Mega38 Privacy Policy – Malaysian Member Personal Data Protection

01 Introduction

Mega38 ("we", "Platform") takes the protection of all members' and visitors' personal data at mega38.bio seriously. This Privacy Policy is prepared in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international security standards.

The purpose of this document is to provide a clear and transparent overview of the types of data we collect, how it is used, who it may be shared with, and what your rights are as the owner of that data. We believe transparency is the foundation of trust, and your trust is something we do not take lightly.

This policy applies to all your interactions with mega38, whether through the website, Android and iOS mobile apps, customer support live chat, or any other official communication channels.

02 Personal Data We Collect

We collect various categories of data depending on how you interact with our platform. Below is a full breakdown of the data types involved:

All data is collected either directly from you during registration and platform use, or automatically through cookie technology and session monitoring. We do not collect sensitive data such as medical information or religious beliefs unless you voluntarily provide it in communications with our support team.

03 How We Use Your Data

Collected data is used responsibly and limited to the following legitimate purposes:

• Account Management: Creating, verifying, and maintaining your account, including the required KYC process.
• Transaction Processing: Processing all deposits, withdrawals, and bonus payments securely and accurately.
• Platform Security: Detecting and preventing fraud, money laundering, and unauthorised access to your account.
• Legal Compliance: Fulfilling reporting obligations to the relevant authorities in accordance with applicable Malaysian law.
• Customer Support: Resolving complaints, responding to enquiries, and providing effective technical support.
• Responsible Gambling: Monitoring gambling patterns to identify members who may need responsible gambling support.
• Service Improvement: Analysing usage data in aggregate (without identifying individuals) to improve the platform experience.
• Marketing Communications: Sending promotional information and exclusive offers — only if you have consented to receive them.

04 Data Sharing with Third Parties

Mega38 does not sell, rent, or disclose your personal data to third parties for independent marketing purposes. However, in operating the platform, we work with several categories of trusted partners:

All our third-party partners are bound by strict data protection agreements and are not permitted to use your data for any purpose other than what has been agreed upon. We conduct periodic reviews of all partners to ensure ongoing compliance with our privacy standards.

05 Data Security Measures

Mega38 continuously invests in security infrastructure to ensure your personal data remains protected at all times. Our approach to security is comprehensive and multi-layered:

• Data Encryption: All data in transit is protected with TLS 1.3 protocol and SSL 256-bit encryption. Stored data is also encrypted using the AES-256 standard.
• Access Control: A role-based access control (RBAC) system ensures that only authorized staff can access personal data, and every access is logged for audit purposes.
• 24/7 Monitoring: A real-time threat detection system monitors all network activity and generates immediate alerts upon detecting suspicious patterns.
• Penetration Testing: We conduct regular security tests by independent security experts to identify and patch any vulnerabilities before they can be exploited.
• Data Backup: Data is automatically backed up to multiple server locations to ensure service continuity and data recovery in the event of a system failure.
• Staff Training: All mega38 staff undergo regular information security and data privacy training as part of our security culture.

06 Data Retention Period

Mega38 retains your personal data only for as long as necessary for the stated purposes or as required by Malaysian law. The following are our data retention guidelines:

• Active Account Data: Retained for as long as your account is active and for 5 years after account closure for compliance purposes.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysia's Companies Act and tax legislation requirements.
• KYC & Verification Logs: Retained for 5 years after the business relationship ends, in accordance with AML requirements.
• Support Communication Data: Retained for 2 years from the date of last interaction.
• Technical Log Data: Retained for 90 days for security and system debugging purposes.

Once the retention period expires, data will be securely deleted using methods that ensure it cannot be recovered. For data that must be retained longer for legal reasons, we will notify you accordingly.

07 Your Rights as a Data Owner

Under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding your personal data:

To submit any request relating to your data rights, please contact our customer support team via live chat on the platform. We will process your request within 14 business days and provide a written response.

08 Cookies & Tracking Technologies

Mega38 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

• Essential Cookies: Required for core platform functions such as login, session management, and security. These cookies cannot be disabled.
• Functional Cookies: Saving your preferences such as language, display settings, and game preferences for your convenience.
• Analytics Cookies: Collecting usage data in aggregate and non-identifiable form to help us understand how users interact with the platform.
• Security Cookies: Used to detect suspicious activity, protect accounts from unauthorised access, and verify user identity.

You can manage cookie settings through your web browser preferences. However, disabling certain cookies may affect the functionality and user experience of the mega38 platform.

09 Children's Privacy

The mega38 platform is strictly for individuals aged 18 and above. We do not knowingly collect or process personal data from anyone under the age of 18.

If we determine that personal data of a minor has been collected without proper age verification, we will take immediate steps to delete that information and close the account in question. Parents or guardians who believe their child has registered on our platform should contact our support team immediately.

10 Amendments to This Privacy Policy

Mega38 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our business practices, new legal requirements, or improvements to how we protect your data.

• Any material changes will be communicated to you via your registered email at least 14 days before taking effect.
• The "Updated" date at the top of this page will always reflect the latest version of this policy.
• Continued use of the platform after amendments take effect constitutes your acceptance of the updated terms.
• All previous versions of the Privacy Policy are archived and can be requested through customer support for your reference.

We encourage you to review this page regularly so you are always informed of how we protect your information. If you have any questions or concerns about this policy, our support team is available 24 hours a day, 7 days a week.