Privacy Policy of Mega918

This Privacy Policy ("Policy") describes how Mega918 ("we", "us", "our", "the Platform") collects, processes, stores, and protects personal data provided by or generated from users ("Player", "User", "you") who access or use the Mega918 website at https://mega918.cam and all associated services, including account registration, deposits, withdrawals, gameplay, and customer support interactions.

Mega918 takes the privacy of its players seriously. We are committed to handling your personal data transparently, lawfully, and only to the extent necessary to deliver and improve our services. This Policy applies to all data collected in connection with your use of the Platform, regardless of the device or method of access.

This Privacy Policy should be read alongside our Terms & Conditions and our Responsible Gambling Policy. By registering an account or continuing to use the Mega918 platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

For the purposes of this Privacy Policy, the following terms shall have the meanings set out below:

Mega918 collects personal data in several categories depending on your level of interaction with the platform. The categories below describe the types of information we may hold about you:

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health information, or biometric data unless specifically required for regulatory compliance purposes and only with your explicit consent.

Mega918 collects personal data through the following channels:

• Direct Submission: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal request, or contacting customer support.
• Automated Technologies: Technical and behavioural data collected automatically when you access the Platform, including via cookies, server logs, and session tracking tools.
• Payment Processors: Transaction confirmation data provided by third-party payment gateways such as FPX, DuitNow, and e-wallet providers, limited to what is necessary to reconcile deposits and withdrawals.
• Identity Verification Providers: Where we use a third-party KYC verification service to validate your identity documents, that service may return data to us confirming your identity status.
• Fraud Detection Systems: Automated risk assessment tools that analyse account activity patterns to detect and prevent fraudulent behaviour, money laundering, and policy violations.

Mega918 processes your personal data for the following specific purposes:

• Account Management: To create and maintain your registered account, including authentication, security, and account tier management.
• Transaction Processing: To process deposits and withdrawals in Malaysian Ringgit (MYR/RM) through your chosen payment method, and to maintain accurate financial records.
• Identity & Age Verification: To comply with our obligations to verify that all players are aged 21 or above and to confirm that players are who they claim to be.
• Legal & Regulatory Compliance: To meet anti-money laundering (AML) obligations, respond to lawful requests from regulatory or law enforcement authorities, and retain records as required by applicable law.
• Responsible Gambling: To operate player protection tools including deposit limits, loss limits, self-exclusion, and session time controls, and to monitor accounts for signs of problem gambling behaviour.
• Customer Support: To respond to your enquiries, resolve disputes, and provide technical assistance.
• Platform Improvement: To analyse usage patterns, diagnose technical issues, and improve the performance and features of the Mega918 platform.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates, where you have provided consent to receive such communications. You may withdraw this consent at any time.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, collusion, multi-accounting, and other policy breaches.

Mega918 relies on the following legal bases to process your personal data, as applicable to each processing activity:

Mega918 does not sell, rent, or otherwise transfer your personal data to third parties for their own commercial use. We may, however, share your data with the following categories of recipients where necessary and lawful:

• Payment Service Providers: Processing partners including FPX operators, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, and banking institutions such as Maybank, CIMB, and Public Bank, solely for the purpose of processing your deposits and withdrawals.
• Identity Verification Providers: Third-party KYC and AML compliance services engaged to verify your identity and age in accordance with our regulatory obligations.
• Game Studio Providers: Licensed third-party game developers whose platforms are integrated into Mega918 may receive limited technical data necessary to operate game sessions correctly.
• IT and Infrastructure Providers: Hosting, cloud storage, and cybersecurity service providers who process data on Mega918's behalf under contractual data processing agreements.
• Regulatory and Law Enforcement Authorities: Where we are required by law or a binding regulatory instruction to disclose your data, we will do so to the minimum extent required and, where legally permissible, notify you of any such disclosure.
• Professional Advisors: Legal, accounting, or audit professionals where necessary in connection with the operation or protection of our business, subject to professional confidentiality obligations.

