MegaPlus Privacy Policy – Malaysia User Data Protection

Welcome to the megaplus Privacy Policy. This document transparently explains how megaplus collects, uses, stores, and protects your personal information when you use our platform at megaplus.app — including all related services such as Live Casino, sports betting, Fish Shooting Games, bingo, slots, and integrated deposit facilities.

We understand that your trust is our most valuable asset. Every data-handling decision we make is guided by strict privacy protection principles, in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practices.

This policy applies to all users accessing the MegaPlus platform via our web browser or mobile app, regardless of your state or territory in Malaysia. By registering or using our services, you confirm that you have read and fully understood this policy.

Megaplus only collects information that is strictly necessary to provide a safe, fair, and responsible service. We do not collect irrelevant or excessive data. The following are the categories of data we collect:

All of this information is collected through three primary methods: (1) information you provide directly during registration or while using the platform, (2) information automatically generated through your use of our services, and (3) information received from third-party service providers integrated with our platform, such as payment processors.

Every piece of data collected is used for a clear and legitimate purpose. megaplus strictly adheres to the principle of "minimum purpose" — meaning your data will not be used for any purpose beyond what is stated here without your prior consent.

• Service delivery: Managing your account, processing deposits and withdrawals, and enabling access to all games and platform features.
• Identity verification (KYC): Verifying user identity to comply with regulatory requirements and prevent money laundering.
• Security & fraud prevention: Detecting unusual activity, unauthorized access attempts, and any form of fraud that could compromise your account.
• Platform enhancements: Analyzing usage patterns on an aggregated and anonymized basis to improve platform performance, interface, and overall user experience.
• Service communications: Sending important account notifications, security updates, promotional information (if you have opted in), and customer support responses.
• Responsible gaming: Monitoring gameplay patterns to identify early signs of problem gambling and offering appropriate support when needed.
• Legal compliance: Complying with legal obligations, regulatory requirements, and responding to legitimate inquiries from law enforcement agencies.

We do not use your data for fully automated decision-making that materially affects your rights without human involvement in the final review process.

The security of your data is a non-negotiable technical priority at megaplus. All personal and financial information is stored on servers protected by multiple layers of security, including the following:

• Encryption of all data in transit using TLS 1.3 with AES-256-bit — the same standard used by Malaysia's major banks.
• Data-at-rest encryption using AES-256 algorithm for all sensitive records in the database.
• Role-based access control (RBAC) ensures that only authorized personnel can access user data, and only to the extent required for their specific duties.
• Regular access audits and comprehensive audit logs to detect any suspicious access to user data.
• Automatic encrypted data backups at regular intervals to ensure data recovery in emergency situations.
• Periodic penetration testing conducted by independent security firms.

Your data is stored in data centres compliant with ISO/IEC 27001 and SOC 2 Type II standards. We do not store full credit card numbers or sensitive payment information on our servers — all payment data is handled directly by PCI-DSS certified payment processors.

Retention Period: Active account data is retained for as long as your account remains active. Once an account is closed, we retain the necessary records for 7 years to comply with anti-money laundering legal requirements, after which data is securely destroyed.

Megaplus does not sell, rent, or disclose your personal data to any third party for marketing or commercial purposes without your explicit consent. However, there are specific situations where data sharing is necessary for platform operations:

• Payment processors: DuitNow, FPX, Touch 'n Go eWallet, GrabPay, and Boost receive the transaction information necessary to process your deposits and withdrawals. All these processors comply with PCI-DSS standards.
• Game providers: Usernames and required session data are shared with our integrated game providers solely to enable game access. Full identity information is not disclosed.
• Identity verification services: Certified third-party KYC providers assist us in verifying user identities. They are bound by strict confidentiality agreements.
• Law enforcement agencies: megaplus will disclose required information when mandated by a valid court order, official investigation, or legal obligation applicable in Malaysia.
• Technical infrastructure providers: Cloud and computing service providers that store and process data on our behalf, subject to data processing agreements compliant with PDPA.

Megaplus uses cookies and similar tracking technologies to enhance your experience on our platform. Below are the types of cookies we use and their purposes:

• Essential Cookies: Required for core platform functions such as login sessions, security, and language preferences. These cookies cannot be disabled as the platform will not function properly without them.
• Performance Cookies: Collecting information on how you use the platform — most frequently visited pages, time spent, and any errors encountered — to help us improve our services.
• Functional Cookies: Saving your personal preferences such as display settings, self-set betting limits, and notification preferences so you do not need to reconfigure them each time you log in.
• Analytics Cookies: Anonymised and aggregated usage data helps us understand platform usage trends holistically without identifying individuals.

You can manage or disable cookies through your browser settings at any time. Please note that disabling essential cookies may affect your ability to access certain platform features. For more information on managing cookies in popular browsers, please refer to your browser's help documentation.

We do not use tracking pixels, web beacons, or device fingerprinting technologies for third-party advertising or data sale purposes.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and MegaPlus's internal policies, you have the following rights regarding your personal data. We are committed to processing every request within 14 working days:

While megaplus employs the latest security technologies to protect your data, account security is a shared responsibility. Here are steps you can take to safeguard your account:

• Use a strong and unique password — a combination of uppercase letters, lowercase letters, numbers, and symbols with a minimum length of 12 characters.
• Activate Two-Factor Authentication (2FA) in your account settings — this feature is available free of charge and adds a critical layer of security.
• Never share your password or 2FA code with anyone, including MegaPlus support staff who will never ask for this information.
• Log out of your account after each session, especially when using a shared or public device.
• Always verify the platform URL to confirm you are on megaplus.app the legitimate site and not a fake website.
• Notify us immediately via live chat if you suspect any suspicious activity on your account.

Megaplus will not be liable for any losses arising from a user's negligence in safeguarding their login credentials. However, we are committed to helping you recover your account as quickly as possible should any security incident occur.

Megaplus reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements. When material changes are made, we will:

• Updating the "Last Updated" date displayed at the top of this page.
• Sending notifications to your registered email at least 14 days before material changes take effect.
• Displaying a prominent notice on the platform's home page for a minimum of 7 days.
• Maintaining an archive of previous versions of this Privacy Policy for users who need to reference them.

Your continued use of the megaplus platform after any changes take effect constitutes your acceptance of the updated Privacy Policy. If you disagree with any changes, you have the right to close your account and request deletion of data that is not required to be retained by law.

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data by megaplus, we encourage you to contact us directly. Our Data Protection Officer (DPO) team is ready to assist you:

• Live Chat: The fastest way — click the chat icon at the bottom corner of the MegaPlus platform, available 24/7.
• Email: [email protected] (target response time: 24 business hours)
• Preferred language: We are proud to offer support in Malay, English, and Chinese.

For formal complaints related to data protection that cannot be resolved internally by our team, you have the right to submit a complaint to Malaysia Personal Data Protection Department through their official channels.

We are committed to providing meaningful responses and satisfactory resolutions to every complaint submitted within the designated timeframe. Your trust is the foundation of everything we do at megaplus.