Privacy Policy Megaa – Our Commitment
Protecting Your Personal Data

Megaa operates under the megaa.pro platform and is fully committed to the privacy of every member who uses our services. This Privacy Policy ("Policy") clearly describes how we collect, process, use, and protect your personal information when you use our website, mobile app, or any services provided by Megaa.

This policy is crafted in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and leading international data protection principles. We believe transparency is the foundation of trust — and trust is something we will never take lightly.

Megaa collects various types of personal information depending on how you use our platform. Generally, the data we collect falls into the following categories:

Megaa only collects data that is strictly necessary for the stated purposes. We do not collect sensitive data such as medical information, religious beliefs, or political views unless required by law.

Megaa collects personal information through several different methods depending on how you interact with our platform:

• Direct registration: Information you enter when creating your Megaa account for the first time, including name, email, phone number, and password.
• Identity verification (KYC): Identity documents uploaded during the KYC process, including copies of your national ID or passport and bank statements.
• Financial transactions: Payment information shared during the deposit or withdrawal process via the integrated payment systems on the platform.
• Platform usage: Usage data collected automatically via cookies, tracking pixels, and server logs when you use the megaa website or app.
• Support communications: Information you share when contacting the Megaa customer support team via live chat, email, or other communication channels.

Megaa uses collected personal information solely for legitimate, identified purposes. We do not use your data for unrelated purposes or any purpose not stated in this Policy:

• Processing account registration and verifying member identity (KYC) in accordance with legal compliance requirements.
• Processing and verifying deposit and financial withdrawal transactions securely and accurately.
• Providing effective and personalised customer support services.
• Sending important notifications related to your account, security, and financial transactions.
• Sending promotional information and exclusive offers to members who have provided marketing consent (revocable at any time).
• Detecting and preventing fraud, money laundering, and other security threats.
• Fulfilling legal and regulatory obligations imposed on the Megaa platform.
• Improving the user experience and optimising platform performance based on collected usage data.

Megaa does not sell, rent, or trade member personal data to any third party for commercial purposes. However, in the course of legitimate platform operations, Megaa may share personal data with a limited category of third parties in the following circumstances:

• Payment service providers: Payment gateway providers that process financial transactions, subject to strict confidentiality agreements.
• Gaming service providers: Game software providers supplying game content on the megaa platform, for the purposes of game license verification and wins processing.
• Legal authorities: Government agencies or law enforcement bodies when required by court order or applicable legislation.
• Identity verification services: Certified third-party KYC providers for verifying member identity documents in accordance with anti-money laundering (AML) requirements.

All third parties working with megaa are required to comply with strict data security standards and are only permitted to use shared data for the specified purposes.

Megaa stores member personal data on secure, protected servers located in certified data centres with international security certifications. All data is stored using the latest encryption technology and is accessible only to staff with special authorisation.

The technical and organisational measures we implement to protect your personal data include:

• End-to-end encryption for all data in transit using TLS 1.3 protocol.
• Encryption at rest for all sensitive information stored in our databases.
• Two-factor authentication (2FA) for all internal administrative access to systems containing personal data.
• Regular security audits by independent third parties to identify and address system vulnerabilities.
• 24/7 threat monitoring and an active intrusion detection system (IDS).

Megaa retains member personal data for as long as the account is active and for the period required by law following account closure. Data that is no longer needed will be securely deleted using industry-recognised data disposal methods.

The megaa platform uses cookies and similar tracking technologies to enhance user experience, analyze usage patterns, and deliver more relevant content. Cookies are small text files stored on your device when you visit our website.

• Essential cookies: Required for core platform functionality including login verification and session security. These cookies cannot be disabled.
• Performance cookies: Collecting information about how you use the platform to help us improve functionality and performance.
• Preference cookies: Remembering your preferences and settings such as preferred language and payment method for ease of use.
• Analytics cookies: Helping us understand aggregate user behaviour for product development purposes.

You can manage or disable cookies through your web browser settings at any time. However, disabling certain cookies may affect the functionality and user experience of the megaa platform.

As a megaa member, you have certain rights regarding your personal data that we collect and process. These rights are in accordance with the provisions of Malaysia's Personal Data Protection Act 2010 (PDPA):

The megaa platform is exclusively for individuals aged 18 and above. We do not intentionally collect, process, or store any personal information from individuals under the age of 18.

If we find that we have inadvertently collected personal data from an individual under the age of 18, we will take immediate steps to delete that data and close the associated account. If you believe we may have collected information from a minor, please contact us immediately through the provided support channels.

Megaa reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our operational practices, evolving legal requirements, or new technological developments. Any amendments will take effect immediately upon publication at megaa.pro/privacy-policy.

For material or significant changes that substantially affect how we process your personal data, megaa will send notifications to members via their registered email or through in-platform notifications before the changes take effect, giving members sufficient time to review them.

The "Updated" date displayed at the top of this page always reflects the date of the latest revision to this Privacy Policy. Your continued use of the megaa platform after any revision is published constitutes your acceptance of the amended policy.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, megaa's Data Protection Officer (DPO) team is ready to assist you.

You can reach us through the following channels — our team is available 24 hours a day, 7 days a week to ensure all privacy-related enquiries receive prompt attention: