Megavisa88 Privacy Policy – Personal Data Protection for Malaysian Members Under PDPA 2010

Section 1 Introduction & Scope of Privacy Policy

Megavisa88 ("we", "the platform", or "megavisa88") respects the privacy of every individual who uses our services. This Privacy Policy is written to explain clearly and precisely – not in complicated legal language, but in plain, straightforward terms – how we handle your personal information when you register, log in, make a deposit, play, or interact with any part of the megavisa88 platform.

This policy applies to all registered megavisa88 members, unregistered visitors to the website, and anyone who contacts our support team. It covers all megavisa88 platform channels, including the official website and mobile version.

Megavisa88 is the responsible data controller for all personal data collected through our platform. This means we determine why and how your data is used, and we are fully accountable for ensuring that such processing complies with applicable data protection laws — in particular, Malaysia's Personal Data Protection Act (PDPA) 2010.

Section 2 Types of Personal Data Collected

Megavisa88 only collects personal data that is strictly necessary to provide a safe, fair, and legally compliant service. We do not collect excessive or irrelevant data beyond what is required to operate the platform.

Below are the categories of data megavisa88 collects, along with the purpose for each:

Megavisa88 never collects sensitive personal data such as medical records, political views, religious beliefs, or sexual orientation. Biometric data such as fingerprints or facial recognition is also not collected by the megavisa88 platform.

Section 3 Purposes of Personal Data Processing

Megavisa88 processes your personal data solely for legitimate and transparent purposes. We do not process data for purposes unrelated to the provision of platform services without your specific consent.

Megavisa88's primary purposes for processing data are as follows:

• Account Management: To create, verify, and manage your megavisa88 member account, including the KYC (Know Your Customer) process required for legal compliance.
• Transaction Processing: To process deposits via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, FPX, Maybank2u, or CIMB Clicks, and to process withdrawal requests to your bank account or eWallet.
• Provision of Gaming Services: To provide access to slots, Live Casino, table games, Sports Betting, football, cricket, badminton, e-sports, and all other services available on the megavisa88 platform.
• Customer Support: To address enquiries, resolve technical issues, and provide assistance via live chat, WhatsApp, or email.
• Platform Security: To detect and prevent fraud, money laundering, system abuse, and activities that violate megavisa88's terms.
• Responsible Gaming: To monitor gameplay patterns and provide early support to members who may need assistance related to Responsible Gaming.
• Legal Compliance: To fulfil our legal obligations under Malaysia's PDPA 2010, anti-money laundering (AML) requirements, and directives from the relevant regulatory authorities.
• Service Improvement: To analyse platform usage patterns on an aggregated, anonymised basis for the purpose of improving megavisa88's products and user experience.

Section 4 Legal Basis for Data Processing

Under Malaysia's PDPA 2010, megavisa88 requires a valid legal basis for each personal data processing activity. We rely on the following bases depending on the context of processing:

• Consent: When you register a megavisa88 account, you consent to the data processing described in this Privacy Policy. For optional marketing purposes, megavisa88 will seek separate consent, which you may withdraw at any time.
• Contract Performance: Processing required to fulfil the agreement between you and megavisa88 — including deposit processing, withdrawals, and providing access to games — is based on contractual necessity.
• Legal Obligation: Certain data processing activities – such as KYC identity verification and transaction records for AML compliance – are required by Malaysian law and do not require your additional consent.
• Legitimate Interests: Megavisa88 may process certain data based on our legitimate interests — such as detecting fraud or enhancing platform security — provided those interests do not override your privacy rights.

Section 5 Data Sharing with Third Parties

Megavisa88 does not sell, rent, or trade members' personal data to any third party for marketing or commercial purposes. This is a core principle we have never compromised on since megavisa88 was founded.

However, in the course of normal platform operations, megavisa88 may need to share personal data with the following categories of third parties, but only to the extent necessary for legitimate purposes:

• Payment Service Providers: To process deposits and withdrawals via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, FPX, Maybank2u, and CIMB Clicks. Only the minimum information required to complete the transaction is shared, and all these providers are bound by strict confidentiality agreements.
• Game Providers: Certified game providers such as Evolution Gaming, Pragmatic Play, PG Soft, NetEnt, Microgaming, and Playtech may receive minimal technical data (such as session IDs and bet amounts) necessary to operate the games. They do not receive your full identity information.
• Audit Certification Body: Independent audit bodies that verify the RNG fairness of megavisa88 games may access aggregated, anonymised technical data for audit purposes – no individual personal data is involved.
• Authority: megavisa88 may be required to disclose certain data to Malaysian authorities such as the police, courts, or regulatory bodies pursuant to a valid court order or official directive. In such cases, megavisa88 will disclose only the minimum data required by law.

All third parties who receive personal data from megavisa88 are bound by strict data processing agreements, requiring them to protect that data to a standard no less stringent than megavisa88's own.

Section 6 Data Security Measures

Megavisa88 implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, loss, alteration, or disclosure. Data security is not an add-on feature at megavisa88 – it is central to how we build and operate every part of the platform.

