This Privacy Policy explains how megawin ("we", "Platform", "Company") collect, use, store and protect your personal information when you use the megawin.bz website and all related services.
We understand that your personal data is a trust you place in us. That is why we invest seriously in security infrastructure, strict internal procedures, and compliance with applicable data protection legislation — including Malaysia's Personal Data Protection Act 2010 (PDPA).
This policy applies to all registered members, website visitors, and anyone who interacts with the MegaWin platform in any way. By using our platform, you agree to the collection and use of information as described in this document.
If you have any questions regarding this privacy policy, our Data Protection Officer (DPO) team is always available to help. Contact details can be found at the end of this document.
Megawin collects various types of personal data depending on how you interact with our platform. The following are the main categories of data we collect:
Identity Data:
Full name
IC / Passport number
Date of birth
Gender
Residential address
Nationality
Contact Details:
Email address
Phone number
Financial Data:
Bank account information
E-wallet account
Transaction history
Deposit & withdrawal records
Technical & Usage Data:
IP address
Device type & operating system
Browser type
Platform activity logs
General location data
Note: megawin does not directly store your credit or debit card details. All payments are processed through certified, regulated third-party payment gateways.
Megawin collects your personal data through several transparent and controlled channels. We only gather information that is strictly necessary to provide you with a safe, high-quality service.
- Account registration: When you register as a MegaWin member, you provide us directly with basic information such as your name, email, phone number, and date of birth.
- KYC verification: During the identity verification process, you upload identity documents such as a copy of your MyKad or passport, as well as proof of current address. These documents are processed through a fully encrypted system.
- Financial transactions: Every time you make a deposit or withdrawal, the relevant transaction details are automatically recorded in our system for security and accountability purposes.
- Platform usage: Technical data such as IP addresses, device types, and usage patterns are collected automatically via cookie technology and server logs when you browse our platform.
- Support communications: When you contact our customer support team via live chat or email, the content of those conversations is stored for staff training and service improvement purposes.
- Surveys & feedback: If you participate in satisfaction surveys or submit feedback, the information you provide is recorded and used for platform improvement purposes.
Megawin uses your personal data responsibly and only for legitimate purposes. Every use of data is grounded in genuine business necessity or applicable legal requirements.
- Account management: Create, verify, and manage your member account, including secure login processes and two-factor authentication (2FA).
- Transaction processing: Process deposits, withdrawals, and all other financial transactions accurately and securely, while maintaining complete financial records.
- Fraud prevention: Identify and prevent fraudulent activity, money laundering, or platform abuse through monitoring of suspicious transaction patterns.
- Legal compliance: Fulfil compliance obligations under the Personal Data Protection Act 2010, the Anti-Money Laundering Act 2001, and other applicable legislation in Malaysia.
- Product improvement: Analyse aggregated, anonymised usage data to understand how members interact with the platform, for the purpose of improving the interface and user experience.
- Service communications: Send important notifications related to your account, transactions, changes to terms, or any security information you need to be aware of.
- Customer support: Enables our support team to quickly verify your identity and provide accurate, effective assistance whenever you need help.
- Marketing communications: Send promotional offers, bonuses, and new product information — but only if you have given explicit consent to receive such communications.
Marketing Communications: You may withdraw consent to receive marketing emails or SMS at any time via your account settings or by contacting our support team. Withdrawing consent will not affect your eligibility to receive essential service communications related to your account.
Megawin does not sell, rent, or transfer your personal data to third parties for their commercial purposes. However, in certain circumstances, we may need to share your information with the following parties:
- Payment service providers: Certified payment gateways including DuitNow, Maybank, CIMB, TNG eWallet, GrabPay, and Boost receive only the transaction information necessary to process your payment securely.
- KYC service providers: Accredited third-party identity verification platforms are used to verify your documents. These services are bound by strict confidentiality agreements with megawin.
- Technology service providers: Companies that support our technical infrastructure — such as server hosting, cybersecurity, and analytics — are granted access only to the data strictly necessary for their specific tasks.
- Statutory authorities: megawin will disclose required information to Malaysian authorities when mandated by law, court order, or as part of a legitimate criminal investigation or anti-money laundering inquiry.
- Audit review partners: Independent auditors reviewing our operational and financial compliance may access necessary data for audit purposes under binding confidentiality agreements.
All third parties that receive your personal data from megawin are bound by strict data processing agreements and may only use that data for purposes expressly agreed upon in writing with us.
