megah5 Privacy Policy – Guaranteed Personal Data Protection for Malaysian Players

This Privacy Policy ("Policy") describes how megah5 ("we", "the platform", or "megah5") collects, uses, discloses, stores, and protects the personal information you provide to us or that we collect automatically when you use the megah5.site website, the megah5 mobile app, or any other services operated by megah5.

This Policy applies to all registered megah5 members, visitors to the megah5 website who have not yet registered, and anyone who interacts with the megah5 platform or customer support in any capacity. By using the megah5 platform, you agree to the collection and use of your information as described in this Policy.

Megah5 is committed to complying with applicable data protection laws in Malaysia, including the Personal Data Protection Act 2010 (PDPA) and its related regulations. We take this responsibility seriously because we believe member trust is megah5's most valuable asset — and that trust can only be maintained through transparent and consistent privacy practices.

Megah5 collects two main categories of information: details you provide to us directly, and information gathered automatically when you use the platform.

2.1 Information You Provide Directly

• During Registration: Full name, phone number, email address, date of birth, and your chosen password. This information is required to create and manage your megah5 account.
• During Identity Verification (KYC): A copy of your identification document (MyKad or passport) and possibly proof of address — collected only when required for age verification and anti-money laundering compliance.
• During Deposit: The e-wallet account name or bank account number used — this information is retained to ensure withdrawals are returned to the same payment method for your security.
• When Contacting Support: The content of your communications with the megah5 support team, including any documents or screenshots you have attached.
• When Completing a Feedback Form: Opinions, suggestions, or complaints you voluntarily share with megah5.

2.2 Automatically Collected Information

• Device & Technical Data: Device type, operating system (Android or iOS), megah5 app version, screen resolution, and language settings. Used to optimise the platform experience for your device.
• IP address: Recorded for security purposes — to detect suspicious login attempts, identify and block access from potentially harmful entities, and ensure compliance with applicable geographical restrictions.
• Session & Activity Data: Pages visited within the platform, games played, session duration, and actions taken. Used to help us understand how the platform is being used and identify areas for improvement.
• Cookies & Similar Technologies: Explained in detail in Section 6 of this Policy.

Megah5 uses the information we collect for specific, legitimate, and transparent purposes. We do not use your data for anything beyond what is stated below without first obtaining your consent.

• Providing Platform Services: Managing your account, processing deposits and withdrawals, crediting winnings, managing bonuses and the VIP programme, and providing access to games. This is the primary purpose of data collection, without which megah5 cannot function.
• Identity Verification & Security: To ensure only players aged 18 and above can register, verify identity for withdrawal processing, and detect and prevent fraud, money laundering, and activities that violate megah5's Terms & Conditions.
• Customer Support: Responding to enquiries and resolving issues reported by megah5 members. Communication records are retained for quality purposes and to facilitate the resolution of recurring issues.
• Responsible Gaming: Monitoring gameplay patterns to detect signs of problem gambling, enforcing member-set limits, and meeting responsible gaming requirements.
• Platform Communications: Sending important notifications about your account, changes to our Terms or Policies, bonus information you have opted in to receive, and technical updates affecting the platform.
• Platform Improvements: Analysing aggregated (not individual) usage patterns to understand how to improve the user experience, add the most popular games, and develop new features relevant to Malaysian players' needs.
• Legal Compliance: Meeting applicable legal and regulatory obligations, including reporting requirements to relevant authorities where required under Malaysian law.

Every time megah5 uses your data, there is a valid legal basis — whether that is contractual fulfilment (to deliver megah5 services), legitimate interest (for security and fraud prevention), legal obligation (for regulatory compliance), or your own consent (for optional marketing communications).

