Mega99 is committed to handling your personal data with transparency, integrity, and care. This Privacy Policy explains precisely what data we collect, how we use it, who we share it with, and the rights you hold over your information as a player on our platform.
Last updated: 1 January 2026This Privacy Policy ("Policy") describes how Mega99 ("Mega99", "the Company", "we", "us", or "our") collects, processes, stores, and protects the personal data of individuals ("Users", "Players", or "you") who access or interact with the Mega99 platform at mega99.cam, including all associated subdomains and mobile-optimised interfaces.
Mega99 is Malaysia's trusted online casino and sports betting platform, serving players across Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and throughout Malaysia since 2017. In the course of providing our services — including casino games, live dealer tables, sports betting, and payment processing — we necessarily collect and process personal data about our users.
We recognise that your personal data belongs to you. This Policy is written to be read and understood, not to obscure how your information is handled. We encourage you to read it in full before registering an account or using any feature of the Mega99 platform.
By using the Mega99 platform, you confirm that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not accept this Policy, you must not register an account or continue to use the Mega99 platform.
For the purposes of this Policy, the following terms are defined as follows:
Mega99 acts as the Data Controller in respect of all Personal Data collected through the Platform. Mega99 operates the Platform under applicable international gaming regulations and processes personal data in accordance with this Policy and relevant data protection frameworks applicable to its operations.
All enquiries, access requests, or complaints relating to the handling of your personal data should be directed to the Mega99 Data Protection contact identified in Section 17 of this Policy.
Mega99 collects the following categories of Personal Data in the course of operating the Platform:
Mega99 collects Personal Data through the following channels:
Mega99 processes Personal Data only where a valid legal basis exists. The primary legal bases applicable to our processing activities are:
| Processing Purpose | Legal Basis |
|---|---|
| Account registration and service delivery | Contractual necessity — required to fulfil the Player agreement |
| Age and identity verification (KYC) | Legal obligation — required for AML and age-gating compliance |
| Payment processing and transaction records | Contractual necessity and legal obligation |
| Fraud detection and security monitoring | Legitimate interest — protecting the platform and all users |
| Platform analytics and improvement | Legitimate interest — improving service quality |
| Promotional communications (optional) | Consent — where you have opted in to marketing messages |
| Responsible gambling monitoring | Legal obligation and legitimate interest |
Mega99 uses the Personal Data we collect for the following purposes:
We do not sell your Personal Data to third-party advertisers or data brokers under any circumstances. Your data is used solely to operate, secure, and improve the Mega99 platform and your experience on it.
Mega99 may share your Personal Data with the following categories of recipients only to the extent necessary for the stated purpose:
All third-party Data Processors engaged by Mega99 are required to process Personal Data only on documented instructions from Mega99, to maintain appropriate technical and organisational security measures, and to delete or return data at the conclusion of the engagement.
Mega99 uses cookies and similar tracking technologies to operate and improve the Platform. The categories of cookies we deploy are as follows:
You may configure your browser to block or delete cookies, though doing so may affect the functionality of the Platform. Strictly necessary cookies cannot be opted out of without ceasing use of the Platform.
Mega99 does not deploy third-party advertising cookies or permit advertising networks to place tracking pixels on the Platform.
Mega99 retains Personal Data for as long as is necessary to fulfil the purposes for which it was collected, to comply with legal and regulatory obligations, and to resolve disputes or enforce our agreements. The following general retention periods apply:
| Data Category | Retention Period |
|---|---|
| Account registration data | Duration of account + 5 years after closure |
| KYC verification documents | Duration of account + 5 years after closure |
| Financial transaction records | 7 years from transaction date (regulatory requirement) |
| Gaming and betting activity logs | 5 years from the date of activity |
| Customer support communications | 3 years from the date of last interaction |
| Technical and device logs | 12 months on a rolling basis |
| Self-exclusion records | Permanent (to prevent re-registration during exclusion period) |
Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in accordance with our internal data lifecycle procedures.