International Data Transfers: In certain circumstances, your data may be processed on servers located outside Malaysia. When this occurs, MegaWin ensures that a level of data protection equivalent to or higher than Malaysia's PDPA standards is fully upheld through binding contractual agreements.
The security of your data is a responsibility we take extremely seriously. megawin continuously invests in the latest security infrastructure to ensure your personal information is always protected against unauthorised access, loss, misuse, or accidental disclosure.
- 256-bit SSL encryption: All data transmitted between your device and megawin's servers is protected by military-grade TLS/SSL protocols. You can verify this by looking for the padlock icon in your browser's address bar.
- Database encryption: Sensitive data stored in our databases — including KYC information and financial data — is encrypted using AES-256 algorithms that cannot be broken without the correct encryption key.
- Layered access control: Only authorised staff with a genuine business need may access members' personal data. All access is logged and continuously monitored by our internal security team.
- Two-factor authentication (2FA): megawin provides and encourages the use of 2FA for all member accounts to add an extra layer of protection against unauthorised login attempts.
- 24/7 Monitoring: Our automated security monitoring system operates around the clock to detect and respond to any threats or suspicious activity in real time.
- Regular penetration testing: megawin conducts regular security and penetration testing by independent security experts to identify and patch any vulnerabilities before they can be exploited.
Your Responsibilities: While megawin implements comprehensive security measures, you also play an important role in protecting your account. Never share your password with anyone, use a strong and unique password, and always log out when you finish using the platform — especially on shared devices.
Megawin uses cookies and similar tracking technologies to enhance your experience on our platform, maintain secure login sessions, and analyse how our platform is used for continuous improvement.
- Essential cookies (required): These cookies are required for core platform functions such as login session authentication, security, and language preferences. The platform cannot function properly without them and they cannot be disabled.
- Performance & analytics cookies: These cookies help us understand how members use the platform, which pages are most popular, and where users encounter issues. All data is collected in aggregate and anonymised form.
- Functional cookies: Used to remember your preferences such as interface language, preferred betting limits, and personal display settings to provide a more personalised experience.
- Security cookies: Helps us detect and prevent fraudulent activity, verify that every login session is legitimate, and protect your account from suspicious login attempts.
You can manage your cookie settings through your browser at any time. However, disabling certain cookies may affect platform functionality or security. Please refer to your browser's guide for more information on managing cookies.
Under Malaysia's Personal Data Protection Act 2010 (PDPA), you as a data subject have the following rights regarding your personal data held by MegaWin:
Megawin retains your personal data for as long as necessary to fulfil the purposes stated in this privacy policy, unless a longer retention period is required or permitted by law.
- Active account data: For as long as your account remains active and you continue using the megawin platform, your personal data and transaction records will be fully retained.
- After account closure: After your account is closed, megawin will retain the necessary records for legal compliance purposes for a minimum of 7 years as required by Malaysian financial legislation.
- Financial transaction data: All transaction records are retained for a minimum of 7 years for audit, tax compliance, and anti-money laundering legal requirements.
- KYC documents: Copies of identity documents are retained for the period required by applicable legislation, typically 7 years after the business relationship ends.
- Communication logs: Support chat logs and email communications are retained for 2 years for service quality and dispute resolution purposes.
Once the required retention period has expired, your data will be securely deleted or anonymised using industry-standard data deletion procedures, ensuring your information cannot be recovered or re-identified.
Megawin reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data handling practices, new legal requirements, or improvements to our services.
When we make material changes to this policy, we will notify you via:
- In-platform notification when you log in to your account
- Email to the address registered in your account
- A clear "Last Updated" date prominently displayed at the top of this page
Your continued use of the megawin platform after any policy changes take effect constitutes your acceptance of the updated policy. We encourage you to review this page periodically to stay informed about how we protect your information.
Current version: This Privacy Policy is version 3.2, updated on 1 January 2026. Previous versions are available upon request by contacting our support team.
If you have any questions, concerns, or wish to exercise your personal data rights, megawin's Data Protection Officer (DPO) team is ready to assist you.
- Email: [email protected]
- Response time: We are committed to responding to all privacy-related enquiries within 5 business days.
- Supported languages: Malay and English
For complaints that cannot be resolved through our internal channels, you have the right to escalate the matter to the Department of Personal Data Protection Malaysia (JPDP), the statutory body overseeing PDPA compliance in Malaysia.