Privacy Policy

01Introduction

This Privacy Policy ("Policy") describes how mega333 ("we", "us", "our", "the Platform") collects, processes, stores, and protects the personal data of users ("you", "User", "Player") who access or interact with the mega333 platform via the domain mega333.cam and any associated sub-domains or mobile-optimised interfaces.

mega333 operates in compliance with applicable data protection legislation and international best-practice standards. We recognise that privacy is a fundamental right, and we take our obligations as a data controller seriously. This Policy is written in plain, accessible language so that you can understand exactly what happens to your personal data when you use our platform — without needing a legal background to interpret it.

This Policy should be read alongside our Terms & Conditions, which govern the broader relationship between you and mega333. Together, these documents form the complete framework under which your account operates. By registering an account or using the mega333 platform in any capacity, you confirm that you have read and understood this Policy.

02Definitions

The following terms are used throughout this Privacy Policy and carry the meanings defined below:

03Personal Data We Collect

mega333 collects only the personal data that is necessary for the purposes described in this Policy. The categories of personal data we collect include the following:

3.1 Account Registration Data

• Full legal name (as it appears on your government-issued identification)
• Date of birth (to verify that you meet the minimum age requirement of 21 years)
• Email address
• Residential address (including city, state, postcode, and country)
• Username and encrypted password
• Phone number (optional, but required for certain verification procedures)

3.2 Identity Verification (KYC) Data

• Copies of government-issued identity documents: MyKad (Malaysian NRIC), Driver's Licence, or Passport
• Proof of residential address (e.g., a Tenaga Nasional or Syabas utility bill, Maybank or CIMB bank statement, or official government letter — issued within the past three months)
• A selfie photograph in which you are holding your identity document
• Proof of payment method ownership (e.g., a screenshot of your e-wallet account or bank account showing your name)

3.3 Financial Transaction Data

• Deposit and withdrawal amounts, dates, and payment methods used
• Payment method identifiers (e.g., masked bank account numbers, e-wallet account references)
• Transaction history and account balance records
• Cryptocurrency wallet addresses (where applicable)

3.4 Platform Activity Data

• Login records including timestamps and IP addresses
• Betting history, game session records, and wager amounts
• Bonus claims and wagering progression records
• Customer support interaction transcripts

3.5 Technical and Device Data

• IP address and approximate geolocation derived therefrom
• Device type, operating system, and browser information
• Referring URLs and navigation patterns within the platform
• Session duration and feature usage data

04How Personal Data Is Collected

mega333 collects your personal data through the following channels and mechanisms:

• Directly from you: Information you provide when registering an account, completing the KYC verification process, making deposits or withdrawals, claiming bonuses, contacting customer support, or updating your account profile.
• Automatically through your use of the platform: Technical data collected via server logs, cookies, and tracking pixels when you browse and interact with the mega333 website or mobile interface.
• From payment service providers: Transaction confirmation data and payment status updates received from providers such as Maybank2u, CIMB Clicks, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, and FPX when you initiate a deposit or withdrawal.
• From third-party identity verification services: Where automated or assisted KYC checks are used to verify the authenticity of documents submitted during account verification.
• From fraud detection and compliance services: Risk and fraud screening data provided by licensed third-party compliance technology providers under data processing agreements.

05Data Processing & Use

mega333 processes your personal data for the specific purposes described in the table below. We do not process your data for purposes other than those listed here without first obtaining your explicit consent or as required by law.

06Legal Basis for Processing

mega333 processes your personal data on one or more of the following lawful bases, depending on the specific purpose of processing:

• Contractual necessity: Processing that is required to fulfil our contractual obligations to you — including account management, transaction processing, and KYC verification — is carried out on the basis that it is necessary to perform the contract under which you use the platform.
• Legal obligation: Certain processing activities — including anti-money-laundering checks, age verification, and the retention of financial records — are required by law and are carried out on the basis of compliance with our legal obligations.
• Legitimate interests: Processing activities such as fraud prevention, platform security, responsible gambling monitoring, and technical analytics are carried out on the basis of our legitimate interest in operating a safe, secure, and compliant platform, where these interests are not overridden by your rights.
• Consent: Processing activities such as sending you marketing communications or using non-essential cookies are carried out only where you have provided your explicit consent. You may withdraw your consent at any time by contacting the support team or adjusting your account settings.

07Data Sharing & Disclosure

mega333 does not sell, rent, or trade your personal data to any third party for commercial purposes. Your personal data may be shared with third parties only in the following circumstances:

• Payment service providers: Transaction data is shared with your chosen payment provider (e.g., Maybank, CIMB, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX) solely to process the requested transaction.
• Identity verification services: KYC documents and registration data may be processed by authorised third-party identity verification and AML screening providers under binding data processing agreements.
• Technology infrastructure providers: Hosting, database, analytics, and security service providers who process data on our behalf under strict contractual data protection obligations.
• Regulatory and law enforcement authorities: Where we are legally required to disclose personal data in response to a valid court order, regulatory demand, or law enforcement request.
• Licensed gaming regulators: Personal data may be disclosed to our licensing authority as required by the conditions of our operating licence, including for audit and compliance review purposes.
• Anti-fraud networks: In cases of suspected serious fraud or financial crime, data may be shared with industry anti-fraud consortia or financial intelligence units, to the extent permitted by applicable law.

All third parties with whom mega333 shares personal data are required to handle that data in accordance with applicable data protection standards and to use it only for the specific purpose for which it was disclosed.

