remember your preferences and gather aggregated analytics. The types of cookies we use are as follows:

• Essential cookies: required for login sessions, security tokens and basic navigation. These cannot be disabled without impairing platform functionality.
• Functional cookies: remember your language setting, preferred lobby view and responsible gambling limits selected within your session.
• Analytics cookies: collect anonymised data on page visits, game loading times and navigation paths to help us identify performance issues and improve the player experience.
• Security cookies: detect unusual login patterns, multiple failed authentication attempts and device fingerprint anomalies to protect accounts from unauthorised access.

You may manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from accessing Mega999, though certain convenience features may be affected. We do not use third-party advertising cookies to deliver targeted advertisements on external websites.

6 Disclosure and Data Sharing

Mega999 does not sell, rent or trade personal data to third parties for their independent marketing purposes. We may share data with the following categories of recipient strictly as necessary to operate the platform:

• Payment processors and e-wallet providers — including FPX, DuitNow, Maybank, CIMB, Public Bank, Hong Leong and USDT TRC20 infrastructure providers — to process deposits and withdrawals.
• Identity and age verification providers — to confirm that you meet the minimum age of 21 and that submitted documents are authentic.
• Game content providers — who supply the RNG-certified slot, live dealer and sports betting engines. These providers may receive session tokens necessary to deliver gameplay; they are contractually restricted from using player data for purposes beyond service delivery.
• Fraud prevention and security services — to detect and block account takeover attempts, payment fraud and money laundering activity.
• Regulatory and law enforcement authorities — where disclosure is required by a lawful order, court direction or applicable statutory obligation.
• Professional advisors — including legal counsel and auditors, bound by applicable confidentiality obligations.

Where a third-party service provider processes personal data on our behalf, we maintain a data processing agreement requiring them to implement appropriate technical and organisational security measures and to process data only in accordance with our documented instructions.

7 Data Retention

Mega999 retains personal data for as long as your account remains active and for such additional period as is necessary to fulfil the purposes described in this Privacy Policy, comply with legal retention obligations, resolve disputes and enforce our agreements.

As a general guide, financial transaction records and KYC documents are retained for a minimum of five years following the closure of an account or the completion of the relevant transaction, in line with standard anti-money laundering retention practices. Technical logs are typically retained for a shorter period unless required for an ongoing investigation. Gameplay records may be retained for the life of the account and for a reasonable period thereafter.

Where data is no longer required for any lawful purpose, we take reasonable steps to securely delete or irreversibly anonymise it so that it can no longer be attributed to an identifiable individual.

8 Data Security

Mega999 implements technical and organisational measures designed to protect personal data against unauthorised access, accidental loss, alteration and unlawful destruction. These measures include:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and the Mega999 platform.
• Encrypted storage of sensitive fields including passwords, payment identifiers and identity document references.
• Role-based access controls limiting internal access to personal data to personnel with a legitimate operational need.
• Two-factor authentication options available to all registered players to protect account access.
• Continuous monitoring for anomalous login activity, unusual transaction patterns and potential security incidents.
• Regular security reviews of platform infrastructure and third-party integrations.

No online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your Mega999 login credentials and for notifying support promptly if you suspect unauthorised use of your account.

9 Your Rights as a Data Subject

Subject to applicable law and certain exceptions necessary to protect the platform's legal obligations and the rights of other individuals, you have the following rights in relation to your personal data held by Mega999:

• Right of access: to request a copy of the personal data we hold about you and information about how it is processed.
• Right of rectification: to request correction of inaccurate or incomplete personal data without undue delay.
• Right of erasure: to request deletion of personal data where it is no longer necessary for the purpose for which it was collected and no overriding legal retention obligation applies.
• Right to restrict processing: to request that we limit the processing of your data in certain circumstances, for example while the accuracy of data is contested.
• Right to data portability: to receive personal data you have provided to Mega999 in a structured, commonly used and machine-readable format where technically feasible.
• Right to object: to object to processing carried out on the basis of legitimate interests, including profiling for fraud prevention, where you have grounds relating to your particular situation.
• Right to withdraw consent: to withdraw any consent you have given for optional processing, such as marketing communications, at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of the above rights, contact Mega999 support through the live chat on the platform. We may need to verify your identity before acting on a request to ensure we do not disclose or delete data belonging to another person. We aim to acknowledge requests promptly and provide a substantive response within a reasonable timeframe.

10 International Data Transfers

Mega999 serves players located in Malaysia and processes the majority of data within infrastructure serving the region. Certain third-party service providers — including game content providers and fraud detection services — may operate servers located outside Malaysia. Where personal data is transferred internationally, Mega999 takes steps to ensure that an adequate level of protection is applied through contractual safeguards including data processing agreements with appropriate security and confidentiality obligations.

We do not transfer personal data to jurisdictions that do not provide a sufficient level of data protection without implementing appropriate safeguards. If you would like more information about the international transfer mechanisms we rely on, please contact support.

11 Responsible Gambling and Data Processing

Mega999 may use gameplay data, deposit frequency, session duration and wagering patterns to identify indicators of problem gambling behaviour. This processing is carried out in the legitimate interest of player welfare. Where such indicators are identified, we may display in-platform responsible gambling messaging, apply account-level interventions or refer the matter to our responsible gambling team.

If you activate a self-exclusion, the data associated with your self-exclusion request will be retained for the duration of the exclusion period and for a reasonable period thereafter to prevent re-registration. This retention is necessary to give effect to your self-exclusion decision and to fulfil the platform's responsible gambling obligations. Mega999 is strictly for players aged 21 and above.

12 Contact and Privacy Enquiries

If you have questions about this Privacy Policy, wish to exercise your data subject rights or want to raise a privacy concern, please contact the Mega999 support team through the 24/7 live chat available on the platform. You may also send a written enquiry using the email address displayed in the footer of this page.

Please include your registered username, the nature of your request and any relevant account reference. Do not include your password. We will confirm receipt of your enquiry and respond after completing any necessary identity verification steps.

This Privacy Policy is governed by the same legal framework as our Terms & Conditions. In the event of any inconsistency between this policy and the Terms & Conditions on a matter relating to personal data, this Privacy Policy shall take precedence.