Privacy Policy

1. Introduction

This Privacy Policy ("Policy") is issued by meggi88 ("meggi88", "we", "us", "our"), the operator of the online gaming platform accessible at meggi88.co and any associated subdomains or mobile interfaces (collectively, the "Platform").

This Policy describes how meggi88 collects, processes, stores, shares, and protects personal data relating to individuals who visit, register on, or use the Platform ("you", "your", "Member"). It applies to all personal data processed in connection with the meggi88 Platform, including data collected during account registration, KYC verification, deposits, withdrawals, gameplay, customer support interactions, and marketing communications.

By registering an account or using the Platform, you confirm that you have read and understood this Policy. If you do not agree with our data practices as described herein, please do not register an account or use the Platform.

This Policy should be read together with our Terms & Conditions, which govern your use of the Platform. Defined terms not defined in this Policy carry the meanings given to them in the Terms & Conditions.

2. Personal Data We Collect

meggi88 collects the following categories of personal data:

meggi88 does not collect special categories of sensitive personal data (such as health data, racial or ethnic origin, or political opinions) in the ordinary course of platform operation. Where any sensitive data is inadvertently provided — for example, in a support communication — it will be handled with enhanced care and will not be used for any purpose other than addressing the matter for which it was provided.

3. How We Collect Your Data

meggi88 collects personal data through the following means:

• Direct provision by you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact support, participate in a survey, or opt into marketing communications;
• Automated technical collection — through cookies, server logs, pixel tags, and similar tracking technologies as your browser or device interacts with the Platform (see Section 9 on Cookies);
• Third-party sources — from identity verification service providers, payment processors (including Touch 'n Go, Boost, GrabPay, DuitNow, and FPX banking partners), fraud prevention agencies, and analytics providers, where we are permitted by law to receive and combine such data with information we already hold about you;
• Gameplay and betting activity — automatically generated as you interact with casino games, sportsbook markets, poker tables, and slot machines on the Platform.

4. How We Use Your Personal Data

meggi88 uses your personal data for the following purposes:

• Account creation and management — to register your account, verify your identity, manage your profile, and maintain the integrity of the one-account-per-person rule;
• Service delivery — to enable gameplay, process bets, calculate winnings, execute deposits and withdrawals, and provide access to all Platform features;
• KYC and regulatory compliance — to verify your age (21+), confirm your identity, fulfil anti-money laundering obligations, and meet any other applicable regulatory requirements;
• Fraud prevention and security — to detect, investigate, and prevent fraudulent transactions, account abuse, unauthorised access, and other illegal activities;
• Customer support — to respond to your enquiries, resolve disputes, process complaints, and provide technical assistance;
• Responsible gaming — to monitor for betting patterns consistent with problem gambling, administer self-exclusion requests, enforce deposit and loss limits, and provide responsible gaming tools;
• Marketing communications — to send you promotional offers, bonus notifications, and platform updates where you have consented to receive such communications;
• Platform improvement — to analyse usage patterns, diagnose technical issues, conduct A/B testing, and improve the Platform's features, performance, and user experience;
• Legal obligations — to comply with applicable law, respond to lawful requests from regulatory or law enforcement authorities, and enforce our Terms & Conditions.

5. Legal Bases for Processing

meggi88 processes your personal data on the following legal bases:

• Contract performance — processing necessary to provide the Platform services described in our Terms & Conditions, including account administration, gameplay, and payment processing;
• Legal obligation — processing required to comply with anti-money laundering regulations, age verification requirements, licensing conditions, and other applicable laws;
• Legitimate interests — processing for fraud prevention, Platform security, responsible gaming monitoring, and internal analytics, where our legitimate interests are not overridden by your rights and interests;
• Consent — processing for marketing communications and non-essential cookies, where you have provided explicit consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6. Sharing Your Personal Data

meggi88 does not sell, rent, or trade your personal data to third-party marketers. We share personal data with third parties only in the following circumstances:

• Payment processors — including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX bank partners, and other payment service providers, for the purpose of processing deposits and withdrawals. These providers receive only the data necessary to process the relevant transaction.
• Identity verification providers — third-party KYC and document verification services used to confirm the identity and age of members during account verification.
• Game providers — casino game studios and live casino operators (including but not limited to Evolution Gaming, Pragmatic Play, PG Soft, and similar partners) receive the minimum data necessary to operate game sessions and calculate outcomes. These providers operate under data processing agreements that restrict their use of your data.
• Fraud prevention and security — industry fraud prevention agencies and shared intelligence databases where necessary to detect and prevent fraudulent activity.
• Professional advisors — legal counsel, auditors, and consultants under obligations of professional confidentiality.
• Regulatory and law enforcement authorities — where we are required by law, court order, or regulatory direction to disclose personal data. meggi88 will notify you of such disclosure where legally permitted to do so.
• Business transfers — in the event of a merger, acquisition, or sale of all or substantially all of meggi88's assets, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections.

7. International Data Transfers

The meggi88 Platform is operated with infrastructure that may be located in jurisdictions outside Malaysia. Where personal data is transferred to a jurisdiction that does not provide a level of data protection equivalent to applicable Malaysian standards, meggi88 will implement appropriate safeguards — such as contractual data protection clauses — to ensure that your personal data continues to be protected in a manner consistent with this Policy.

By registering an account and using the Platform, you acknowledge that your personal data may be transferred, stored, and processed in jurisdictions outside Malaysia for the purposes described in this Policy.