Megah5 does not sell, rent, or disclose member personal data to third parties for advertising or commercial marketing purposes. However, in the course of operating the platform, megah5 needs to share data with a limited category of trusted third parties:

• Payment Service Providers: When you make a deposit or withdrawal using Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX (Maybank2u, CIMB Clicks), the necessary transaction information is shared with the respective provider to process the payment. These providers operate under their own privacy policies and security standards.
• Game Software Provider: Casino game providers (Evolution Gaming, Pragmatic Play, Microgaming, and others) may receive the minimum technical data required to run games correctly — such as session IDs and bet balances. They do not receive megah5 members' full identity information.
• Technical Service Provider: Companies that provide technical infrastructure for megah5, such as cloud computing services, security monitoring, and platform performance analytics. All such providers are bound by strict confidentiality agreements with megah5.
• Authorities & Regulatory Bodies: megah5 will disclose data to Malaysian law enforcement or relevant regulatory authorities where required by law, court order, or in the context of a valid official investigation.

Member data security is megah5's top priority. We continuously invest in security infrastructure and staff training to ensure your data remains protected against both foreseeable and unexpected threats.

• End-to-End Encryption: All communication between your device and megah5 servers is encrypted using TLS 1.3 with 256-bit SSL certificates. Sensitive data stored in the database is also encrypted using AES-256.
• Two-Factor Authentication (2FA): megah5 offers two-factor authentication for member accounts. We strongly encourage all members to enable this feature for an added layer of security, particularly for accounts with higher balances.
• 24/7 Security Monitoring: megah5's automated monitoring system detects unauthorized access attempts, suspicious login patterns, and unusual account activity in real time — triggering immediate alerts to our technical security team for prompt action.
• Internal Access Controls: Only megah5 staff with a legitimate business need are granted access to member personal data. All access is logged and audited on a regular basis. Internal passwords are subject to strict security policies, including encryption and periodic expiry.
• Regular Security Testing: megah5 conducts regular penetration testing and vulnerability assessments by independent security specialists to identify and address potential weaknesses before they can be exploited.

While megah5 takes all reasonable steps to protect your data, no security system can guarantee absolute 100% protection. In the event of a security incident affecting member data, megah5 is committed to notifying affected members within the timeframe required by applicable law and taking immediate remedial action.

Megah5 uses cookies and similar tracking technologies to ensure the platform operates correctly, enhance the user experience, and help us understand how the platform is being used. Below is a summary of the types of cookies megah5 uses:

You can manage cookie settings through your web browser or megah5 app settings. Please note that disabling essential cookies may affect the core functionality of the megah5 platform, including the ability to log in and play. Optional cookies can be disabled without affecting core platform functionality.

Megah5 retains members' personal data only for as long as necessary for the stated purposes, or as required by applicable law. The following are general guidelines for data retention periods at megah5:

• Active Account Data: Retained for the duration of the active account and used on an ongoing basis to ensure consistent delivery of platform services.
• Financial Transaction Records: Retained for a minimum of 7 years from the date of the transaction, in compliance with Malaysian accounting laws and anti-money laundering requirements.
• Identity Verification (KYC) Data: Retained for a minimum of 5 years after account closure in accordance with regulatory compliance requirements.
• Support Communication Records: Retained for 2 years to facilitate the resolution of recurring issues and for service quality purposes.
• Technical Data & Logs: Typically retained for 90 days before being automatically deleted, unless required for an ongoing security investigation.
• Closed Account: Basic data is retained for the legally required minimum period before being securely deleted in accordance with megah5's data deletion procedures.

As a megah5 member and data subject, you hold the following rights regarding the personal information we keep on you. We are committed to respecting and facilitating the exercise of these rights.

Megah5 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, relevant legislation, or how the megah5 platform operates. Members will be notified of any material changes through:

• An in-app notification on megah5 the next time you log in after the changes take effect.
• An email notification to your registered email address at least 14 days before material changes take effect.
• An information banner on the megah5.site homepage for at least 30 days following the publication of any changes.

Continued use of the megah5 platform after Privacy Policy changes have taken effect constitutes acceptance of the updated terms. If you do not agree with the changes, you have the right to close your megah5 account and request deletion of your data in accordance with the procedure outlined in Section 8.

The last amended date and version number of this Privacy Policy are clearly stated at the top of this document. You may view the current Privacy Policy at any time at megah5.site/privacy-policy.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how megah5 handles your personal data, we encourage you to reach out to us directly in the first instance.

Megah5 takes every privacy complaint seriously. We aim to respond to all privacy-related enquiries within the stated timeframe and will keep you informed of your case's progress if further investigation is required.