mega566 Privacy Policy

1 Introduction

This Privacy Policy ("Policy") applies to mega566.org ("mega566", "we", "us", "our") and governs the collection, use, storage, and disclosure of personal data relating to players and visitors ("you", "your") who access or use the mega566 online gaming platform, including its website, games, sportsbook, live casino, poker rooms, and all associated services.

mega566 is committed to protecting the privacy of its players in accordance with applicable data protection laws, including the Personal Data Protection Act 2010 (PDPA) of Malaysia and any other applicable regulations governing the processing of personal data in the jurisdictions in which mega566 operates.

By registering an account with mega566, using our Services, or continuing to browse the mega566 website, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with any part of this Policy, you should refrain from using mega566 Services.

2 Data Controller

For the purposes of this Policy, the data controller responsible for your personal data is mega566.org. All data protection enquiries, access requests, and objections should be directed to our dedicated data protection contact at [email protected].

mega566 takes its role as data controller seriously and has implemented internal policies and technical safeguards designed to ensure that personal data is processed lawfully, fairly, and transparently, and that it is collected for specified, explicit, and legitimate purposes.

3 Personal Data We Collect

mega566 collects personal data that is necessary for the provision of its Services, compliance with legal obligations, and the protection of both player and platform integrity. The categories of personal data we collect include:

mega566 does not collect special categories of sensitive personal data (such as health, racial or ethnic origin, religious beliefs, or biometric data) unless expressly required for responsible gaming or legal compliance purposes and with your explicit consent.

4 How We Collect Your Data

mega566 collects personal data through the following means:

• Direct interactions: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting support, or participating in promotions.
• Automated technologies: Technical and usage data collected automatically as you interact with the mega566 platform, including via cookies, web beacons, server logs, and similar tracking technologies.
• Third-party sources: Data received from payment processors (e.g., Touch n Go eWallet, Boost, Maybank FPX, CIMB Clicks, Public Bank) in connection with deposit and withdrawal transactions; identity verification service providers; and fraud prevention and analytics partners.
• Publicly available sources: Publicly available directories or databases where relevant to fraud prevention or responsible gaming compliance.

5 How We Use Your Personal Data

mega566 uses your personal data for the following purposes:

• To create, manage, and maintain your mega566 account, including authentication and account security.
• To process deposits and withdrawals in MYR via your chosen payment method, and to reconcile financial transactions.
• To provide access to all mega566 Services including sports betting, live casino, slots, poker, and esports wagering.
• To verify your identity and age (21+) in compliance with responsible gaming and anti-money laundering obligations.
• To detect, investigate, and prevent fraud, money laundering, cheating, and other prohibited activities on the mega566 platform.
• To personalise your experience on mega566, including game recommendations and relevant promotional communications where you have consented to receive them.
• To provide customer support, respond to enquiries, and resolve disputes.
• To comply with applicable laws and regulatory requirements, including reporting obligations to relevant authorities.
• To analyse usage patterns and improve the performance, security, and functionality of the mega566 platform.
• To enforce the mega566 Terms and Conditions and other applicable policies.

6 Legal Basis for Processing

mega566 processes your personal data on the following legal bases under applicable data protection law:

• Contractual necessity: Processing required to fulfil mega566's obligations under the account agreement, including providing Services, processing payments, and managing your account.
• Legal obligation: Processing required to comply with applicable laws including the Malaysian PDPA 2010, anti-money laundering legislation, and licensing requirements.
• Legitimate interests: Processing for fraud prevention, platform security, business analytics, and responsible gaming monitoring, where such interests are not overridden by your rights and freedoms.
• Consent: Processing for marketing communications and certain cookie deployments where your explicit consent has been obtained. You may withdraw consent at any time without affecting the lawfulness of prior processing.

7 Data Sharing & Disclosure

mega566 does not sell your personal data to third parties. We may share your personal data with the following categories of recipients in connection with the purposes described in this Policy:

• Payment service providers: Touch n Go eWallet, Boost, Maybank FPX, CIMB Clicks, Public Bank, and other payment processors to facilitate financial transactions.
• Identity verification providers: Third-party KYC service providers for age and identity verification in compliance with our responsible gaming and regulatory obligations.
• Game content providers: Platform and game software providers who require certain technical data to deliver game content to your device.
• Fraud prevention and security providers: Services used to detect and prevent fraudulent, unlawful, or abusive activity on the mega566 platform.
• Regulatory and law enforcement authorities: Where required by applicable law, court order, or at the request of a competent regulatory authority in Malaysia or other relevant jurisdiction.
• Professional advisors: Legal, accounting, and audit firms under obligations of professional confidentiality.

