Mega888 Ori Privacy Policy – Malaysia Personal Data Protection

1. Introduction — Our Commitment to Your Privacy

At mega888 ori, we understand that trust is the foundation of a good relationship between a platform and its members. When you register and use our services — whether to bet on Malaysia Super League football, follow EPL matches via live betting, play Roulette at a live dealer table, or compete in MPL Malaysia E-Sports events — you are entrusting us with your personal information. We take that trust very seriously.

Mega888 ori never sells, rents, or trades members' personal data to any third party for marketing or any other purpose unrelated to the delivery of our services. Every piece of data we collect has a clearly defined purpose, and we retain data only for as long as that purpose requires. This is not just a statement — it is a practice we uphold every day in the operation of the mega888 ori platform.

This Privacy Policy applies to all information collected through the mega888ori.net website, the mobile app (where applicable), and all interactions with our customer support team. If you have any questions about how we handle your personal data, the mega888 ori support team is available via live chat or email at any time.

2. Types of Personal Data We Collect

Mega888 ori collects several categories of personal data across different contexts. Each category is collected only where there is a clear and legitimate operational need:

Account Registration Data:

• Full name as it appears on your official identification document.
• National identity card number (MyKad) or passport for identity verification and anti-money laundering compliance purposes.
• An active email address used for account communications.
• Mobile phone number for two-factor authentication and service communications.
• Date of birth, to verify that you are 18 years of age or older.
• Current residential address in Malaysia.

Financial Data:

• Payment method details used — including e-wallet account numbers (Touch 'n Go, GrabPay, Boost, ShopeePay), DuitNow account numbers, or bank account information for FPX via Maybank2u, CIMB Clicks, and other banks.
• Historical records of deposits and withdrawals, retained for financial and tax compliance purposes.

Platform Usage Data:

• Betting activity records — including bet types, amounts, and outcomes — retained for winnings verification and legal compliance purposes.
• IP address, device type, operating system, and web browser used to access the platform.
• Approximate location data (state/city) derived from IP address for security and fraud detection purposes.
• Login timestamps and account activity logs for security and unauthorised access detection purposes.

Communication Data:

• Records of correspondence with our customer support team via live chat or email — retained for service quality and dispute resolution purposes.

3. How Mega888 Ori Uses Your Personal Data

All personal data collected by mega888 ori is used solely for the following legitimate and necessary purposes:

• Service provision: Processing your account registration, deposits, withdrawals, and betting activity on the platform. Without this data, we are unable to provide our services to you.
• Identity verification (KYC): Verifying your identity in line with anti-money laundering legislation and Malaysian financial regulatory compliance requirements.
• Account security: Detecting and preventing unauthorised access, fraud, and suspicious activity on your account.
• Legal compliance: Fulfilling the reporting and record-keeping obligations required under Malaysian law, including the PDPA 2010 and relevant financial legislation.
• Customer support: Handling enquiries, complaints, and support requests submitted to the mega888 ori support team.
• Service communications: Sending important account-related notifications such as deposit confirmations, security alerts, and terms updates.
• Platform improvement: Analyzing aggregated (not individual) usage patterns to improve platform design, performance, and the overall user experience.
• Responsible gaming: Monitoring gameplay patterns to identify signs of problem gambling and provide appropriate support or intervention in line with mega888 ori's commitment to responsible gaming.

4. Disclosure of Data to Third Parties

Mega888 ori does not sell, rent, or trade members' personal data to any third party for their own commercial purposes. This is a non-negotiable principle. However, in the course of operating the platform, we may share data with the following parties in limited and controlled circumstances:

• Payment service providers: E-wallet and banking service providers such as Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and FPX receive the transaction information required to process your deposits and withdrawals. These providers maintain their own privacy policies and security standards, which apply accordingly.
• Technology infrastructure providers: Companies providing cloud computing, cybersecurity, and technical infrastructure services that support mega888 ori platform operations. All such providers are bound by strict confidentiality agreements and are only granted access to the data necessary for their respective roles.
• Game software providers: For Live Casino dealer games and table games, session data may be processed by our licensed game software providers — limited strictly to data required for the operation of those games.
• Legal authorities: Mega888 ori will disclose personal data to government authorities, law enforcement agencies, or courts when required to do so under Malaysian law or a valid court order. This includes reporting suspicious activity to the relevant authorities in accordance with anti-money laundering laws.

