Mega55 Privacy Policy – Malaysia Player Data Protection

This Privacy Policy is published by mega55 ("Company", "we", "our platform") and applies to all players who register, access, or use the services provided through the mega55 website and our mobile app. We understand that personal information is a valuable asset, and we are committed to handling it with the highest level of responsibility.

This policy clearly outlines:

• The types of personal information we collect from you when you use the mega55 platform.
• The purpose and legal basis for processing that information.
• Parties that may receive or access your information under limited circumstances.
• The security measures we take to protect your data.
• Your rights regarding the personal information we hold about you.

By using the mega55 platform, you agree to the terms of this Privacy Policy. If you do not agree, please discontinue use of the platform and contact us to request account deletion.

Mega55 collects personal information from various sources as you interact with our platform. Below are the categories of data we collect along with their purposes:

We do not collect more information than is necessary for the stated purposes. Any data collected through the KYC process, such as copies of identity cards or passports, is stored in isolated systems with strict access controls and is accessible only by authorised compliance staff.

Every piece of information we collect is used responsibly for legitimate and specific purposes. mega55 uses your personal data for the following purposes:

• Account Management: Creating, verifying and maintaining your player account, including identity verification via KYC.
• Financial Transaction Processing: Processing deposits, withdrawals, bonus payments and all financial matters related to your account securely and accurately.
• Platform Security: Detecting, investigating and preventing fraud, money laundering, collusion and any violations of the terms of service.
• Customer Support: Handling inquiries, complaints and support requests you submit via live chat, email or Telegram.
• Responsible Gaming: Monitoring gameplay patterns to identify players who may need support and ensuring player-set limits are respected.
• Legal Compliance: Meeting applicable legal and regulatory obligations, including reporting suspicious transactions to relevant authorities when required.
• Platform Improvements: Analyzing aggregated and anonymized usage patterns to improve the design, performance and user experience of the mega55 platform.
• Service Communications: Sending important notifications regarding your account, policy updates, technical disruptions and relevant security information.

If you agreed to receive marketing communications during registration, we may send you information about mega55's latest promotions and offers. You may withdraw this consent at any time through your account settings or by contacting our support team.

Mega55 upholds a strict policy on sharing players' personal information. We do not disclose your information to external parties except in the following limited and controlled circumstances:

• Trusted Service Providers: Third parties that provide essential services to us such as payment processing, KYC verification, cloud computing and analytics. All such providers are bound by strict confidentiality agreements and may only use your data for the contracted service purposes.
• Legal Obligations: When required by law, court order, or directive from a competent regulatory authority, mega55 will disclose only the information necessary within the specified scope.
• Crime Prevention: In cases where there is strong evidence of fraud, money laundering, or other criminal activity, we reserve the right to report and share relevant information with law enforcement authorities.
• Business Transfers: If mega55 is involved in any merger, acquisition, or asset sale, player information may be transferred as part of that business transaction, subject to prior notice being given to the affected players.

Mega55 continuously invests in cybersecurity infrastructure to ensure players' personal information is always protected against unauthorised access, data breaches, and cyber threats. The key security measures we employ include:

• 256-bit SSL Encryption: All communications between your device and mega55's servers are encrypted using TLS/SSL 256-bit protocols, making transferred data unreadable to any unauthorised third parties.
• Data-at-Rest Encryption: Personal data and financial information stored in our databases are encrypted using AES-256 encryption, the highest industry security standard.
• Layered Access Controls: Access to player data within the mega55 organisation is restricted based on the need-to-know principle. All access is logged and monitored on a regular basis.
• Two-Factor Authentication (2FA): mega55 provides and encourages the use of 2FA for all player accounts to add an extra layer of protection against unauthorised access.
• 24/7 Security Monitoring: A real-time threat monitoring system operates around the clock to detect and respond to any suspicious activity.
• Regular Security Audits: mega55 conducts regular penetration testing and independent security audits to identify and address any vulnerabilities before they can be exploited.

While we take all reasonable steps to protect your data, no system can be guaranteed 100% secure. In the event of any data security breach affecting players' personal information, mega55 is committed to notifying affected players within 72 hours of the incident being identified.

The mega55 platform uses cookies and similar tracking technologies to enhance the user experience, maintain session security and understand how players interact with our platform. The following are the types of cookies we use:

• Essential Cookies: Required for basic platform operations such as login authentication, session management, and security. These cookies cannot be disabled without affecting platform functionality.
• Preference Cookies: Saving your personal settings such as preferred language, display theme and game settings for your convenience on future visits.
• Analytics Cookies: Collecting aggregated and anonymized information about how players use the platform to help us improve its design and performance. We use internal analytics tools that do not share data with third-party analytics platforms.
• Security Cookies: Helping detect suspicious activity, unauthorized login attempts and automated bot attacks targeting player accounts.

You can manage cookies through your web browser settings. Disabling certain cookies may affect the functionality of the mega55 platform. For more information on how to manage cookies in your browser, please refer to your browser's help documentation.

Mega55 only retains your personal information for as long as necessary to fulfil the purposes stated in this Privacy Policy or as required by applicable law.

• Active Account Data: Retained for as long as your account is active and for 5 years after account closure for legal compliance and financial audit purposes.
• Financial Transaction Records: Retained for a minimum of 7 years as required by applicable anti-money laundering (AML) regulations.
• KYC Documents: Retained for 5 years after account closure, or longer if required by applicable regulatory law.
• Security Logs: Retained for 2 years for security incident investigation purposes.
• Support Communication Data: Retained for 3 years for service reference and improvement purposes.

Once the specified retention period has expired, your personal data will be securely deleted using non-recoverable methods, or permanently anonymised so that it can no longer be linked to your identity.

As a mega55 player, you have certain rights regarding the personal information we hold about you. We fully respect and facilitate the exercise of these rights:

To exercise any of the above rights, contact our data protection team by email at [email protected]. We will process your request within 30 business days. In complex cases, this period may be extended up to 60 days with prior notification to you.

The mega55 platform is an exclusive service for adults aged 18 and above. We do not knowingly collect, store or process personal information from individuals under the age of 18.

All account applicants are required to verify their age during registration and undergo a rigorous KYC process. Should mega55 discover that a minor's personal information has been inadvertently collected, we will take immediate action to delete that information and close the account without notice.

Mega55 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the technologies we use. All amendments will take effect immediately upon publication on our website.

For significant amendments that affect how we use or share your personal information, we will:

• Sending notifications to your registered email address at least 14 days before changes take effect.
• Displaying clear notices on the mega55 platform's home page.
• Requesting your renewed consent should any amendment require a fresh consent basis.

The "Updated" date shown at the top of this document indicates when this Privacy Policy was last reviewed. Your continued use of the mega55 platform after any amendments take effect will be considered your acceptance of the revised policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, the mega55 data protection team is ready to assist you.

You can also access the Responsible Gaming us for more information on how mega55 comprehensively protects player wellbeing, or check FAQ us for answers to frequently asked questions about privacy and account security.