Privacy Policy megawin66 – Member Personal Data Protection

This Privacy Policy ("Policy") describes how megawin66, operating under the domain megawin66.pro, collects, uses, stores, discloses, and protects your personal information when you use our platform, website, and App.

Megawin66 is committed to protecting every member's privacy. We comply with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international privacy standards. This policy is written in clear, plain language — not dense legal jargon — because we believe you deserve to know exactly what happens with your data.

Megawin66 collects your personal data through several channels — directly when you register or use the platform, and automatically through website tracking technologies. The following are the types of data we collect:

We do not collect sensitive data such as health information, religious beliefs, political views, or biometric data unless you voluntarily enable the biometric login feature in the megawin66 app — in which case, biometric data is processed locally on your device only and is never transmitted to our servers.

Megawin66 uses the personal data collected for the following purposes. Each purpose has a valid legal basis under Malaysia's PDPA:

• Account operations: Create, verify, and manage your member account, including required KYC processes
• Transaction processing: Process deposits, withdrawals, wagering, and all financial activity in your account
• Customer support: Answer inquiries, resolve complaints, and provide technical support
• Security & fraud prevention: Monitor suspicious activity, prevent unauthorized access, and protect all members
• Responsible gaming: Identify usage patterns that may indicate a need for assistance and reach out to the relevant member
• Service communications: Send important notifications about your account, transactions, and changes to terms
• Legal compliance: Fulfill applicable legal and regulatory obligations
• Marketing (with consent): Send promotional information and relevant offers, only to members who have given explicit consent

Megawin66 does not sell member personal data to any party. Data sharing only occurs in limited situations necessary for service operations or as required by law:

• Payment processors: Required financial data is shared with trusted payment processors (such as banks and digital wallet operators) solely for the purpose of processing your transactions
• Game providers: Required game session information is shared with third-party game providers to deliver the gaming experience
• Regulatory authorities: Data is shared when required by law or a valid court order
• Security services: Data required for identity verification and fraud prevention is shared with security service providers bound by strict confidentiality agreements

All third parties that receive megawin66 member data are bound by data processing agreements requiring them to protect that information to the same or higher security standards that we apply to ourselves.

Megawin66 retains your personal data for as long as it is needed for the purpose it was collected, or for as long as required by applicable law. General retention period guidelines are as follows:

• Active account data: Retained for as long as your account remains active
• Financial transaction data: Retained for a minimum of 7 years for anti-money laundering compliance purposes
• KYC verification data: Retained for a minimum of 5 years after account closure
• Customer support communication logs: Retained for 2 years
• Technical logs and activity data: Retained for 12 months

Once the relevant retention period has expired, your data will be securely deleted or anonymised so that it can no longer be personally associated with you.

Megawin66 implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, loss, alteration, or disclosure:

• 256-bit SSL encryption for all data in transit
• Encryption of sensitive data stored at the database level
• Role-based access control — only authorized staff can access member data, based on legitimate work requirements
• 24/7 security monitoring by an in-house cybersecurity team
• Regular penetration testing by independent third-party security experts
• A clear incident response protocol — affected members will be notified within 72 hours in the event of a serious data breach
• Data security awareness training for all megawin66 staff who handle member data

Megawin66 uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login verification and session security. These cookies cannot be disabled.
• Preference Cookies: Save your preferences such as language, display settings, and account configuration for your convenience.
• Analytics Cookies: Help us understand how members use the platform so we can improve the user experience. Data is collected in aggregate and anonymized form.
• Security Cookies: Used to detect suspicious activity and protect your account from unauthorised access.

You can manage cookie settings through your web browser. Please note that disabling certain cookies may affect the functionality and user experience of the megawin66 platform.

Under Malaysia's PDPA and megawin66's privacy commitments, you have the following rights regarding your personal data:

To exercise any of the above rights, contact the megawin66 privacy team via in-app customer support or our official email. We will process your request within 30 business days.

Megawin66 strictly prohibits the use of our platform by individuals under 18 years of age. Our services are not directed at children, and we do not knowingly collect personal data from children.

If we find that personal data belonging to a child under the age of 18 has been collected without appropriate consent, we will take immediate steps to delete that data and close the account in question. Any verified report of such an issue will be subject to prompt investigation by the megawin66 security team.

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by megawin66, there are several ways to reach us:

• Via live chat in the megawin66 app or website — available 24/7
• Via official email: [email protected]
• Via the Complaints section in your account settings

The megawin66 privacy team will respond to all privacy-related inquiries within 3 business days, and will resolve data rights requests within 30 business days from the date of receipt of a complete request.

This Privacy Policy was last updated on June 2026. megawin66 reserves the right to amend this Policy from time to time. Members will be notified of any significant changes via in-app notifications or email at least 14 days before the changes take effect.