Mega918 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required to meet our legal and regulatory obligations. The following general retention guidelines apply:

• Account and Transaction Records: Retained for a minimum of five (5) years from the date of account closure or the last recorded transaction, in line with standard AML record-keeping requirements.
• KYC and Identity Documents: Retained for a minimum of five (5) years following the completion of the relevant KYC process or account closure, whichever is later.
• Customer Support Records: Retained for up to three (3) years from the date of the last interaction, unless the matter is subject to an ongoing dispute or investigation.
• Marketing Consent Records: Retained for as long as your account is active or until you withdraw consent, plus a reasonable period thereafter to demonstrate compliance.
• Technical and Log Data: Typically retained for up to twelve (12) months for security and diagnostic purposes, after which it is anonymised or deleted.

Upon the expiry of the applicable retention period, personal data will be securely deleted or anonymised so that it can no longer be linked to you as an individual.

Mega918 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers.
• Encrypted storage of passwords using industry-standard hashing algorithms — we do not store passwords in plain text.
• Restricted access controls ensuring that personal data is accessible only to authorised personnel with a documented need to access it.
• Regular security audits, vulnerability assessments, and penetration testing of our platform infrastructure.
• Two-factor authentication (2FA) options available for registered player accounts.
• Ongoing staff training on data protection responsibilities and secure data handling practices.

While Mega918 takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is entirely risk-free. You are also responsible for maintaining the confidentiality of your account credentials and for ensuring the security of the device you use to access the Platform.

Mega918 uses cookies and similar tracking technologies to operate essential platform functions, maintain session continuity, analyse user behaviour, and improve the overall player experience. The categories of cookies we use are described below:

You may manage your cookie preferences through your browser settings. Disabling non-essential cookies may affect certain features of the platform, though core gameplay and account functions will remain accessible. Note that clearing your browser cookies will log you out of your active session.

Subject to applicable law and certain regulatory limitations, you have the following rights in relation to the personal data Mega918 holds about you. You may exercise these rights at any time by contacting our support team.

To exercise any of the above rights, please submit a written request to our support team at [email protected]. We will respond within a reasonable timeframe and in any event no later than 30 days from receipt of a valid request. We may need to verify your identity before processing any data rights request.

Please note that certain rights are subject to limitations where our legal obligations require us to retain or process data — for example, financial records and KYC documentation required for AML compliance cannot be deleted on demand. We will explain any such limitations clearly when responding to your request.

Mega918 is strictly for players aged 21 years and above. We do not knowingly collect, process, or retain personal data from individuals under the age of 21. Age verification is a mandatory step in the account registration and KYC process.

If Mega918 becomes aware that personal data has been collected from a person under the age of 21 without appropriate parental or guardian consent, we will take immediate steps to delete that data and close the associated account. Any deposits made by an underage user will be returned to the originating payment method following verification.

Mega918's primary operations and data storage infrastructure are maintained within secure hosting environments. In certain circumstances, personal data may be processed by third-party service providers whose operations are based outside Malaysia — for example, game studios, identity verification providers, or cloud infrastructure partners.

Where personal data is transferred outside of Malaysia to a third country, Mega918 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under Malaysian data protection principles. These safeguards may include contractual data processing agreements, standard contractual clauses, or transfers to jurisdictions that maintain adequate data protection frameworks.

By using the Mega918 platform, you acknowledge that your personal data may be transferred to and processed in countries outside Malaysia in the circumstances described above, subject to the protections outlined in this Policy.

The Mega918 platform may, from time to time, reference or integrate with third-party services such as licensed game studios or payment gateways. While we take care to work with reputable partners, Mega918 does not control and is not responsible for the privacy practices, security measures, or data handling of third-party services.

This Privacy Policy applies solely to data collected and processed by Mega918 in connection with the Platform. We encourage you to review the privacy policies of any third-party service providers whose services you access through or in connection with the Mega918 platform.

Mega918 reserves the right to update or amend this Privacy Policy at any time. Where changes are material — for example, where we introduce a new category of data processing or change the basis on which we share data with third parties — we will notify registered players via email or a prominent platform notification prior to the change taking effect.

The "Last Updated" date displayed at the top of this page indicates when the Policy was most recently revised. Your continued use of the Mega918 platform following any update to this Policy constitutes your acceptance of the revised terms. We recommend that you review this Policy periodically to stay informed of how we handle your personal data.

If you have any questions, concerns, or requests regarding this Privacy Policy or the way in which Mega918 processes your personal data, please contact our Data & Privacy support team. We are committed to responding to all enquiries promptly and transparently.

For matters relating to responsible gambling and player protection tools, please visit our Responsible Gambling page. For questions about your account terms and conditions, please refer to our Terms & Conditions.