Privacy Policy mega999 – Malaysia User Data Protection

This Privacy Policy ("Policy") is published by mega999 and applies to all users who access or use our platform – covering the mega999.bid website, mobile app, and all related services.

We understand that your trust is our most valuable asset as a platform. As such, we take an extremely careful approach to managing any information you share with us – whether during registration, deposit, wagering, or when contacting our customer support team.

This Policy explains precisely: what data we collect, why we need it, who may access it, how long we retain it, and what rights you have as the owner of that data. We strive to use plain language so you genuinely understand what happens with your information – not just receive a lengthy document nobody reads.

Mega999 collects data from two main sources: information you provide to us directly, and information generated automatically as you use the platform.

Information you provide directly:

• Full name, IC number, or passport number during registration and the KYC process.
• Email address and mobile number for verification and communication purposes.
• Bank account or eWallet details you registered for deposits and withdrawals.
• Supporting documents submitted during the identity verification (KYC) process.
• Communications you send to our customer support team.

Information collected automatically:

• IP address, device type, operating system, and web browser type used.
• In-platform activity data – games played, session duration, transaction history.
• Cookie and tracking technology data used to enhance the user experience.
• Access logs and security records for fraud detection and account protection purposes.

Every piece of data we collect is used for specific and legitimate purposes. mega999 does not use your data for any purpose other than those stated below:

• Process account registration, KYC verification, and user profile management.
• Process deposits, wagering, wins, and withdrawals accurately and securely.
• Verify your identity to comply with legal requirements and fraud prevention.
• Deliver relevant and effective customer support whenever you need assistance.
• Send transaction notifications, account updates, and important security information.
• Detect and investigate suspicious or potentially fraudulent activity on the platform.
• Improve user experience through aggregated and anonymised usage pattern analysis.
• Comply with legal obligations, regulatory requirements, and valid court orders.

Mega999 does not share your personal data with external parties except in the following limited situations, and only to the extent necessary for those purposes:

• Payment service providers – such as banks, DuitNow, and eWallet providers, to process your financial transactions. They receive only the minimum information required to complete the transaction.
• Game providers – third-party game platforms integrated with mega999 may receive your username and account ID for game operation purposes. They do not receive your financial information or ID details.
• Technology service providers – cloud infrastructure providers, authentication services, and security systems that help us operate the platform securely.
• Relevant authorities – government agencies, regulatory bodies, or courts when we are required to do so under Malaysian law or a valid court order.

All third-party providers we engage are bound by strict data confidentiality agreements and are only permitted to use your data for purposes mutually agreed upon with mega999.

Mega999 makes serious investments in data security infrastructure. This goes beyond mere compliance — it is a core commitment to every user who trusts our platform with their personal information.

Key security measures we have implemented include:

• 256-bit SSL encryption for all data transmitted between your device and our servers.
• Two-factor authentication (2FA) which can be enabled for an additional layer of security on your account.
• Real-time threat detection system that monitors unusual activity 24 hours a day.
• Static data encryption for all sensitive information stored in our databases.
• Strict access controls ensuring that only authorised personnel can access user data, and only to the extent required for their duties.
• Regular security audits by an independent party to identify and address any system vulnerabilities.

Mega999 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

We use three main categories of cookies:

• Essential Cookies – required for the platform to function properly, such as maintaining your login session and remembering security settings. These cookies cannot be disabled.
• Functional Cookies – helps us remember your preferences such as language, currency, and display settings to provide a more comfortable experience.
• Analytics Cookies – collects aggregated and anonymised information about how you use our platform, helping us understand which features are useful and which need improvement.

You can manage or disable non-essential cookies through your web browser settings. However, disabling essential cookies may affect platform functionality.

As a mega999 user, you have the following rights regarding your personal data, and we are committed to respecting and facilitating the exercise of these rights:

• Right of Access – you may request a copy of the personal data we hold about you at any time.
• Right to Rectification – you may request that we correct any inaccurate or incomplete information in our records.
• Right to Deletion – in certain situations, you may request that we delete your personal data, subject to our legal obligations to retain certain records.
• Right to Object to Processing – you may object to the use of your data for specific purposes such as direct marketing.
• Right to Data Portability – you may request your data in a machine-readable format for transfer to another service.

To exercise any of these rights, please contact the mega999 customer support team via live chat on the platform. We will process your request within a reasonable timeframe, typically no more than 30 business days.

Mega999 retains your personal data only for as long as necessary to fulfil the purposes stated in this Policy, or as required by applicable law.

General guidelines for our data retention periods:

Once the retention period expires, data will be securely deleted or anonymised so that it can no longer be linked to any specific individual.

The mega999 platform is strictly for adult users aged 18 and above. We do not knowingly collect, store, or process any personal data from individuals under the age of 18.

Should we discover that data from a minor has been collected without our knowledge, such data will be deleted immediately and the relevant account will be terminated. If you suspect a minor is using our platform, please notify our customer support team immediately.

Mega999 reserves the right to amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. Any significant amendments will be communicated to members via in-app notifications or email at least seven (7) days before the changes take effect.

The latest version of this Privacy Policy is always accessible on this page, and the most recent update date will always be displayed at the top of the document. We encourage you to review this page periodically.

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact our team through the following channels:

• Live Chat – available 24/7 via the chat icon at the corner of the mega999 platform.
• Support Email – [email protected] (responded to within 1 business day).