Privacy Policy MEG88 —
Your Data Protection

This Privacy Policy outlines meg88's commitment to respecting and protecting the privacy of every individual who uses our online gaming platform. This document applies to all registered members, website visitors, and any individual who interacts with meg88 services through any channel, including the main website and mobile app.

As an online gaming platform actively serving the Malaysian market, MEG88 recognises how important privacy is to today's digital users. We built this policy on a principle of transparency — meaning you have the right to know exactly what data we collect, why we need it, and how we use it.

This Privacy Policy should be read together with Terms and Conditions and Responsible Gaming Policy meg88. Any conflict between these documents will be resolved based on the context and intent that best protects member interests. By continuing to use the meg88 platform after reading this policy, you confirm your acceptance of the practices described herein.

Meg88 collects personal information only when it is necessary to provide a safe, seamless and responsible service. The following are the categories of data collected and their specific purposes:

Meg88 does not collect sensitive information such as medical records, political views or religious beliefs. We also do not knowingly collect data from individuals under the age of 18. Should we discover that a minor's data has been collected unintentionally, it will be deleted immediately.

Every piece of data we collect has a clear and legitimate purpose. MEG88 does not use member data for purposes not stated in this policy without first obtaining additional consent.

• Account management: Creating, verifying and maintaining your member account, including the KYC identity verification process required by regulatory bodies.
• Transaction processing: Processing deposits via FPX, DuitNow, Touch 'n Go eWallet and Boost, and managing fund withdrawals to your bank account.
• Platform security: Detecting and preventing fraudulent activity, hacking attempts, multi-account usage and any activity that violates the terms of service.
• Customer support: Enabling our support team to provide accurate and efficient assistance when you contact us via live chat.
• Responsible gaming: Monitoring gaming patterns to identify signs of problem gambling and offering appropriate assistance when needed.
• Platform improvements: Analysing usage data in aggregated and anonymised form to improve meg88's performance, interface and user experience.
• Legal compliance: Fulfilling relevant legal obligations including reporting to regulatory bodies and the relevant authorities when required.

Meg88 practises the principle of data minimisation — we only use the minimum data necessary for each purpose. Data that is no longer relevant or required will be deleted or anonymised in accordance with our established retention schedule.

Meg88 does not sell, rent or disclose member personal data to third parties for marketing or commercial purposes without explicit consent. However, there are limited situations where data sharing is necessary for legitimate platform operations:

• Payment service providers: Minimum transaction information is shared with payment processors such as FPX and digital wallet providers to enable deposits and withdrawals to be processed securely.
• Game providers: Usernames and session IDs are shared with game software providers (such as Pragmatic Play and Evolution Gaming) solely to enable games to function correctly.
• Analytics services: Anonymised technical data is shared with analytics providers to help us understand usage patterns and improve the platform — no personally identifiable information is included.
• Legal requirements: meg88 will disclose required information to the relevant authorities when mandated by law, court order or a legitimate investigation.
• Fraud protection: Certain data may be shared with industry anti-fraud networks to identify and prevent financial crime activity across platforms.

All third parties that receive data from MEG88 are bound by strict confidentiality agreements and are required to protect that data to a standard equal to or higher than MEG88's own. MEG88 is not responsible for the privacy practices of third parties that are not under our direct control.

Meg88 continuously invests in cybersecurity infrastructure to ensure member personal data is protected against unauthorised access, disclosure, alteration or destruction.

• Data encryption in transit: All communications between your device and MEG88's servers are secured by TLS 1.3 protocol with 256-bit SSL encryption.
• Data encryption at rest: Sensitive data such as financial information and passwords are stored in encrypted form using industry-standard encryption algorithms.
• Role-based access control: Access to members' personal data is strictly limited to staff who require it for their specific duties only.
• Regular security audits: meg88 conducts regular penetration testing and security audits by qualified independent cybersecurity firms.
• 24/7 threat monitoring: Automated monitoring systems operate around the clock to detect and respond to any security threats in real time.
• Two-factor authentication (2FA): meg88 fully supports 2FA for all member accounts as a strongly recommended additional layer of security.

While no security system can guarantee 100% absolute protection, MEG88 takes all reasonable measures available to minimise risk. In the event of a data breach affecting members, we are committed to notifying affected parties within the timeframe stipulated by applicable law.

Meg88 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit the meg88 website.

• Essential cookies: Required for core platform functions such as login authentication, session management, and security settings. These cookies cannot be disabled without affecting platform functionality.
• Preference cookies: Saving your preferences such as display language, interface theme and game settings so you do not need to reconfigure them each time you log in.
• Analytics cookies: Helping us understand how visitors interact with our platform through aggregated and anonymised data. This information is used for continuous improvement.
• Security cookies: Used to detect suspicious activity, prevent fraud, and protect the integrity of member accounts.

You can manage cookie settings through your web browser. However, disabling essential cookies may affect your ability to use certain features on the meg88 platform. For more information on managing cookies in your browser, please refer to your browser's help documentation.

In accordance with Malaysia's PDPA and global best privacy practices, you have the following rights regarding your personal data held by MEG88. All requests will be processed within 30 business days from the date the application is received.

Meg88 retains member personal data only for as long as necessary to fulfil the purposes stated in this policy or as required by applicable law. The following are our data retention guidelines:

• Active account data: Retained for the duration your account remains active and updated regularly to ensure accuracy.
• Financial transaction data: Retained for a minimum of seven years in accordance with anti-money laundering (AML) and financial reporting legal requirements.
• KYC records: Retained for a minimum of five years after account closure to meet regulatory compliance obligations.
• Game logs: Retained for two years for dispute resolution and game integrity audit purposes.
• Customer support data: Retained for three years for service history reference and support improvement purposes.
• Cookie and session data: Session cookies are deleted when you close your browser; persistent cookies expire between 30 days and one year depending on their type.

Once the designated retention period has elapsed, data will be securely deleted or fully anonymised so that it can no longer be linked to any individual. The data deletion process is carried out in accordance with procedures audited by MEG88's internal security team.

Meg88 reserves the right to update this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements or service improvements. We are committed to informing members of any material changes in a transparent manner.

When material changes are made to this policy, meg88 will:

• Sending notifications to the registered email address at least seven days before changes take effect.
• Displaying a clear notice on the platform's Login page throughout the transition period.
• Updating the "Last Updated" date at the top of this document.
• Maintaining an archive of previous versions of the privacy policy that members may request.

Your continued use of the MEG88 platform after any amendment takes effect constitutes your acceptance of the updated policy. If you disagree with the changes, you have the right to close your account before they come into effect.

If you have any questions, concerns, or wish to submit a request regarding your personal data, the MEG88 privacy team is ready to assist. We are committed to responding within 72 business hours for every enquiry received.

You can reach us through the following channels:

• Support email: [email protected] (for general enquiries and privacy requests)
• Live Chat: Available 24 hours a day, 7 days a week via the MEG88 platform
• FAQ Page: Visit FAQ page for answers to the most frequently asked questions

When submitting a data-related request, please include your meg88 username, registered email address, and a brief description of your request to expedite the identity verification process. meg88 may require additional identity verification before processing any request involving data access, correction, or deletion.