Privacy Policy

This Privacy Policy ("Policy") is published by Megawin288 ("the Company", "we", "us", "our") and applies to all users ("you", "the User", "the Member") who access or interact with the Megawin288 platform, including the website at https://megawin288.cam, its mobile interface, and any associated digital services.

Megawin288 is committed to handling your personal data with care, transparency, and in accordance with applicable data protection principles. We collect and process personal information only to the extent necessary to operate our platform, provide gaming services, process financial transactions, comply with legal obligations, and improve the Member experience.

This Policy should be read alongside our Terms & Conditions, which govern your overall use of the Megawin288 platform. In the event of any conflict between this Policy and the Terms & Conditions on a data privacy matter, this Policy shall prevail.

The following terms carry the meanings ascribed to them below throughout this Privacy Policy:

• "Personal Data" — Any information that directly identifies or can reasonably be used to identify a living individual, including name, email address, identification documents, device identifiers, and financial account details.
• "Processing" — Any operation performed on personal data, including collection, storage, use, disclosure, transfer, alteration, or deletion.
• "Data Controller" — Megawin288, which determines the purposes and means of processing personal data collected through its platform.
• "Data Processor" — Any third-party service provider engaged by Megawin288 to process personal data on its behalf and under its documented instructions.
• "Consent" — A freely given, specific, and informed indication of the User's agreement to the processing of their personal data for a stated purpose.
• "Cookie" — A small data file stored on a User's device by a web browser, used to retain information about the User's preferences or session activity.
• "KYC" — Know Your Customer; the identity, age, and source-of-funds verification process conducted by Megawin288 in compliance with anti-money laundering obligations.
• "Platform" — The Megawin288 website, mobile site, and all associated digital services accessible at https://megawin288.cam.

Megawin288 collects personal data across several categories, depending on the nature of your interaction with our platform. The categories of data we may collect are set out in the table below:

Megawin288 does not intentionally collect sensitive personal data categories (such as racial or ethnic origin, religious beliefs, health data, or biometric data) unless strictly required by law or regulatory obligation.

Megawin288 collects personal data through the following means:

Megawin288 processes your personal data only where a valid lawful basis exists. The lawful bases on which we rely are set out below:

• Contractual Necessity: Processing required to fulfil the terms of the agreement between you and Megawin288, including account management, game provision, and payment processing.
• Legal Obligation: Processing required to comply with applicable laws, including anti-money laundering (AML) regulations, Know Your Customer (KYC) requirements, and age verification obligations.
• Legitimate Interests: Processing conducted for the legitimate interests of Megawin288, including fraud prevention, platform security, responsible gambling monitoring, and service improvement — provided such interests are not overridden by your fundamental rights.
• Consent: Processing conducted on the basis of your explicit, freely given consent — primarily for marketing and promotional communications. You may withdraw this consent at any time without affecting the lawfulness of prior processing.

All processing activities conducted by Megawin288 are documented in an internal data processing register. Data processors engaged by the Company are required to enter into binding data processing agreements and may only process your data under documented instructions from Megawin288.

Megawin288 does not sell, rent, or trade personal data to third parties for their own commercial purposes. We may share your personal data in the following limited circumstances:

• Service Providers: We engage trusted third-party service providers to support our operations, including payment processors, identity verification providers, data hosting infrastructure, customer support tools, and analytics platforms. All service providers are bound by contractual obligations to protect your data and may only use it as directed by Megawin288.
• Regulatory and Legal Authorities: Where required by applicable law, court order, or regulatory directive, Megawin288 may disclose personal data to competent governmental or law enforcement authorities. We will notify you of any such disclosure where legally permitted to do so.
• Anti-Fraud and AML Networks: Where fraud, money laundering, or other financial crime is detected or suspected, Megawin288 may share relevant data with industry fraud prevention bodies or law enforcement agencies.
• Business Transfers: In the event of a merger, acquisition, or transfer of all or part of the Megawin288 business, personal data held by the Company may form part of the transferred assets. You will be notified prior to any such transfer where your data will become subject to a materially different Privacy Policy.

In all cases of data sharing, Megawin288 applies the principle of data minimisation — disclosing only the minimum information necessary for the stated purpose. International transfers of data, where applicable, are conducted under appropriate safeguards.

