Official Privacy Policy

Privacy Policy mega38 –
Your Data Protection Is Our Priority

Mega38 is committed to protecting the privacy and security of every member's personal data. This document clearly explains how we collect, use, and safeguard your information.

Last Updated: 1 January 2026

How mega38 Protects Your Data

The six core pillars of data protection that mega38 implements to safeguard every member's privacy in Malaysia.

256-bit SSL Encryption

All data transmitted between your device and mega38's servers is encrypted using 256-bit SSL standards — the same encryption technology used by leading banking and financial institutions worldwide.

Secure Data Storage

Member personal data is stored on servers protected by multi-layered firewalls and intrusion detection systems (IDS) operating around the clock. Database access is restricted to authorised personnel only.

No Data Sharing Without Consent

Mega38 does not sell, rent, or disclose your personal data to any third party for marketing or commercial purposes without first obtaining your explicit consent.

Strict Access Control

Only mega38 staff with a legitimate business need are permitted to access member data. All internal access is logged and regularly audited to ensure no misuse occurs at any time.

Data Breach Notification

In the event of any security incident involving member data, mega38 is committed to notifying affected members in a timely manner and taking immediate remedial action in accordance with our incident response procedures.

International Standards Compliance

The mega38 Privacy Policy is designed in accordance with the latest international data protection standards. We continuously review and update our privacy practices to ensure member data protection remains at the highest level.

1. Introduction

Welcome to the mega38 Privacy Policy page. We understand that privacy is a matter of great importance to every online platform user, especially in the digital entertainment and wagering industry. As such, mega38 takes a transparent and responsible approach to handling all personal information you entrust to us.

This Privacy Policy explains the types of information we collect from you when you use the mega38 platform, how that information is used, who it may be shared with, and what choices and rights you have regarding that information.

By registering an account or using any mega38 service, you agree to the collection and use of your personal information as described in this Privacy Policy. If you do not agree, please discontinue use of the platform and contact us to close your account.

Note: This Privacy Policy should be read together with Terms and Conditions mega38 which forms part of the overall agreement between you and our platform.

2. Information We Collect

Mega38 collects several categories of personal information depending on how you interact with our platform. Below is a detailed description of each category:

Data Category Examples of Information Collection Method
Identity Data Full name, date of birth, identification card number (MyKad) Registration form, KYC process
Contact Data Email address, phone number, residential address Account registration, profile updates
Financial Data Bank account number, digital wallet information, transaction records Deposit and withdrawal process
Technical Data IP address, browser type, operating system, device ID Automatic access logs generated during platform use
Behavioural Data Games played, betting history, session duration Automatic in-platform activity records
Communication Data Live chat records, support emails, feedback Interactions with the customer support team

Sensitive Data: mega38 does not collect sensitive information such as biometric data, health records, or genetic data. However, during the KYC process we require official identification documents to meet legal compliance requirements.

3. How We Use Your Data

The information we collect is used for clear and lawful purposes. mega38 does not use your data for any purpose not stated in this Privacy Policy without obtaining your consent first. The primary purposes for data use are as follows:

  • Verify your identity during account registration and the required KYC verification process.
  • Process deposits, withdrawals and other financial transactions securely and accurately.
  • Provide effective and responsive customer support to you.
  • Detect and prevent fraud, money laundering and other illegal activities on the platform.
  • Personalize your gaming experience based on your preferences and usage habits.
  • Send you relevant promotional information, bonus offers and platform updates.
  • Meet the legal and regulatory obligations applicable to our platform's operations.
  • Analyze aggregated usage data for platform improvement and user experience purposes.

When you register a mega38 account, you automatically agree to receive important account-related communications via email or SMS. For marketing communications, you may unsubscribe at any time through your account settings.

4. Information Sharing

Mega38 does not sell your personal data. However, there are certain situations where we need to share your information with specific parties for legitimate purposes:

  • Service Providers: Payment partners, technical service providers and KYC verification suppliers who assist us in operating the platform. All these parties are bound by strict confidentiality agreements.
  • Legal Authorities: Where required by law, court order or a regulatory body, we may be required to disclose certain information to the relevant authorities.
  • Fraud Prevention: Information may be shared with fraud prevention agencies and enforcement bodies to protect the platform and its members from criminal activity.
  • Business Transfer: If mega38 undergoes a merger, acquisition or asset sale, user data may be transferred as part of that transaction, subject to notice being given to members.

Our Guarantee: In all data sharing arrangements, mega38 ensures that recipients comply with data protection standards equal to or higher than those we apply ourselves.

5. Cookies & Tracking Technologies

Mega38 uses cookies and similar tracking technologies to enhance the user experience and ensure the platform runs smoothly. Cookies are small text files stored in your web browser when you visit our website.

