MegaWin Privacy Policy – Malaysia Personal Data Protection

01Introduction & Scope of Privacy Policy

MegaWin ("we", "our platform") are committed to the privacy of all users and members on our platform. This Privacy Policy is designed to clearly and transparently explain how we handle your personal data in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA).

This Policy applies to all information collected by megawin via:

• MegaWin's official website at megawin-bangla.com;
• The MegaWin mobile app (where applicable);
• Any interaction with our customer support team;
• Use of any services offered on the platform megawin.

By using the platform MegaWin, you agree to the collection and use of your personal information as described in this Privacy Policy. If you do not agree, please discontinue use of our platform.

02Types of Personal Data We Collect

MegaWin only collects data necessary to provide a quality and secure service to our members. We do not collect excessive or irrelevant data.

03How We Collect Data

MegaWin collects your personal data through the following means:

3.1 Directly from You

• Account registration form megawin — name, email, phone number and date of birth;
• Identity verification (KYC) process — official identification documents;
• Deposit and withdrawal forms — payment method details such as Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, or FPX Maybank2u / CIMB Clicks;
• Communications with our customer support team via live chat, email, or phone;
• Participation in surveys, contests or promotional programmes megawin.

3.2 Automatically

When you use the platform MegaWin, our systems automatically record certain technical information including your IP address, browser type and version, device operating system, pages visited, time and duration of each session, and gaming activity details. This data is used solely for security and service improvement purposes.

3.3 Via Cookies

Platform megawin uses cookies to enhance your browsing experience. Further details on our use of cookies are outlined in Section 7 of this document.

04How We Use Your Data

MegaWin use your personal data only for legitimate, relevant and reasonable purposes. The "Purpose Limitation" principle is at the core of our data usage policy.

Your data is used by megawin for the following purposes:

• Account Management: Creating, verifying and managing accounts megawin including the required KYC process;
• Transaction Processing: Processing deposits via Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay or FPX, and handling winnings withdrawals securely and accurately;
• Platform Security: Detecting and preventing fraud, hacking, money laundering and platform abuse MegaWin;
• Legal Compliance: Fulfilling legal obligations under Malaysia's PDPA 2010 and other applicable legislation;
• Service Communications: Sending important notifications related to your account, security, promotions and platform updates megawin;
• Responsible Gambling: Monitoring activity patterns to identify members who may need responsible gaming support;
• Product Improvement: Analysing platform usage in aggregate (without identifying individuals) to improve the user experience.

05Sharing Data with Third Parties

MegaWin uphold the principle that your personal data belongs to you and may only be shared under very limited circumstances and with strict controls in place.

5.1 We Do Not Sell Your Data

megawin has never and will never sell, rent or trade members' personal data to any third party for marketing, advertising or commercial purposes.

5.2 Permitted Sharing

Your personal data may be shared with the following parties under limited circumstances:

• Payment Service Providers: Malaysian local payment processors including Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow and FPX bank providers to facilitate secure transaction processing;
• Game Providers: Licensed casino game providers that partner with megawin — only the minimum information required for game operations is shared;
• Regulatory Authority: Where required by Malaysian law, court order or directive from the Personal Data Protection Commissioner;
• Independent Audit: Independent audit and verification firms that certify game fairness MegaWin — subject to strict confidentiality agreements.

06Data Security Measures

MegaWin continuously invests in enterprise-grade cybersecurity infrastructure to ensure our members' personal data remains protected at all times.

6.1 Technical Security

• 256-bit SSL/TLS Encryption: All communications between your browser and the megawin fully encrypted;
• Stored Data Encryption: Sensitive data is stored in encrypted form using AES-256 standard;
• Multi-Layer Firewall: Data servers MegaWin protected by a multi-layered firewall system;
• Intrusion Detection: An active IDS/IPS system monitors for unauthorised access attempts 24 hours a day;
• Two-Factor Authentication (2FA): 2FA option available for all member accounts megawin.

6.2 Access Controls

Access to members' personal data MegaWin on our end is restricted to staff with a legitimate operational need only. All access is logged and monitored. Staff granted access undergo background checks and regular data protection training.

07Cookies & Tracking Technologies

Platform MegaWin use cookies and similar tracking technologies to enhance the functionality and user experience of our platform.

7.1 Types of Cookies Used

• Essential Cookies: Required for core platform functionality megawin such as login verification and session security. Cannot be disabled;
• Preference Cookies: Saving your preferences such as language and display layout to improve your experience;
• Analytics Cookies: Help us understand how members use the platform megawin in aggregate for continuous improvement.

7.2 Cookie Controls

You can manage cookie usage through your browser settings. Disabling certain cookies may affect some platform functionality. megawin but will not prevent you from accessing core features.

08International Data Transfers

In certain operational circumstances, members' personal data MegaWin may be stored or processed on servers located outside Malaysia — particularly in relation to services provided by international game providers partnering with megawin.

In all cases of international data transfers, MegaWin to ensure:

• The destination country maintains data protection standards equivalent to or exceeding those of Malaysia;
• A legally binding data transfer agreement is signed with the data recipient;
• The same or higher technical security standards are upheld by the receiving party;
• Your rights as a data subject remain protected regardless of where your data is processed.

09Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and the MegaWin, you have the following rights regarding your personal data:

To exercise any of the above rights, please contact our data protection team MegaWin via email at support@megawin-bangla.com. We will respond within 30 business days from the date the request is received.

10Data Retention Period

MegaWin retain members' personal data only for as long as necessary to fulfil the purpose for which it was collected or to comply with applicable legal obligations.

Once the retention period expires, data will be securely deleted or anonymised in accordance with our data deletion procedures megawin as stipulated.

11Children's Privacy

Platform MegaWin is exclusively for individuals aged 18 and above. We do not knowingly collect any personal information from individuals under the age of 18.

12Links to Other Websites

Platform MegaWin may contain links to third-party websites in certain contexts. This Privacy Policy applies only to the megawin only. MegaWin is not responsible for the privacy practices or content of any third-party websites accessed through such links. We encourage you to read the privacy policy of every website you visit.

13Privacy Policy Amendments

MegaWin reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements or improvements to our services.

When material changes are made to this Privacy Policy, megawin will:

• Updating the "Last Updated" date at the top of this document;
• Sending email notifications to all active members informing them of important changes;
• Displaying a clear notice on the platform's main page megawin for a minimum of 30 days;
• Archiving previous versions of the Privacy Policy, available to members upon request for reference.

The current version of this Privacy Policy takes effect on 1 July 2026. Continued use of the platform MegaWin after the update date will be considered acceptance of the changes made.

14Contact the MegaWin Data Protection Team

If you have any questions, concerns or complaints regarding this Privacy Policy or the way MegaWin regarding the handling of your personal data, please contact us: