Megapulsa88 Privacy Policy – Malaysia Member Data Protection

Megapulsa88 ("platform", "we", "our") operates an online entertainment platform offering casino, Sports Betting, e-sports, and related gaming services to users in Malaysia. In the course of operating the platform, we need to collect and process certain personal information from our users ("you", "member").

This Privacy Policy is designed to meet the requirements of Personal Data Protection Act 2010 (PDPA) Malaysia and relevant international privacy standards. It explains:

• The types of personal data we collect from you during and after the registration process.
• The purposes and legal basis under which megapulsa88 uses your data.
• How your data is stored, protected, and the circumstances under which it may be shared.
• Data retention periods and the process for data deletion or archiving.
• Your rights as a data subject under applicable law.
• How you can reach us for any privacy-related enquiries or requests.

This policy applies to all information collected through the megapulsa88 website, mobile app, email communications, and all other service touchpoints between you and megapulsa88.

Megapulsa88 only collects data that is strictly necessary to operate the platform safely and efficiently. Below are the categories of data we collect, along with their purposes and the basis for collection:

We do not collect sensitive personal data such as health information, religious beliefs, or political views except in very specific circumstances and only with your explicit prior consent. We do not knowingly collect data from children under the age of 18 — should we discover that such data has been collected inadvertently, it will be deleted immediately.

Every piece of data collected by megapulsa88 serves a clear and legitimate purpose. We do not use your data for any purpose unrelated to the provision and improvement of our platform services. The primary purposes for which data is used are as follows:

• Account Management: Creating, verifying, and managing your member account, including secure login and two-factor authentication.
• Transaction Processing: Processing deposits via Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, Maybank2u, CIMB Clicks, and FPX; as well as withdrawals to the same account.
• Legal Compliance (KYC/AML): Verifying your identity to meet the requirements of the Anti-Money Laundering Act (AMLA) and our operational licensing obligations.
• Platform Security: Detecting and preventing fraud, unauthorised access, multiple account ownership, and activities that violate our terms of service.
• Responsible Gaming: Monitoring betting patterns to identify signs of problem gambling and offering appropriate support when needed.
• Service Improvement: Analysing usage data in aggregate (not at an individual level) to understand usage patterns and improve the megapulsa88 platform experience.
• Service Communications: Sending important notifications such as transaction confirmations, security alerts, and relevant policy updates.
• Marketing (with consent): Sending promotional offers, bonuses, and new product information — only to members who have given explicit consent to receive marketing communications.

Megapulsa88 does not sell your personal data to any third party for marketing or commercial purposes. However, in the course of operating the platform, there are limited circumstances in which your data may be shared with carefully selected third parties:

• Payment Processors: Required transaction data is shared with payment service providers such as FPX gateways, eWallet processors, and banks to process your deposits and withdrawals. These providers are bound by strict confidentiality agreements.
• Gaming Software Providers: Required game session data is shared with licensed game providers (such as Evolution Gaming and Pragmatic Play) to ensure games function properly. This data does not include your financial information or full identity details.
• Statutory Authority: megapulsa88 complies with all court orders, legal warrants, or lawful requests from relevant authorities (including BNM for AML compliance) when required to do so under applicable law.
• Auditors & Legal Counsel: In certain circumstances, such as security audits or legal claims, data may be shared with legal professionals or independent auditors who are bound by professional confidentiality obligations.

In all instances of data sharing described above, megapulsa88 ensures that only the data strictly necessary for the stated purpose is shared — nothing beyond that. All third-party partners who handle our members' data are required to maintain data protection standards equivalent to or higher than our own megapulsa88 itself.

Megapulsa88 invests heavily in data security infrastructure to ensure every member's personal information is protected at all times. The key security measures we have in place are:

• 256-bit SSL/TLS Encryption: All communications between your browser or app and the megapulsa88 servers are encrypted using the latest TLS protocol. This means data in transit — including login credentials and transaction details — cannot be read by any third party that intercepts the communication.
• Data-at-Rest Encryption: Sensitive data stored in our databases — including identity card numbers and financial account information — is encrypted at rest using industry-grade encryption algorithms.
• Internal Access Controls: Access to members' personal data within megapulsa88 is restricted on a need-to-know basis. All access is logged and monitored.
• Regular Penetration Testing: The megapulsa88 platform's security systems are regularly tested by independent cybersecurity experts to identify and patch any vulnerabilities before they can be exploited.
• Two-Factor Authentication (2FA): Members are encouraged to enable 2FA for added account protection. megapulsa88 internal administrators are required to use 2FA for all system access.
• 24/7 Monitoring: Our IT security team continuously monitors our systems to detect any unusual activity or unauthorised access attempts.

