Mega VIP Privacy Policy – Personal Data Protection for Malaysian Members

Mega vip ("we", "Platform", or "mega vip") respects the privacy of every individual who uses our platform. This Privacy Policy ("Policy") sets out in detail how we collect, use, disclose, store, and protect your personal information when you use mega vip's website, mobile app, and all associated services.

This Policy applies to all users of the mega vip platform, including registered members, website visitors, and anyone who interacts with our services. By registering an account or using the mega vip platform, you agree to the terms set out in this Privacy Policy.

Mega vip is the data controller for information collected through the platform. This means we are fully responsible for ensuring your data is processed lawfully, transparently, and securely in accordance with applicable laws in Malaysia.

Mega vip collects various types of personal information depending on how you interact with our platform. The table below describes the main categories of data we collect:

Mega vip does not collect special categories of sensitive data such as medical records, biometric information, or religious data, except where required by law and with your explicit consent.

Mega vip uses the personal data collected solely for lawful and necessary purposes. Below is a full list of how your data is used on the mega vip platform:

• Core service provision — registering your account, enabling login, processing deposits via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay or FPX Maybank2u/CIMB Clicks, and processing withdrawal of winnings.
• Identity verification (KYC) — to verify that members' identities are genuine and that they meet the minimum age requirement of 18 years, in accordance with the PDPA 2010 and Malaysia's AML regulations.
• Security and fraud prevention — detecting and preventing unauthorised access, fraud, money laundering, and any illegal activity involving the platform.
• Legal compliance — to comply with legal obligations, regulations, and directives from relevant Malaysian authorities.
• Customer support — to enable the mega vip support team to assist you in resolving issues, answering enquiries, and handling complaints effectively.
• Service communications — sending important notifications about your account, changes to terms, and security updates.
• Platform improvements — analysing usage patterns to improve the gaming experience, introduce new features, and optimise platform performance.
• Responsible gaming — monitoring gameplay activity to identify signs of problem gambling and provide timely support to members who need it.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), mega vip may only process your personal data on one of the following legal bases:

• Consent: You have given explicit consent for the processing of your data for a specific purpose — for example, consenting to receive marketing communications.
• Contract: Processing is necessary to perform the contract you entered into upon registering a mega vip account — including payment processing, account management, and the provision of gaming services.
• Legal obligation: Processing is required to comply with legal obligations applicable to mega vip, such as KYC and AML requirements under Malaysian law.
• Legitimate interest: Processing is necessary for the legitimate interests of mega vip or a third party — for example, to prevent fraud and ensure platform security — provided those interests do not override your fundamental right to privacy.

Mega vip always ensures a valid legal basis exists before processing any member's personal data. If you wish to know the specific legal basis used for any processing activity, please contact our support team.

Mega vip does not sell or share members' personal data with third parties for their own marketing or commercial purposes. However, in the course of providing our services, mega vip may share your data with a limited range of third-party categories as outlined below:

• Payment providers: E-wallet and banking processors to facilitate your deposit and withdrawal transactions, including Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, and FPX operators.
• Game software providers: Companies that supply live casino, poker, slots, and other game software available on mega vip.
• Technical service providers: Hosting companies, CDN providers, and analytics service providers that help us operate and improve the platform.
• Regulatory bodies and law enforcement authorities: When required by law or a valid court order in Malaysia.
• Identity verification service providers: Companies that assist us in carrying out KYC procedures and age verification.

All third parties that receive data from mega vip are bound by strict confidentiality and data protection agreements. They are permitted to use the data received only for the specific purposes set out in the agreement and may not use it for any other purpose.

Mega vip retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by law. Our general data retention principles are as follows:

Once the retention period expires, data will be permanently deleted or anonymised so that it can no longer be linked to you personally. The deletion process runs automatically on a set schedule.

Mega vip implements comprehensive technical and organisational measures to protect your personal data from unauthorised access, alteration, disclosure, or destruction. The key security measures we employ include:

• Data encryption in transit and at rest using the latest standards.
• Tiered access controls — only mega vip staff who require access to specific data in order to carry out their duties are granted permission.
• Two-factor authentication (2FA) for all staff access to systems containing member data.
• Penetration testing conducted periodically by independent third parties.
• 24/7 security monitoring using intrusion detection systems (IDS) and anomaly detection.
• Cybersecurity training for all mega vip staff on a regular basis.
• Incident response plan to effectively manage any data breaches.

Mega vip uses cookies and similar tracking technologies to enhance your experience on the platform. Cookies are small text files stored on your device when you visit our website.

We use three main categories of cookies:

• Essential Cookies: Required for core mega vip platform functions such as login verification, session management, and security. These cookies cannot be disabled as they are essential for the platform to operate.
• Analytics Cookies: Helps us understand how members use the platform — the most frequently visited pages, time spent, and navigation patterns. This information is used to improve the overall user experience.
• Functional Cookies: Remembers your preferences and settings — such as language, theme, and display options — to deliver a more personalised experience.

You can manage your cookie preferences through your browser settings. Please note, however, that disabling essential cookies may affect the functionality of the mega vip platform.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by mega vip:

To exercise any of the above rights, please contact the mega vip support team via live chat or email at privacy@megavip.ws. We will process your request within 30 business days.

The mega vip platform is intended solely for individuals aged 18 and above. Mega vip does not knowingly collect, store, or process personal data from anyone under the age of 18.

Mega vip employs various age verification procedures, including identity card verification during the KYC process, to ensure that only eligible individuals can access our platform.

Mega vip reserves the right to amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or improvements to the way we protect your data. Each updated version will be published on the mega vip website with a revised effective date.

For material amendments that significantly affect your privacy rights, mega vip will notify you by email or in-platform notification at least 14 days before the changes take effect. This gives you sufficient time to review the updates and decide whether to continue using the mega vip platform.

Continued use of the mega vip platform after the effective date of any amendment will be deemed acceptance of the updated Privacy Policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or how mega vip handles your personal data, please reach out to us through the following channels: