Official Privacy Document

Privacy Policy MegaCasino
– Your Data Protection

At MegaCasino, your privacy is not merely a legal obligation — it is a core commitment. This document clearly explains how we collect, use, store, and protect the personal information of every one of our members in Malaysia.

Updated: 1 January 2026  |  Effective immediately
Our Privacy Commitment
256-bit SSL encryption on all data
No selling of data to third parties
Member data access and deletion rights
Full Malaysia PDPA Compliance
Cookie controls can be managed by you
Data breach notification within 72 hours

Key Summary: MegaCasino values your privacy. We never sell your personal data to any third party for marketing purposes. All data is collected solely to enable us to provide a better and safer service for you.
1

Introduction

MegaCasino ("we", "Platform", or "company") is committed to protecting the privacy and security of your personal information. This Privacy Policy describes our practices regarding the collection, use, disclosure, and protection of your personal data when you use the megacasino.bz website and all related services.

This Privacy Policy is drawn up in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practices in data protection. By using our platform, you agree to the collection and use of information as described in this policy.

We encourage you to read this document in full so you have a clear understanding of how your information is managed and what your rights are as a MegaCasino member. If any section is unclear, our support team is ready to explain further.

2

Information We Collect

We collect various types of information to enable us to provide a safe, fair, and high-quality online casino service. The information collected falls into two main categories: information you provide directly and information collected automatically when you use our platform.

Information You Provide Directly

  • Registration information: Full name, date of birth, email address, phone number, and account password.
  • Identity information (KYC): Copy of identity card or passport, recent proof of address such as a utility bill or bank statement within the last three months.
  • Financial information: Bank account details, digital wallet numbers (Touch 'n Go eWallet, GrabPay), or crypto wallet addresses for deposit and withdrawal purposes.
  • Communication: Any messages, complaints, or feedback you send to our support team via live chat or email.
  • Account preferences: Language settings, self-deposit limits, and Responsible Gaming options you have activated.

Information Collected Automatically

  • Technical data: IP address, device type, operating system, browser type and version, and screen resolution.
  • Usage data: Pages visited, games played, session duration, login time and date, and your wagering patterns.
  • Location data: Location information based on IP address to ensure compliance with applicable regional restrictions.
  • Cookie data: Information collected through cookies and similar tracking technologies, the details of which are explained in the Cookie Policy section.
Data Category Examples of Information Primary Purpose
Identity Name, date of birth, IC number Account verification & KYC
Contact Email, phone number Communication & security
Financial Bank accounts, digital wallets Deposits & Withdrawals
Technical IP, device, browser Security & fraud prevention
Usage Game history, sessions Responsible gambling monitoring
3

How We Use Your Data

MegaCasino uses your personal information only for legitimate and necessary purposes. We do not use your data for unrelated purposes without first obtaining your consent.

Platform Operations

Your data is used to manage your account, process deposits and withdrawals, verify your identity during KYC, and ensure all financial transactions run smoothly and securely. Without this information, we are unable to provide you with platform services.

Security and Fraud Prevention

We analyze usage patterns and technical data to detect suspicious activity, prevent unauthorized access, and protect your account from fraud and money laundering. This includes continuous automated monitoring using our artificial intelligence systems.

Responsible Gaming

Your wagering pattern data is used by our Responsible Gaming team to identify early signs of problem gambling. If our system detects concerning patterns, we will proactively reach out to you with support and appropriate limit management tools.

Communication and Support

We use your email address and phone number to send important transaction notifications, account security alerts, updates to key terms or policies, and responses to your customer support inquiries. You can manage your marketing communication preferences through your account settings at any time.

Service Improvements

Aggregated and anonymised usage data is used to understand platform usage patterns, improve the user interface, and develop new features more relevant to the needs of Malaysian members.

Legal Compliance

MegaCasino is legally required to retain certain records for anti-money laundering (AML) compliance, counter-terrorism financing (CFT), and financial reporting requirements. Your data is retained for the period prescribed by applicable legislation.

