Mega Casino's Six Pillars of Privacy Protection
This is more than a legal document — it is Mega Casino's commitment to every Malaysian player on how we safeguard your information
Bank-Grade Data Encryption
All personal information and financial transactions at Mega Casino are encrypted using 256-bit SSL technology — the same security standard used by Maybank and CIMB. Your data is protected both in transit and at rest.
Minimum Data, Clear Purpose
Mega Casino collects only the information strictly necessary to operate our services. Every piece of data collected has a defined purpose and is not retained longer than required.
You Control Your Data
As a Mega Casino member, you have the full right to access, correct, and request deletion of your personal data. Reach out to us at any time — we will respond within 14 business days.
Malaysia PDPA Compliance
Mega Casino operates in compliance with the Malaysian Personal Data Protection Act (PDPA) 2010. All data processing is carried out in accordance with data protection principles recognised in Malaysia.
Third-Party Sharing Controls
We do not sell or rent your personal data to any third party for marketing purposes. Data is shared only with operational partners bound by strict confidentiality agreements.
Data Breach Notification
In the event of any security incident affecting your data, Mega Casino is committed to notifying you within 72 hours and taking immediate remedial action to protect your interests.
Introduction & Scope of Privacy Policy
This Privacy Policy is published by Mega Casino ("we", "our platform") and outlines our commitment to protecting the privacy and personal data of all users on the Mega Casino platform, accessible at megacasino-khelo.com and through our official mobile app.
As an online casino platform operating in Malaysia and serving players from across the country — including Kuala Lumpur, Johor Bahru, Penang, Kota Kinabalu, Kuching, Ipoh, and beyond — Mega Casino operates in full compliance with the Personal Data Protection Act (PDPA) 2010 and internationally recognised data protection principles.
By registering an account or using any Mega Casino services, you agree to the terms of this Privacy Policy. Please read this document carefully in its entirety. If you do not agree with any part of this policy, please contact us or stop using the platform before proceeding with registration.
Mega Casino has never sold, rented, or traded members' personal data to third parties for marketing or commercial purposes — and never will. Your data is yours; we hold it solely to deliver the services you request.
Categories of Personal Data Collected
Mega Casino collects various categories of personal information depending on how you interact with our platform. The table below describes the data categories and specific examples we may collect:
| Data Category | Example Information | Required? |
|---|---|---|
| Identity | Full name, date of birth, identity card/passport number | Mandatory |
| Contact | Email address, phone number, residential address | Mandatory |
| Financial | Payment method (TnG, GrabPay, DuitNow, FPX), bank account number, MYR transaction history | Mandatory |
| Verification | Copies of identity document, bank statement, proof of address | Mandatory (KYC) |
| Platform Activity | Game history, bets, login records, session duration | Automatic |
| Technical | IP address, device type, operating system, web browser | Automatic |
| Communication | Customer support correspondence and feedback | Where applicable |
| Preferences | Account settings, language preferences, responsible gambling limits | Preferences |
Mega Casino does not collect sensitive information such as biometric data, health records, or religious beliefs. We collect only the data genuinely needed for the purposes set out in this policy.
How We Collect Your Personal Data
Mega Casino collects your personal data through several different channels:
3.1 Data You Provide Directly
- During the Mega Casino account registration process — name, email, phone number, date of birth
- During the identity verification (KYC) process — identity documents, proof of address
- When making a deposit or withdrawal using Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, or FPX
- When contacting our customer support team via live chat, email, or WhatsApp
- When completing feedback forms or member satisfaction surveys
3.2 Automatically Collected Data
When you use the Mega Casino platform, our systems automatically record certain technical information required for the platform to operate securely and smoothly. This includes your IP address, device type and operating system, browser used, login session time and duration, as well as your gaming and betting activity on the platform.
3.3 Data from Third-Party Sources
In certain circumstances, Mega Casino may receive data from legitimate third-party sources for identity verification, fraud prevention, and legal compliance purposes. This includes third-party age verification services and relevant gambling blacklist databases.
