Privacy Policy megah5 — Our Commitment to Protecting Player Personal Data

1Privacy Policy Introduction & Scope

Megah5 ("we", "Platform") is the data controller responsible for personal data collected through the megah5.fun website and the megah5 mobile app. This Privacy Policy transparently explains how we manage your personal information when you register, use, or interact with any of the services we offer.

This policy applies to all users of the megah5 platform, including registered players, website visitors, and anyone who contacts our support team. By using megah5's services, you agree to the practices described in this Privacy Policy.

We are committed to ensuring your privacy is protected at every stage of your interaction with our platform. If you have any questions about how we manage your personal data, our data protection team is always ready to assist.

2Personal Data We Collect

Megah5 collects various types of personal data depending on how you interact with our platform. Below is a detailed overview of the data categories we collect:

We only collect data that is genuinely necessary for the stated purposes. megah5 does not collect sensitive information such as biometric data, political views, or religious beliefs unless specifically required for legal compliance purposes.

3Purpose of Data Collection & Processing

Megah5 collects and processes your personal data only for legitimate and specific purposes. We will not use your data for any purpose not stated in this policy without first obtaining your consent.

• Account Management: Create, verify, and manage your player account on the megah5 platform.
• KYC Process: Verify your identity to comply with Anti-Money Laundering (AML) and Counter-Terrorism Financing (CFT) legal requirements.
• Transaction Processing: Process deposits, withdrawals, and other financial transactions securely and accurately.
• Platform Security: Detect and prevent fraudulent activity, account misuse, and cybersecurity threats.
• Legal Compliance: Meet reporting obligations to relevant authorities as required by law.
• Service Improvement: Analyse usage patterns to improve the player experience and overall platform quality.
• Service Communications: Send important notifications relating to your account, security, and platform updates.
• Marketing (with consent): Send promotional information and relevant offers only if you have consented to receive them.

The legal basis for our data processing includes the performance of a contract (player account agreement), compliance with legal obligations, megah5's legitimate interest in operating a secure platform, and consent provided by you for marketing purposes.

4Data Sharing & Disclosure

Megah5 does not sell player personal data to any third party. However, in the course of platform operations, we may share your personal data with the following categories of recipients under limited and controlled circumstances:

• Payment Service Providers: Financial institutions and payment processors that assist us in securely processing your deposits and withdrawals.
• Game Software Providers: Companies that provide casino games and betting platforms used on megah5, to the extent required for game operations.
• KYC Service Providers: Third-party identity verification companies that assist us in conducting compliance checks.
• Regulatory Authorities: Government bodies or authorities entitled to receive such information under applicable Malaysian law.
• Cloud & Infrastructure Services: Cloud service providers that store and process data on behalf of megah5, subject to strict data protection agreements.

Every third party that receives personal data from megah5 players is required to comply with data protection standards equal to or exceeding those we uphold ourselves. megah5 does not permit third parties to use player data for their own purposes.

5Data Security & Protection Measures

Megah5 continually invests in the latest security infrastructure to ensure player personal data is always protected. Our security measures cover technical, organisational, and physical aspects.

Technical Measures:

• 256-bit SSL encryption for all data transmitted over the internet
• Encryption of sensitive data stored in our databases
• Two-factor authentication (2FA) for player account access
• Firewall and intrusion detection systems (IDS) continuously updated
• Periodic security vulnerability scans conducted by independent experts
• Suspicious activity monitoring 24 hours a day, 7 days a week

Organisational Measures:

• Access control based on a strict need-to-know basis
• Mandatory data security training for all megah5 staff
• Clear and tested incident response procedures
• Internal security audits conducted every quarter

Even with all these measures in place, no system can guarantee 100% security. We therefore encourage players to also take responsibility for their account security by using strong passwords and never sharing their login credentials with anyone.

6Your Privacy Rights as a megah5 Player

Under Malaysia's PDPA and the best privacy practices we uphold, you have the following rights regarding your personal data held by megah5:

To exercise any of the above rights, please contact the megah5 data protection team by email at [email protected]. We will process your request within 30 working days. In complex cases, this period may be extended up to 60 days with notice to you.

7Cookies & Tracking Technologies

Megah5 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

Types of Cookies We Use:

• Essential Cookies: Required for core platform functions such as login authentication and session management. These cookies cannot be disabled as the platform will not function properly without them.
• Performance Cookies: Collect information on how you use the platform to help us improve website performance and usability.
• Functional Cookies: Remember your preferences such as language and display settings to provide a more personalised experience.
• Analytics Cookies: Helps us understand traffic patterns and platform usage for continuous improvement purposes.

You can control and manage cookie settings through your web browser. However, disabling certain cookies may affect the full functionality of the megah5 platform. megah5 does not use cookies to track your activity on other websites.

8International Data Storage & Transfer

Megah5 player personal data is stored on secure servers. In some cases, data may be processed or stored outside Malaysia by cloud service or infrastructure providers we use. When this occurs, megah5 ensures that such data transfers are protected by adequate safeguards, including:

• Data processing agreements requiring compliance with equivalent data protection standards
• Internationally recognised standard data protection clauses
• Security risk assessment prior to any data transfer

Data Retention Period: megah5 retains player personal data for the following periods:

• Active account data: For the duration of the active account plus 7 years after account closure (legal requirement)
• Financial transaction records: 7 years (Anti-Money Laundering Act requirement)
• Customer support communication logs: 3 years from the date of last interaction
• Analytics and usage data: 2 years in anonymised form after processing

Upon expiry of the retention period, personal data will be securely deleted or anonymised in accordance with established procedures.

9Children's Data Protection

Megah5 is an adults-only gaming platform. We do not knowingly collect or process personal data from individuals under the age of 18. Our platform is designed exclusively for adult users and we employ age verification measures to prevent access by minors.

If we discover that we have collected personal data from individuals under the age of 18 without parental or guardian knowledge or consent, we will take immediate steps to delete that data and close the associated account.

10Changes to This Privacy Policy

Megah5 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or new platform features. Any significant changes will be communicated to players via a clear notice on the platform or through your registered email.

The "Updated" date shown at the top of this document will always reflect the latest version in effect. We encourage you to review this Privacy Policy periodically, at least every six months, to stay informed about how we protect your information.

Your continued use of the megah5 platform after any changes to this Privacy Policy are published will be deemed as your acceptance of the updated policy. If you do not agree with the changes, you may close your account and request deletion of your personal data in accordance with the procedure set out in Section 6.