08Data Retention

mega333 retains your personal data for no longer than is necessary for the purposes for which it was collected, subject to any overriding legal retention obligations. The following general retention periods apply:

• Active account data: Retained for the duration of your account's active status on the platform, and for a minimum period of five (5) years following account closure — in accordance with standard AML record-keeping requirements.
• KYC and identity verification documents: Retained for a minimum of five (5) years from the date of submission, or for the period required by applicable regulatory obligation, whichever is longer.
• Financial transaction records: Retained for a minimum of seven (7) years from the date of the relevant transaction, consistent with standard financial record-keeping requirements.
• Customer support records: Retained for three (3) years from the date of the relevant interaction, or for the duration of any unresolved dispute involving the relevant interaction.
• Cookies and analytical data: Session cookies expire upon browser closure. Persistent analytical cookies are retained for a maximum of 24 months from the date of placement.
• Self-exclusion records: Retained indefinitely to prevent re-registration by persons who have permanently self-excluded from the platform.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be linked to any identifiable individual.

09Data Security

mega333 implements a comprehensive suite of technical and organisational security measures designed to protect your personal data against unauthorised access, loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption: All data transmitted between your device and the mega333 servers is encrypted using the same standard used by international financial institutions. Your personal information and payment details are never transmitted in plain text.
• Encrypted data storage: Sensitive personal data stored on our servers — including KYC documents, payment method identifiers, and account credentials — is encrypted at rest using industry-standard encryption protocols.
• Password hashing: Account passwords are stored only in irreversible hashed form using a strong cryptographic hashing algorithm. mega333 does not have access to your plain-text password under any circumstances.
• Access controls: Access to systems containing personal data is restricted to authorised personnel on a strict need-to-know basis, enforced through role-based access control and multi-factor authentication for administrative interfaces.
• Security auditing: Our platform infrastructure is subject to regular security assessments, penetration testing, and vulnerability scanning by qualified security professionals.
• Incident response: mega333 maintains a documented data breach response procedure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you without undue delay in accordance with applicable regulatory requirements.

10Cookies & Tracking Technologies

mega333 uses cookies and similar tracking technologies to operate the platform, remember your preferences, and collect analytical data that helps us improve the user experience. The following categories of cookies may be set when you visit mega333.cam:

Essential and security cookies are necessary for the platform to function and cannot be disabled without affecting your ability to use mega333. Functional and analytical cookies may be controlled via your browser settings. Disabling functional cookies may affect your ability to use certain personalisation features.

11Your Rights

As the subject of personal data processed by mega333, you hold the following rights. These rights may be subject to certain conditions and exceptions under applicable data protection law, but mega333 is committed to honouring them to the fullest extent permitted.

To exercise any of the above rights, please contact the mega333 data protection team via live chat or at the support email address listed in Section 15. We will respond to valid requests within 30 calendar days of receipt. We may request proof of identity before processing certain requests to ensure the security of your data.

12Minors & Age Policy

The mega333 platform is strictly intended for persons aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21, and we do not permit persons under 21 to register an account or access any gambling services on the platform.

Age verification is a mandatory component of our KYC process, and all accounts are subject to age verification checks prior to the processing of any withdrawal. Where mega333 discovers that personal data has been collected from a person under the age of 21, the following steps will be taken immediately:

• The account will be suspended and access will be denied
• All personal data associated with the account will be deleted, except where retention is required by law for regulatory reporting purposes
• Any balance in the account will be withheld and the matter may be referred to the relevant authorities

If you are a parent or guardian and believe that a person under 21 in your care has registered an account on mega333, please contact our support team immediately using the details in Section 15.

13Third-Party Services

The mega333 platform integrates with a number of third-party service providers in order to deliver its full range of features. These include payment processors (Maybank2u, CIMB Clicks, Public Bank Online, Hong Leong Connect, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX), game content providers, KYC and AML verification services, and infrastructure and analytics providers.

When you interact with these third-party services through the mega333 platform — for example, by initiating a deposit via DuitNow or Touch 'n Go eWallet — the relevant third party may collect and process personal data about that interaction in accordance with its own privacy policy. mega333 is not responsible for the privacy practices of independent third-party service providers.

mega333 does not place third-party advertising or affiliate tracking technologies on its platform that transmit your behavioural data to external commercial advertising networks. The platform contains no links to external websites beyond what is strictly necessary for platform operation.

14Policy Amendments

mega333 reserves the right to update or revise this Privacy Policy from time to time to reflect changes in applicable law, regulatory requirements, or our data processing practices. The "Last Updated" date at the top of this page will be revised accordingly whenever material changes are made.

Where amendments are material — meaning they significantly affect your rights or the manner in which your personal data is processed — mega333 will endeavour to notify you via your registered email address or through a notice prominently displayed on the platform prior to the changes taking effect.

Your continued use of the mega333 platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised Policy. If you do not accept the revised Policy, you must cease using the platform and request account closure in accordance with the process described in our Terms & Conditions.

We recommend reviewing this Policy periodically to stay informed about how we handle your personal data.

15Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by mega333, please contact our support and data protection team through the following channels:

• Live Chat: Available 24/7 via the mega333 platform — average response time under 5 minutes. Agents available in English, Bahasa Melayu, and Mandarin.
• Support Email: [email protected] — for formal written data subject requests, please include your registered username and a description of your request in the subject line.

For formal data subject access requests, erasure requests, or complaints about how your personal data has been handled, please submit your request in writing via the support email address above. We will acknowledge receipt within 5 business days and provide a substantive response within 30 calendar days, in accordance with applicable data protection standards.