1mega888 Privacy Policy
for Malaysian Players

Introduction

This Privacy Policy describes how 1mega888 ("we", "us", "our", "platform") collects, uses, stores and protects personal information provided by players ("you", "your") who access or register with 1mega888 at https://1mega888.cam. The policy applies to account holders and visitors in Malaysia and any other jurisdiction where 1mega888 is accessible.

By creating a 1mega888 account, depositing funds, placing wagers or otherwise interacting with the platform, you acknowledge that you have read this Privacy Policy and agree to the practices described within it. If you do not agree to any part of this policy, you must discontinue use of 1mega888 immediately. Continued use following a published amendment constitutes acceptance of the revised policy.

Definitions

In this Privacy Policy, "Personal Data" means any information relating to an identified or identifiable natural person, including name, email address, phone number, device identifiers, payment details and account activity. "Processing" means any operation performed on personal data, including collection, storage, use, transfer or deletion. "Data Subject" means the individual to whom personal data relates — in most cases the registered 1mega888 player.

"Third-Party Processor" means an external organisation engaged by 1mega888 to perform specific services that require access to personal data, such as payment service providers operating DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank2u, CIMB Clicks and Public Bank integrations. "Cookies" means small data files placed on a device to support platform functionality and performance monitoring.

Information We Collect

3.1 Registration Information

When you create a 1mega888 account, we collect the details you provide during registration, which may include full name, date of birth, email address, phone number, preferred username and residential location (city or state in Malaysia, such as Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya or Shah Alam).

3.2 Verification and Identity Documents

1mega888 may request copies of identification documents — such as a Malaysian identity card or passport — to verify age, identity and payment ownership. These documents are used solely for verification and responsible gambling compliance and are stored securely.

3.3 Payment and Transaction Data

When you make a deposit or withdrawal using Maybank2u, CIMB Clicks, Public Bank, Hong Leong Connect, Touch 'n Go eWallet, Boost, GrabPay, DuitNow or FPX, 1mega888 records the transaction amount, currency (MYR), method, date, time and reference number. Full bank account numbers, card numbers and e-wallet credentials are processed directly by the respective payment provider and are not stored by 1mega888 in unencrypted form.

3.4 Usage and Technical Data

1mega888 automatically collects certain technical information when you access the platform, including IP address, browser type, operating system, device identifiers, pages visited, session duration, game selections and betting activity. This data helps with platform security, performance optimisation and responsible gambling monitoring.

3.5 Communications

Where you contact 1mega888 support, submit a complaint or respond to a survey, we retain a record of the communication together with the content and any attachments provided.

How We Use Personal Data

1mega888 uses personal data for the following purposes:

• Creating and maintaining your registered account on the platform.
• Processing MYR deposits and withdrawals through supported Malaysian payment channels.
• Verifying age, identity and payment ownership to comply with applicable requirements and prevent underage access.
• Detecting, investigating and preventing fraud, money laundering, security threats and prohibited account behaviour.
• Administering and enforcing responsible gambling tools, including deposit limits, cooling-off periods and self-exclusion arrangements.
• Providing customer support and responding to account, transaction or platform queries.
• Sending essential account communications such as security alerts, deposit confirmations and policy update notices.
• Improving platform performance, navigation structure and game availability based on aggregated usage patterns.
• Complying with applicable legal, regulatory or contractual obligations relevant to 1mega888.

Legal Basis for Processing

1mega888 processes personal data on the following bases: performance of the contract between 1mega888 and the registered player, including account administration and payment processing; compliance with applicable legal or regulatory obligations, including age verification and responsible gambling requirements; legitimate interests pursued by 1mega888 in operating a secure and well-functioning platform, provided those interests are not overridden by the rights of the data subject; and, where required, consent given by the player for a specific processing purpose.

Where processing is based on consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal, and it may limit access to certain optional features.

Cookies and Tracking Technologies

1mega888 uses cookies and similar technologies to support essential platform functions, remember login sessions, detect suspicious access patterns and measure how different sections of the platform perform. Certain cookies are strictly necessary and cannot be disabled without affecting platform functionality. Other cookies support analytics or optional personalisation features.

Most modern browsers allow you to manage or refuse cookies through browser settings. Disabling essential cookies may prevent correct account loading, session maintenance or payment processing on 1mega888.

