meggi88 Privacy Policy

1. Data Controller

meggi88 is the data controller responsible for personal data collected through the meggi88 platform at meggi88.org. As data controller, meggi88 determines the purposes for which and the means by which personal data is processed. All data processing activities described in this Privacy Policy are carried out by meggi88 or by third-party processors acting on meggi88's instructions and subject to binding data processing agreements.

If you have any questions about how meggi88 handles your personal data, or wish to exercise any of your data subject rights, please contact our Data Protection team using the details provided in Section 15 of this Policy.

2. Personal Data We Collect

2.1 Registration Data

When you create a meggi88 account, we collect the following personal data: full legal name, date of birth, email address, mobile phone number, and a chosen username. This information is required to create and manage your account and to fulfil our legal obligations regarding age verification.

2.2 Identity Verification (KYC) Data

To comply with applicable Know Your Customer (KYC) and anti-money laundering (AML) obligations, meggi88 collects copies of government-issued identity documents (such as Malaysian MyKad or passport), proof of address documents, and in certain circumstances, source of funds documentation. This data is processed solely for compliance and fraud prevention purposes.

2.3 Financial Data

meggi88 collects payment-related information necessary to process deposits and withdrawals, including eWallet account references (such as Touch 'n Go or Boost account identifiers), bank account details, and transaction records. meggi88 does not store full payment card details on its own servers — all card processing is handled by PCI-DSS compliant payment service providers.

2.4 Usage Data

meggi88 automatically collects technical and behavioural data when you use the platform, including IP address, device type and operating system, browser type and version, session timestamps, pages and features accessed, bets placed and games played, and platform navigation patterns. This data is used to improve platform performance, detect fraud, and personalise the user experience.

2.5 Communications Data

Records of your communications with the meggi88 customer support team — including live chat transcripts, email correspondence, and support ticket histories — are collected and retained to ensure service quality and to resolve disputes.

3. How We Collect Your Data

meggi88 collects personal data through the following channels:

• Directly from you: at account registration, during KYC submission, when making deposits or withdrawals, and when contacting customer support
• Automatically: through cookies, log files, and analytics tools when you access and interact with the meggi88 platform
• From third parties: identity verification and fraud screening services may provide supplementary data to assist with KYC processing and fraud prevention

4. Purpose and Legal Basis for Processing

The following table summarises the primary purposes for which meggi88 processes your personal data and the corresponding legal basis for each processing activity:

Purpose	Legal Basis
Account creation and management	Performance of contract
Age verification and KYC compliance	Legal obligation
Processing deposits and withdrawals	Performance of contract
Fraud detection and prevention	Legitimate interest / Legal obligation
Anti-money laundering compliance	Legal obligation
Platform optimisation and analytics	Legitimate interest
Responsible gaming monitoring	Legal obligation / Legitimate interest
Customer support and dispute resolution	Performance of contract / Legitimate interest
Marketing communications (where opted in)	Consent

5. Disclosure of Personal Data

5.1 Service Providers

meggi88 shares personal data with third-party service providers engaged to assist in the operation of the platform. These include payment processors, identity verification providers, cloud hosting infrastructure providers, customer support software vendors, and analytics services. All third-party processors are bound by data processing agreements that require them to process personal data only on meggi88's instructions and to implement appropriate security measures.

5.2 Regulatory and Legal Disclosure

meggi88 may disclose personal data to regulatory authorities, law enforcement agencies, or courts where required to do so by applicable law, court order, or regulatory direction. Such disclosures are made only to the extent strictly necessary to comply with the applicable legal obligation.

5.3 No Sale of Personal Data

meggi88 does not sell, rent, or trade personal data to third parties for their own marketing or commercial purposes. Personal data shared with third parties is shared solely to facilitate the operation of the meggi88 platform and the delivery of services to you.

6. Cookies and Tracking Technologies

meggi88 uses cookies and similar tracking technologies to operate the platform and improve the user experience. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for platform functionality including session management, login state, and security features. These cannot be disabled without affecting core platform functionality.
• Performance and Analytics Cookies: Collect anonymised data about how users interact with the meggi88 platform to identify areas for improvement. meggi88 uses standard web analytics services for this purpose.
• Functionality Cookies: Remember user preferences such as language settings, odds format selection, and previously visited game categories to personalise the platform experience.
• Marketing Cookies: Used only where you have provided explicit consent to receive personalised promotional communications based on your platform activity.

