Privacy Policy Mega138 – Your Data, Our Responsibility

Introduction & Scope of This Policy

Welcome to the mega138 Privacy Policy. This document explains how we handle the personal information you provide or that we collect when you use the mega138 platform — whether through mega138.vu or our official mobile app.

Privacy is not something we take lightly. We understand that in the context of a digital entertainment platform, member trust is the most valuable asset. That is why the mega138 privacy policy is written in plain language — not just legal jargon that requires a lawyer to decipher.

This policy applies to all registered mega138 members, website visitors, and anyone who interacts with our platform in any way. By using the mega138 platform, you agree to the data collection and usage practices described here.

Personal Data We Collect

Mega138 collects your personal data through two primary means — information you provide directly when interacting with the platform, and information collected automatically as you use our services.

We do not collect sensitive data such as medical information, religious beliefs, or political affiliations. All financial data you provide is stored in encrypted format and is never stored in plain text.

How Your Personal Data Is Used

Mega138 uses collected data solely for purposes related to delivering our platform services. We do not use your data for any purpose not stated here without first obtaining your explicit consent.

• Verifying your identity during registration and the integrated KYC process on the platform
• Processing deposits and withdrawals securely and in a timely manner
• Maintaining the security of your account, including detecting suspicious activity
• Providing effective customer support whenever you need assistance
• Sending important notifications about your account, promotions, and platform updates
• Complying with legal obligations, including anti-money laundering (AML) requirements
• Analyzing platform usage patterns for continuous improvement of our services
• Preventing fraud and maintaining platform integrity for the benefit of all members

Data Sharing with Third Parties

Mega138 does not and will never sell your personal data. However, in certain limited and controlled circumstances, we may share necessary information with the following parties:

• Payment service providers – such as FPX and DuitNow processors, which require minimal transaction data to process your payment
• KYC service providers – an identity verification partner that helps us confirm member identities securely and quickly
• Legal authorities – when required by a valid court order or official request from a law enforcement agency
• Regulatory body – for licence compliance and audit purposes as required by law

All third parties with whom we share data are bound by strict data protection agreements and are not permitted to use that data for any purpose other than those specified by mega138.

Data Security Measures

Mega138 continuously invests in security infrastructure to ensure your personal data remains protected against ever-evolving cyber threats. This is not merely a legal obligation — it is our moral responsibility to every member who entrusts their information to our platform.

• 256-bit SSL/TLS encryption for all data transmitted between you and mega138 servers
• Passwords are stored in an irreversible hashed format using the bcrypt algorithm
• Two-factor authentication (2FA) is available and recommended for all members
• 24/7 security monitoring by a dedicated cybersecurity team
• Penetration testing is conducted periodically by independent assessors
• Strict internal access controls — only staff who require access for their job duties may view member data
• All mega138 servers comply with ISO 27001 standards for information security management

That said, no system is 100% secure. We encourage you to play your part in keeping your account safe – use a strong password, enable 2FA, and never share your login credentials with anyone.

Data Retention Period

Mega138 retains your personal data only for as long as necessary for the purposes stated in this policy or as required by applicable Malaysia law.

• Active account data – retained for as long as your account is active and for 7 years after account closure for legal compliance purposes
• Financial transaction records – retained for 7 years in accordance with Malaysia's financial and AML legal requirements
• Communication logs – retained for 2 years for customer support and dispute resolution purposes
• Login and session data – retained for 90 days for security audit purposes
• Cookie data – expiry period varies by cookie type, ranging from session-only to a maximum of 13 months

When data is no longer needed, mega138 will securely delete or anonymise it using methods that ensure it cannot be recovered or re-linked to you.

Your Rights Regarding Personal Data

As a mega138 member and as an individual under applicable data protection laws, you have the following rights regarding your personal data:

Cookies & Tracking Technology

Mega138 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

• Required cookies – essential for core platform functions such as login, user sessions, and security. These cookies cannot be disabled
• Preference cookies – saves your preferences such as language and display settings for a smoother return experience
• Analytics cookies – helps us understand how the platform is used so we can make meaningful improvements
• Security cookies – tracks login activity and helps identify unauthorized access attempts

You can manage or disable non-essential cookies through your web browser settings. Please note that disabling certain cookies may affect the functionality of some parts of the mega138 platform.

Child Protection

Mega138 is a digital entertainment platform exclusively intended for individuals aged 18 and above. We do not knowingly collect personal data from anyone under the age of 18.

If you are a parent or guardian and believe your child who is under age has registered or provided personal information to mega138, please contact us immediately. We will take action to delete the account and all associated data as quickly as possible.

Amendments to This Privacy Policy

Mega138 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, new legal requirements, or platform improvements. The "Updated" date at the top of this page indicates when the policy was last revised.

For material amendments — meaning significant changes to how we collect or use data — we will notify you via your registered email or through a prominent in-platform notification at least 14 days before the changes take effect. Continued use of the mega138 platform after the effective date constitutes acceptance of the amended terms.

Contact Our Privacy Team

If you have any questions, concerns, or wish to exercise any of your rights regarding personal data, the mega138 privacy team is ready to help. We are committed to responding to all privacy enquiries within 7 business days.

You can reach us via live chat within the mega138 platform or mobile app — available 24 hours a day, 7 days a week. All privacy-related communications are handled by staff trained in data protection law.

[email protected]

For more formal privacy complaints, you may also contact our compliance team directly through the in-platform support channel. All complaints will be taken seriously and processed in accordance with mega138's official complaints procedure.