Last updated: 1 January 2026
|
Version 2.4
|
Malay
At megawin, we take our responsibility to protect every user's personal information seriously. This Privacy Policy clearly explains how we handle your data – from the moment you register an account through every transaction and gaming session you conduct on our platform.
We believe transparency is the foundation of trust. That is why we do not just tell you your data is "safe" — we show you how it is protected, why it is required, and what your rights regarding that data. This policy is written in plain language, not filled with legal jargon that is hard to understand.
Policy Summary: megawin only collects data that is strictly necessary. We do not sell your data to any third party. All data is protected with 256-bit SSL encryption. You have the right to access, correct, or request deletion of your data at any time.
This Privacy Policy applies to all users of megawin.cx, the megawin mobile app, and all services provided by our platform. It should be read together with Terms & Conditions us as part of the agreement between you and megawin.
01 Introduction & Scope of This Policy
Megawin is an online gaming platform operating at megawin.cx. We act as the data controller for all personal information you provide or that we collect in the course of your use of our services.
This Privacy Policy covers all of the following situations:
- When you visit our website even without registering an account.
- When you register a new account and complete the KYC (Know Your Customer) process.
- When you make a deposit, place a bet, or withdraw funds through the platform.
- When you contact our customer support team through any channel.
- When you interact with megawin's promotional campaigns or loyalty programmes.
- When you use the megawin mobile app on an Android or iOS device.
If you are under 18, please stop using this platform immediately. megawin does not knowingly collect or process data from minors.
02 Types of Personal Data We Collect
We collect your personal data in two main ways — directly from you, and automatically as you use our platform. Here are the full details:
| Data Category |
Examples |
How Collected |
| Identity Information |
Full name, date of birth, identification card/passport number |
Registration & KYC |
| Contact Information |
Email address, phone number, residential address |
Account Registration |
| Financial Data |
Bank account number, deposit & withdrawal history, transaction records |
Payment process |
| Verification Data |
MyKad copy, bank statement, verification selfie |
KYC Process |
| Gaming Data |
Betting history, wins, losses, favourite games |
Platform usage |
| Technical Data |
IP address, device type, web browser, operating system |
Automatic (server logs) |
| Cookie Data |
Session cookies, preference cookies, device identifiers |
Automatic (cookies & pixels) |
| Communications |
Support chat records, emails sent to us |
Support interactions |
Data Minimisation Principle: megawin only collects data that is strictly necessary for the stated purposes. We do not collect excessive or irrelevant data. If a piece of data is not needed, we will not ask you for it.
03 How We Use Your Personal Data
Every piece of data we collect has a clear and lawful purpose. Here is a comprehensive explanation of how your data is used:
- Identity verification (KYC): Verifying that you are the individual who registered, preventing fraud, and meeting regulatory requirements. This is mandatory for all legitimate online gambling platforms.
- Payment processing: Verifying and processing your deposits and fund withdrawals quickly and securely to your registered account.
- Service provision: Managing your account, providing access to games, processing bets, and calculating wins accurately.
- Security & fraud prevention: Monitoring for suspicious activity, detecting unauthorised access attempts, and safeguarding your funds from any threats.
- Service communications: Sending important notifications about your account, transactions, policy changes, and security information.
- Customer support: Resolving enquiries, complaints, and technical issues you report to our support team.
- Legal compliance: Meeting legal obligations, including reports required by relevant regulatory bodies and enforcement agencies.
- Platform improvements: Analysing usage patterns in aggregate (without identifying individuals) to improve the user experience and platform performance.
- Marketing (with your consent): Sending relevant promotional offers and bonus information — only if you have opted in to receive them, and cancellable at any time.
Legal Basis: All data processing is carried out on a lawful basis – whether to fulfil a contract with you, comply with legal obligations, protect legitimate interests, or based on the explicit consent you have provided.
04 Data Sharing & Disclosure
Megawin does not sell, lease, or trade your personal data to any third party for marketing or commercial purposes. However, there are limited situations where we need to share your data with certain parties:
- Payment service providers: FPX processors, e-wallet operators (Touch 'n Go, GrabPay, Boost), and credit card providers require minimal transaction information to process your payments. All such providers are bound by strict confidentiality agreements.
- Identity verification providers: Trusted third-party KYC services are used to verify your identity documents. This data is processed in accordance with strict industry standards and is not retained longer than necessary.
- Technical infrastructure providers: Cloud and server service providers hosting our platform may have limited access to data for technical maintenance purposes. They operate as data processors and are not permitted to use your data for their own purposes.
- Regulatory bodies & law enforcement: When required by law or a valid court order, we may be required to disclose certain data to the authorities. We will notify you of such disclosure where permitted by law.
- Business transfers: In the event of a merger, acquisition, or asset sale, user data may be transferred as part of the business assets. You will be notified in advance and given appropriate options.
Our Commitment: We have never sold, and will never sell, your personal data to advertisers, data brokers, or any marketing company. This is our absolute commitment to every megawin user.
05 Security & Data Protection
Protecting your data is not merely a legal obligation for us — it is a moral duty we take very seriously. megawin continuously invests in the latest security infrastructure to keep your data protected at all times.