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may impair your ability to use the meggi88 platform.

7. Data Retention

meggi88 retains personal data for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Account registration and KYC data: retained for a minimum of 5 years following account closure, in accordance with AML record-keeping requirements
• Transaction records: retained for a minimum of 5 years from the date of the transaction
• Customer support communications: retained for 3 years from the date of the last interaction
• Marketing preference records: retained until withdrawal of consent, plus a reasonable period thereafter to evidence compliance

Where retention beyond the stated period is required for ongoing legal proceedings or regulatory investigations, data will be retained until those proceedings are concluded.

8. Data Security

meggi88 implements technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include 256-bit SSL/TLS encryption of all data in transit, encryption of sensitive data at rest, role-based access controls limiting staff access to personal data on a need-to-know basis, regular security audits and penetration testing, and multi-factor authentication for administrative access to production systems.

9. Your Data Subject Rights

As a data subject, you have the following rights with respect to your personal data held by meggi88:

• Right of Access: You may request a copy of the personal data meggi88 holds about you, together with information about how it is being processed.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data held about you. For routine account details, you may update these directly through your meggi88 account settings.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to meggi88's legal retention obligations.
• Right to Restriction of Processing: You may request that meggi88 restrict processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or object to processing based on legitimate interest.
• Right to Data Portability: Where processing is based on consent or contract and carried out by automated means, you may request a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing of your personal data where meggi88 relies on legitimate interest as the legal basis, including processing for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, please contact the meggi88 Data Protection team using the contact details in Section 15. meggi88 will respond to all verified data subject requests within 30 days of receipt.

10. Children's Privacy

The meggi88 platform is strictly for users aged 21 years and above. 21+ meggi88 does not knowingly collect personal data from persons under the age of 21. If meggi88 discovers that an account has been created by a person under 21, the account will be immediately suspended, all associated data will be deleted (except where retention is required for legal or compliance purposes), and any deposited funds will be returned to the originating payment method.

If you believe a person under the age of 21 has registered an account with meggi88, please contact our support team immediately at [email protected] so that appropriate action can be taken.

11. International Data Transfers

meggi88 operates internationally and may transfer your personal data to service providers located in jurisdictions outside of Malaysia. Where such transfers occur, meggi88 ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that required under applicable data protection principles. These safeguards may include standard contractual clauses, binding corporate rules, or transfers to jurisdictions recognised as providing an adequate level of data protection.

12. Marketing Communications

meggi88 may send you promotional communications about platform offers, new games, sportsbook promotions, and loyalty programme updates where you have consented to receiving such communications at account registration or have subsequently opted in through your account notification preferences. You may withdraw your consent to marketing communications at any time by updating your notification preferences in your meggi88 account settings, or by contacting our support team.

Withdrawal of marketing consent does not affect the delivery of transactional communications such as deposit confirmations, withdrawal notifications, account security alerts, and mandatory service notifications, which meggi88 is required to send regardless of marketing preferences.

13. Third-Party Platform Links

The meggi88 platform does not contain links to third-party websites. This Privacy Policy applies solely to data collected and processed through the meggi88 platform at meggi88.org and does not govern the data practices of any third-party services, payment processors, or technology providers that operate their own privacy policies.

14. Changes to This Privacy Policy

meggi88 reserves the right to update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable legal requirements, or platform functionality. The most current version of this Policy will be published on this page with the "Last Updated" date revised accordingly. Where changes are material, meggi88 will notify registered users via email or in-platform notification prior to the changes taking effect. Your continued use of the meggi88 platform following publication of a revised Privacy Policy constitutes your acknowledgement of the changes.

15. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or meggi88's data processing practices, please contact the meggi88 Data Protection team:

Email: [email protected]

meggi88 will acknowledge all privacy-related enquiries within 5 business days and will endeavour to resolve all requests within 30 days of receipt. Where a request cannot be resolved within 30 days, meggi88 will notify you of the reason for the delay and the expected resolution timeline.