mega 8 Official Data Protection Document

Mega 8 Privacy Policy – Our Commitment to Protecting Your Data

At mega 8, your privacy is more than a legal obligation – it is a core value we uphold. This document transparently and clearly explains how we collect, process, store, and protect your personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).

Updated: January 2026 Bahasa Melayu (ms-MY) PDPA 2010 Compliant 256-bit SSL

End-to-End Encryption
AES-256 + SSL
PDPA Compliant
Malaysia Act 2010
No Data Selling
Your data is not a product
User Controls
Right to access & erasure

Mega 8 Data Protection Principles

Six core principles that shape how mega 8 handles every piece of our members' personal data

Purpose Limitation
mega 8 only collects data that is strictly necessary to provide you with our platform services. We do not collect excessive or irrelevant data beyond what your use of the platform requires.
Secure Storage
All personal data of mega 8 members is stored on servers protected with AES-256 encryption. Database access is restricted to authorised personnel only, with comprehensive audit logs maintained at all times.
No Data Selling
mega 8 has never and will never sell, rent, or lend members' personal data to third parties for commercial purposes. Your data belongs entirely to you.
Accurate & Up-to-Date Data
We ensure that the personal data we hold is accurate and up to date. You may update your profile information at any time through your mega 8 account settings.
Limited Retention Period
Your personal data will not be retained longer than necessary. Mega 8 has a clear data deletion policy that takes effect once an account is closed and the mandatory retention period has expired.
Guaranteed User Rights
Every mega 8 member has the full right to access, correct, transfer, or request the deletion of their personal data. These rights are recognised and upheld by mega 8 in accordance with the PDPA.
1

Introduction & Scope of This Privacy Policy

This Privacy Policy is published by mega 8 ("we", "the platform", "mega 8") and applies to all users who access or use the services provided through the website mega8.biz and any related applications operated by mega 8.

Mega 8 understands that in today's digital age, personal data protection is a matter of utmost importance to Malaysian users. When you register an account, make a deposit, place a bet on a Malaysia Super League football match or your favourite MLBB esports game, or simply browse our platform – you are entrusting us with some of your personal information. We take that trust seriously.

This policy is prepared in accordance with the requirements of Personal Data Protection Act 2010 (PDPA) Malaysia and international personal data protection principles. This document explains transparently:

  • What personal data mega 8 collects from you
  • Why and how we use your data
  • Who data may be shared with (under strictly limited circumstances)
  • How we protect your data from unauthorised access
  • What are your rights regarding your personal data
Important: By registering or continuing to use the mega 8 platform, you agree to the terms of this Privacy Policy. If you do not agree, please discontinue use of the platform and contact us to close your account.
2

Types of Personal Data We Collect

Mega 8 collects personal data across the following categories:

Data Category Sample Information Requirement
Identity Information Full name, MyKad/passport number, date of birth, profile photo Mandatory (KYC)
Contact Information Phone number, email address, residential address Mandatory
Financial Information Payment methods (TNG, GrabPay, DuitNow, Boost, ShopeePay, FPX), deposit and withdrawal transaction history Mandatory
Usage Data Betting history, games played, session duration Automatic
Technical Data IP address, device type, operating system, web browser, access logs Automatic
Cookie Data Language preferences, login status, display settings Optional

Mega 8 No collect credit card details or bank account information directly. All financial transactions are processed through PCI-DSS certified third-party payment gateways. This means mega 8 never has access to your full card number, bank account number, or banking password.

3

How Mega 8 Collects Your Personal Data

Your personal data is collected through the following means:

  • Account registration: When you complete the mega 8 registration form with your personal information
  • Identity verification (KYC): When you submit verification documents such as a copy of your MyKad or passport
  • Financial transactions: Each time you make a deposit via Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, Maybank2u, CIMB Clicks, or FPX – transaction details are recorded for compliance and security purposes
  • Platform usage: Usage data is collected automatically as you browse, log in, and interact with the mega 8 platform
  • Customer support communications: When you contact the mega 8 support team via live chat or email
  • Cookies and tracking technologies: As described in Section 8 of this document
mega 8 No obtain your personal data from third-party sources without your knowledge, except in cases where identity verification is carried out through a service you have personally authorised.
4