Purpose of Personal Data Use
Mega Casino uses your personal data exclusively for legitimate and necessary purposes. The following are the primary purposes for which your data is used:
4.1 Account Management and Services
- Creating and managing your Mega Casino member account
- Processing deposits in RM via Touch 'n Go, GrabPay, DuitNow, and other local payment methods
- Processing your winnings withdrawal to your registered bank account or e-wallet
- Providing effective and responsive customer support
- Sending important notifications related to your account, transactions, and security
4.2 Security and Legal Compliance
- Carrying out identity verification (KYC) as required by law
- Preventing fraud, money laundering, and illegal activity on the platform
- Complying with legal obligations, regulations, and regulatory directives
- Investigating and resolving disputes or complaints
4.3 Platform Improvements
- Analysing usage patterns to improve the Mega Casino user experience
- Developing new features that are more relevant to Malaysian players
- Conducting platform performance and usability testing
4.4 Marketing Communications
With your consent, Mega Casino may send you information about promotions, new bonuses, and special events that may interest you. You may withdraw this consent at any time through your account settings or by contacting us.
Sharing Data with Third Parties
Mega Casino is committed to never selling or renting your personal data. However, to operate our services effectively, we may share your personal data with a limited set of third-party categories:
5.1 Payment Service Providers
To process your RM deposit and withdrawal transactions, Mega Casino shares the necessary payment information with licensed payment service providers, including Touch 'n Go eWallet, GrabPay, DuitNow, and our FPX partner banks. All these providers are bound by strict confidentiality agreements and comply with payment industry security standards.
5.2 Identity Verification Services
To fulfil KYC (Know Your Customer) and AML (Anti-Money Laundering) obligations, Mega Casino may share the necessary information with licensed and accredited third-party identity verification service providers.
5.3 Authorities and Regulatory Bodies
Mega Casino may disclose personal data to Malaysian government authorities, regulatory bodies, or law enforcement agencies when required by law or a valid court order.
All third parties with whom we share data are bound by strict data processing agreements. They are permitted to use your data solely for the specific purposes defined and not for any other purpose without your explicit consent.
Data Security Measures
Mega Casino continually invests in robust security infrastructure to safeguard the personal data of all our members. Key security measures we employ include:
- 256-bit SSL Encryption: All communication between your browser and the Mega Casino platform is fully encrypted.
- Data encryption at rest: Data stored in our databases is also encrypted for an added layer of protection.
- Tiered access controls: Only Mega Casino staff who require access to specific data to carry out their duties are permitted to do so.
- Continuous monitoring: Our security system monitors for suspicious activity 24 hours a day, 7 days a week.
- Regular security audits: We conduct regular penetration testing and security audits carried out by independent third parties.
- Two-factor authentication (2FA): Available and strongly encouraged for all Mega Casino accounts.
- Staff training: All Mega Casino staff undergo regular data protection training and cybersecurity awareness programmes.
While Mega Casino employs comprehensive security measures, no system can guarantee 100% security in a digital environment. We encourage you to use a strong, unique password, enable 2FA, and never share your login credentials with anyone.
Data Retention Period
Mega Casino retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required under applicable Malaysian law.
7.1 Data Retention Guidelines
- Active account data: Retained for as long as your Mega Casino account remains active
- Data following account closure: Basic information is retained for a maximum of 7 years to fulfil legal obligations and AML/KYC requirements
- Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysian financial regulatory requirements
- Support communication logs: Retained for 3 years for quality control and dispute resolution purposes
- Technical log data: Retained for 12 months for security and debugging purposes
Once the retention period expires, Mega Casino will securely delete or anonymise your data using industry-recognised data disposal procedures.
Your Rights Under Malaysia's PDPA
As a Mega Casino member, you are entitled to data protection rights guaranteed under Malaysia's Personal Data Protection Act (PDPA) 2010. The following are your key rights:
You have the right to request a copy of all personal data Mega Casino holds about you. We will respond within 21 days.
