Privacy Policy

1. Introduction

This Privacy Policy ("Policy") is issued by mega55 ("mega55", "we", "us", "our"), the operator of the online gaming platform available at mega55.buzz. This Policy describes how mega55 collects, processes, stores, shares, and protects the personal data of individuals ("you", "Player", "User") who register for or use our online casino, sports betting, and related services.

mega55 takes its data protection obligations seriously. We process personal data in accordance with the principles of lawfulness, fairness, and transparency; purpose limitation; data minimisation; accuracy; storage limitation; integrity and confidentiality; and accountability. This Policy is designed to inform you clearly about our data practices so that you can make informed decisions about your use of our platform.

By creating an account on mega55 or continuing to use our platform after this Policy has been updated, you acknowledge that you have read and understood the contents of this Privacy Policy. If you do not agree with any aspect of this Policy, you should cease using the platform and may request account closure in accordance with our Terms and Conditions.

2. Definitions

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information relating to an identified or identifiable natural person. This includes names, identification numbers, location data, online identifiers, and data specific to the physical, economic, cultural, or social identity of a person.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, consultation, use, disclosure, dissemination, restriction, erasure, or destruction.
• "Data Controller" means mega55 in its capacity as the entity that determines the purposes and means of Processing Personal Data collected through the platform.
• "Data Processor" means any third party that processes Personal Data on behalf of mega55 under a contractual arrangement, including payment processors, KYC verification service providers, and cloud infrastructure providers.
• "KYC" means Know Your Customer — the identity and address verification process required under our compliance obligations before withdrawals may be processed.
• "Cookies" means small text files placed on your device by a website to store information about your browsing session, preferences, and behaviour.
• "Platform" means the mega55 website at mega55.buzz, its mobile-optimised interface, and all associated gaming and wagering services.

3. Personal Data We Collect

mega55 collects the following categories of personal data in connection with your use of our platform:

4. How We Collect Your Data

mega55 collects personal data through the following channels:

4.1 Directly from You

We collect data that you provide directly when you register an account, submit KYC documents, make a deposit or withdrawal request, contact customer support, participate in a promotion, or update your account settings. This includes your identity, contact, and financial data.

4.2 Automatically Through Platform Use

When you access and use the mega55 platform, we automatically collect technical data including your IP address, device identifiers, browser information, and session activity through cookies, server logs, and similar tracking technologies. This data is collected to maintain the security and integrity of the platform and to improve the user experience.

4.3 From Third-Party Service Providers

We may receive data about you from third-party service providers engaged to support our operations, including identity verification services that cross-reference your submitted documents against government databases, payment processing partners (such as DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, and RHB Bank), and fraud detection services. We receive only the data necessary for the specific purpose for which the third party was engaged.

5. How We Use Your Personal Data

mega55 processes your personal data for the following purposes:

1. Account creation and management: To register your account, verify your identity, manage your account settings, and communicate with you about your account status.
2. Service delivery: To provide access to casino games, live dealer tables, sports betting markets, and all other features of the platform.
3. Payment processing: To process deposits and withdrawals in MYR through your chosen payment method and to maintain accurate financial records.
4. KYC and regulatory compliance: To verify your identity and address in fulfilment of our obligations under our international gaming licence, including anti-money-laundering and counter-terrorist financing requirements.
5. Responsible gambling monitoring: To monitor your gaming activity for signs of problem gambling behaviour and to enforce any self-exclusion or limit settings you have applied to your account.
6. Fraud prevention and security: To detect, prevent, and investigate fraud, abuse, and other prohibited activities, and to protect the security and integrity of the platform.
7. Customer support: To respond to your queries, resolve complaints, and manage any disputes arising from your use of the platform.
8. Marketing communications: To send you promotional offers, bonus notifications, and platform updates where you have provided your consent to receive such communications. You may withdraw your consent at any time.
9. Platform improvement: To analyse usage patterns, conduct A/B testing, and make data-driven decisions to improve the platform experience for Malaysian players.

6. Legal Basis for Processing

mega55 processes your personal data on the following legal grounds:

• Contractual necessity: Processing is necessary to perform our contractual obligations to you under our Terms and Conditions — including account management, service delivery, and payment processing.
• Legal obligation: Processing is required to comply with our obligations under applicable laws and our international gaming licence, including KYC identity verification, anti-money-laundering screening, and retention of transaction records.
• Legitimate interests: Processing is necessary for the legitimate interests of mega55, including fraud prevention, platform security, and service improvement, provided those interests are not overridden by your data protection rights.
• Consent: Where processing is not required by contract or law, we rely on your freely given, specific, and informed consent — for example, for sending marketing communications or placing non-essential cookies. You may withdraw consent at any time without prejudice to the lawfulness of processing carried out before withdrawal.

7. Data Sharing & Disclosure

mega55 does not sell your personal data. We share your data only in the following circumstances and only to the extent necessary for the relevant purpose:

7.1 Payment and Banking Partners

We share financial data with our payment processing partners — including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and major Malaysian banks such as Maybank, CIMB, Public Bank, Hong Leong, and RHB Bank — to facilitate your deposit and withdrawal transactions. These partners operate their own privacy policies governing data they receive.

7.2 Identity Verification Service Providers

We share your identity documents and personal details with licensed third-party KYC and identity verification service providers solely for the purpose of verifying your identity in fulfilment of our regulatory requirements. These providers are bound by strict data processing agreements.

7.3 Regulatory and Law Enforcement Authorities

We may disclose your personal data to regulatory bodies, law enforcement agencies, or other competent authorities where we are legally required to do so, or where disclosure is necessary to prevent fraud, money laundering, or other criminal activity, or to protect the safety of any individual.

