mega99 Privacy Policy

1. Who We Are

mega99 operates the online gaming platform accessible at mega99.win ("Platform"), providing sports betting, live casino, slots, arcade, and related gaming services to registered members. mega99 is the data controller responsible for the personal data collected through the Platform.

For all data-related enquiries, contact us at: [email protected]

2. Data We Collect

2.1 Registration Data. When you create a mega99 account, we collect the personal information you provide, which typically includes:

• Full name as per your identification document;
• Date of birth (used to verify the 21+ age requirement);
• Email address;
• Malaysian mobile phone number;
• Residential address;
• Username and encrypted password.

2.2 Identity Verification Data. To comply with Know Your Customer (KYC) and anti-money laundering obligations, mega99 may request copies of:

• National identity card (MyKad) or passport;
• Proof of address (utility bill, bank statement dated within 3 months);
• Selfie photographs for biometric verification where required.

2.3 Financial Data. When you make deposits or request withdrawals, we collect and process transaction data including payment method identifiers, transaction amounts in MYR, and transaction timestamps. We do not store full card numbers — card data is handled directly by PCI-DSS compliant payment processors.

2.4 Gaming Activity Data. We collect records of your gaming activity on the mega99 platform, including game sessions played, bets placed, wins and losses, and bonus utilisation. This data is used for account management, dispute resolution, responsible gaming monitoring, and regulatory compliance.

2.5 Technical & Device Data. When you access mega99.win, we automatically collect:

• IP address and approximate geolocation;
• Browser type, version, and language settings;
• Device type and operating system;
• Session timestamps and pages visited;
• Referring URL.

2.6 Communications Data. If you contact mega99 customer support via live chat or email, we retain records of those communications for quality assurance, dispute resolution, and training purposes.

3. How We Use Your Data

mega99 uses your personal data for the following purposes:

1. Account management: Creating and maintaining your account, verifying your identity, and enabling access to Platform services;
2. Transaction processing: Processing MYR deposits and withdrawals via Touch n Go eWallet, Boost, Maybank, CIMB, Public Bank, and Visa/Mastercard;
3. Legal compliance: Meeting KYC, anti-money laundering, and regulatory reporting obligations under applicable international gaming authority requirements;
4. Responsible gaming: Monitoring gaming patterns to identify potential problem gambling behaviour and enforcing self-exclusion requests;
5. Platform improvement: Analysing usage patterns to improve the Platform, fix technical issues, and develop new features;
6. Customer support: Responding to account queries, resolving disputes, and providing assistance;
7. Fraud prevention: Detecting and preventing fraudulent activity, money laundering, and terms of service violations;
8. Marketing communications: Sending promotional offers and platform updates to Members who have opted in — you may opt out at any time.

4. Legal Basis for Processing

mega99 processes your personal data on the following legal grounds:

• Contract performance: Processing necessary to operate your account and deliver gaming services;
• Legal obligation: Processing required to comply with KYC, AML, and applicable gaming regulations;
• Legitimate interests: Fraud detection, security monitoring, and platform analytics where these do not override your rights;
• Consent: Marketing communications and optional data processing activities where you have given explicit consent, which may be withdrawn at any time.

5. Cookies & Tracking Technologies

5.1 mega99 uses cookies and similar tracking technologies to operate the Platform effectively. Cookies are small text files stored on your device by your browser.

5.2 The types of cookies we use include:

• Essential cookies: Required for the Platform to function — session management, login persistence, and security tokens. These cannot be disabled without impairing Platform functionality.
• Analytics cookies: Used to understand how users navigate the Platform, which pages are most visited, and where technical errors occur. Data is aggregated and anonymised.
• Preference cookies: Store your language, display, and game filter preferences between sessions.

5.3 You may manage cookie preferences through your browser settings. Disabling essential cookies will prevent normal account access and gameplay.

6. Data Sharing

6.1 mega99 does not sell, rent, or trade your personal data to third parties for commercial marketing purposes.

6.2 We share personal data only in the following circumstances:

• Service providers: Third-party processors engaged to support Platform operations — including payment processors, KYC verification providers, cloud hosting services, and customer support software — under contractual data processing agreements;
• Game providers: Certified game providers may receive technical session data necessary to deliver their games within the mega99 Platform;
• Regulatory authorities: Where legally required, mega99 will disclose data to gaming regulators, tax authorities, or law enforcement agencies;
• Business transfers: In the event of a merger, acquisition, or asset sale, personal data may be transferred to the successor entity subject to equivalent privacy protections.

6.3 All third-party processors engaged by mega99 are contractually required to handle personal data in accordance with applicable data protection standards and solely for the purposes specified.

7. Data Retention

7.1 mega99 retains personal data for as long as your account is active and for a period thereafter as required by applicable law and gaming regulatory obligations. Financial transaction records are typically retained for a minimum of five (5) years in accordance with anti-money laundering regulations.

7.2 If you request account closure, mega99 will anonymise or delete personal data that is no longer required for legal or regulatory purposes within a reasonable period, subject to retention obligations.

7.3 Gaming activity records may be retained for longer periods where required for dispute resolution or ongoing regulatory investigations.

8. Data Security

8.1 mega99 implements technical and organisational security measures proportionate to the risk associated with the personal data we process. These measures include:

• SSL/TLS encryption for all data transmitted between your device and mega99 servers;
• Encrypted storage of passwords using industry-standard hashing algorithms;
• Role-based access controls limiting internal staff access to personal data;
• Regular security assessments and vulnerability testing;
• Two-factor authentication options for Member accounts.

8.2 No system is completely impenetrable. In the event of a data breach that is likely to result in a high risk to your rights, mega99 will notify affected Members and relevant authorities as required by applicable law.

9. Your Rights

9.1 As a mega99 Member, you have the following rights in relation to your personal data:

• Access: Request a copy of the personal data mega99 holds about you;
• Correction: Request correction of inaccurate or incomplete personal data;
• Deletion: Request deletion of personal data that is no longer necessary, subject to legal retention obligations;
• Objection: Object to processing based on legitimate interests, including for direct marketing;
• Restriction: Request that processing be restricted in certain circumstances while a dispute is resolved;
• Portability: Where technically feasible, receive your personal data in a structured, machine-readable format.

9.2 To exercise any of these rights, contact mega99 at [email protected]. Requests will be acknowledged within 5 business days and actioned within 30 days, subject to identity verification and any legal exceptions.

9.3 You have the right to withdraw consent for marketing communications at any time by updating your notification preferences in your Account settings or by contacting support.

10. Children's Privacy

10.1 The mega99 platform is strictly restricted to persons aged 21 years and above. mega99 does not knowingly collect personal data from persons under 21. Registration requires confirmation of age eligibility, and accounts are subject to age verification at any time.

10.2 If mega99 discovers that personal data has been collected from a person under 21, the account will be immediately suspended, the data deleted, and any balance forfeited in accordance with our Terms & Conditions.

11. Changes to This Policy

11.1 mega99 may update this Privacy Policy from time to time to reflect changes in our practices, platform features, or applicable legal requirements. Material changes will be communicated to registered Members via email or in-platform notification.

11.2 The effective date of the current version is shown at the top of this page. Continued use of the Platform following notification of changes constitutes acceptance of the revised Policy.

12. Contact Us

For all privacy-related enquiries, requests to exercise your data rights, or complaints regarding our data handling practices, please contact: