megah5 Privacy Policy — How We Collect, Use & Protect Your Data

1.1 megah5 takes data privacy seriously. We are committed to handling your personal information with transparency, respect, and in full compliance with applicable data protection legislation, including the Personal Data Protection Act 2010 (PDPA) of Malaysia where applicable, and international best practice standards.

1.2 By registering an account with megah5, accessing the platform, or using any of our services, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.

1.3 If you have any questions or concerns about how megah5 handles your data at any time, please contact us using the details provided in Section 13 of this Policy.

megah5 collects personal information in the following categories:

2.1 Registration Data. When you create a megah5 account, we collect your full name, date of birth, email address, contact telephone number, residential address, and your chosen username. This information is required to open and manage your account.

2.2 Identity Verification Data. To comply with our Know Your Customer (KYC) and Anti-Money Laundering (AML) obligations, megah5 may request copies of government-issued identification documents such as your Malaysian National Identity Card (MyKad) or passport, and proof of address documents such as a recent utility bill or bank statement.

2.3 Financial Data. megah5 collects transaction information including deposit amounts, withdrawal amounts, payment method type (e.g., Touch 'n Go eWallet, Boost, DuitNow, FPX, Maybank, CIMB), and transaction dates and references. megah5 does not store complete payment card numbers or eWallet credentials — these are handled directly by our payment processing partners.

2.4 Gaming Activity Data. We record all gaming activity on your megah5 account, including games played, bet amounts, outcomes, session duration, and wagering history. This data is necessary to provide our services, resolve disputes, and comply with regulatory obligations.

2.5 Device and Technical Data. When you access the megah5 platform, we automatically collect certain technical information including your IP address, browser type and version, device type and operating system, referring URL, and session activity logs.

2.6 Communications Data. megah5 retains records of communications between you and our customer support team, including live chat transcripts, emails, and any other correspondence.

2.7 Responsible Gaming Data. If you use megah5's responsible gaming tools — such as deposit limits, session time limits, self-exclusion, or cooling-off periods — we record these preferences and restrictions to ensure they are applied correctly and consistently to your account.

megah5 uses the personal information we collect for the following purposes:

• To create, maintain, and manage your megah5 player account;
• To verify your identity and age (21+) in accordance with our KYC obligations;
• To process deposits and withdrawals in MYR via your chosen payment methods;
• To provide, operate, and improve the megah5 gaming platform and all its products;
• To detect, prevent, and investigate fraud, money laundering, cheating, or other prohibited activity;
• To communicate with you regarding your account, transactions, platform updates, or support enquiries;
• To send you promotional communications about megah5 offers and promotions where you have consented to receive such communications;
• To apply and monitor responsible gaming controls you have activated on your account;
• To comply with our legal, regulatory, and reporting obligations under applicable law;
• To resolve disputes and enforce our Terms & Conditions.

4.1 Contract Performance. The majority of megah5's data processing activities are necessary to fulfil the contractual relationship established when you create a megah5 account and agree to our Terms & Conditions — specifically to provide you with gaming services, process your transactions, and maintain your account.

4.2 Legal Obligation. Certain processing activities — particularly identity verification, AML screening, and retention of transaction records — are required by applicable law and regulatory obligations binding on megah5.

4.3 Legitimate Interests. megah5 processes some data on the basis of our legitimate interests, including fraud prevention, platform security, and service improvement, where these interests are not overridden by your rights and interests.

4.4 Consent. Where megah5 relies on your consent as the legal basis for processing — for example, for sending promotional communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal. You may update your marketing preferences from within your account settings.

5.1 megah5 does not sell your personal data. We may share your information with the following categories of third parties, strictly as necessary and subject to appropriate data processing agreements:

• Payment Processors: To facilitate your deposits and withdrawals via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and Malaysian bank transfers;
• KYC/AML Service Providers: To verify your identity and screen against applicable sanctions and watchlists;
• Game Software Providers: Your gaming activity data is shared with our licensed game providers to the extent necessary to deliver the relevant game and resolve any game-related disputes;
• IT and Hosting Providers: Third-party infrastructure providers who host and support the megah5 platform under strict confidentiality obligations;
• Regulatory and Law Enforcement Authorities: Where required by applicable law, a court order, or valid regulatory request, megah5 will disclose personal data to the relevant authority.

