Privacy Policy mega77 — Your Personal Data Protection

This Privacy Policy is an official mega77 document that describes our approach to protecting the personal data of every user who accesses or uses the mega77 platform, including the website, mobile app, and all related services.

When you register as a mega77 member, use any of the services we offer, or simply browse our website, you agree to the data collection and usage practices described in this Privacy Policy. It is important that you read this document carefully so you understand your rights and how we protect your interests.

This policy applies to all information collected through:

• Official mega77 website at mega77.vin
• Mega77 mobile app for Android and iOS
• Any official mega77 communication channel, including live chat and support email
• KYC verification and payment processing procedures

Mega77 only collects information necessary to provide you with high-quality services and to comply with applicable legal and regulatory requirements. Below are the categories of information we collect:

A. Personal Identity Information

• Full name as stated in your official identification document
• National identification number (MyKad) or passport number
• Date of birth for age limit verification
• Facial photo and verification documents for the KYC process

B. Contact Information

• An active and reachable email address
• Registered Malaysian mobile number
• Current residential address

C. Financial Information

• Bank account number and bank name for payment processing purposes
• Deposit and withdrawal transaction history on the platform
• Digital wallet usage records such as Touch 'n Go and GrabPay

D. Platform Usage Data

• Game history and wagering activity on the platform
• Login records including time, date and IP address
• Device type, operating system and browser used
• General location data based on IP address (not precise GPS location)

Every piece of information we collect is used responsibly and for a specific purpose. mega77 uses your data solely for the purposes stated below and for no other purpose without your consent:

Mega77 also uses aggregated and anonymised platform usage data for internal analytics purposes to improve the overall user experience. Data in this form cannot be identified as any individual's personal information.

Mega77 does not sell, rent or disclose your personal information to third parties for their own commercial purposes. However, there are limited situations where we need to share your information with certain parties in order to provide our services to you:

Trusted Service Providers

• Payment gateway: PCI-DSS compliant, approved payment processors that securely handle your deposit and withdrawal transactions
• Game providers: Licensed gaming companies that provide slot game content, Live Casino and other betting products on the mega77 platform
• Identity verification services: Third-party KYC providers that assist us in verifying member identities to meet compliance requirements
• Hosting & infrastructure services: Trusted cloud infrastructure providers for secure data storage and handling

Legal Requirements

Mega77 may be required to disclose certain information to authorities where there is a valid court order, legal investigation requirement or to fulfil anti-money laundering (AML) reporting and financial fraud prevention obligations.

Mega77 continually invests in the latest security infrastructure to ensure your personal data is protected at all times. Our security approach is comprehensive and covers multiple layers of protection:

• Encryption of data in transit: All communications between your device and mega77 servers use TLS 1.3 protocol with AES-256-bit encryption — the highest standard currently available
• Encryption of data at rest: Sensitive information such as passwords and payment details is stored in an encrypted format using irreversible one-way hashing algorithms
• Two-factor authentication (2FA): Members are encouraged to enable 2FA for an added layer of protection when logging into their account
• Active 24/7 monitoring: Our security system monitors any suspicious activity in real time and responds immediately to detected threats
• Regular security audits: mega77 conducts regular internal and external security audits to ensure our systems consistently meet the latest industry standards
• Strict access control: Only authorized staff with legitimate business needs may access member personal data, and every access is logged for audit purposes

As a mega77 member, you have certain rights regarding your personal data that we fully respect. Below are the rights you hold and how to exercise them:

• Right to Access: You have the right to request a copy of all personal information we hold about you. We will process access requests within 14 working days.
• Right to Rectification: If you find that the information we hold about you is inaccurate or outdated, you may request that we correct or update it.
• Right to Erasure: Under certain circumstances, you have the right to request the deletion of your personal data from our systems. However, this right may be limited by certain legal requirements, such as financial records that must be retained by law.
• Right to Object to Processing: You may object to the use of your data for direct marketing purposes at any time without providing any reason.
• Right to Data Portability: You may request that we provide your data in a machine-readable format so that it can be transferred to another service provider.
• Right to Withdraw Consent: Where data processing relies on your consent, you may withdraw that consent at any time without affecting the validity of processing carried out prior to withdrawal.

Mega77 uses cookies and similar tracking technologies to enhance the user experience on our platform. Understanding how we use these technologies is important for you to make informed decisions about your privacy.

Types of Cookies We Use:

• Essential Cookies: Required for core platform functions such as login, game sessions, and security. These cookies cannot be disabled as the platform will not function without them.
• Performance Cookies: Collects information on how visitors use our platform to help us improve website performance and functionality.
• Functional Cookies: Allows the platform to remember your preferences such as language, currency and display settings for a more personalized experience.
• Analytics Cookies: Used by internal analytics tools to understand platform usage patterns in an aggregated and anonymised manner for continuous improvement purposes.

Mega77 does not use third-party cookies for advertising purposes on the platform. We do not allow advertising networks to collect your personal data through our platform.

Mega77 is an online entertainment platform that exclusively for individuals aged 18 and above only. We do not knowingly collect any personal information from individuals below the stipulated age limit.

Steps we take to protect minors:

• All new account registrations require age verification through date of birth information
• Our KYC process verifies each member's actual age through official identification documents
• Accounts suspected of being owned by underage individuals will be suspended immediately pending investigation
• Mega77 partners with child protection organisations to ensure our platform remains inaccessible to minors

Mega77 retains your personal information only for as long as necessary for the purposes stated in this Privacy Policy or as required by applicable law. Our data retention policy is as follows:

• Active account data: Retained for as long as your account is active and for several years after account closure for legal compliance purposes
• Financial transaction records: Retained for a minimum of seven (7) years in accordance with financial and accounting regulatory requirements applicable in Malaysia
• KYC Records: Retained for a minimum of five (5) years after the termination of the business relationship in accordance with anti-money laundering legal requirements
• Log and security data: Retained for 90 days for security and incident investigation purposes
• Customer support communications: Retained for two (2) years for service reference and improvement purposes

When the retention period expires or when you request data deletion (subject to legal requirements), mega77 will delete or anonymise your data in a secure and irreversible manner.

Mega77 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements or improvements in how we protect your information.

When a material change occurs, we will notify you via:

• Notices prominently displayed on the mega77 platform homepage
• Notification email sent to your registered email address
• In-app notification during the next login session

Continued use of the platform after an amendment is published constitutes your acceptance of the updated policy. We encourage you to review this page periodically.