Types of cookies we use:

  • Essential Cookies: Required for core platform functions such as login verification and session management. These cookies cannot be disabled without affecting platform usability.
  • Performance Cookies: Gather information about how users interact with the platform to help us identify areas that need improvement.
  • Functional Cookies: Save your preferences such as language, display settings and other choices to deliver a more personalized experience.
  • Analytics Cookies: Help us understand overall platform usage patterns for development and service improvement purposes.

You can manage your cookie settings through your web browser at any time. Please note that disabling certain cookies may affect the functionality and user experience of the mega38 platform.

6. Data Security

The security of your personal data is an absolute priority for mega38. We implement multiple layers of technical and organisational security measures to protect your information from unauthorised access, loss, or misuse:

  • 256-bit SSL/TLS encryption for all data transmitted between your device and our servers.
  • Database-level data encryption using AES-256 standards for sensitive information.
  • Two-factor authentication (2FA) is available and encouraged for all mega38 member accounts.
  • Multi-layered firewalls and real-time threat detection systems operating around the clock.
  • Regular security audits conducted by independent third parties and cybersecurity experts.
  • Ongoing cybersecurity awareness training for all staff who handle member data.
  • Clear incident response procedures that are tested regularly to ensure swift action in the event of any threat.

Shared Responsibility: While mega38 does everything possible to protect your data, account security also depends on your own actions. Please use a strong password, enable 2FA, and never share your login details with anyone.

7. Data Retention Period

Mega38 retains your personal data for as long as necessary to fulfil the purposes stated in this Privacy Policy, or as required by applicable law. The general retention periods for the various data categories are as follows:

  • Active account data is retained for the duration your account remains active and in use.
  • Financial transaction records are retained for a minimum of 7 years in line with financial compliance and tax legislation requirements.
  • Customer support communication logs are retained for 3 years for reference and service improvement purposes.
  • Technical data and access logs are retained for 12 months for security and investigation purposes.
  • Following account closure, personal data will be deleted or anonymized within 90 days, unless longer retention is required by law.

8. Your Rights as a Member

As a mega38 member, you have certain rights regarding your personal data. We fully respect and uphold these rights:

Right of Access

You have the right to request a copy of the personal data we hold about you at any time.

Right to Rectification

You may request the correction of any inaccurate or incomplete personal data in our records.

Right to Erasure

Under certain circumstances, you have the right to request that we delete your personal data from our systems.

Right to Restriction

You may request that we restrict the processing of your data in certain permitted circumstances.

Right to Data Portability

You have the right to receive your personal data in a structured, machine-readable format.

Right to Object

You may object to the processing of your personal data for direct marketing purposes at any time.

To exercise any of the rights above, please contact the mega38 Privacy team via email or live chat. We will process your request within 30 days of receipt, subject to the required identity verification.

9. Children's Data

The mega38 platform is intended solely for users aged 18 and above. We do not knowingly collect, process or store any personal data from individuals under the age of 18.

If we discover that a child's personal data has been collected without our knowledge, we will take immediate action to delete that information and close the account in question. Parents or guardians who have concerns about underage use of the platform are encouraged to contact us promptly.

10. Third-Party Links

The mega38 platform may contain links to third-party websites or services, such as payment providers or game suppliers. Please note that this Privacy Policy applies exclusively to the mega38 platform.

Mega38 is not responsible for the privacy practices of those third-party websites. We encourage you to read the Privacy Policy of any third-party website before providing them with any personal information. Your visits to third-party websites are at your own risk and are beyond mega38's control.

11. Privacy Policy Amendments

Mega38 reserves the right to amend or update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements. Any material changes will be communicated to you via:

  • Notice prominently displayed on the mega38 platform's home page.
  • An email will be sent to the address registered on your account at least 7 days before the changes take effect.
  • In-app notification on mega38 the next time you log in.

Continued use of the mega38 platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. The date of the last update is always displayed at the top of this document for your reference.

12. Contact Us

If you have any questions, concerns or complaints regarding this Privacy Policy or the way we handle your personal data, please contact the mega38 Privacy Officer through the following channels:

  • Live Chat: Available 24 hours a day, 7 days a week via the mega38 platform.
  • Privacy Email: [email protected] (displayed as text only)
  • Expected Response Time: 5 business days for privacy and data rights enquiries.

You may also refer to FAQ page for answers to common questions about your account and privacy. For data protection issues, please include "Privacy Enquiry" in your message subject line so it can be handled by the right team.

Our Commitment: mega38 takes every privacy-related complaint seriously. We will thoroughly investigate each complaint and provide a clear response within the stipulated timeframe.

Safe & Trusted Platform

Join mega38 – Your Privacy is Guaranteed

Over 500,000 members across Malaysia have trusted mega38 as their preferred wagering platform. Register today and enjoy a safe gaming experience backed by the highest level of data protection.

Bahasa Melayu