7.4 Technical and Infrastructure Service Providers

We engage third-party providers for cloud hosting, cybersecurity, customer support platform infrastructure, and analytics. These providers access personal data only to the extent necessary to perform services on our behalf and are contractually required to maintain appropriate data security standards.

7.5 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of mega55's business, your personal data may be transferred to the successor entity as part of that transaction. We will notify you of any such transfer before your data becomes subject to a materially different privacy policy.

8. International Data Transfers

mega55 operates globally and your personal data may be processed and stored on servers located outside of Malaysia. Where we transfer personal data to jurisdictions that may not provide the same level of data protection as Malaysia, we implement appropriate safeguards to protect your data, including:

• Standard contractual clauses that impose data protection obligations on the recipient party;
• Engagement of processors that maintain internationally recognised security certifications; and
• Transfer only of data necessary for the specific purpose and only to recipients who have provided adequate security commitments.

By using the mega55 platform, you acknowledge that your personal data may be transferred to and processed in jurisdictions outside Malaysia in accordance with this Policy.

9. Data Retention

mega55 retains personal data for as long as necessary to fulfil the purposes set out in this Policy and to comply with our legal obligations. The following general retention principles apply:

• Active account data: Retained for the duration of your account relationship with mega55 and for a minimum of five (5) years following account closure, in accordance with anti-money-laundering regulatory requirements.
• KYC documentation: Retained for a minimum of five (5) years following the completion of the customer relationship, as required by our international gaming licence conditions.
• Transaction records: Financial transaction data is retained for a minimum of five (5) years following the date of each transaction.
• Customer support records: Communications relating to complaints or disputes are retained for a minimum of three (3) years following the resolution of the relevant matter.
• Marketing consent records: Retained for as long as necessary to demonstrate the basis on which we sent marketing communications, typically three (3) years following the last interaction.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any individual.

10. Data Security

mega55 implements robust technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our security measures include:

• Transport Layer Security (TLS): All data transmitted between your device and our servers is encrypted using 256-bit SSL/TLS encryption.
• Encryption at rest: Sensitive personal data including KYC documents and financial records are stored in encrypted form using industry-standard encryption algorithms.
• Access controls: Access to personal data is restricted to authorised personnel who require access to perform their specific job functions. All access is logged and monitored.
• Penetration testing: We conduct regular third-party security assessments of our platform infrastructure.
• Incident response: We maintain a data breach response procedure that includes notifying affected players and relevant authorities in the event of a significant security incident involving personal data.

Notwithstanding our security measures, no internet transmission is completely secure, and we cannot guarantee the absolute security of data transmitted to or from the platform. We encourage you to use a strong, unique password for your mega55 account and to enable any available two-factor authentication.

11. Cookies & Tracking Technologies

mega55 uses cookies and similar tracking technologies on its platform. Cookies are small text files placed on your device to store information about your session and preferences. We use the following types of cookies:

11.1 Strictly Necessary Cookies

These cookies are essential for the platform to function. They enable core functionality such as maintaining your login session, remembering items in your account settings, and ensuring security during your visit. The platform cannot function properly without these cookies and they cannot be disabled.

11.2 Performance and Analytics Cookies

We use performance cookies to understand how players interact with the platform — for example, which pages are visited most frequently and whether error messages are encountered. This data is used in aggregate and anonymised form to improve platform performance. You may opt out of performance cookies through your browser settings.

11.3 Functional Cookies

Functional cookies allow the platform to remember your preferences and personalise your experience — such as your preferred language settings and whether you have acknowledged certain notifications. These are not strictly necessary but improve your experience on the platform.

11.4 Managing Cookies

You may manage or disable cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the mega55 platform. Instructions for managing cookies are available through the help documentation of your browser.

12. Your Data Protection Rights

Subject to applicable law and our regulatory obligations, you have the following rights in respect of your personal data held by mega55:

13. Minors — Strict 21+ Policy

mega55 is strictly an adult entertainment platform. Access is permitted only to individuals who are at least 21 years of age. We do not knowingly collect, use, or retain personal data from individuals under the age of 21.

Age verification is enforced through our mandatory KYC process at the point of registration. If we become aware that an Account has been registered by an individual under 21 years of age, we will immediately close the Account, forfeiture all balances, and permanently delete the associated personal data to the extent permitted by our regulatory retention obligations.

If you believe that a minor has registered or is using a mega55 account, please contact our support team immediately so that the matter can be investigated and the account closed without delay.

14. Amendments to This Policy

mega55 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, regulatory requirements, or platform operations. Where a material change is made to how we process your personal data, we will notify you by email to your registered address and/or through a prominent notice on the platform, with a minimum of 14 days' notice prior to the change taking effect.

We encourage you to review this Policy periodically. The effective date at the top of this page indicates when the Policy was last revised. Your continued use of the platform after the effective date of any revised Policy constitutes your acceptance of the updated terms.

15. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to our data processing practices, please contact the mega55 Data Protection team through the following channel:

• Email: [email protected] (plain text — not a clickable link)
• Support Hours: 24 hours a day, 7 days a week, including all Malaysian public holidays
• Coverage: Serving players across Kuala Lumpur, Petaling Jaya, Penang, Johor Bahru, Shah Alam, and all of Malaysia

We also encourage you to review our related policies for a complete picture of your rights and obligations as a mega55 player:

• Terms & Conditions — your contractual relationship with mega55
• Responsible Gambling — our tools and resources for safe play