While we take all reasonable steps to protect your data, no system can be guaranteed 100% secure. In the event of a data security breach that materially affects members, megapulsa88 will notify affected members and the relevant authorities within the timeframe required by applicable law.

Platform megapulsa88 uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions properly. We use several types of cookies:

• Essential Cookies: Required for core platform functions such as login session management, security, and language preferences. These cookies cannot be disabled as the platform will not function properly without them.
• Performance Cookies: Collects information on how visitors use the platform — most frequently visited pages, error messages, and so on. All such information is aggregated and anonymised — it is not used to identify you as an individual.
• Functional Cookies: Allows the platform to remember your preferences such as username, language, and region, so that subsequent sessions feel more personalised.
• Analytics Cookies: Helps the megapulsa88 team understand how users interact with the platform overall, for improvement purposes. This analytics data is processed in aggregate and is not linked to any individual's identity.

You can control or delete cookies through your web browser settings. Please note that disabling certain cookies may affect the functionality or your experience on the megapulsa88 platform. Continued use of the platform is considered consent to the use of the essential cookies described above.

Megapulsa88 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by law. Our data retention guidelines are as follows:

• Active Account Data: Retained for as long as your account is active and for a specified period after account closure to allow you to reopen your account if needed.
• Financial Transaction Data: Retained for a minimum of 7 years from the transaction date in accordance with anti-money laundering legislation and financial reporting requirements.
• KYC (Identity Verification) Data: Retained for a minimum of 5 years after account closure or the date of the last transaction, whichever is later, in compliance with Malaysia's AMLA requirements.
• Security Logs: Retained for 12 months for fraud detection and security incident investigation purposes.
• Support Communication Data: Live chat conversation history and support emails are retained for 24 months for quality control and dispute resolution purposes.
• Cookie Data: Expiry periods vary by cookie type — session cookies are deleted when the browser is closed, while persistent cookies have a set expiry period (typically 30 to 365 days).

When data is no longer needed and there is no legal requirement to retain it, megapulsa88 will securely delete or anonymise that data using methods that ensure it cannot be recovered or reused.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and the privacy principles adopted by megapulsa88, you have the following rights regarding your personal data. To exercise any of these rights, contact us at support@megapulsa88.world with the subject line "Privacy Rights Request":

Megapulsa88 uses your gaming activity data for a critical purpose — to safeguard your wellbeing as a player. Data on betting patterns, deposit frequency, session duration, and game history is analysed by our risk control system to identify signs of problem gambling that may require intervention.

Using this data for responsible gaming purposes is among our most important objectives, and we always prioritise member wellbeing over purely commercial interests. If our systems detect any concerning patterns, the support team megapulsa88 may proactively reach out to you to share information about available self-control tools or support resources.

Your gameplay activity data in the context of responsible gaming is never used for marketing purposes or shared with any third parties outside the platform. It exists solely to protect your interests as a megapulsa88 member.

To learn more about the self-exclusion tools available, visit the Responsible Gaming us.

Megapulsa88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or new technologies we adopt. We are committed to keeping you informed of any significant changes:

• Significant changes will be communicated via registered email or in-platform notification at least 7 days before the changes take effect.
• The "Last Updated" date at the top of this page always reflects the latest version of the policy in effect.
• Previous versions of this policy are archived and can be requested through the megapulsa88 support team for reference purposes.
• Continued use of the platform after the effective date of an amended policy constitutes acceptance of those changes.

We encourage you to review this page periodically to stay informed of megapulsa88's latest privacy practices. If you disagree with any amendments, you have the right to close your account before the new policy takes effect.

If you have any questions, concerns, or requests relating to this Privacy Policy or how megapulsa88 handles your personal data, please contact us through the following channels:

• Privacy Email: support@megapulsa88.world — please use the subject line "Privacy Inquiry" or "Data Rights Request" to ensure your message is routed to the appropriate team.
• Live Chat: Contact the megapulsa88 support team, available 24/7 directly within the platform, for general enquiries about privacy and data protection.

We are committed to responding to all bona fide privacy enquiries within a reasonable timeframe. For formal data rights requests (access, correction, deletion), processing takes up to 30 days from the date a complete request is received.