Mega888 RTP Privacy Policy – A Commitment to Protecting Malaysian Players' Data

Mega888 RTP collects your personal data through several methods — directly from you during registration and platform use, automatically through tracking technologies, and in certain circumstances from legitimate third parties. The following are the types of data we collect:

Personal data collected by Mega888 RTP is used solely for legitimate, clearly stated purposes. We do not use your data for any purpose for which you have not given your consent.

• Account management: Creating and managing your player account, processing registrations, verifying identity and maintaining account security. This includes KYC (Know Your Customer) processing as required under iGaming compliance obligations.
• Financial transaction processing: Processing deposits and withdrawals via your chosen Malaysian payment method — Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow and FPX. Transaction records are retained for audit and financial verification purposes.
• Provision of gaming services: Gives you access to all games available on Mega888 RTP — slots, live casino, table games, football betting, badminton, and more. Game records are stored to ensure fairness and the integrity of results.
• Customer support: We handle enquiries, complaints, and disputes submitted via live chat or email. Conversation transcripts are retained for reference and service quality improvement.
• Responsible gaming: We monitor gameplay patterns to detect signs of problem gambling and flag players who may need attention. This is a core responsibility we take seriously.
• Fraud prevention and anti-money laundering: Analysing transaction patterns and account behaviour to detect suspicious activity in line with applicable AML (Anti-Money Laundering) obligations.
• Marketing communications (with your consent): Sending information about the latest promotions, new bonuses and platform updates where you have opted in to receive such communications. You may withdraw this consent at any time.
• Platform improvements: Analysing aggregated, anonymised usage data to understand how players use the platform, for the purpose of technical improvements and user experience enhancement.

Mega888 RTP does not sell your personal data. However, there are limited circumstances in which we need to share data with trusted third parties in order to deliver our services:

• Payment providers: Data required to process transactions is shared with licensed payment providers such as Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow and FPX processors. This sharing is kept to a minimum and limited strictly to the data needed to complete each transaction.
• Game providers: Game providers such as Evolution Gaming and SA Gaming may receive the minimum game data required to process Live Casino rounds. These providers are internationally certified and have their own privacy policies.
• Technology service providers: Companies that assist us in operating the platform's technical infrastructure — such as cloud service and cybersecurity providers — may process technical data in their capacity as data processors under strict confidentiality agreements.
• Legal authorities: Mega888 RTP will disclose personal data to the relevant Malaysian or international authorities where required by law, court order, or to comply with AML obligations. This is a legal obligation we cannot refuse.
• Identity verification: Third-party identity verification services may be used to validate the details you provide during the KYC process. Any data shared is kept to the minimum necessary and is strictly limited to verification purposes.

All third parties with whom we share data are bound by data processing agreements that require them to protect your data to a standard no lower than our own. We do not permit them to use your data for their own purposes.

Mega888 RTP implements a range of technical and organisational measures to protect your personal data from unauthorised access, loss, alteration, or disclosure:

• 256-bit SSL Encryption: All communications between your browser and our servers are protected by Transport Layer Security (TLS) encryption with a 256-bit key length — the same standard used by Malaysia's leading financial and banking institutions.
• Data-at-rest encryption: Sensitive data stored in our database — including personal and financial information — is encrypted at rest using AES-256. Data is never stored in plain text.
• Two-factor authentication (2FA): Players can enable 2FA for an additional layer of account security. We encourage all players to activate this feature, especially those with larger account balances.
• 24-hour security monitoring: Automated monitoring systems operate around the clock to detect unauthorised access attempts, suspicious login patterns, and unusual account activity.
• Internal access controls: Only Mega888 RTP staff with a legitimate operational need may access players' personal data — and only the data required for their specific role. All access is logged and continuously monitored.
• Regular security testing: Our platform undergoes regular penetration testing and security audits conducted by independent cybersecurity professionals to identify and address vulnerabilities before they can be exploited.

As a Mega888 RTP player, you have the following rights regarding your personal data. We are committed to making it easy for you to exercise these rights:

• Right to access data: You have the right to request a copy of the personal data we hold about you. Requests will be processed within 30 working days. The first copy is provided free of charge; additional requests may be subject to a reasonable administrative fee.
• Right to rectify data: If any personal data we hold about you is inaccurate or out of date, you have the right to request a correction. You can also update basic information such as your phone number and email address directly through your account settings.
• Right to erasure ("right to be forgotten"): You have the right to request deletion of your personal data under certain circumstances — particularly when the data is no longer needed for the purpose it was originally collected. Please note that we may be required to retain certain data to fulfil legal record-keeping obligations (typically 5 years for financial records).
• Right to restrict processing: You have the right to request that we restrict the processing of your data in certain situations — for example, while you are disputing the accuracy of your data or while we are considering your erasure request.
• Right to data portability: You have the right to receive your personal data in a machine-readable format for transfer to another service provider where applicable.
• Right to object to processing: You have the right to object to the processing of your data for direct marketing purposes at any time. For other processing activities based on legitimate interests, you may object if you have specific reasons relating to your situation.
• Right to withdraw consent: For data processing that relies on your consent (such as marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing that took place prior to withdrawal.

To exercise any of the above rights, please contact us by email at support@mega888rtp.xyz with the subject line "Privacy Rights Request". We aim to respond within 5 working days and complete the request within 30 working days.

Mega888 RTP uses cookies and similar tracking technologies to enhance your experience on our platform. Below is an explanation of the types of cookies we use and how you can manage them.

• Essential cookies (required): These cookies are required for the platform to function properly — including maintaining your login session, remembering your language preference and ensuring transaction security. Without them, the platform cannot operate. Essential cookies cannot be disabled.
• Performance and analytics cookies: These cookies collect information about how you use our platform — which pages you visit most often, time spent, and any errors encountered. This data is used in aggregate and anonymised form to improve the platform. You may opt out.
• Functional cookies: These cookies remember your personal preferences — such as preferred text size and specific game settings — to deliver a more personalised experience. You may disable these cookies, though doing so may affect certain platform features.
• Marketing cookies (with consent): Where you have given your consent, these cookies allow us to display advertisements more relevant to your interests. Marketing cookies are never activated without your explicit permission.

You can manage your cookie preferences through your web browser settings or via the cookie settings panel within our platform. Please note that disabling certain cookies may affect platform functionality.

Mega888 RTP enforces a minimum age requirement of 21 years for all platform users. We do not knowingly collect or process personal data from individuals under the age of 21.

• Age Verification: We implement an age verification process at registration and reserve the right to request identity verification (MyKad or passport) at any time to confirm a player's age, particularly before processing a first withdrawal.
• Underage account closure: If we determine that an account was registered by an individual under the age of 21, the account will be closed immediately. All funds will be forfeited and will not be refunded, as use of the platform by underage individuals is a violation of our terms.
• Reporting: If you have reason to believe that someone under the age of 21 has registered an account on Mega888 RTP, please report it to us at support@mega888rtp.xyz immediately so we can take the appropriate action.

Mega888 RTP reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. We are committed to keeping you informed of any material changes:

• Notice of changes: You will be notified of any material changes to this Privacy Policy via email or a prominent notice on the platform at least 14 days before the changes take effect.
• Latest version: The "Updated" date at the top of this page always reflects the latest version. We encourage you to check back periodically.
• Consent for material changes: For significant changes to how we use your data, we will seek your fresh consent where required under applicable law.