If your personal data is inaccurate or incomplete, you have the right to request a correction. Update it directly in your account settings or contact us.
You may withdraw consent for marketing communications at any time through your Mega Casino account settings without affecting core services.
You have the right to object to the processing of your data for specific purposes. Mega Casino will review and respond to your objection within 14 business days.
In certain circumstances, you may request the deletion of your personal data, subject to any legal obligations that prevent immediate erasure.
Send your data rights request to support@megacasino-khelo.com with the subject line "Personal Data Request" and your account number.
Cookies, Tracking Technologies & Analytics
The Mega Casino platform uses cookies and similar tracking technologies to enhance the user experience, analyse usage patterns, and safeguard your account security.
9.1 Types of Cookies Used
- Essential Cookies: Required for core platform functions such as login, session security, and language preferences. Cannot be disabled.
- Performance Cookies: Helps us understand how players use Mega Casino so we can improve the experience. Data is collected in aggregate and anonymised form.
- Functional Cookies: Remembering your preferences and settings, such as your chosen odds format, interface theme, and responsible gaming limits you have set.
9.2 Managing Cookie Preferences
You can manage your cookie settings through your web browser. Please note that disabling certain cookies may affect the functionality of the Mega Casino platform. For guidance on managing cookies in popular browsers such as Google Chrome, Safari, or Firefox, please refer to each browser's help section.
Financial Data Protection
Mega Casino recognises that financial information is among the most sensitive data. We apply additional protective measures to all payment-related information and financial transactions.
10.1 Supported Payment Methods
All transactions at Mega Casino are processed in Malaysian Ringgit (RM) using secure, licensed local payment methods including:
10.2 Payment Data Protection
Mega Casino does not store complete credit or debit card details on our servers. All payment processing is handled by PCI-DSS certified payment providers that uphold the highest security standards for financial data. For e-wallets such as Touch 'n Go and GrabPay, we store only the reference token required to process payments — not your full account details.
Children's Policy
The Mega Casino platform is strictly for adults aged 18 and above. Mega Casino does not knowingly collect or process personal data from individuals under the age of 18.
If you are a parent or guardian and believe that a minor in your care has provided personal information to Mega Casino without your consent, please contact us immediately at support@megacasino-khelo.com. We will take action to delete the information and close the relevant account within 48 hours of receiving a valid report.
Important Notice: If we suspect that a user is under the age of 18, the account will be suspended immediately and all balances will be returned in accordance with established procedures once verification has been completed.
Amendments to This Privacy Policy
Mega Casino reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data protection practices, new technologies, legal requirements, or feedback from our members.
When material changes are made to this Privacy Policy, Mega Casino will notify you via your registered email, an in-account notification, or a prominent notice on our homepage. The date of the most recent update will always be displayed at the top of this document.
Continued use of the Mega Casino platform after changes have been communicated will be considered your acceptance of the updated Privacy Policy. If you do not agree with the changes, please contact us to discuss your options before continuing to use the platform.
How to Contact Us Regarding Privacy Matters
For any enquiries, concerns, or requests relating to this Privacy Policy or your personal data at Mega Casino, please contact our Data Protection Officer through the following channels:
- Email: support@megacasino-khelo.com (subject line: "Privacy Policy Enquiry")
- Live Chat: Available on the Mega Casino platform 24 hours a day, 7 days a week
We are committed to treating all privacy enquiries seriously and will respond within 14 business days for formal data requests. For general enquiries, we typically respond within 24–48 hours.
For more information about your rights under Malaysia's PDPA, you may contact the Department of Personal Data Protection Malaysia (JPDP) through their official channels. Mega Casino fully supports your right to information and adequate protection.
Your Data is Safe — Play with Peace of Mind at Mega Casino
Register for free today and enjoy over 500 casino games & Sports Betting with 256-bit SSL security, MYR payments via Touch 'n Go or DuitNow, and 24/7 support.