All third-party service providers engaged by mega566 are contractually required to process personal data only for specified purposes and in accordance with our instructions and applicable data protection obligations.

8 Cookies & Tracking Technologies

The mega566 platform uses cookies and similar tracking technologies to enhance your experience, maintain session state, and collect usage data for analytics and security purposes. The types of cookies we use include:

• Essential cookies: Required for the platform to function, including session management and login authentication. These cannot be disabled without affecting Service functionality.
• Analytics cookies: Used to understand how players interact with mega566, which pages are visited most frequently, and where technical errors occur. Data collected is aggregated and anonymised where possible.
• Security cookies: Used to detect fraudulent activity, protect against bot access, and maintain platform integrity.
• Preference cookies: Used to remember your settings and preferences on the mega566 platform to improve your experience on return visits.

You may control cookie settings through your browser's privacy options. Disabling certain cookies may impair the functionality of the mega566 platform. mega566 does not use cookies to serve third-party advertising.

9 Data Retention

mega566 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements.

In general terms:

• Account data and transaction records are retained for a minimum of five (5) years following account closure, in compliance with applicable anti-money laundering regulations.
• KYC documentation is retained for at least five (5) years following the end of the business relationship.
• Support correspondence and complaint records are retained for three (3) years from the date of resolution.
• Technical log data (IP addresses, session logs) is retained for up to twelve (12) months for security and fraud investigation purposes.

Where personal data is no longer required for any lawful purpose, mega566 will securely delete or anonymise it in accordance with our data retention procedures.

10 Data Security

mega566 implements appropriate technical and organisational security measures designed to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. Our security measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your browser and the mega566 platform.
• Salted password hashing — plaintext passwords are never stored on mega566 systems.
• Segregation of player funds from operational accounts.
• Restricted internal access to personal data on a need-to-know basis, with role-based access controls.
• Regular security assessments and penetration testing of the mega566 platform infrastructure.
• Incident response procedures for the detection and notification of personal data breaches where required by law.

While mega566 takes reasonable measures to protect your data, no online system is entirely immune from security risks. Players are also responsible for maintaining the confidentiality of their own account credentials and should not share login details with any third party.

11 Your Data Rights

Subject to applicable law, you have the following rights in relation to your personal data held by mega566:

• Right of access: You may request a copy of the personal data mega566 holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data where there is no lawful basis for continued retention, subject to overriding legal obligations.
• Right to restrict processing: You may request that mega566 limit the processing of your data in certain circumstances.
• Right to data portability: Where processing is based on consent or contract and carried out by automated means, you may request your data in a structured, machine-readable format.
• Right to object: You may object to processing carried out on the basis of legitimate interests, including for direct marketing purposes.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact mega566 at [email protected]. mega566 will respond to verified requests within thirty (30) days. We may require proof of identity before processing a data subject request.

12 Children's Privacy

The mega566 platform is strictly intended for users aged 21 years and above. mega566 does not knowingly collect personal data from persons under the age of 21. If we become aware that a user under the age of 21 has registered an account or provided personal data, that account will be immediately closed, and all associated data will be deleted in accordance with our data retention procedures.

If you have reason to believe that a minor has created a mega566 account, please contact our support team immediately so that appropriate action can be taken.

13 International Data Transfers

In the course of providing Services, your personal data may be transferred to and processed in countries outside of Malaysia, including countries where our technology infrastructure, game content providers, or third-party service providers operate. Where such transfers occur, mega566 ensures that adequate safeguards are in place to protect your personal data in accordance with applicable data protection law, including the use of contractual data protection clauses with relevant parties.

14 Changes to This Privacy Policy

mega566 reserves the right to update or amend this Privacy Policy at any time. Material changes will be communicated to registered players via the email address on record or through a prominent notice on the platform. The "Last Updated" date at the top of this Policy reflects the most recent revision.

Continued use of the mega566 platform following notification of changes constitutes acceptance of the revised Policy. Players who do not agree with the updated Policy should cease using mega566 Services and may request account closure in accordance with the Terms and Conditions.

15 Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by mega566, please contact our data protection team. You may reach us via live chat on the mega566 platform (available 24/7 after login) or by written correspondence to [email protected].

mega566 aims to acknowledge all privacy-related enquiries within 48 hours and to provide a substantive response within 30 days of receipt of a verified request, in accordance with applicable data protection law.