5. Data Security — Our Protection Measures

Mega888 ori continually invests in security technologies and procedures to protect members' personal data from unauthorized access, loss, destruction, or accidental disclosure. The security measures we have in place include:

• 256-bit SSL encryption: All communications between your browser and the mega888 ori server are encrypted using 256-bit SSL/TLS — the same encryption standard used by leading banking and financial institutions worldwide.
• Encryption of data at rest: Sensitive data — including passwords (stored as irreversible hashes) and financial information — is encrypted at rest in our database.
• Internal access controls: Only staff who require access to specific data in order to carry out their duties are granted permission to do so — under a strict need-to-know basis.
• 24/7 security monitoring: Intrusion detection and anomaly monitoring systems operate continuously to identify and respond to any security threats promptly.
• Two-factor authentication (2FA): mega888 ori encourages all members to enable two-factor authentication as an added security layer that keeps your account protected even if your password is compromised.
• Regular security audits: Our platform undergoes regular security testing and audits by independent cybersecurity experts to identify and address vulnerabilities before they can be exploited.

While we take all reasonable steps to protect your data, no system can guarantee absolute security. We encourage you to play your part in keeping your account safe by using a strong password, not sharing your login credentials, and promptly reporting any suspicious activity to our support team.

6. Data Retention — How Long We Keep Your Data

Mega888 ori retains your personal data for as long as necessary to fulfil the purposes outlined in this Privacy Policy, or as required under Malaysian law. General retention guidelines are as follows:

• Active account data: For as long as your mega888 ori account remains active, we retain all relevant data for service delivery and security purposes.
• Data following account closure: After your account is closed, we retain your basic personal data and financial records for a minimum of seven (7) years, in compliance with Malaysian legal requirements governing financial records and anti-money laundering obligations.
• Log & Security Data: Access and security logs are retained for twelve (12) months for fraud detection and dispute resolution purposes.
• Support communication data: Correspondence records with our support team are retained for three (3) years for service quality purposes and as a reference in the event of any future dispute.

Once the relevant retention period has expired and no legal obligation prevents deletion, mega888 ori will erase or anonymise your personal data in a secure and irreversible manner.

7. Your Rights as a Data Subject Under the PDPA

Under the Malaysia Personal Data Protection Act 2010, you as a data subject have the following rights regarding the personal data we hold about you:

• Right to access: You have the right to request and receive a copy of the personal data we hold about you. Requests will be processed within thirty (30) business days.
• Right to rectification: If you believe that the personal data we hold about you is inaccurate or incomplete, you have the right to request a correction. You may also update your profile information directly through your account settings for straightforward changes.
• Right to withdraw consent: For data processed on the basis of your consent (such as marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing that took place prior to the withdrawal.
• Right to prevent processing: You have the right to request that mega888 ori stop processing your data for specific purposes that cause, or are likely to cause, harm or distress to you.
• Right to erasure (subject to legal limitations): Under certain circumstances, you may request the deletion of your personal data. However, we may not be able to fulfil such a request in full if the data is required for legal compliance or the resolution of ongoing disputes.

To exercise any of the rights above, please contact the mega888 ori support team by email at support@mega888ori.net, clearly stating your request. We may need to verify your identity before processing your request to ensure the security of your data.

8. Use of Cookies & Tracking Technologies

Mega888 ori uses cookies and similar tracking technologies to enhance the user experience, maintain platform security, and understand how members use our website. The following are the types of cookies we use:

You can manage cookies through your web browser settings. However, disabling essential cookies may affect the functionality of the mega888 ori platform. For guidance on managing cookies in your specific browser, please refer to your browser's help documentation.

9. Children's Privacy

The mega888 ori platform is strictly for individuals aged 18 and above. We do not knowingly collect or process personal data from minors. Should we discover that a child's personal data has been collected without our knowledge, we will take immediate steps to delete that data and close the associated account.

If you are a parent or guardian who believes your child has registered an account with mega888 ori or has provided us with their personal data, please contact us immediately at support@mega888ori.net so we can take the appropriate action.

10. International Data Transfers

In operating the mega888 ori platform, some of your personal data may be processed or stored on servers located outside Malaysia, depending on the cloud infrastructure we use. In such cases, mega888 ori ensures that all cross-border data transfers are carried out with appropriate safeguards in place, including data processing agreements that meet applicable data protection standards.

We select infrastructure providers with a strong track record of data protection compliance, who are bound by contractual obligations to safeguard your data to a standard no less rigorous than that required under the Malaysia PDPA.

11. Amendments to This Privacy Policy

Mega888 ori reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or developments in platform operations. Any material amendments will be communicated to members via in-platform notifications or email to your registered address before the changes take effect.

We recommend checking this page periodically to ensure you are always aware of the most current version of our Privacy Policy. The "Last updated" date at the top of this document indicates when the Privacy Policy was last reviewed.

12. Contact Us — Privacy-Related Enquiries

If you have any questions, concerns, or requests regarding this Privacy Policy or how mega888 ori handles your personal data, please reach out to us through the following channels:

• Privacy email: support@mega888ori.net (please use the subject line "Privacy Enquiry" to ensure your message reaches the right team)
• Live chat: Available 24 hours a day, 7 days a week via the live chat icon on the mega888ori.net platform.

We are committed to responding to all privacy-related enquiries within forty-eight (48) business hours with a clear and thorough response in Bahasa Melayu.