megah5 Privacy Policy

1. Introduction

1.1 This Privacy Policy applies to all personal data collected and processed by megah5 in connection with your use of the megah5 online casino and sportsbook platform accessible at megah5.club (the "Platform").

1.2 By registering for an Account on the Platform, accessing any part of the Platform, or otherwise engaging with megah5's services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

1.3 This Privacy Policy should be read in conjunction with the megah5 Terms & Conditions, which govern the overall use of the Platform.

1.4 All references to "personal data" in this Policy mean any information that identifies or could reasonably identify you as an individual, whether directly or in combination with other information held by megah5.

2. Data Controller

2.1 For the purposes of this Privacy Policy, megah5 — the entity operating the Platform under its international gaming licence — is the data controller in respect of personal data collected from Players using the Platform.

2.2 megah5 determines the purposes and means of processing personal data submitted by Players in connection with account registration, gameplay, financial transactions, customer support, and platform communications.

3. Personal Data We Collect

3.1 megah5 collects personal data in the following categories, depending on the nature of your interaction with the Platform:

3.1 Registration & Identity Data

• Full legal name
• Date of birth (for age verification purposes)
• Gender (optional)
• Email address
• Mobile phone number
• Username and password (stored in hashed form — never in plain text)
• Residential address
• Nationality

3.2 Identity Verification (KYC) Data

• Government-issued identity document (e.g., Malaysian MyKad, passport)
• Proof of address (e.g., utility bill, bank statement)
• Proof of payment method ownership where required
• Facial verification images where required by our KYC provider

3.3 Financial & Transaction Data

• Deposit and withdrawal history (amounts, timestamps, methods)
• Payment instrument details (e.g., Touch n Go eWallet identifier, bank account last digits, Boost account reference)
• Account balance history

3.4 Gameplay & Behavioural Data

• Game session history (games played, duration, outcomes, bet amounts)
• Bonus usage and wagering activity
• Sportsbook bet history (markets, selections, stakes, results)
• Login timestamps, session durations, and frequency of play

3.5 Technical & Device Data

• IP address
• Device type, model, and operating system
• Browser type and version
• Geolocation data (approximate, based on IP)
• Cookie identifiers and session tokens

3.6 Communication Data

• Live chat transcripts
• Email correspondence with megah5 support
• Feedback or complaint records

4. How We Use Your Personal Data

megah5 uses the personal data it collects for the following purposes:

4.1 megah5 does not sell personal data to third parties. Personal data is not used for any purpose beyond those described in this Privacy Policy without your prior consent, except where required by law or licence conditions.

5. Legal Basis for Processing

5.1 megah5 processes personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between megah5 and the Player (e.g., account creation, payment processing, game provision).
• Legal obligation: Processing required to comply with applicable law, including anti-money laundering regulations, licensing conditions, and tax reporting obligations.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement, where such interests are not overridden by the Player's rights.
• Consent: Processing for marketing communications and optional personalisation features, where explicit consent has been provided. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

6. Data Sharing & Disclosure

6.1 megah5 may share your personal data with the following categories of third parties, strictly for the purposes described in this Policy:

• KYC and identity verification providers: Third-party services engaged to verify the identity and age of Players as required by our licensing obligations.
• Payment processors: Including Touch n Go eWallet, Boost, and FPX banking partners, for the purpose of processing deposits and withdrawals.
• Game content providers: Licensed software providers whose games are hosted on the Platform may receive anonymised gameplay data for RNG auditing purposes.
• Fraud prevention services: Third-party providers engaged to detect and prevent fraudulent activity on the Platform.
• Customer support platform providers: Live chat and communication service providers engaged to support the delivery of megah5's 24/7 customer support.
• Regulatory and licensing authorities: megah5 may be required to disclose player data to its licensing authority or to law enforcement agencies in response to lawful requests or orders.
• Professional advisers: Legal, audit, and financial advisers engaged by megah5, subject to professional confidentiality obligations.

6.2 All third-party service providers engaged by megah5 are contractually obligated to process personal data only in accordance with megah5's instructions and applicable data protection requirements.

7. Cookies & Tracking Technologies

7.1 megah5 uses the following categories of cookies:

• Strictly necessary cookies: Essential for the Platform to function. These include session authentication cookies that keep you logged in to your megah5 Account during a session. These cannot be disabled without disrupting Platform functionality.
• Functional cookies: Used to remember your preferences, such as language settings, display preferences, and last-visited game categories.
• Analytics cookies: Used to collect anonymised data about how Players use the Platform, including which pages are most visited and where users spend the most time. This data is used to improve the Platform experience.
• Security cookies: Used to detect fraudulent logins, identify suspicious activity, and protect Account integrity.