Megawin288 uses cookies and similar tracking technologies to operate the platform effectively, maintain session continuity, analyse usage patterns, and improve the overall Member experience. The types of cookies we use are as follows:

• Strictly Necessary Cookies: Essential for the platform to function correctly. These cookies enable core features such as secure login sessions, shopping cart functionality, and account preferences. They cannot be disabled without materially impairing the platform experience.
• Performance & Analytics Cookies: Used to collect anonymous statistical data about how Members interact with the platform, including pages visited, time on site, and features used. This data is aggregated and used to improve platform performance and usability.
• Functional Cookies: Used to remember your preferences such as language settings, display options, and previously entered information, providing a more personalised experience on return visits.
• Marketing & Targeting Cookies: Used to display relevant promotional content and measure the effectiveness of our marketing campaigns. These cookies are only deployed with your consent and can be withdrawn at any time.

Megawin288 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. The general retention periods applied by Megawin288 are as follows:

• Account Data: Retained for the duration of the active account relationship plus a minimum of five (5) years following account closure, in accordance with financial record-keeping and AML requirements.
• KYC Documentation: Retained for a minimum of five (5) years from the date of account closure or the date of the relevant transaction, whichever is later, as required by anti-money laundering regulations.
• Transaction Records: All deposit, withdrawal, and gaming transaction records are retained for a minimum of five (5) years in accordance with applicable financial regulations.
• Support Correspondence: Live chat transcripts and email communications are retained for a minimum of two (2) years for quality assurance and dispute resolution purposes.
• Marketing Data: Communication preference records and consent logs are retained for the duration of the Member relationship and for three (3) years following any opt-out request.

Where personal data is no longer required for its original purpose and there is no overriding legal basis to retain it, Megawin288 will securely delete or anonymise the data in accordance with its internal data disposal procedures.

Megawin288 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security infrastructure includes the following controls:

• Encryption: All data transmitted between your device and the Megawin288 platform is encrypted using 256-bit SSL/TLS protocols. Data at rest is encrypted using industry-standard encryption algorithms.
• Access Controls: Access to personal data within our organisation is restricted on a strict need-to-know basis. All internal access is logged and subject to regular audits.
• Two-Factor Authentication: Members are encouraged to enable two-factor authentication (2FA) on their accounts. Our internal systems employ mandatory multi-factor authentication for all administrative access.
• Penetration Testing: Megawin288 conducts regular security assessments and penetration testing to identify and remediate vulnerabilities in our platform infrastructure.
• Incident Response: In the event of a personal data breach that poses a risk to Members' rights and freedoms, Megawin288 will take immediate remedial action and notify affected Members and relevant authorities within the timeframes required by applicable law.

As a Member of the Megawin288 platform, you have the following rights in relation to your personal data. You may exercise any of these rights by contacting our support team at the details provided in Section 13:

Megawin288 will respond to all verified data rights requests within thirty (30) calendar days of receipt. Where a request is complex or where we receive a high volume of requests, we may extend this period by a further sixty (60) days with notification to you. We do not charge a fee for processing data rights requests unless they are manifestly unfounded or excessive.

Please note that certain rights may be subject to limitations where processing is required to fulfil a legal obligation, to complete a contract to which you are a party, or to defend a legal claim. Where we are unable to fully comply with a request, we will explain the reason for any limitation applied.

The Megawin288 platform is strictly intended for persons aged 21 years and above. We do not knowingly collect, process, or retain personal data from individuals below this age threshold. Age verification is a mandatory component of the account registration and KYC process.

Where Megawin288 discovers or has reasonable grounds to believe that personal data has been collected from a person below the minimum age requirement, we will take immediate steps to:

• Suspend and close the relevant account without delay.
• Securely delete all personal data associated with the underage account.
• Return any funds deposited, in accordance with applicable regulations.
• Document the incident in our compliance records.

If you believe that an underage individual has registered an account on the Megawin288 platform, please notify our support team immediately at the contact details provided in Section 13 of this Policy.

Megawin288 reserves the right to amend, update, or replace this Privacy Policy at any time. Where material changes are made to the way in which we collect or process personal data, we will publish the updated Policy on this page and update the effective date accordingly. Where practicable and where the changes are significant, we will also notify active Members via their registered contact details.

Your continued use of the Megawin288 platform following the publication of an amended Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with any material amendment to this Policy, you should discontinue use of the platform and may request the closure of your account.

We recommend that Members review this Privacy Policy periodically to remain informed of how Megawin288 processes their personal data and of any changes that may affect their rights.

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by Megawin288, please contact us through the following channels. Our team is available to assist all Malaysian players across Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and nationwide.

When submitting a data rights request, please provide: your registered username, the specific right you wish to exercise, sufficient information to enable us to identify and locate your data, and any supporting documentation required to verify your identity. Megawin288 will respond within thirty (30) calendar days of receiving a complete and verified request.