Mega99 implements appropriate technical and organisational security measures to protect your Personal Data against unauthorised access, disclosure, alteration, or destruction. These measures include:
While Mega99 maintains robust security standards, no system transmitting data over the internet can guarantee absolute security. Players are encouraged to use strong, unique passwords, enable 2FA, and report any suspected unauthorised access to their account immediately via live chat or at [email protected].
The Mega99 Platform and certain third-party service providers it engages may process Personal Data in jurisdictions outside Malaysia. Where Personal Data is transferred internationally, Mega99 ensures that appropriate safeguards are in place — including contractual obligations requiring recipients to maintain data protection standards equivalent to those applicable under this Policy.
By registering an account with Mega99, you acknowledge and consent to the transfer of your Personal Data to data processing facilities located in jurisdictions outside your country of residence where such transfer is necessary for service delivery.
Subject to applicable law and regulatory limitations, you hold the following rights in respect of your Personal Data held by Mega99:
To exercise any of the above rights, please contact us using the details in Section 17. We will respond to verified requests within 30 days. Requests may require identity verification before being actioned.
The Mega99 Platform is strictly for adults aged 21 and above. We do not knowingly collect or process Personal Data from individuals under the age of 21. All account registrations require age verification via government-issued identification documents. Where Mega99 discovers that a minor has registered an account, that account will be immediately suspended, all funds will be returned to the depositing payment method, and any winnings accrued will be forfeited. The relevant data will be retained only to the extent required to prevent future registration attempts.
If you believe a minor in your care has registered an account with Mega99, please contact our support team immediately via live chat or at [email protected] so that we can investigate and take appropriate action without delay.
The Mega99 Platform may contain references to or integrations with third-party services, including payment processors and responsible gambling resources. These third parties operate their own privacy policies, which govern the processing of any data you provide directly to them. Mega99 is not responsible for the privacy practices of third-party operators and encourages you to review their policies before providing any personal information.
Mega99 reserves the right to update or amend this Privacy Policy at any time. Where an amendment is material — for example, a change to the categories of data collected, the purposes for which data is used, or the rights available to users — we will provide advance notice via a prominent banner on the Platform and, where practicable, by email to the address registered on your account.
The "Last updated" date at the top of this Policy indicates when the most recent revision was made. Continued use of the Mega99 Platform following the effective date of an amended Policy constitutes your acceptance of the revised terms.
If you have any questions about this Privacy Policy, wish to exercise your data rights, or have a concern about how your Personal Data has been handled by Mega99, please contact our Data Protection team through the following channels:
Available 24 hours a day, 7 days a week, directly on the Mega99 platform. Best for urgent enquiries and identity verification matters.
For formal data access requests, erasure requests, or privacy complaints:
[email protected]We aim to acknowledge all privacy-related requests within 3 business days and to resolve them within 30 calendar days. Complex requests may take longer, in which case we will notify you of the extended timeline and the reason for it.
All data transmitted between your device and Mega99 is protected by bank-grade 256-bit SSL encryption. Your registration details, payment information, and gaming activity are never transmitted in plain text.
Mega99 does not sell, rent, or trade your personal data to advertising networks, data brokers, or any other commercial third parties. Your data is used solely to operate and improve the platform.
KYC verification protects your account from unauthorised access and prevents your identity from being used by a third party to open a duplicate account or claim funds in your name.
You retain the right to access, correct, restrict, and request erasure of your personal data. Submit a request via live chat or email at any time and we will respond within the timeframes set out in this Policy.
We publish clear data retention periods for every category of data we hold. We do not retain your information beyond regulatory requirements, and data is securely deleted or anonymised at the end of each retention window.
In the unlikely event of a personal data breach that affects your data, Mega99 will notify affected players in accordance with applicable data protection obligations, including the nature of the breach and the steps taken to address it.
Our support team is available around the clock to answer any data privacy question before or after you register. We are committed to full transparency.