- Encryption in transit: All data transmitted between your device and megawin's servers is protected by 256-bit SSL/TLS encryption – the same standard used by leading banking institutions in Malaysia.
- Stored data encryption: Sensitive data such as banking information and KYC documents are encrypted at rest using AES-256 encryption, which cannot be broken without the correct key.
- Access controls: Only authorised staff with a legitimate business need may access user data. All access is logged and monitored automatically.
- Periodic security audits: Our systems undergo regular penetration testing and independent security audits to identify and address any vulnerabilities.
- 24/7 Monitoring: Our cybersecurity team monitors the platform around the clock to detect any unusual activity or unauthorised access attempts.
- Two-Factor Authentication (2FA): We provide 2FA for all user accounts as an added layer of protection, and we strongly recommend that you enable it.
Incident Response: In the event of a data breach affecting your personal information, we will notify you within 72 hours of becoming aware of the incident, in line with industry best practices. We will also take immediate steps to contain the damage and prevent recurrence.
06 Cookies, Tracking Technologies & Your Choices
Megawin uses cookies and similar tracking technologies to enhance your experience on our platform. Here is an honest explanation of what we use and why:
- Essential Cookies (Required): These cookies are required for core platform functions such as login authentication, session security, and game cart management. The platform cannot function properly without them and they cannot be disabled.
- Functional Cookies: Saving your preferences such as language, time zone, and display settings so you do not need to reconfigure them each time you log in.
- Analytics Cookies: Helping us understand how users interact with the platform — which pages are visited most, where users drop off, and how we can improve the overall experience. This data is collected in aggregate and does not personally identify you.
- Marketing Cookies (Optional): Used to deliver more relevant ads based on your interests. These cookies are only activated if you give explicit consent.
You can manage cookie settings through your web browser. Please note that disabling certain cookies may affect platform functionality. For more information on managing cookies in your browser, please refer to your browser's help guide.
07 Your Rights Regarding Personal Data
As a megawin user, you have clear rights and we are committed to respecting and facilitating the exercise of those rights. Here are all the rights you hold:
Right of Access
You have the right to request a copy of all personal data we hold about you in a readable format.
Right to Rectification
If any of your data is inaccurate or out of date, you may request that we correct it promptly.
Right to Erasure
You may request that we delete your personal data, subject to legal obligations binding on us.
Right to Restriction of Processing
You may request that we restrict the processing of your data in certain situations provided for by law.
Right to Data Portability
You may request your data in a structured format that can be transferred to another service provider.
Right to Object
You may object to the processing of your data for direct marketing purposes or in certain other situations.
To exercise any of the above rights, contact our privacy team at
[email protected] or via the platform's Live Chat. We will respond to your request within
30 calendar days. In complex cases, this period may be extended by up to 60 days with prior notice to you.
08 Data Retention Period
Megawin does not retain your personal data longer than necessary. Retention periods are determined by operational requirements, legal obligations, and legitimate interests:
- Active account data: Retained for the duration your account is active plus 5 years after account closure for financial compliance purposes.
- Transaction & financial records: Retained for a minimum of 7 years in accordance with applicable accounting and tax legislation in Malaysia.
- KYC documents: Retained for 5 years after the termination of the business relationship, in line with anti-money laundering (AML) requirements.
- Support communication logs: Retained for 2 years from the date of last interaction for reference and dispute resolution purposes.
- Analytics & cookie data: Session data is deleted within 30 days. Aggregated analytics data is retained for up to 24 months.
- Marketing data: Retained until you withdraw your consent or request deletion.
Once the retention period expires, data will be securely deleted or anonymised so that it can no longer be linked to you as an individual.
09 Children's Privacy
Megawin is an online gambling platform that strictly for individuals aged 18 and above. We do not intentionally collect, process, or store personal data from minors.
Minor Protection: If we discover that data from a minor has been collected, we will delete it immediately and close the associated account. If you believe a child has registered on our platform, please contact us immediately at
[email protected] so we can take immediate action.
We apply age verification during registration and KYC to prevent minors from signing up. Parents and guardians concerned about their children's online safety are encouraged to use appropriate parental control software.
10 Amendments to This Privacy Policy
Megawin reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or service improvements. When we make significant changes:
- We will update the "Last Updated" date at the top of this page.
- For significant material changes, we will send a notification via email to the address registered in your account.
- A clear notice will be displayed on the platform at least 14 days before the changes take effect.
- Continued use of the platform after the effective date constitutes acceptance of those changes.
We recommend checking this page at least once every three months to stay informed about how we protect your privacy.
11 Contact Us About Privacy
If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, the megawin privacy team is here to help:
- Privacy Email: [email protected] – for all inquiries and requests related to personal data.
- General Support Email: [email protected] – for general issues and account support.
- Live Chat: Available 24/7 directly on the megawin platform for an immediate response.
- Response time: We aim to respond to all privacy enquiries within 5 business days, and data rights requests within 30 calendar days.
If you are not satisfied with how we handle your privacy complaint, you have the right to refer the matter to the relevant data protection regulatory authority. We will provide further information on the appropriate complaint channels upon request.