888mega is committed to protecting the personal data of every player on our platform. This Privacy Policy explains what information we collect, why we collect it, how it is used and stored, and the rights you hold over your own data. We encourage you to read it in full.
Before you read the full policy, here is a plain-English summary of our most important commitments to you as an 888mega player.
888mega does not sell, rent, or trade your personal information to any third party for their own marketing purposes — full stop. Your data is yours.
All data transmitted between your device and our servers is encrypted using industry-standard 256-bit SSL technology. Every session, every transaction, every login.
You have the right to access, correct, and request deletion of your personal data at any time. Submit a request to our support team and we will respond within 30 days.
Payment method details processed via Touch 'n Go, DuitNow, FPX, Maybank, CIMB, and other local payment channels are handled by PCI-DSS compliant processors. We do not store raw card data.
We collect only the information necessary to operate your account, process payments, verify your identity, and comply with our regulatory obligations. Nothing superfluous.
In the unlikely event of a data breach affecting your personal information, 888mega will notify affected users promptly and take immediate remediation steps to secure the platform.
This Privacy Policy (the "Policy") describes how 888mega (hereinafter "888mega", "we", "us", or "the Company") collects, processes, stores, shares, and protects the personal data of individuals (hereinafter "you", "the User", or "the Player") who access or use the online casino and sports betting platform operated at https://888mega.cam (the "Platform").
888mega takes the privacy of its users seriously. We recognise that players entrust us with sensitive personal and financial information, and we are committed to handling that information responsibly, securely, and in accordance with internationally accepted privacy standards and the data protection requirements applicable under our operating licence.
This Policy should be read in conjunction with our Terms & Conditions and Responsible Gambling Policy, both of which are incorporated by reference. By using the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.
For the purposes of this Privacy Policy, the following definitions shall apply:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person, including but not limited to name, contact details, date of birth, financial account information, and device identifiers. |
| "Processing" | Any operation performed on personal data, including collection, recording, storage, use, disclosure, erasure, or destruction. |
| "Data Controller" | The entity that determines the purposes and means of processing personal data. In respect of the Platform, the Data Controller is 888mega. |
| "Data Processor" | A third party that processes personal data on behalf of 888mega pursuant to a written agreement, such as a payment processor or KYC verification provider. |
| "Consent" | A freely given, specific, informed, and unambiguous indication of agreement by a User to the processing of their personal data for a stated purpose. |
| "KYC" | Know Your Customer — the identity and address verification process undertaken by 888mega in accordance with its regulatory and anti-money laundering obligations. |
| "Sensitive Data" | A subset of personal data requiring higher levels of protection, including financial account credentials, national identity numbers, and biometric data. |
| "Cookie" | A small text file placed on a User's device by a web server for the purpose of storing session or preference information. |
3.1 The Data Controller responsible for the personal data collected and processed through the 888mega Platform is the entity operating under the 888mega brand pursuant to its international gaming licence. Correspondence regarding data protection matters should be directed to our support team (see Section 16 — Contact Us).
3.2 888mega has designated a data protection point of contact responsible for overseeing compliance with this Policy and for responding to User data rights requests. This contact can be reached via the email address set out in Section 16.
888mega collects personal data through several channels. The categories of data we collect, and the context in which we collect them, are described below.
888mega processes personal data on the following lawful bases, depending on the context and purpose of the processing activity:
| Lawful Basis | When Applied by 888mega |
|---|---|
| Contractual Necessity | Processing required to fulfil our contractual obligations to you as a registered player — including account management, payment processing, and game delivery. |
| Legal Obligation | Processing required to comply with applicable legal and regulatory obligations, including anti-money laundering (AML) checks, KYC verification, and responsible gambling compliance. |
| Legitimate Interests | Processing for fraud prevention, platform security, customer support quality assurance, and internal analytics — where such interests are not overridden by your data protection rights. |
| Consent | Processing for optional marketing communications and non-essential cookies, where your explicit consent has been obtained and can be withdrawn at any time. |
888mega uses the personal data we collect for the following purposes:
7.1 No Sale of Personal Data. 888mega does not sell, rent, or otherwise transfer your personal data to third parties for their own commercial or marketing purposes under any circumstances.
7.2 Service Providers. We share personal data with carefully selected third-party service providers who process data on our behalf and under our instructions. These include:
7.3 Legal and Regulatory Disclosure. We may disclose your personal data to law enforcement agencies, regulatory authorities, or courts where required by applicable law, court order, or legitimate regulatory request. Where permitted, we will notify you of such disclosure.
7.4 Business Transfers. In the event of a merger, acquisition, or sale of all or part of 888mega's business, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections. You will be notified of any such transfer in advance where reasonably practicable.
