Megawin Privacy Policy – Your Personal Data Protection

Megawin takes seriously our responsibilities as a data processor under Personal Data Protection Act 2010 (PDPA) Malaysia. This policy applies to all individuals who register for or use the Megawin platform, including Live Casino players, slots users, Sports Betting participants, VIP programme members, and visitors to our website.

Megawin operates as a data controller — we determine the purposes and means by which your personal data is processed. We do not sell, rent, or commercialise your personal data to third parties for their own marketing purposes. All data processing is carried out on a lawful basis, whether that is your consent, contractual necessity, or a legal obligation.

Megawin collects various categories of personal information depending on how you interact with our platform. The table below provides a transparent overview:

We no collect sensitive data such as health information, religious beliefs, or biometric data unless specifically required by applicable Malaysian law.

Megawin collects your personal information through three main channels:

• Directly from you: Information you provide when registering an account, completing your profile, contacting customer support, or filling in online forms on the Megawin platform.
• Automatically during use: Technical data such as IP address, device type, and browsing behaviour is collected automatically via cookies and similar tracking technologies when you use our platform.
• From third parties: In certain cases, Megawin may receive information from payment service providers (such as DuitNow, Touch 'n Go eWallet, GrabPay, or FPX) to verify transactions, or from identity verification agencies for KYC purposes.

Megawin uses your personal information for legitimate and specific purposes. We will not process your data for any incompatible purpose without notifying you in advance. The primary purposes for which data is used are:

• Account Management: Creating and managing your Megawin account, verifying your identity at login, and keeping your account secure.
• Transaction Processing: Processing deposits (from RM 10) and withdrawal of winnings via DuitNow, GrabPay, Boost, ShopeePay, Touch 'n Go eWallet, FPX Maybank2u, CIMB Clicks, and other available methods.
• Service Delivery: Gives you access to all Megawin games, including slots, live baccarat, live blackjack, e-sports, virtual sports, and live matches.
• Legal Compliance: Meeting KYC (Know Your Customer), AML (Anti-Money Laundering), and other statutory reporting obligations under Malaysian law.
• Security & Fraud Prevention: Detecting and preventing fraudulent activity, money laundering, or platform abuse.
• Marketing (with consent): Sending you promotional information, bonus offers, and relevant notifications — only where you have given your explicit consent.
• Product Improvement: Analysing usage patterns to improve the overall playing experience, interface, and services on the Megawin platform.
• Customer Support: Processing enquiries, complaints, and support requests efficiently and in a timely manner.

Megawin does not sell or rent your personal data to any third party. However, there are limited situations where we may need to share your information with certain parties:

• Payment Service Provider: The transaction information required is shared with DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, and FPX providers solely for the purpose of processing your deposits and withdrawals.
• Technology Providers: Game software providers, cloud infrastructure, and customer support platforms that help us operate Megawin. All such providers are bound by strict confidentiality agreements.
• Identity Verification Agency: For KYC purposes, identity information may be verified through qualified third-party services.
• Statutory Authorities: Megawin will disclose information to Malaysian authorities (such as the police, courts, or enforcement agencies) when required by law or a valid court order.

Megawin continually invests in data security to protect your personal information from unauthorised access, modification, disclosure, or destruction. Key security measures we have implemented:

• 256-bit SSL/TLS Encryption: All communications between your device and Megawin's servers are encrypted using the latest SSL/TLS protocols. This ensures that data transmitted during login, deposits, or withdrawals cannot be intercepted.
• Two-Factor Authentication (2FA): Megawin offers two-factor authentication for added login security via OTP sent by SMS to your Malaysian phone number.
• 24/7 Security Monitoring: Our systems are continuously monitored to detect suspicious activity, intrusion attempts, or anomalies that may indicate a data breach.
• Internal Access Controls: Access to player data within Megawin's systems is restricted on a need-to-know basis — only staff who require access to carry out their duties are permitted.
• Secure Data Storage: Data is stored on secure servers with comprehensive physical and cyber protections, including firewalls, intrusion detection systems, and regular backups.
• Regular Security Audits: Megawin conducts regular penetration testing and independent security audits to identify and address vulnerabilities.

Megawin retains your personal data only for as long as necessary to fulfil the purposes set out in this Privacy Policy, or as required under applicable Malaysian law.

• Active Account Data: For as long as your Megawin account remains active, we retain all profile information, transaction history, and relevant gameplay records.
• After Account Closure: After account closure, financial and transaction records are retained for 7 years to fulfil legal and accounting obligations under Malaysian law.
• Log & Technical Data: System logs and technical data are retained for a maximum of 12 months for security and technical troubleshooting purposes.
• Marketing Data: Retained until you withdraw consent or request deletion.

When data is no longer needed, it is securely deleted or anonymised so that it can no longer be linked back to you.

The Megawin website uses cookies and similar tracking technologies to enhance your experience, analyse traffic, and maintain platform security. Below are the types of cookies we use:

You can manage or decline optional cookies through your web browser settings. Please note that declining mandatory cookies may affect core functionality on the Megawin platform.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and Megawin's policies, you have the following rights regarding your personal data:

In the course of operating the Megawin platform, there are circumstances where your personal data may be transferred to or processed in countries other than Malaysia — for example, when using international cloud infrastructure or services from global technology providers.

When such transfers occur, Megawin ensures your data is adequately protected through:

• Data transfer agreements compliant with Malaysia's PDPA requirements.
• Standard contractual clauses that require data recipients to uphold an equivalent or higher level of data protection.
• Selecting providers that operate in jurisdictions with robust data protection laws.

Megawin will not transfer your personal data to countries without adequate data protection without notifying you and obtaining appropriate consent.

Megawin reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, new technologies, legal requirements, or other operational reasons. When we make material changes, we will:

• Updating the "Last Updated" date at the top of this page.
• Sending a notification to your registered email address if the changes materially affect how we use or share your data.
• Displaying a notice on the Megawin homepage for at least 14 days after the changes take effect.

Your continued use of the Megawin platform after changes are published constitutes your acceptance of the updated Privacy Policy. We encourage you to review this page periodically.

If you have any questions, concerns, or complaints regarding how Megawin handles your personal data, or if you wish to exercise any of the rights set out in this Privacy Policy, please contact our Data Protection Officer:

• Email: support@megawin-khelo.com
• Live Chat: Available 24/7 on the Megawin platform
• Response Time: We will acknowledge receipt of your request within 3 business days and resolve it within 30 business days.