4

Information Sharing

MegaCasino does not sell, rent, or trade your personal information to any third party for their own marketing purposes. However, there are limited situations where we need to share your data with certain parties to enable our platform to operate properly.

Trusted Service Providers

We share necessary data with selected third-party service providers who help us operate the platform, including:

  • Payment provider: FPX, Touch 'n Go, GrabPay, and trusted crypto providers process your financial transactions. They receive only the data necessary to complete the payment.
  • Game software provider: Licensed game developer that needs to verify your account status to enable you to play their games on our platform.
  • Identity verification service: Third-party KYC provider that assists us in verifying identity documents securely and efficiently.
  • Cloud infrastructure service: Server and data storage provider that stores your data in an encrypted and secure environment.

All third-party service providers are bound by strict data protection agreements and are only permitted to process your data in accordance with our instructions.

Disclosure to Authorities

We may disclose your information to government authorities, law enforcement bodies, or qualified regulatory bodies when required by applicable law, a valid court order, or to comply with our licensing regulatory obligations.

Important: MegaCasino will never disclose your personal information to third parties without a valid legal basis or your consent, except in emergency situations involving a serious security threat.
5

Data Storage & Security

MegaCasino implements comprehensive technical and organizational security measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction.

Technical Security Measures

  • Data encryption in transit using TLS 1.3 protocol and 256-bit SSL certificates
  • Data encryption at rest using AES-256 standard
  • Enterprise-grade firewall and intrusion detection system (IDS)
  • Two-factor authentication (2FA) for administrative access and member options
  • Regular security vulnerability scanning and penetration testing
  • 24/7 security monitoring

Data Retention Period

We retain your personal data for the period necessary to fulfill the purpose for which it was collected, or as required by law. Generally:

  • Active account data: retained for the duration your account is active plus 5 years after account closure.
  • KYC records and transactions: retained for a minimum of 7 years for AML compliance
  • Support communication logs: retained for 2 years
  • Technical log data: retained for 12 months.

Data Breach Response

In the event of a data breach affecting your personal information, MegaCasino is committed to notifying you and the relevant authorities within 72 hours of confirming the breach, in line with international data protection best practices.

Our data centres are located in ISO 27001-certified facilities with strict physical access controls, including surveillance systems, 24-hour security guards, and restricted biometric access.
6

Your Rights

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and international data protection principles, you have certain rights regarding the personal data we hold. MegaCasino fully respects these rights and makes it easy for you to exercise them.

Right to Access

You have the right to request a copy of the personal data we hold about you. We will provide this information in a readable format within 30 days of your request.

Right to Rectification

If you find that any information we hold about you is inaccurate or incomplete, you have the right to request a correction. Basic details such as your email address and phone number can be updated directly through your account settings.

Right to Erasure

You may request the deletion of your personal data in certain circumstances, such as when the data is no longer needed for its original purpose. However, this request may be limited where legal obligations require us to retain the data.

Right to Withdraw Consent

Where processing of your data is based on consent, you may withdraw that consent at any time without affecting the validity of processing carried out prior to withdrawal. This includes unsubscribing from marketing communications.

How to Exercise Your Rights

To exercise any of the above rights, contact our Data Protection Officer at [email protected]. We will respond within 30 days and may need to verify your identity before processing your request.

7

Cookie Policy

MegaCasino uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

Types of Cookies We Use

  • Essential Cookies: Required for core platform functions such as maintaining your login session and ensuring transaction security. These cookies cannot be disabled.
  • Functional Cookies: Stores your preferences such as language, game settings, and display options to deliver a more personalized experience.
  • Analytics Cookies: Helps us understand how members use our platform, which pages are most popular, and where improvements are needed. This data is aggregated and does not identify individuals.
  • Security Cookies: Used to detect suspicious activity, prevent fraud, and ensure the security of your account.