The key security measures implemented by megavisa88 include:

• 256-bit SSL Encryption: All communications between your device and megavisa88's servers are encrypted using 256-bit SSL – the same standard used by Malaysia's major banking institutions such as Maybank and CIMB. This means any data transmitted cannot be read by any party that may attempt to intercept the communication.
• Data-at-Rest Encryption: Personal and financial data stored in megavisa88's databases is encrypted at rest using strong algorithms. Member passwords are never stored in plain text — only protected hashes are retained.
• Strict Access Controls: Only megavisa88 staff with a legitimate operational need and who have undergone strict background checks are permitted to access members' personal data. All access is logged and continuously monitored.
• Two-Factor Authentication: megavisa88's internal systems that store member data are protected by mandatory two-factor authentication for all staff who require access.
• Regular Security Testing: megavisa88 conducts regular penetration testing and vulnerability scans carried out by independent cybersecurity experts to identify and address weaknesses before they can be exploited.
• Secure Infrastructure: megavisa88's servers are hosted in certified data centres with physical security controls, power redundancy, and protection against natural disasters.

Section 7 Data Retention Period

Megavisa88 retains your personal data only for as long as necessary to fulfil the original purpose of collection, or as required by Malaysian law. We do not keep data longer than necessary.

Megavisa88's data retention guidelines are as follows:

• Active Account Data: For as long as your account is active with megavisa88, we retain all data necessary to operate our services. This includes identity information, contact details, and gaming activity records.
• Financial Transaction Records: Malaysian law under the Anti-Money Laundering Act 2001 and related regulations requires megavisa88 to retain financial transaction records for a minimum of 7 years even after the account is closed.
• KYC Records: Identity verification documents are retained for a minimum of 5 years after the member relationship ends, in accordance with AML compliance requirements.
• Customer Support Data: Customer support conversation records are retained for 3 years for dispute resolution reference and service improvement.
• Technical Data (Logs): System logs, such as access logs and security logs, are retained for 12 months before being securely deleted.
• Closed Accounts: When you close your megavisa88 account, data not subject to legal retention requirements will be deleted or anonymised within 30 days after account closure is confirmed.

When data is no longer needed and there is no legal requirement to retain it, megavisa88 will securely delete or anonymise it using methods that ensure it cannot be recovered.

Section 8 Your Rights Under PDPA 2010

As a data subject under Malaysia's PDPA 2010, you have specific rights regarding the personal data megavisa88 holds about you. We are committed to making it straightforward for you to exercise those rights without unnecessary hassle.

You may submit a request to exercise any of the rights below by emailing support@megavisa88.biz or via live chat within the megavisa88 platform. megavisa88 will respond to your request within 14 working days.

Section 9 Cookies & Tracking Technologies

The megavisa88 platform uses cookies and similar tracking technologies to ensure the platform functions correctly, enhance the user experience, and analyse how the platform is used. This section explains the types of cookies used and their purposes.

You can manage your cookie settings through your browser at any time. Please note, however, that disabling necessary cookies may affect the functionality of the megavisa88 platform. For guidance on managing cookies in your browser, refer to your browser's help documentation.

Section 10 International Data Transfers

In certain circumstances, your personal data may be transferred to or processed in countries other than Malaysia. This typically occurs when international game providers partnered with megavisa88 – such as Evolution Gaming, Pragmatic Play, or PG Soft – need to process technical session data that may involve servers located outside Malaysia.

When international data transfers occur, megavisa88 ensures that adequate protections are in place through the following mechanisms:

• Data processing agreements that require the receiving party to protect data to a standard equivalent to Malaysia's PDPA 2010.
• We only engage providers that operate in jurisdictions with recognised and comprehensive data protection laws.
• Use of recognised standard contractual clauses to ensure adequate data protection across borders.

Your full financial and identity data is never transferred to international game providers. Only the minimum technical data required to run a game session – such as session ID and bet values – may be processed on external servers.

Section 11 Data Breach & Incident Response

While megavisa88 takes every reasonable step to protect your data, no system can guarantee 100% protection against all cyber threats. megavisa88 therefore maintains a comprehensive incident response plan to address any data breach situation should one arise.

Megavisa88's incident response procedure in the event of a material data breach:

Section 12 Contact Us About Privacy

If you have any questions or concerns, or wish to exercise your rights under PDPA 2010 in relation to personal data held by megavisa88, please contact us through the following channels:

• Privacy Email: support@megavisa88.biz – Write "PDPA – Privacy Enquiry" in the email subject line to ensure it is directed to the right team.
• Live Chat: Available 24/7 within the megavisa88 platform for privacy enquiries that require an immediate response.
• Response Time: Megavisa88 will respond to all privacy-related enquiries within 14 business days of receiving the request.

For formal requests under PDPA 2010 — such as data access, correction, or deletion requests — please include the following in your submission: your full name, megavisa88 account number (if applicable), MyKad or passport number (for identity verification purposes), and a clear description of your request.

Megavisa88 may need to verify your identity before processing any personal data request, to ensure your data is not disclosed to unauthorised parties.