MegaWim Privacy Policy — Member Data Protection & Privacy in Malaysia

This Privacy Policy ("Policy") describes how megawim ("we", "Company" or "Platform") collects, uses, stores and protects your personal information when you use our services through the megawim website, mobile app or any digital channel we operate.

We are committed to managing your personal information responsibly and transparently, in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and its applicable regulations. Your privacy is not just a legal obligation — it is a core value that is part of how megawim operates every day.

By registering or using the megawim platform, you agree to the collection and use of personal information as described in this Policy. If you do not agree, please discontinue use of the platform and contact us to proceed with account closure.

Megawim collects your personal data through several channels — directly from you during registration, automatically during platform use, and occasionally from authorised third-party sources such as payment providers or identity verification bodies.

We do not collect sensitive data such as health information, sexual orientation, or religious beliefs unless voluntarily submitted by you in specific contexts, such as a self-exclusion request related to a gambling problem.

The personal data we collect is used for specific and legitimate purposes. megawim does not use your data for unrelated purposes without first obtaining your consent.

• Account management — Creates, verifies, and maintains your member account, including KYC and identity verification processes.
• Transaction processing — Handles deposits, withdrawals, and all financial activities securely and efficiently.
• Gaming service delivery — Enables access to the Game Lobby, Live Casino, Slots, and all megawim game categories.
• Bonus & promotion management — Processes bonus claims, monitors rollover conditions, and sends relevant promotional information.
• Security & fraud prevention — Detects and prevents fraud, money laundering, and unauthorised use of the platform.
• Customer Support — Answers inquiries, resolves issues, and provides technical assistance to members.
• Legal compliance — Fulfils applicable reporting, audit, and regulatory compliance obligations.
• Platform improvements — Analyses usage patterns (in anonymised form) to improve the user experience.

Megawim never sold, never rented, never shared members' personal data to third parties for their own marketing or commercial purposes. This is a non-negotiable commitment.

However, there are limited situations where we need to share your data with certain parties to enable megawim's services to function:

• Licensed payment providers — To securely process deposits and withdrawals. These providers only receive the minimum data necessary to complete a transaction.
• Game providers — Some game providers require basic identity verification to ensure compliance with their regulations.
• Technical service providers — Companies that help manage IT infrastructure, cybersecurity, and platform analytics (subject to strict confidentiality agreements).
• Statutory authorities — When required by law, court order, or direction from a legitimate regulatory authority.
• Audit & compliance bodies — For operational audit purposes and license compliance verification.

Every third party that receives data from megawim is bound by a strict confidentiality agreement and is prohibited from using that data for any purpose other than what is specified in their agreement with us.

Megawim continuously invests in cybersecurity infrastructure to protect members' personal data from unauthorised access, loss, misuse, or disclosure. This is not just words — it is a real investment you can feel through the security of the platform experience.

• 256-bit SSL encryption — All communications between your browser and megawim's servers are fully encrypted.
• Data-at-rest encryption — Sensitive data stored in megawim's databases is encrypted using AES-256 algorithms.
• Multi-layered access control — Only authorised personnel may access members' personal data, and such access is logged and audited regularly.
• 24/7 Monitoring — An intrusion detection system operates around the clock to detect and respond to threats in real time.
• Regular penetration testing — megawim conducts periodic security testing by independent experts to identify and address any vulnerabilities.
• Two-factor authentication (2FA) — Members are encouraged to enable 2FA for an additional layer of security on their accounts.

While we take all reasonable measures to protect your data, no security system can guarantee 100% absolute protection. In the event of a security incident involving your data, megawim will notify you within 72 hours of the incident being detected, in line with industry best practices.

Megawim does not retain your personal data for longer than is necessary for the original purpose of collection or as required by applicable law.

Once the retention period ends, your data will be permanently deleted or anonymised from megawim's systems. Anonymised data cannot be re-linked to any specific individual and may continue to be used for statistical purposes.

Megawim uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

• Essential Cookies — Required for core platform functions such as login authentication and session security. Cannot be disabled.
• Preference Cookies — Saves your preferences such as language and theme for a more personalised experience.
• Analytics Cookies — Collects anonymous information about how you use the platform to help us improve it.
• Security Cookies — Helps detect suspicious activity and protect your account.

You can manage or delete cookies through your web browser settings. Please note that disabling certain cookies may affect the functionality of the megawim platform. For more information on managing cookies in your browser, refer to your browser's documentation.

Under Malaysia's PDPA and megawim's policy, you have the following rights regarding your personal data. We respect and facilitate the exercise of all these rights without any fees or unnecessary bureaucracy.

Megawim strictly prohibits individuals under the age of 18 from registering or using our platform. Our services are exclusively for adults.

We do not intentionally collect any personal data from children or minors. Should we discover that a child's data has been collected without valid parental or guardian consent, we will take immediate steps to delete that data and close the account in question.

Megawim reserves the right to update or amend this Privacy Policy from time to time in line with changes in law, industry practices, or platform operations. The "Last updated" date at the top of this page reflects when this document was last modified.

For significant amendments — particularly those affecting how your data is used — megawim will provide at least 14 days' notice before changes take effect via:

• In-platform notifications on megawim upon login.
• Email to your registered address.
• Prominent announcements on the megawim website homepage.

Continued use of the megawim platform after the effective date of any amendment constitutes your acceptance of the updated Privacy Policy. We encourage you to review this page periodically.

If you have any questions, concerns, or wish to exercise your data privacy rights, the megawim team is ready to assist through the following channels:

• 24/7 Live Chat — The chat icon in the bottom-right corner of the megawim platform. The fastest way to get an immediate response.
• Privacy Email — [email protected] — dedicated to privacy and data protection inquiries. Response within 5 business days.
• Support Email — [email protected] — for general inquiries including privacy. Response within 24 business hours.

When contacting us regarding privacy, please state your full name, registered email address and the specific right you wish to exercise. This information is required to verify your identity before we process your request.

If you believe megawim has not handled your privacy complaint satisfactorily, you have the right to refer the matter to the Personal Data Protection Commissioner of Malaysia under the provisions of PDPA 2010.