Purpose of Personal Data Processing

Mega 8 processes your personal data solely for the following legitimate purposes:

  • Service delivery: To create and manage your mega 8 account, process bets, and handle deposits and withdrawals
  • Identity verification: To comply with KYC (Know Your Customer) and AML (Anti-Money Laundering) requirements mandated under Malaysian law
  • Security: To detect and prevent fraud, account misuse, or unlawful activity on the mega 8 platform
  • Responsible gaming: To monitor usage patterns and identify players who may need assistance or betting limits
  • Service communications: To send important notifications regarding your account, transactions, or changes to mega 8's terms
  • Platform improvements: To analyse aggregate usage patterns (not individual behaviour) in order to improve the experience for all mega 8 users
  • Legal compliance: To fulfil reporting obligations to Malaysian authorities as required by law

Mega 8 will not process your personal data for direct marketing purposes without first obtaining your consent. You may withdraw this consent at any time through the notification settings in your mega 8 account.

5

Data Sharing With Third Parties

Mega 8 takes a highly cautious approach to sharing personal data. Your personal data not sold, not rented, and not used for advertising purposes by third parties. Data sharing only occurs in very limited and necessary circumstances:

  • Authorised payment processors: Minimum necessary transaction information is shared with payment service providers such as Touch 'n Go, GrabPay, DuitNow, and FPX gateways to process your transactions. All such processors are bound by strict confidentiality agreements
  • Technical service providers: Companies that assist mega 8 in managing technical infrastructure, customer service, and platform security – all bound by data processing agreements that require the protection of your data
  • Malaysian authorities: When required by Malaysian law, court order, or official investigation by a competent authority
  • Fraud prevention: In proven cases involving serious fraud or money laundering, the required information may be shared with Malaysian law enforcement agencies
mega 8 ensures that every third party receiving our members' personal data is bound by a data processing agreement that imposes protection standards equivalent to or higher than mega 8's own.
6

Data Security – How We Protect Your Information

Mega 8 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, misuse, loss, or destruction:

  • Data encryption in transit: All communications between your browser and the mega 8 platform are protected by TLS 1.3 with 256-bit SSL certificates
  • Data encryption at rest: Sensitive data such as identity information and passwords are stored in AES-256 encrypted format in the mega 8 database
  • Layered access controls: Access to user data is restricted to mega 8 staff who require it for their role, with two-factor authentication (2FA) mandatory
  • 24/7 security monitoring: An automated threat detection system monitors the mega 8 platform around the clock for any suspicious activity
  • Regular security testing: Mega 8 conducts regular penetration testing and security audits carried out by independent security experts
  • Incident response plan: Mega 8 has clear procedures in place to handle any data breach, including the obligation to notify affected users within the timeframe stipulated by the PDPA

While mega 8 implements all reasonable security measures, no digital system can be guaranteed 100% secure against every threat. We therefore encourage you to play your part in protecting your mega 8 account by using a strong password, keeping your login credentials private, and enabling two-factor authentication where available.

7

Your Personal Data Rights

As a data subject under Malaysia's PDPA, you have the following rights regarding the personal data mega 8 holds about you:

👁️
Right to Access
You have the right to request a copy of the personal data mega 8 holds about you at any time.
✏️
Right to Rectification
You have the right to correct any inaccurate or incomplete personal data via your mega 8 profile settings.
🗑️
Right to Erasure
In certain circumstances, you may request the deletion of your personal data, subject to statutory retention obligations.
🚫
Right to Object
You may object to the processing of your data for specific purposes, such as direct marketing, at any time.
📦
Right to Portability
You have the right to receive the data you provided to mega 8 in a structured, machine-readable format.
⏸️
Right to Restriction
In certain circumstances during a dispute, you may request that mega 8 temporarily restrict the processing of your data.

To exercise any of the rights above, please contact the mega 8 privacy team by email at privacy@mega8.biz, stating the right you wish to exercise and the information needed to verify your identity. mega 8 will respond within 30 days of receiving your request, in accordance with PDPA requirements.