Data Sharing and Disclosure

1mega888 does not sell personal data. We may share personal data with the following categories of recipient in order to operate the platform:

• Payment processors — organisations operating DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank2u, CIMB Clicks, Public Bank and Hong Leong Connect integrations, for the sole purpose of processing deposits and withdrawals.
• Identity verification services — providers engaged to confirm age, identity documents or payment ownership where required.
• Security and fraud prevention providers — services used to detect unauthorised access, duplicate accounts or financial crime indicators.
• IT and hosting providers — organisations that maintain the infrastructure on which 1mega888 operates, under data processing agreements that restrict their use of personal data.
• Legal and regulatory authorities — where 1mega888 is lawfully required to disclose information in response to an official request, court order or applicable legal obligation.

All third-party processors engaged by 1mega888 are required to handle personal data only for specified purposes and in accordance with appropriate data protection standards.

International Transfers

Where personal data is transferred to or stored in a jurisdiction outside Malaysia, 1mega888 takes reasonable steps to ensure that appropriate safeguards are in place, consistent with the nature of the data and the purposes for which it is processed. Players based in Malaysia should note that their data may be handled by service providers operating in other countries where data protection laws may differ.

Data Retention

1mega888 retains personal data for as long as your account remains active and for a reasonable period thereafter, in order to fulfil the purposes described in this policy, resolve disputes, enforce agreements and comply with applicable legal obligations.

Transaction records, identity verification documents and responsible gambling history may be retained for a longer period where required by applicable financial, anti-money-laundering or responsible gambling rules. When personal data is no longer required and no legal obligation to retain it exists, 1mega888 takes reasonable steps to delete or anonymise that data securely.

Security Measures

1mega888 implements technical and organisational security measures intended to protect personal data from unauthorised access, accidental loss, disclosure, alteration and destruction. These measures include encrypted data transmission for account and payment interactions, access controls that limit employee and processor access to personal data on a need-to-know basis, and periodic reviews of security practices.

No internet transmission or electronic storage system can be guaranteed to be completely secure. You are responsible for safeguarding your 1mega888 login credentials and for using a secure, private internet connection when accessing your account. If you suspect unauthorised access to your account, contact 1mega888 support promptly.

User Rights

Subject to applicable law and the specific circumstances of your request, you may have the following rights regarding personal data held about you by 1mega888:

• Right of access — to request a summary of personal data held about you.
• Right to rectification — to request correction of inaccurate or incomplete personal data.
• Right to erasure — to request deletion of personal data where no lawful basis for continued retention exists.
• Right to restrict processing — to ask 1mega888 to limit how your data is used in certain circumstances.
• Right to object — to object to processing based on legitimate interests where your individual circumstances provide grounds to do so.
• Right to data portability — where technically feasible and applicable, to receive a copy of personal data you provided in a structured, commonly used format.

To exercise any of these rights, contact 1mega888 support through the platform dashboard or by writing to [email protected] (plain text — this address is not a clickable link). We will respond within a reasonable period and may require identity verification before acting on a request. Requests to delete data that 1mega888 is lawfully required to retain may be declined with an explanation.

Children and Underage Access

1mega888 is strictly for persons aged 21 and above. We do not knowingly collect personal data from anyone below the age of 21. If we become aware that an account has been created or used by a person below the minimum age, that account will be suspended, any deposits will be returned where practicable and the associated personal data will be managed in accordance with applicable legal requirements.

Parents and guardians who believe that a minor may have registered with 1mega888 should contact support immediately so that prompt action can be taken.

Changes to This Privacy Policy

1mega888 may update this Privacy Policy from time to time to reflect changes in platform operations, payment services, applicable law or data protection practices. Material updates will be published on this page with a revised effective date. Where a change is significant, 1mega888 may provide additional notice through the platform dashboard or account communications.

Continued use of 1mega888 after a policy update has been published constitutes acceptance of the revised terms. If you do not agree to the updated policy, you must close your account and cease using the platform.

Contact Us

If you have a question, concern or request regarding this Privacy Policy or the personal data that 1mega888 holds about you, please contact our support team through the live chat or help section available on the platform dashboard. You may also write to the following address as plain text — it is not a clickable link and should not be used for spam or unsolicited communications:

1mega888 aims to respond to privacy-related requests within a reasonable timeframe. Complex requests, identity verification requirements or high volumes of enquiries may extend the response period. We will notify you of the expected timeline where a delay is anticipated.