Managing Your Cookies

You can control and manage cookies through your browser settings. However, disabling certain cookies may affect platform functionality. Essential cookies cannot be disabled as they are required for core platform security. You can update your cookie preferences at any time via the "Cookie Settings" link in the footer of our website.

We do not use cookies to track your activity on other websites outside the MegaCasino platform. Our tracking technology operates exclusively within the megacasino.bz domain.
8

Children's Privacy

MegaCasino is an online gambling platform intended exclusively for individuals aged 18 and above. We do not knowingly collect or process personal information from anyone under the age of 18.

We enforce strict age controls during the registration and KYC process, including verification of valid identity documents. If we confirm that personal information has been collected from a minor without proper verification, we will immediately delete that information and close the account.

If you believe a minor has registered on our platform, please contact our support team immediately. We take child protection very seriously.
9

Third-Party Links

The MegaCasino platform may contain references to third-party services such as game providers or payment gateways. While we select our partners carefully, this Privacy Policy applies to the MegaCasino platform only.

Each third-party service you access through our platform has its own privacy policy. We encourage you to read the privacy policies of the relevant game providers and payment gateways before using their services. MegaCasino is not responsible for the privacy practices of any third party.

10

Privacy Policy Amendments

MegaCasino reserves the right to modify this Privacy Policy from time to time to reflect changes in our practices, new technologies, legal requirements, or other operational reasons.

Any significant amendments will be communicated to you via in-account notifications and email at least 14 days before the changes take effect. The latest effective date is always displayed at the top of this document. Continued use of the platform after that date constitutes acceptance of the amended policy.

We encourage you to review this page periodically to stay informed about how we protect your information. Previous versions of this Privacy Policy are available from our support team upon request for reference.

11

Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact our Data Protection Officer (DPO) through the following channels:

  • Email: [email protected]
  • Live Chat: Available 24/7 via the chat icon at the bottom right corner of the platform
  • Response Time: We are committed to responding to all privacy inquiries within 5 business days

We take every privacy complaint seriously and will conduct a thorough investigation into each reported case. If you are not satisfied with our response, you have the right to lodge a complaint with the Malaysia Personal Data Protection Department.

Our friendly, Malaysia-based support team is ready to help you understand your privacy rights and ensure your data is managed the way you expect.

Why Your Privacy Safe With Us

Every layer of data protection we implement is specifically designed to ensure that MegaCasino members' personal information remains secure and fully controlled at all times.

Banking-Level Encryption

All data transmitted between your device and our servers is protected by 256-bit SSL encryption — the same security technology used by Malaysia's leading banks. Your data cannot be intercepted by any party during transmission.

Full Data Control

You have full control over your personal data. Access, update, or request deletion of your data at any time through your account settings or by contacting our team. Your privacy rights are upheld unconditionally.

No Data Sales

MegaCasino has never and will never sell, rent, or trade your personal data to any advertiser or third-party marketing party. Your data is used solely to enable our services to operate for your benefit.

Malaysia PDPA Compliance

Our platform is developed and operated in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). Our compliance team ensures all data processing activities meet the latest legal requirements.

72-Hour Breach Notification

In the event of any security incident involving your data, we are committed to notifying you within 72 hours. Transparency is one of our core values — you have the right to know if anything happens to your data.

Certified Secure Infrastructure

Your data is stored in ISO 27001-certified data centres with strict physical access controls, AES-256 storage encryption, and round-the-clock security monitoring. Every layer of our infrastructure is designed to maximise the protection of your data.


Play with Safe & Confident
— Your Privacy, Guaranteed

Join thousands of Malaysian members who trust MegaCasino as their safe, fair, and responsible online casino entertainment destination. Your data is protected at all times — all you need to focus on is the fun.

Register Now Login
MegaCasino Member Benefits
Thousands of Games to Choose From
Slots, Live Casino, Sports Betting, and more
Fast Withdrawal
Your funds are processed within 24 hours
24/7 Malay Language Support
Our team is available to assist at any time
Exciting Bonuses & Promotions
Welcome bonuses, cashback, and loyalty rewards

Bahasa Melayu