5.2 megah5 requires all third-party data processors to implement appropriate technical and organisational security measures and to process personal data only in accordance with megah5's documented instructions.

6.1 megah5 uses cookies and similar technologies (including local storage and session storage) to operate the platform, maintain your login session, remember your language and display preferences, and analyse aggregate usage patterns to improve the service.

6.2 Essential Cookies are required for the platform to function. They cannot be disabled without impairing your ability to use megah5.

6.3 Analytics Cookies help megah5 understand how players navigate the platform in aggregate. All analytics data is anonymised or pseudonymised before analysis.

6.4 megah5 does not use third-party advertising cookies or participate in cross-site behavioural advertising networks. Your browsing activity on megah5 is not shared with ad networks for retargeting purposes.

6.5 You may control cookie settings through your browser. Please note that disabling essential cookies will affect platform functionality.

7.1 megah5 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include 256-bit SSL/TLS encryption for all data in transit, encryption of sensitive data at rest, access controls and role-based permissions for our staff, regular security audits and penetration testing, and multi-factor authentication for administrative systems.

7.2 Player funds are held in accounts segregated from megah5's operational finances, providing an additional layer of financial security.

7.3 In the event of a data breach that is likely to result in a risk to your rights and freedoms, megah5 will notify affected players and, where required, the relevant supervisory authority, in accordance with applicable data breach notification obligations.

8.1 megah5 retains your personal data for as long as your account remains active and for such period thereafter as is necessary to fulfil the purposes described in this Policy.

8.2 Following account closure, megah5 retains transaction records, KYC documentation, and gaming history for a minimum of five (5) years in compliance with applicable AML record-keeping obligations. Communications records are retained for three (3) years unless a longer period is required for dispute resolution purposes.

8.3 Data retained solely for analytics purposes is anonymised within twelve (12) months of collection so that it can no longer be associated with any individual player.

9.1 Some of megah5's service providers and game software partners operate from jurisdictions outside Malaysia. Where your personal data is transferred to a country that does not provide an equivalent level of data protection, megah5 ensures that appropriate safeguards are in place, such as standard contractual clauses or equivalent data transfer mechanisms, before any such transfer takes place.

9.2 By using the megah5 platform, you acknowledge and consent to the transfer of your personal data to countries outside Malaysia as described in this Section, subject to the safeguards described above.

Subject to applicable law, you have the following rights in respect of your personal data held by megah5:

• Right of Access: You may request a copy of the personal data megah5 holds about you;
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data;
• Right to Erasure: In certain circumstances, you may request deletion of your personal data. Note that this right is subject to megah5's legal retention obligations;
• Right to Restrict Processing: You may request that megah5 restricts certain processing activities pending resolution of a dispute or objection;
• Right to Object: You may object to processing based on megah5's legitimate interests, including direct marketing;
• Right to Data Portability: Where technically feasible and legally applicable, you may request a structured, machine-readable copy of data you have provided to megah5;
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time.

To exercise any of these rights, please contact megah5 customer support. We will respond to valid requests within thirty (30) days. Where a request is complex or numerous, we may extend this period by a further sixty (60) days with notification.

11.1 megah5 strictly prohibits registration and use of the platform by persons under the age of 21. We do not knowingly collect personal data from individuals under 21. If megah5 becomes aware that personal data has been collected from a minor, the relevant account will be immediately closed and the data deleted, subject to any mandatory retention obligations.

11.2 If you believe that a minor has registered an account on megah5, please contact our support team immediately at the details set out in Section 13.

12.1 megah5 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the services we offer. Material changes will be communicated to registered players via the email address associated with their account and/or a prominent notice on the platform prior to the change taking effect.

12.2 The date of the most recent revision is always indicated at the top of this Policy. We encourage you to review this Policy periodically. Continued use of the megah5 platform after the effective date of any revision constitutes your acceptance of the updated Policy.

For any questions, concerns, or requests relating to this Privacy Policy or megah5's handling of your personal data, please contact our Data Protection team via the live chat feature available on the platform (accessible after logging in to your megah5 account), or by email at: [email protected]

Please do not include sensitive personal data such as passwords or full payment card numbers in any email correspondence. megah5 will never request your account password.