7.5 Aggregate and Anonymised Data. 888mega may share aggregated, anonymised statistical data — from which no individual can be identified — with analytics providers, industry research bodies, and marketing partners. This does not constitute sharing of personal data.
8.1 What Are Cookies. Cookies are small text files placed on your device by a web server when you visit a website. They are widely used to make websites function more efficiently and to provide session management, personalisation, and analytics capabilities.
8.2 Cookies Used by 888mega. We use the following categories of cookies on the Platform:
8.3 Managing Cookies. You can control non-essential cookies through your browser settings. Note that disabling certain cookies may affect Platform functionality. You may also withdraw consent to marketing cookies at any time by contacting our support team.
8.4 Local Storage. We may also use browser local storage — a technology similar to cookies — to store session preferences and improve Platform performance. This data does not leave your device except as part of normal web traffic encrypted via SSL.
9.1 888mega retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including for the duration of your active account and for a defined period thereafter as required by our legal and regulatory obligations.
9.2 The following general retention periods apply:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account registration data | Duration of account + 5 years | Regulatory / AML obligation |
| KYC / identity documents | Duration of account + 5 years | AML compliance requirement |
| Transaction records | Duration of account + 7 years | Financial record-keeping obligation |
| Support communications | 3 years from last interaction | Quality assurance / dispute resolution |
| Marketing consent records | Duration of account | Consent documentation |
| Session / analytics logs | 13 months from collection | Platform improvement / fraud detection |
9.3 Upon expiry of the applicable retention period, personal data is securely deleted or anonymised. Where technical constraints prevent immediate deletion, the data is placed in secure archive with access restricted pending scheduled deletion.
10.1 888mega implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security framework includes:
10.2 While we take every reasonable precaution, no online system is completely immune to security threats. You are responsible for keeping your account password confidential and for notifying us immediately if you suspect any unauthorised access to your account.
888mega respects your rights in relation to your personal data. Subject to applicable law and certain legitimate restrictions (such as regulatory retention obligations), you hold the following rights:
To exercise any of the above rights, please contact our support team using the details in Section 16. We will respond to all legitimate rights requests within 30 calendar days of receipt. In complex cases, this period may be extended by a further 30 days, and you will be notified accordingly.
12.1 The 888mega Platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect, process, or store personal data from any individual under 21 years of age.
12.2 Age verification is a mandatory component of our account registration and KYC process. Where we have reason to believe that a registered user is under 21, the account will be suspended immediately pending verification, and any funds held in the account will be treated in accordance with our underage gambling policy.
12.3 If you believe that we may have inadvertently collected personal data from an individual under 21, please notify us immediately at the contact address in Section 16. We will investigate the matter promptly and take appropriate remedial action, including deletion of the relevant data.
13.1 888mega operates internationally, and your personal data may be transferred to, stored in, or processed in countries outside of Malaysia, including countries where our servers, operational teams, or third-party service providers are located.
13.2 Where such cross-border transfers occur, 888mega ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to the protections described in this Policy. Such safeguards may include contractual data transfer agreements, adequacy determinations, or binding corporate rules as applicable.
13.3 By using the Platform, you consent to the transfer of your personal data to these locations for the purposes described in this Policy, subject to the safeguards outlined above.
14.1 The 888mega Platform may contain references to third-party services, including payment providers and game software suppliers, whose own privacy practices apply to information you provide directly to them. 888mega is not responsible for the privacy practices of these third parties and encourages you to review their respective privacy policies.
14.2 Our data processing agreements with all third-party service providers include requirements for them to maintain adequate privacy and security standards when processing personal data on our behalf. However, once data is submitted directly to a third-party interface — such as your bank's online portal during an FPX transaction — it falls under that party's data handling policies.
15.1 888mega reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements.
15.2 Material changes to this Policy will be communicated to registered users via email notification or a prominent notice on the Platform at least 7 days before the revised Policy takes effect. Non-material clarifications may be updated without formal notice.
15.3 The "Last Updated" date at the top of this page reflects the effective date of the current version. We encourage you to review this Policy periodically. Continued use of the Platform following the effective date of any amendment constitutes acceptance of the revised Policy.
15.4 If you do not agree with any changes to this Policy, you must stop using the Platform. You may contact us to request account closure and return of your verified Real Money Balance.
For any enquiries, requests, or concerns regarding this Privacy Policy, or to exercise any of your data rights as described in Section 11, please contact the 888mega data protection team through the following channels:
We aim to acknowledge all privacy-related enquiries within 3 business days and to provide a full response to formal data rights requests within 30 calendar days.
Our support team is available 24/7 to handle data rights requests, privacy concerns, and account queries. You can also review our full Terms & Conditions for information on account rules and obligations.
For players aged 21 and above only. Play responsibly. 888mega promotes responsible gambling at all times.