Megaboi Privacy Policy – Your Personal Data Protection

Megaboi ("we", "Platform", or "company") is committed to protecting the privacy and security of the personal data of every member who uses our services. This Privacy Policy transparently explains how we collect, process, store, and protect your personal information when you use the megaboi website, mobile app, and all related services.

We understand that your trust is our most valuable asset. That is why we take privacy seriously. Every decision involving your data is made with your security and interests as a megaboi member as the top priority.

This Privacy Policy applies to all users of the megaboi platform, including website visitors, prospective members, and registered members. It also covers all your interactions with our platform across various channels, including the website, app, email, and customer support.

Megaboi collects various types of information depending on how you interact with our platform. The following are the categories of information we collect:

The information we collect is limited to the minimum necessary to provide you with a secure, legitimate, and quality service. We do not collect any information that is irrelevant or excessive.

Megaboi uses the information collected solely for lawful and stated purposes. The legal basis for each type of data processing is as follows:

• Contract performance: Process your registration, deposits, withdrawals and all gaming transactions.
• Legal obligations: Comply with KYC, AML (Anti-Money Laundering) and regulatory reporting requirements mandated by Malaysian law.
• Legitimate interests: Prevent fraud, ensure platform security, analyse usage patterns for continuous improvement, and deliver better customer support.
• Consent: Send marketing communications, promotional offers and platform updates that you have agreed to receive.

We do not use your data to make automated decisions that have legal or similarly significant effects on you without human intervention, except within our automated fraud detection systems which are subject to manual review by our team.

Megaboi does not sell, rent, or disclose your personal information to third parties for their own marketing purposes. However, in the course of operating the platform, we may share your information with the following categories of third parties and only under limited circumstances:

• Payment providers: Financial institutions and payment processors used to handle your deposits and withdrawals. This sharing is necessary to complete your transactions.
• Technology service providers: Companies that provide the IT infrastructure, server hosting, email services, and analytics tools we use to operate the platform. They are bound by strict confidentiality agreements.
• Game providers: Game studios and third-party content providers whose games are available on the megaboi platform. Data shared is limited to what is necessary to run game sessions.
• Regulatory authorities: Regulatory bodies, law enforcement authorities, and courts when required by law or court order.
• Business partners: Only with your explicit and express consent, and only for the purposes agreed upon.

All third parties we work with are required to meet data protection standards equal to or higher than our own. We conduct regular due diligence reviews on all our service providers.

Megaboi implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmission between your device and our servers.
• Encryption of sensitive data stored in databases using the latest encryption algorithms.
• Role-based access control (RBAC) ensuring only authorised personnel can access specific data.
• Continuous 24/7 security monitoring with an intrusion detection system (IDS).
• Regular penetration testing and security audits conducted by independent security experts.
• Mandatory cybersecurity training for all staff who handle customer data.
• Comprehensive data backup and recovery procedures to ensure continuity of service.

Megaboi uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website. We use the following types of cookies:

• Essential Cookies: Required for core platform functions such as login, session management, and security. These cookies cannot be disabled.
• Preference Cookies: Store your preferences such as language, time zone and display settings to provide a more personalised experience.
• Analytics Cookies: Help us understand how visitors use our platform so we can continue improving it. Data collected is aggregated and does not personally identify you.
• Security Cookies: Used to detect suspicious activity, prevent fraud, and protect your account.

You can manage or disable cookies through your web browser settings at any time. However, disabling certain cookies may affect platform functionality. Note that disabling essential cookies will prevent you from logging in to your account.

As a data subject, you have the following rights under applicable data protection law. megaboi fully respects all of these rights:

To exercise any of the rights above, please contact our data protection team by email at [email protected]. We will process your request within the timeframe required by law. We may need to verify your identity before processing the request.

Megaboi retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy or as required by applicable law. General data retention guidelines are as follows:

• Active account data: Retained for the duration your account remains active and for 7 years after account closure for legal compliance purposes.
• Financial transaction records: Retained for a minimum of 7 years in line with Malaysia's AML and tax legal requirements.
• Customer support communication logs: Retained for 3 years from the date of last interaction.
• Cookie and technical log data: Retained for between 30 days and 13 months depending on cookie type.
• KYC documents: Retained for 5 years after account closure, or longer if required by the authorities.

Once the retention period expires, your data will be securely deleted or fully anonymised so it can no longer be linked to you.

The megaboi platform is strictly for individuals aged 18 and above. We do not knowingly collect or process personal data from minors. If we detect that information has been collected from anyone under 18, we will take immediate action to delete that information and close the account in question.

If you believe your child or someone under 18 has registered on the megaboi platform, please contact us immediately by email at [email protected] so that we can take appropriate action without delay.

Megaboi reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new technologies, legal requirements, or other operational reasons. Any material amendments will be communicated to you via:

• A prominent notice on the megaboi platform homepage.
• Email notification to the address registered on your account.
• In-app notification on megaboi when you log in for the first time after the amendment takes effect.

The effective date of the latest version of this Privacy Policy will always be displayed at the top of this document. It is your responsibility to review this Privacy Policy periodically. Your continued use of the megaboi platform after any amendment takes effect will be considered your acceptance of the revised policy.

If you have any questions, concerns or complaints regarding this Privacy Policy or how we handle your personal data, please do not hesitate to contact us. Our Data Protection Officer (DPO) team is ready to assist you.

We are committed to resolving every enquiry and complaint fairly, transparently, and within a reasonable timeframe. If you are not satisfied with our response, you have the right to lodge a complaint with the Malaysian Communications and Multimedia Commission (MCMC) or the relevant regulatory body.