8. Data Retention

meggi88 retains your personal data for the following periods:

Where retention beyond these periods is required by applicable law, regulatory obligation, or pending legal proceedings, meggi88 will retain the relevant data for the required extended period. Upon expiry of the applicable retention period, data will be securely deleted or anonymised.

9. Cookies & Tracking Technologies

meggi88 uses cookies and similar tracking technologies (including pixel tags and local storage) to operate and improve the Platform. Cookies are small data files stored on your device by your browser.

meggi88 uses the following categories of cookies:

• Strictly Necessary Cookies — required for the Platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. They cannot be disabled without impairing Platform functionality.
• Functional Cookies — remember your preferences such as language settings, display preferences, and "Remember Me" login state. Disabling these cookies may affect your experience but will not prevent basic access to the Platform.
• Analytics Cookies — collect aggregated, anonymised data about how members use the Platform (pages visited, session duration, navigation paths). This data is used to improve Platform performance and content. These cookies are activated only where you have provided consent.
• Marketing Cookies — used to deliver relevant promotional content and measure the effectiveness of marketing campaigns. These cookies are activated only with your explicit consent and may be placed by meggi88's advertising partners.

You can manage your cookie preferences through your browser settings or via the cookie consent panel on the Platform. Note that disabling strictly necessary cookies will impair or prevent access to the Platform.

10. Your Rights

Subject to applicable law and certain exemptions, you have the following rights in relation to your personal data held by meggi88:

• Right of Access — to request a copy of the personal data meggi88 holds about you;
• Right to Rectification — to request correction of inaccurate or incomplete personal data;
• Right to Erasure — to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations;
• Right to Restriction — to request that we restrict the processing of your personal data in certain circumstances;
• Right to Data Portability — to receive a copy of personal data you have provided to us in a structured, machine-readable format, where processing is based on consent or contract;
• Right to Object — to object to processing based on legitimate interests, including profiling for marketing purposes;
• Right to Withdraw Consent — to withdraw any consent you have given for data processing at any time, without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, contact the meggi88 data team via the support channels listed in Section 15. We will respond to your request within 30 calendar days. We may request proof of identity before processing a request to protect against unauthorised data disclosure.

Please note that certain rights are subject to exemptions. In particular, we are required to retain transaction and KYC records for prescribed periods under applicable law, and the right to erasure cannot override these obligations.

11. Data Security

meggi88 implements technical and organisational security measures designed to protect your personal data against unauthorised access, loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and meggi88 servers;
• Encryption of sensitive data at rest, including KYC documents and payment method details;
• Role-based access controls limiting employee access to personal data on a need-to-know basis;
• Regular security audits and penetration testing of Platform infrastructure;
• Multi-factor authentication requirements for staff accessing systems containing personal data;
• Incident response procedures for detecting, reporting, and responding to data breaches.

In the event of a data breach that is likely to result in a high risk to your rights and freedoms, meggi88 will notify affected Members without undue delay and, where required, will report the breach to the relevant supervisory authority.

While meggi88 takes all reasonable steps to protect your data, no internet transmission or electronic storage system is entirely secure. You are responsible for maintaining the confidentiality of your own account credentials.

12. Children and Minors

The meggi88 Platform is strictly intended for adults aged 21 years and older. meggi88 does not knowingly collect personal data from persons under the age of 21. Registration requires completion of KYC identity verification, which serves as the primary mechanism for confirming that members meet the minimum age requirement.

If meggi88 becomes aware that personal data has been collected from a person under the age of 21, the relevant account will be immediately closed, all data collected from the minor will be securely deleted, and any deposited funds will be returned to the source payment method after verification.

21+ If you are a parent or guardian and believe that a minor in your household has registered on meggi88, please contact our support team immediately via live chat or email.

13. Marketing Communications

Where you have consented to receive marketing communications from meggi88, we may contact you by email, SMS, or in-Platform notification with information about promotions, bonuses, new games, and platform updates.

You may withdraw your consent to marketing communications at any time by:

• Clicking the unsubscribe link included in every marketing email;
• Updating your communication preferences in Account Settings;
• Contacting meggi88 support and requesting removal from all marketing lists.

Withdrawal of marketing consent does not affect transactional communications — meggi88 will continue to send you account-related notifications such as deposit confirmations, withdrawal status updates, security alerts, and mandatory account communications regardless of your marketing preferences.

meggi88 does not share your personal data with third-party marketers. Promotional communications originate from meggi88 only, or from service providers acting under meggi88's instruction.

14. Changes to This Policy

meggi88 reserves the right to amend this Privacy Policy at any time. When material changes are made, we will publish an updated version of this Policy on the Platform, update the "Last Updated" date at the top of the document, and, where practicable, notify registered Members via email or in-Platform notification.

Your continued use of the Platform following the effective date of any amendment constitutes acceptance of the revised Policy. If you do not agree with the revised Policy, you must cease using the Platform and may request account closure in accordance with the Terms & Conditions.

We encourage you to review this Policy periodically to stay informed about how meggi88 handles your personal data.

15. Contact & Data Enquiries

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact the meggi88 team through the following channels:

• Live Chat: Available 24/7 via the chat widget on the Platform. Suitable for general privacy questions and urgent data concerns.
• Email: [email protected] — for formal data subject access requests, erasure requests, and detailed privacy enquiries. Include "Privacy Request" in the subject line. Responses within 5 business days; formal requests completed within 30 calendar days.

When submitting a data request, please provide sufficient information for us to identify your account and verify your identity before processing the request. This is necessary to protect against unauthorised disclosure of personal data.