Privacy Policy — mega63

This Privacy Policy ("Policy") is issued by mega63 ("mega63", "we", "us", "our") and applies to all personal data collected from individuals ("User", "you", "your") who access or use the mega63 online casino and sports betting platform at https://mega63.cam and any associated services, features, or communications.

mega63 is committed to handling your personal data with integrity, transparency, and respect. This Policy explains what personal data we collect about you, why we collect it, how we use it, who we share it with, and what rights you have in relation to it. We encourage you to read this Policy in full alongside our Terms & Conditions.

By registering an account on mega63, making a deposit, or continuing to use the Platform after this Policy has been made available to you, you acknowledge that you have read and understood its contents. Where processing is based on your consent, you may withdraw that consent at any time — though this does not affect the lawfulness of processing carried out before withdrawal.

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" — any information relating to an identified or identifiable natural person, including name, identification number, contact details, IP address, payment information, and behavioural data associated with a specific account.
• "Processing" — any operation performed on personal data, including collection, storage, use, disclosure, transfer, erasure, or destruction.
• "Data Controller" — the entity that determines the purposes and means of processing personal data. For this Policy, mega63 is the Data Controller in respect of all personal data collected through the Platform.
• "Data Processor" — a third party that processes personal data on behalf of mega63 in accordance with documented instructions and contractual data protection obligations.
• "KYC" — Know Your Customer — the identity verification process through which mega63 confirms the identity and residential address of a registered User.
• "Cookie" — a small text file placed on your device by a website to store preference, session, or tracking information.
• "Platform" — the mega63 website at https://mega63.cam and all associated services, games, and communications.

mega63 collects the categories of personal data described in the table below. The specific data points collected will depend on how you interact with the Platform — for example, a user who makes a cryptocurrency deposit will provide different data than one using Touch 'n Go eWallet.

mega63 does not knowingly collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health information, or biometric data beyond what is strictly required for identity verification purposes (e.g., facial comparison during KYC).

mega63 collects personal data through the following channels:

mega63 processes your personal data for the following purposes. Each purpose is supported by at least one lawful basis as described in Section 6 below.

• Account creation and management: To register your account, maintain your profile, authenticate your identity at login, and manage account settings including responsible gambling tool configurations.
• Service delivery: To provide access to gaming products, process bets and payouts, manage your account balance in MYR, and deliver the features and functionality of the mega63 Platform.
• Payment processing: To facilitate deposits and withdrawals via your chosen payment method (including Touch 'n Go eWallet, Boost, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, GrabPay, or cryptocurrency), verify payment sources, and maintain accurate financial records.
• Identity and age verification (KYC): To confirm that you are who you claim to be, that you are at least 21 years of age, and that you are not subject to any exclusions or restrictions that would prevent you from holding an account.
• Regulatory compliance and AML obligations: To fulfil our obligations under applicable anti-money laundering, counter-terrorism financing, and gaming regulations, including record-keeping, suspicious activity monitoring, and reporting to relevant authorities where required by law.
• Fraud prevention and security: To detect and prevent fraudulent activity, unauthorised account access, bonus abuse, and other malicious conduct, including the use of automated risk-scoring and pattern-recognition tools.
• Responsible gambling: To monitor gaming behaviour for indicators of problem gambling, apply and enforce responsible gambling tools requested by Users or mandated by our policies, and take protective action where necessary for a User's wellbeing.
• Customer support: To respond to your enquiries, resolve complaints, and provide technical assistance in relation to your account or transactions.
• Marketing communications: Where you have consented, to send you promotional offers, bonus alerts, and news about mega63. Marketing communications are only sent to opted-in users.
• Platform improvement and analytics: To analyse usage patterns, diagnose technical issues, test new features, and improve the overall quality and performance of the mega63 Platform.
• Legal claims and dispute resolution: To establish, exercise, or defend legal claims, including in the context of regulatory investigations or user disputes.

mega63 relies on the following legal bases to process your personal data, consistent with applicable data protection law:

mega63 does not sell your personal data. We share personal data with third parties only in the circumstances and with the categories of recipients described below:

• Payment service providers: Transaction data is shared with processors such as FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Hong Leong Bank, Public Bank, and cryptocurrency network services to the extent necessary to complete your deposit or withdrawal. These providers are subject to their own data protection obligations.
• Identity verification providers: KYC documents and identity data are shared with third-party verification service providers engaged to assist with age and identity checks, fraud screening, and AML compliance.
• Technology and infrastructure providers: Data may be processed by our cloud hosting, content delivery network, analytics, and customer support platform providers, all of whom are bound by contractual data processing agreements.
• Regulatory and law enforcement authorities: Where required by applicable law, court order, or legitimate regulatory request, mega63 may disclose personal data to relevant governmental or law enforcement authorities. We will, where lawfully permitted, notify you of such requests.
• Professional advisers: Lawyers, accountants, and auditors engaged by mega63 may have access to personal data to the extent strictly necessary for the service they are providing, subject to professional confidentiality obligations.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of mega63's business, personal data may be transferred to the acquiring entity as part of the business assets, subject to that entity honouring the commitments in this Policy.

