mega63 Privacy Policy

1. Introduction

mega63 ("we", "us", "our") operates the online gaming and sports betting platform accessible at mega63.co (the "Platform"). We take the privacy and security of your personal data seriously. This Privacy Policy describes how mega63 collects, processes, stores, and protects personal information provided by members ("you", "your") in connection with the use of the Platform.

This Policy applies to all services offered through mega63, including the casino, live dealer tables, sportsbook, crash games, slots, payment processing, bonus programmes, and customer support interactions. It forms part of your overall agreement with mega63 alongside the Terms & Conditions and Responsible Gaming Policy.

2. Data Controller

For the purposes of applicable data protection legislation, mega63 is the data controller in respect of personal data collected through the Platform. As data controller, mega63 determines the purposes and means of processing your personal information and is responsible for ensuring it is handled in accordance with applicable privacy laws.

If you have questions about how mega63 processes your data, you may contact our data protection point of contact via the details set out in Section 14 of this Policy.

3. Data We Collect

3.1 Information You Provide Directly

• Registration data: Full name, date of birth, email address, username, and password upon Account creation.
• Identity verification (KYC) documents: Government-issued identification (e.g., MyKad, passport) and proof of address, collected when required for regulatory compliance or before processing withdrawals.
• Payment information: Details required to process deposits and withdrawals, including e-wallet identifiers (Touch n Go, Boost), bank account details (Maybank, CIMB, Public Bank), or cryptocurrency wallet addresses. mega63 does not store full card numbers or payment credentials beyond what is necessary for transaction processing.
• Communications: Records of your interactions with mega63 support, including live chat transcripts, emails, and WhatsApp messages.

3.2 Information Collected Automatically

• Device and technical data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers.
• Usage data: Pages visited, games played, session duration, wagers placed, deposit and withdrawal history, and navigation patterns on the Platform.
• Session and authentication data: Login timestamps, session tokens, and account activity logs used for security and fraud prevention purposes.
• Cookie data: As described in Section 7 of this Policy.

3.3 Information from Third Parties

Where permitted by law, mega63 may receive supplementary identity or fraud-risk data from third-party identity verification and anti-fraud service providers for KYC compliance purposes. This data is processed solely for verification and is not used for marketing or profiling unrelated to regulatory requirements.

4. How We Use Your Data

mega63 processes your personal data for the following purposes:

5. Legal Basis for Processing

mega63 processes your personal data on the following legal grounds:

• Contractual necessity: Processing required to perform the contract between you and mega63 — i.e., operating your Account, processing transactions, and providing Platform services.
• Legal obligation: Processing required to comply with applicable law, including AML regulations, gaming licence conditions, and tax reporting obligations.
• Legitimate interests: Processing for fraud prevention, security monitoring, Platform improvement, and internal analytics, where these interests are not overridden by your rights.
• Consent: Where you have given explicit consent, including for receiving marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

6. Data Sharing & Disclosure

mega63 does not sell or rent your personal data to third parties. We may share your data only in the following circumstances:

• Service providers: Third-party processors who assist mega63 in operating the Platform — including payment processors, KYC/AML verification providers, game software suppliers, cloud hosting providers, and customer support tools — acting under contractual obligations of confidentiality and data protection compliance.
• Gaming regulators: Disclosure to the relevant licensing authority as required under our gaming licence conditions.
• Law enforcement and legal process: Where required by a valid court order, subpoena, or binding direction from a competent authority.
• Business transfers: In connection with a merger, acquisition, or sale of all or substantially all of mega63's assets, provided the acquirer assumes equivalent data protection obligations.

All third-party service providers are vetted for compliance with applicable data protection standards and are contractually prohibited from using your data for purposes other than those specified by mega63.

