Data Protection

Privacy Policy mega38

Your privacy is our priority. This document clearly and transparently explains how mega38 collects, uses, stores and protects your personal data as a member of our platform.

Updated: January 2026

How mega38 Protects Your Privacy

Six core principles that guide how mega38 manages and protects the personal data of every member.

256-bit SSL Encryption

All data transmitted between your device and mega38 servers is protected by 256-bit SSL encryption — the same security technology used by leading banking institutions worldwide. No third party can intercept your information during transmission.

No Data Sales

Mega38 has never and will never sell, rent or trade member personal data to any third party for commercial marketing purposes. Your data belongs to you — we use it solely to provide the services you signed up for.

Restricted & Controlled Access

Members' personal data may only be accessed by specifically authorised mega38 staff with a legitimate business need. All access is logged and monitored. Staff who violate this policy are subject to strict disciplinary action.

Secure Data Storage

All data is stored on servers protected by layered physical and digital access controls. Data backups are performed regularly with full encryption. We use enterprise-grade cloud infrastructure that complies with international security standards.

Full Member Control

You have full control over your personal data. Through your account settings, you can request a copy of your data, update your information, or request account deletion at any time. mega38 respects your right to control your own personal information.

Immediate Breach Notification

In the event of any data breach involving your information, mega38 is committed to notifying affected members within 72 hours. We will clearly explain what happened, what data was involved and the steps we have taken to address the situation.

Important Note: This Privacy Policy applies to all users and members of the mega38 Platform, including the mega38.vin website and related mobile applications. By using our Platform, you agree to the collection and use of information as described in this document.
Section 01

Information Collected

Mega38 collects various types of personal information to enable us to provide a safe, efficient and tailored service to every member. The information we collect is as follows:

Data Category Example Information Primary Purposes
Identity Information Full name, date of birth, identification card number KYC verification & account registration
Contact Information Email address, mobile number Account communications & notifications
Financial Information Bank account number, account holder name Deposit & withdrawal processing
Technical Data IP address, device type, web browser Security & platform improvements
Usage Data Game history, betting records, login timestamps Regulatory compliance & service improvements

We only collect information that is strictly necessary to provide the services you request. mega38 does not collect sensitive information such as biometric data, medical records, or religious information without your explicit consent.

Section 02

How Data Is Collected

Mega38 collects your personal information through several different channels. It is important that you understand how this data is obtained so you can make informed decisions about the information you share with us:

  • Account Registration: When you register as a new member, you are required to complete a registration form requesting basic information such as your name, email, and phone number.
  • KYC Verification: To process withdrawals and comply with anti-money laundering regulations, we require a copy of a valid identity document.
  • Financial Transactions: Every time you make a deposit or withdrawal, transaction details are automatically recorded for financial record-keeping and security purposes.
  • Platform Usage: Your activity on the Platform — including games played, bets placed, and pages visited — is recorded automatically.
  • Customer Communications: When you contact our customer support via Live Chat or email, those conversations are stored for training and quality control purposes.
  • Cookies & Tracking Technology: Our website uses cookies and similar technologies to enhance the user experience and collect anonymized analytics data.
Data Minimisation Principle: mega38 adheres to the data minimisation principle — we only collect information that is strictly necessary and nothing more. If certain information is not required to provide our services to you, we will not ask for it.
Section 03

Use of Personal Information

All information collected by mega38 is used solely for legitimate, clearly stated purposes. We will not use your data for any purpose inconsistent with what you have consented to. The primary purposes for which your data is used are as follows:

  • Account Management: Creating, managing, and maintaining your member account and providing access to all mega38 services.
  • Transaction Processing: Processing deposits, withdrawals, and all other financial transactions securely and accurately.
  • Identity Verification: Verifying your identity through the KYC process to ensure account security and comply with applicable laws.
  • Service Communications: Sending important notifications related to your account, transactions, security updates, and policy changes.
  • Marketing (with consent): Sending promotional information, bonus offers, and the latest platform news if you have agreed to receive such communications.
  • Fraud Prevention: Detecting, investigating, and preventing fraudulent activity, money laundering, and security breaches.
  • Platform Improvements: Analyzing usage patterns to improve the user experience, enhance platform performance, and develop new features.
  • Legal Compliance: Complying with legal obligations, regulations, and directives from relevant regulatory authorities.

Should mega38 wish to use your data for any new purpose not stated here, we will obtain your consent first before doing so.

Section 04

Data Sharing & Disclosure

Mega38 does not sell, rent or disclose your personal data to third parties for commercial purposes. However, there are limited situations where we may need to share your information with certain parties:

  • Trusted Service Providers: Companies that help us operate the platform, such as payment service providers, cloud infrastructure and analytics platforms. All such providers are bound by strict confidentiality agreements and may only use your data for specified purposes.
  • Legal Authority: Where required by law, court order or a valid law enforcement investigation, mega38 will comply with lawful data disclosure requests.
  • Identity Verification Providers: KYC partners who assist in verifying member identities to meet anti-money laundering compliance requirements.
  • Business Transfers: If mega38 is involved in a merger, acquisition or asset sale, member personal data may be transferred as part of that transaction. Members will be notified in advance.
Our Guarantee: In all of the above situations, mega38 ensures that data sharing is kept to a minimum and only for necessary purposes. All third parties who receive your data are required to protect it with security standards equal to or higher than those we apply.
Section 05

Cookies & Tracking Technology

Mega38 uses cookies and similar tracking technologies to enhance your experience on the Platform. Cookies are small text files stored on your device when you visit our website. The types of cookies we use are as follows:

  • Essential Cookies (Required): These cookies are required for basic platform functions such as login session authentication, security, and language preferences. Without these cookies, the Platform will not function properly and they cannot be disabled.
  • Performance Cookies: Used to collect information on how members use the Platform — which pages are visited most frequently, where errors occur, and how long pages take to load. All such data is collected anonymously.
  • Functional Cookies: Allowing the Platform to remember your preferences, such as your preferred language and display settings, to provide a more personalized experience.
  • Analytics Cookies: Helping us understand Platform traffic and usage patterns for continuous improvement. This analytics data is collected and processed anonymously.