7.2 megah5 does not use cookies to serve third-party advertising or to track players across unrelated websites.

7.3 You may configure your browser to refuse or delete cookies, though doing so may impair your ability to use certain features of the Platform, including maintaining a logged-in session.

8. Data Retention

8.1 megah5 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following retention periods:

• Account and KYC data: Retained for a minimum of five (5) years following Account closure, in accordance with anti-money laundering legal requirements.
• Financial transaction records: Retained for a minimum of five (5) years following the relevant transaction date.
• Gameplay and session data: Retained for a minimum of three (3) years for regulatory compliance and dispute resolution purposes.
• Customer support communications: Retained for two (2) years from the date of the communication, unless the communication is relevant to an ongoing dispute or investigation.
• Marketing consent records: Retained for the duration of the consent period and for one (1) year following withdrawal of consent.

8.2 Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in accordance with megah5's data disposal procedures.

9. Data Security

9.1 megah5 implements appropriate technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the megah5 Platform;
• Encryption of sensitive data at rest, including financial records and KYC documents;
• Hashing of Account passwords using industry-standard one-way cryptographic algorithms (passwords are never stored in plain text);
• Role-based access controls limiting internal access to personal data on a need-to-know basis;
• Regular security audits and penetration testing of Platform infrastructure;
• Two-factor authentication (2FA) available to all Players for Account protection.

9.2 Notwithstanding the foregoing, no data transmission over the internet or storage system can be guaranteed to be 100% secure. megah5 cannot guarantee absolute security of your personal data but will take all reasonable steps to protect it.

9.3 In the event of a data breach that is likely to result in a risk to the rights and freedoms of Players, megah5 will notify affected individuals in accordance with applicable law and its licensing obligations.

10. Your Data Rights

10.1 Subject to applicable law and the conditions of megah5's operating licence, you have the following rights in respect of your personal data held by megah5:

• Right of access: You may request a copy of the personal data megah5 holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data, subject to megah5's legal retention obligations (notably those related to AML compliance).
• Right to restrict processing: You may request that megah5 restrict the processing of your personal data in certain circumstances.
• Right to data portability: Where processing is based on consent or contractual necessity, you may request your personal data in a structured, machine-readable format.
• Right to withdraw consent: Where processing is based on consent (e.g., marketing communications), you may withdraw your consent at any time via Account settings or by contacting megah5 support.
• Right to object: You may object to processing based on megah5's legitimate interests, subject to megah5 demonstrating compelling grounds that override your interests.

10.2 To exercise any of the above rights, please contact megah5's support team via live chat or by email. megah5 will respond to data rights requests within a reasonable period in accordance with applicable law.

10.3 Please note that certain data rights may be limited or overridden by megah5's legal obligations, particularly those arising from its gaming licence and AML compliance requirements. Where megah5 cannot fulfil a data rights request due to such obligations, it will explain the reason for the limitation.

11. International Data Transfers

11.1 megah5 operates internationally. Your personal data may be transferred to and processed in jurisdictions other than Malaysia in connection with megah5's infrastructure, KYC providers, payment processors, and game content providers.

11.2 Where personal data is transferred outside of Malaysia, megah5 takes appropriate steps to ensure that the transfer is carried out in a manner that provides adequate protection for your personal data, including through the use of contractual safeguards with third-party processors.

12. Children & Minors

12.1 Age verification is a mandatory step in the megah5 account registration and KYC process. Provision of false information regarding age constitutes a material breach of the megah5 Terms & Conditions.

13. Third-Party Links

13.1 The megah5 Platform does not contain links to third-party websites unrelated to megah5's services. All navigation on the Platform is within the megah5 domain and its directly operated services.

13.2 To the extent that game content providers operate their own privacy practices in respect of live studio environments, those practices are governed by the respective providers' privacy documentation and are separate from this Privacy Policy.

14. Amendments to This Policy

14.1 megah5 reserves the right to update this Privacy Policy at any time. Where amendments are material, megah5 will notify registered Players via the email address on their Account and/or by displaying a prominent notice on the Platform prior to the amended policy taking effect.

14.2 Continued use of the Platform following the publication of an amended Privacy Policy constitutes acceptance of the amendments. You are encouraged to review this Policy periodically.

15. Contact Us

For questions, concerns, or data rights requests related to this Privacy Policy, please contact the megah5 data team:

• Live Chat: Available 24/7 via the megah5 Platform — the fastest way to reach us
• Email: [email protected]

megah5 aims to acknowledge all privacy-related enquiries within 2 business days and to resolve substantive data rights requests within 30 days, unless complexity requires an extension, in which case we will notify you of the revised timeline.