7. Cookies & Similar Technologies

mega63 uses cookies and similar session technologies solely for the following purposes:

• Strictly necessary cookies: Session management, authentication, and security functions. The Platform cannot function correctly without these cookies.
• Performance cookies: Anonymous aggregated analytics to understand how members navigate the Platform and identify areas for improvement. No personally identifiable information is transmitted to analytics systems.
• Fraud prevention cookies: Device fingerprinting and behavioural analysis tokens used to detect and prevent fraudulent Account activity.

mega63 does not use third-party advertising cookies, social media tracking pixels, or cross-site retargeting technologies. You may configure your browser to block or delete cookies; however, disabling strictly necessary cookies will impair Platform functionality, including the ability to remain logged in during a session.

8. Data Retention

mega63 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods driven by legal and regulatory obligations:

• Account and transaction records: Retained for a minimum of five (5) years from Account closure or the date of the last transaction, as required by AML and gaming regulatory obligations.
• KYC documents: Retained for a minimum of five (5) years from the date of verification or Account closure, whichever is later.
• Communication records: Support correspondence retained for a minimum of two (2) years from the date of the interaction.
• Marketing consent records: Retained for the duration of your Account and for one (1) year following Account closure or withdrawal of consent.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in accordance with our data disposal procedures.

9. Security Measures

mega63 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or alteration:

• 256-bit TLS/SSL encryption for all data in transit between your device and mega63's servers.
• Encryption of sensitive stored data, including hashed and salted password storage.
• Access controls limiting employee access to personal data on a strict need-to-know basis.
• Regular security audits and penetration testing of Platform infrastructure.
• Intrusion detection and real-time anomaly monitoring systems.
• Optional two-factor authentication (2FA) for member Account access.

While mega63 takes all reasonable precautions to protect your data, no online platform can guarantee absolute security. You are responsible for keeping your Account credentials confidential and for notifying mega63 immediately if you suspect any unauthorised access to your Account.

10. Your Privacy Rights

Subject to applicable law and regulatory constraints, you have the following rights in respect of your personal data held by mega63:

• Right of access: Request a copy of the personal data mega63 holds about you.
• Right to rectification: Request correction of inaccurate or incomplete personal data.
• Right to erasure: Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations.
• Right to restriction: Request that mega63 restricts processing of your data in certain circumstances.
• Right to data portability: Receive your personal data in a structured, commonly used, machine-readable format where processing is based on consent or contract.
• Right to object: Object to processing based on legitimate interests, including profiling for direct marketing purposes.
• Right to withdraw consent: Where processing is based on your consent, withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact the mega63 support team with your full name, registered email address, and a description of your request. mega63 will respond within thirty (30) days. We may need to verify your identity before processing any request.

11. Children's Privacy

The mega63 Platform is strictly intended for adults aged 21 years and above. mega63 does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a minor, we will delete that data promptly and close the associated Account. If you believe a minor has registered on mega63, please contact our support team immediately.

12. International Data Transfers

mega63 may transfer your personal data to servers and service providers located outside Malaysia in connection with the provision of Platform services, including cloud infrastructure, game software delivery, and payment processing. Such transfers are conducted in compliance with applicable data protection requirements. mega63 ensures that appropriate safeguards are in place for all international data transfers, including contractual data processing agreements with overseas processors that impose equivalent data protection standards.

13. Changes to This Privacy Policy

mega63 reserves the right to update this Privacy Policy at any time. Amendments will be published on the Platform with a revised "Last updated" date. Continued use of the Platform following the publication of an updated Privacy Policy constitutes your acknowledgement of and agreement to the revised terms. For material changes affecting how we process your personal data, mega63 will endeavour to provide advance notice via your registered email address.

We encourage you to review this Privacy Policy periodically to stay informed of how mega63 is protecting your information.

14. Contact Us

For any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data by mega63, please contact our support team. Our English-speaking team is available 24 hours a day, 7 days a week.

Email: [email protected]

Live Chat: Available directly through the mega63 Platform — average response time 3–5 minutes.

For formal data subject access requests or complaints, please include "Privacy Request" in your subject line and provide your registered email address and a clear description of your request.