mega63 uses cookies and similar technologies (such as pixel tags and local storage) to operate the Platform, remember your preferences, analyse usage patterns, and — where consented to — deliver relevant promotional content. The following categories of cookies are in use:

You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may impair your ability to use the Platform. For detailed guidance on managing cookies in common browsers, refer to your browser's help documentation.

mega63 implements a comprehensive set of technical and organisational security measures to protect your personal data from unauthorised access, loss, alteration, or disclosure. Key measures include:

• Transport Layer Security (TLS/SSL): All data in transit between your device and mega63's servers is encrypted using TLS 1.2 or higher. Look for the padlock icon in your browser address bar when accessing mega63.cam.
• Encryption at rest: Personal data and KYC documents stored in mega63's systems are encrypted using AES-256 encryption.
• Access controls: Access to personal data within mega63 is restricted to authorised personnel on a strict need-to-know basis. All internal access is logged and periodically audited.
• Two-factor authentication: Available for all User accounts and mandatory for administrative access to back-end systems that handle personal data.
• Vulnerability management: mega63 conducts regular security assessments, including penetration testing and vulnerability scanning, to identify and remediate potential weaknesses before they can be exploited.
• Incident response: In the event of a data breach that is likely to result in a risk to your rights and freedoms, mega63 will notify affected Users and relevant authorities in accordance with applicable legal obligations and within the timeframes prescribed by law.

mega63 retains personal data for the following periods, after which it is securely deleted or irreversibly anonymised unless a longer retention period is required by law:

• Account and identity data: Retained for the duration of your account relationship with mega63 and for a minimum of five (5) years following account closure, in compliance with anti-money laundering and gaming regulatory requirements.
• KYC documents: Retained for a minimum of five (5) years following account closure or the last transaction date, whichever is later. Certain jurisdictions may require longer retention periods.
• Transaction and financial records: Retained for a minimum of seven (7) years for accounting, tax, and regulatory compliance purposes.
• Gaming activity logs: Retained for five (5) years for responsible gambling monitoring, dispute resolution, and compliance purposes.
• Support communications: Retained for three (3) years from the date of the last communication, or for the duration of any related ongoing dispute.
• Marketing preference records: Retained for the duration of your consent and for three (3) years following withdrawal, to evidence compliance with marketing opt-in obligations.
• Technical and analytics data: Typically retained in aggregated or anonymised form indefinitely; raw session logs are retained for thirteen (13) months.

Upon expiry of the applicable retention period, data is deleted from active systems and purged from backup systems on the next applicable backup rotation cycle.

As an online platform serving players in Malaysia, mega63 may process or store personal data on servers located outside Malaysia, including in jurisdictions within the Asia-Pacific region. Where personal data is transferred internationally, mega63 ensures that appropriate safeguards are in place, including:

• Transfers to countries or territories that provide an equivalent level of data protection to that required under Malaysian law and the PDPA 2010;
• Use of contractual clauses (standard data protection clauses) with recipient third-party processors that contractually bind them to protect the data to standards equivalent to those required of mega63; or
• Other appropriate safeguards as recognised by applicable data protection law.

By using the mega63 Platform, you acknowledge that your personal data may be transferred to and processed in countries outside Malaysia for the purposes described in this Policy, subject always to the safeguards described above.

Subject to applicable data protection law and certain conditions, you have the following rights in relation to your personal data held by mega63:

To exercise any of the above rights, please contact mega63's support team via the contact details in Section 15. All requests will be handled within the legally required timeframe. We may need to verify your identity before processing your request to protect against fraudulent access to data.

The mega63 Platform is strictly intended for individuals aged 21 and above. mega63 does not knowingly collect, process, or retain personal data from anyone below the age of 21. Our registration process and KYC verification procedures are designed to identify and prevent underage users from accessing the Platform.

If mega63 becomes aware that personal data has been collected from a person under the age of 21 — whether through a misrepresentation during registration or otherwise — the account will be immediately suspended, all data collected will be flagged for deletion subject to any overriding legal retention obligations, and the matter will be investigated in accordance with our underage gambling policy.

If you are a parent or guardian and believe that a minor has registered an account on mega63, please contact our support team immediately at the address provided in Section 15. We will investigate and take appropriate action promptly.

mega63 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, or our data processing practices. When material changes are made, we will:

• Update the "Last updated" date at the top of this Policy;
• Notify registered Users via the email address associated with their account, where the changes materially affect how we handle their personal data; and
• Where the change involves a new basis for processing personal data that was not previously described in this Policy, seek fresh consent where legally required before processing commences on that new basis.

Your continued use of the mega63 Platform following the publication of a revised Policy constitutes your acknowledgement of the updated terms. If you do not agree with the revised Policy, you should cease using the Platform and may request account closure by contacting our support team.

If you have any questions, concerns, or requests relating to this Privacy Policy or how mega63 handles your personal data, please contact our team through the following channel:

This email address is displayed as plain text only and is not a clickable link. Please copy the address into your email client. Alternatively, submit your request via the live chat function within your logged-in mega63 account for faster initial acknowledgement.

If you are not satisfied with how mega63 has handled your privacy concerns, you may have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction. In Malaysia, the relevant body is the Personal Data Protection Department (Jabatan Perlindungan Data Peribadi — JPDP) under the Ministry of Digital.