You can manage your cookie settings through your web browser at any time. However, disabling certain cookies may affect the functionality and your experience on the mega38 Platform. For more information on managing cookies, please refer to your web browser's help documentation.

Section 06

Data Security

Mega38 implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration or destruction. Key security measures we have in place include:

  • Data encryption in transit using TLS 1.3 and 256-bit SSL protocols.
  • Encryption of stored data using the AES-256 algorithm for all sensitive information.
  • Role-based access control (RBAC) ensures that only authorized personnel can access specific data.
  • Round-the-clock security monitoring by an experienced cybersecurity team.
  • Regular penetration testing by independent third-party security experts.
  • Two-factor authentication (2FA) for all internal administrative access.
  • Regularly encrypted data backups stored at geographically separate locations.
Shared Responsibility: While mega38 takes all reasonable steps to protect your data, account security also depends on your own actions. Make sure you use a strong password, do not share your login credentials and enable two-factor authentication (2FA) for maximum protection.

In the event of a data security breach affecting your personal information, mega38 is committed to notifying affected members within 72 hours after we become aware of the incident, in line with international data protection best practices.

Section 07

Your Rights

As a mega38 member, you have certain rights regarding your personal data. mega38 respects and facilitates the exercise of these rights. The following are your key rights:

01
Right of Access

You have the right to obtain a copy of all personal data we hold about you. Requests can be made via your account settings or by contacting our support team.

02
Right to Rectification

If any personal data we hold is inaccurate or incomplete, you have the right to request an immediate correction.

03
Right to Erasure

You may request the deletion of your personal data, subject to our legal obligations to retain certain records for specified periods.

04
Right to Object

You have the right to object to the processing of your data for direct marketing purposes at any time, without providing a reason.

05
Right to Portability

You may request that your data be provided to you in a machine-readable format for transfer to another service if required.

06
Right to Withdraw Consent

You may withdraw your consent for any consent-based data processing at any time, without affecting the validity of prior processing.

How to Submit a Request: To exercise any of the above rights, contact our privacy team via support email or Live Chat. We will process your request within 14 working days and provide status updates within the first 3 business days.
Section 08

Data Retention

Mega38 retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy, or as required by applicable law. Retention periods vary depending on the type of data:

  • Active Account Data: Retained for as long as your account is active and for a reasonable period after account closure for dispute or investigation purposes.
  • Financial Transaction Records: Retained for a minimum of 7 years in accordance with financial compliance and anti-money laundering regulatory requirements.
  • KYC Documents: Retained for a minimum of 5 years after the termination of the business relationship, in accordance with relevant regulations.
  • Communication Logs: Customer support communication records are retained for 2 years for quality control and dispute resolution purposes.
  • Analytics Data: Anonymously collected usage data is retained for 3 years for trend analysis and platform improvement purposes.

When data is no longer needed and the minimum retention period has expired, mega38 will securely delete or anonymise that data using methods compliant with industry standards.

Section 09

Children's Privacy

The mega38 platform is exclusively for individuals aged 18 and above. mega38 does not intentionally collect or process personal data from individuals under the age of 18.

Strict Prohibition: If we discover that we have inadvertently collected information from anyone under the age of 18, we will immediately delete that information and close the relevant account. Parents or guardians who believe their child has registered on our Platform are encouraged to contact us right away.

Mega38 employs multiple age-verification mechanisms during the registration and KYC process to ensure our Platform is not accessible to underage individuals. This includes date-of-birth verification during registration and identity document checks during the KYC process.

Section 10

Privacy Policy Amendments

Mega38 reserves the right to amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements or service improvements. Whenever we make a material amendment, we will take the following steps to ensure you are informed:

  • Displaying a clear notice on the mega38 Platform homepage at least 14 days before amendments take effect.
  • Sending notification emails to all registered members outlining the key changes that have been made.
  • Updating the "Last Updated" date at the top of this document.
  • For highly material amendments, we may request renewed consent from members before they can continue using the Platform.

Your continued use of the mega38 Platform after any Privacy Policy amendments take effect will be considered your acceptance of the updated terms. We encourage you to review this page periodically to stay informed about how we protect your information.

Current Version: This Privacy Policy is effective from January 2026. If you have any questions or concerns regarding your data privacy, the mega38 support team is available via 24/7 Live Chat or our support email.

What mega38 Promises You

Our commitment to privacy is more than a document — it is a core value that guides every decision we make about your data.

Secure Data

256-bit SSL encryption for all your data

No Data Sales

Your data is not sold to any third party

Full Control

You can access, edit, or delete your data

24/7 Support

Our privacy team is always ready to help

Privacy Guaranteed, Unlimited Gaming

Mega38 ensures your personal data is protected at all times. Register a free account today and enjoy a safe, fair and responsible online gaming experience with us.

SSL-Protected Data
No Data Sales
Secure KYC
24/7 Support
Bahasa Melayu