8

Cookies, Pixels & Tracking Technologies

The mega 8 platform uses cookies and similar tracking technologies to enhance your experience. The following are the types of cookies we use:

Cookie TypePurposeDurationCan Be Disabled?
Important Maintaining login sessions, security, and basic language preferences Session No (the platform cannot function without these)
Functional Remembering display preferences, personal settings, and geographic region 30 days Yes (via browser settings)
Analytics Understanding how users interact with the platform (aggregated data, not individual-level) 90 days Yes (via mega 8 cookie settings)

You can manage and delete cookies through your web browser settings. Please note that disabling essential cookies may affect the functionality of the mega 8 platform and cause you to be logged out more frequently.

9

Cross-Border Data Transfers

Mega 8 operates with a primary focus on Malaysia. However, in certain limited situations, personal data may be stored or processed on servers located in other countries (for example, where cloud services utilising data centres in the Asia-Pacific region are involved).

When cross-border data transfers occur, mega 8 ensures that:

  • The recipient country has adequate data protection laws, or
  • Appropriate data transfer agreements are in place to ensure your data is protected to a standard equivalent to that required in Malaysia
mega 8 does not transfer the personal data of Malaysian members to countries that lack adequate data protection without additional contractual safeguards meeting Malaysia's PDPA standards.
10

Child Protection & Age Restrictions

Mega 8 services are intended exclusively for individuals aged 18 years of age and above. mega 8 does not knowingly collect or process personal data of children under the age of 18.

If we discover that personal data of a minor under 18 years of age has been collected inadvertently, we will take immediate steps to delete that data and close the associated account. If you are aware that a minor has registered a mega 8 account, please contact us immediately at support@mega8.biz so we can take the appropriate action.

Mega 8 uses an automated age verification system during the registration process; however, we also rely on parents and guardians to ensure that children under their care do not access online gambling platforms.

11

Data Retention Period

Mega 8 retains your personal data only for as long as necessary for the purposes stated in this Privacy Policy, or as required under applicable Malaysian law:

  • Active account data: Retained for as long as your mega 8 account remains active
  • Financial transaction data: Retained for a minimum of 7 years after the transaction date, in accordance with Malaysia's anti-money laundering and tax reporting legal requirements
  • Identity verification data (KYC): Retained for a minimum of 5 years after account closure or the date of the last transaction
  • Customer support communication logs: Retained for 2 years from the date of interaction
  • Cookie and analytics data: Automatically deleted after the designated retention period (please refer to Section 8)

Once the retention period expires, mega 8 will securely delete or destroy the data using methods that ensure it cannot be recovered. For early deletion requests, please refer to Section 7 on the Right to Erasure.

12

Privacy Policy Amendments

Mega 8 reserves the right to amend this Privacy Policy from time to time to reflect changes in our practices, updates to Malaysian law, or changes in the services we offer. Every amendment will be accompanied by a new "Updated" date at the top of this document.

For material amendments (significant changes that affect how we process your data), mega 8 will provide notice via:

  • In-platform notification on your next login to mega 8
  • An email to your registered address at least 14 days before the changes take effect

Your continued use of the mega 8 platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not agree with the changes, you have the right to close your mega 8 account and request the deletion of your personal data in accordance with the procedures set out herein.

13

Contact the Mega 8 Privacy Team

If you have any questions, concerns, or complaints about how mega 8 handles your personal data, or if you wish to exercise any of the rights set out in Section 7, please reach out to us through the following channels:

  • Dedicated Privacy Email: privacy@mega8.biz
  • General Support Email: support@mega8.biz
  • Live Chat: Available on the mega 8 platform – 24 hours a day, 7 days a week
  • Target Response Time: 2 business days for privacy enquiries, 30 days for data rights requests

When contacting the mega 8 privacy team, please include:

  • Your full name and the registered email address of your mega 8 account
  • A clear description of your request or complaint
  • The type of right you wish to exercise (where applicable)
If you are not satisfied with mega 8's response to your privacy complaint, you have the right to submit a complaint to Department of Personal Data Protection Malaysia (JPDP) which is the PDPA regulatory body in Malaysia.
🛡️

Your Data Is Safe with mega 8

Your privacy and data security are mega 8's top priority. Register with confidence and enjoy a safe, fair, and enjoyable online betting experience in Malaysia.

PDPA Compliant 256-bit SSL No Data Selling 18+ Only
Bahasa Melayu