Megaapk Privacy Policy – Malaysian Player Data Protection

Megaapk collects your personal data through various means when you use our Platform. The data we collect is categorised as follows:

1.1 Data You Provide Directly

• Registration Information: Full name, MyKad/passport number, date of birth, gender, email address, Malaysian phone number
• Profile Information: Preferred username, password (stored as an encrypted hash), gaming preferences
• Financial Information: e-wallet account numbers (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow) or FPX bank details (Maybank2u, CIMB Clicks) for processing deposits and withdrawals
• Identity Verification Documents (KYC): MyKad or passport copy submitted during the account verification process
• Communications: Any messages, complaints, or enquiries you submit to the megaapk support team

1.2 Automatically Collected Data

• Device & Technical Data: IP address, web browser type, operating system, device type (Android/iPhone smartphone, laptop)
• Usage Data: Pages visited, games played (virtual football, baccarat, blackjack, slots), session duration, betting preferences
• Approximate Location Data: Country and state of access (based on IP address) for geo-compliance purposes
• Cookie Data: Session cookies, preference cookies, and analytics cookies (see Section 5)

The personal data we collect is used for the following purposes, each with a valid processing basis under Malaysia's PDPA:

2.1 Account Management & Services

• Processing your megaapk account registration and verifying your identity
• Enabling secure login to your account
• Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, DuitNow, and FPX, as well as managing your winnings withdrawals
• Providing access to live casino games, baccarat, blackjack, roulette, slots, and Virtual Sports
• Managing megaapk bonus and promotion programmes you are eligible for

2.2 Security & Fraud Prevention

• Detecting and preventing multi-account use, fraud, and money laundering (AML)
• Verifying identity before processing large withdrawals
• Monitoring unusual transactions to protect your account
• Complying with applicable KYC (Know Your Customer) requirements

2.3 Service Improvement

• Analysing usage patterns to improve the performance of the megaapk platform
• Personalising your gaming experience based on your preferences
• Developing new products and features better suited to Malaysian players
• Running A/B tests to improve the user interface

2.4 Communications & Support

• Sending account, transaction, and security notifications
• Providing customer support via Live Chat in Bahasa Melayu
• Sending megaapk promotional information and exclusive offers (subject to your preferences)

Megaapk takes our responsibility to protect your data seriously. We does not sell your personal data to anyone. Data sharing only occurs in the following limited circumstances:

3.1 Third-Party Service Providers

Megaapk works with select service providers that assist us in operating the platform. These include:

• Malaysian Payment Providers: Payment gateways that process Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, Maybank2u, and CIMB Clicks transactions. They receive only the data necessary to complete each transaction.
• Game Providers: Gaming software providers that supply live casino content, table games, and slots to megaapk. They are bound by strict data protection agreements.
• Analytics Services: Analytics tools that help us understand platform usage patterns for improvement purposes.

All of megaapk's third-party providers are bound by comprehensive confidentiality and data protection agreements and are not permitted to use your data for any purpose other than those specified.

3.2 Legal Requirements

Megaapk may disclose your data to Malaysian authorities where we are required to do so by law, court order, or directive from a competent authority such as Bank Negara Malaysia or the Royal Malaysia Police.

Megaapk continuously invests in security infrastructure to ensure your data is protected to the highest standard:

• 256-bit SSL Encryption: All communications between your browser and megaapk servers are encrypted using the same 256-bit SSL standard employed by Maybank and CIMB for their online banking systems.
• Encrypted Passwords: Your account password is never stored in plain text. We use a strong one-way hashing algorithm (bcrypt) to keep your password secure.
• Two-Factor Authentication (2FA): megaapk offers 2FA via SMS to your Malaysian phone number for an added layer of security.
• 24/7 Security Monitoring: Our intrusion detection system (IDS) monitors megaapk platform traffic around the clock to identify any suspicious activity.
• Internal Access Controls: Only megaapk staff with a legitimate business need are granted access to user data, and all access is recorded in an audit log.
• Regular Penetration Testing: megaapk conducts regular independent security audits to identify and address vulnerabilities before they can be exploited.

The megaapk Platform uses cookies and similar tracking technologies to enhance your experience. Below are the types of cookies we use:

You can manage your cookie settings through your web browser. However, disabling essential cookies may affect certain functions of the megaapk Platform.

As a data subject under the Personal Data Protection Act 2010 (PDPA) Malaysia, you have the following rights with respect to your personal data held by megaapk:

The security of your financial information is megaapk's top priority. Here is how we handle payment-related data:

• Touch 'n Go eWallet & GrabPay: Transactions via these e-wallets are processed through each provider's secure API. megaapk does not store your e-wallet access tokens or passwords.
• DuitNow & FPX: Bank transactions via DuitNow and FPX (including Maybank2u and CIMB Clicks) are processed by payment gateways licensed by Bank Negara Malaysia. Your banking information never passes through megaapk's servers.
• Boost & ShopeePay: As with other e-wallets, transactions are processed directly through the provider's secure system.
• Financial Information Storage: megaapk does not store your full credit/debit card number, full bank account number, or e-wallet password. Only the identifiers required to process refunds are retained.
• PCI DSS: All payment processing complies with the relevant Payment Card Industry Data Security Standards (PCI DSS).

Your personal data collected by megaapk is stored on servers located in Malaysia and in regions with equivalent or higher data protection standards.

In cases where data must be transferred outside Malaysia (for example, for the use of permitted international gaming software), megaapk ensures that:

• Data transfers are carried out using appropriate safeguards such as Standard Contractual Clauses
• Data recipients outside Malaysia are bound by data protection agreements that meet or exceed Malaysia's PDPA standards
• Such transfers are kept to the minimum necessary and solely for the stated purposes

The megaapk platform is NO intended for individuals under 18 years of age. megaapk actively takes the following steps to prevent access by minors:

• Age verification during account registration using date of birth and MyKad
• The KYC process that verifies a player's identity and age before their first withdrawal is processed
• Active monitoring of accounts showing signs of possible underage ownership

If megaapk discovers that we have inadvertently collected personal data from an individual under the age of 18, we will promptly take steps to delete that data and close the associated account.

Megaapk reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, the technologies we use, evolving Malaysian legal requirements, or other reasonable grounds.

When we make material changes to this Policy, we will notify you via:

• Email to your registered email address with at least 14 days before the changes take effect
• Clear notifications within the megaapk Platform
• Updating the "Last Updated" date at the top of this Policy

Your continued use of the megaapk Platform after any amended Policy takes effect will be considered your acceptance of the revised Policy.

For any questions, concerns, or requests regarding this Privacy Policy or how megaapk handles your personal data, please contact our Data Protection Officer:

If you are not satisfied with our response, you have the right to lodge a complaint with Department of Personal Data Protection (JPDP) Malaysia under the Ministry of Communications and Digital.