Privacy Policy Mega303 — Your Data Is Safe With Us

1 Information We Collect

Mega303 collects your personal information through several channels — during account registration, while you use the platform, and through automated technologies such as cookies. The type of information we collect depends on how you interact with our platform.

During the account registration process, you are required to provide the following information:

• Full name as stated on your Malaysian identification document (MyKad or passport).
• An active and up-to-date email address.
• An active Malaysian mobile phone number.
• Date of birth (for age verification — must be 18 years or older).
• The password you set yourself (stored in encrypted form).

When you make a deposit or withdrawal through mega303, we may collect limited financial transaction information — such as the account holder's name or partial bank account number (last digits only) — for verification and security purposes. Mega303 no store your full bank card number, FPX password, or digital wallet login credentials.

Technical information collected automatically when you use the mega303 platform includes your IP address, device and browser type, operating system, pages visited within the platform, session time and duration, and application performance data.

2 How We Use Your Data

Every piece of information we collect from you has a clear and legitimate purpose. Mega303 uses your personal data for the following:

• Account management: To create, verify, and manage your mega303 account, including a secure login process.
• Transaction processing: To process deposits, withdrawals, and winnings payouts in MYR via your chosen payment method — DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, or FPX.
• Identity verification: To fulfil identity verification requirements, ensuring account security and fraud prevention.
• Customer support: To respond to enquiries, resolve technical issues, and provide account-related support.
• Service communications: To send important account notifications, lottery draw results, Sports Betting outcomes, and material policy updates.
• Marketing communications: To keep you informed about relevant mega303 promotions, bonuses, and offers — only if you have not opted out.
• Fraud prevention: To identify and prevent fraudulent activity, money laundering, and platform abuse.
• Platform improvements: To analyse usage patterns in order to improve the user experience, technical performance, and the range of games offered.
• Legal compliance: To fulfil applicable legal and regulatory requirements, including Malaysia's PDPA 2010.

3 Data Sharing

Mega303 does not sell, rent, or trade your personal information to third parties for their own marketing purposes. However, there are limited circumstances in which we may share your data with trusted third parties:

• Payment providers: Required transaction information is shared with authorised payment gateways, including DuitNow, Touch 'n Go, GrabPay, Boost, ShopeePay, and the FPX network, to process your deposits and withdrawals. These providers are bound by strict data protection agreements.
• Technical service providers: We engage trusted third-party service providers for specific functions such as server hosting, email delivery, and internal analytics. These parties are only permitted to access the data necessary to carry out their designated tasks and may not use it for any other purpose.
• Legal compliance: Mega303 may be required to disclose your personal information to the relevant authorities when mandated by Malaysian law, a court order, or other valid legal process.
• Legitimate interests protection: In cases involving fraud, security threats, or legal proceedings, mega303 may share necessary information with relevant parties to protect the rights, property, or safety of mega303, our members, or the public.

In all data sharing situations outlined above, mega303 ensures that the receiving parties are bound by confidentiality and data protection agreements that meet or exceed the standards we uphold ourselves.

4 Data Storage & Security

Mega303 stores your personal data on secure servers protected by multiple layers of technical and organisational security measures. The security practices we employ include:

• 256-bit SSL encryption for all data in transit between your device and our servers.
• Encryption of sensitive data at rest using the latest industry standards.
• Your password is stored as a one-way hash — even we cannot read it.
• Strict access controls — only mega303 staff who require access to perform their duties are authorised to view specific data.
• Round-the-clock 24/7 security monitoring to detect and respond to suspicious threats.
• Regular security testing and vulnerability assessments conducted by both internal and external security teams.

Mega303 retains your personal data for as long as your account remains active or as long as necessary for the purposes set out in this policy. Once data is no longer needed and there is no legal obligation to retain it, we will securely delete or anonymise it.

For financial transaction data, mega303 retains the necessary records for a minimum of 7 years in accordance with applicable Malaysian legal and regulatory requirements.

5 Your Rights as a Data Owner

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and mega303's privacy policy, you have the following rights regarding your personal data:

• Right of Access: You have the right to request and receive a copy of the personal data we hold about you.
• Right to Rectification: If you find that any personal data we hold about you is inaccurate or outdated, you have the right to request a correction.
• Right to Erasure: Under certain circumstances, you have the right to request the deletion of your personal data from mega303's systems. Such requests are subject to applicable legal requirements and any active contractual obligations.
• Right to Restrict Processing: You may request that mega303 restrict how your personal data is used in certain situations.
• Right to Withdraw Consent: You may withdraw consent given for data processing at any time, though doing so may affect our ability to provide certain services.
• Right to Complain: If you are dissatisfied with how mega303 handles your personal data, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia.

To exercise any of the above rights, please submit a written request to support@mega303.top stating the nature of your request and sufficient identifying information. Mega303 will acknowledge your request within 24 hours and resolve it within 30 days of receipt.

6 Cookies & Tracking Technologies

Mega303 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit a website.

Mega303 uses three types of cookies:

• Essential Cookies: Required for core platform functions such as login session verification and security. These cookies cannot be disabled without affecting platform functionality.
• Functional Cookies: Saves your preferences such as language, display settings, and login information (if you select "remember me"). Can be disabled, but doing so will reduce convenience.
• Analytics Cookies: Helps us understand how users interact with the platform for internal improvement purposes. Data is collected in aggregate and cannot be used to directly identify any individual.

You can control and manage cookies through your browser settings. However, disabling certain cookies may affect the functionality of the mega303 platform. Please refer to your browser's documentation for guidance on managing cookies.

7 Children's Data

The mega303 platform is intended solely for individuals aged 18 and above. Mega303 does not knowingly collect, process, or store personal data of anyone under the age of 18.

If you are a parent or guardian and you discover that your minor child has registered an account with mega303, please contact us immediately at support@mega303.top. We will take immediate action to close the account and delete all associated data.

Mega303 reserves the right to request proof of age at any time while an account is active. Accounts that fail age verification will be closed immediately and all associated funds will be returned in accordance with established procedures.

8 Privacy Policy Amendments

Mega303 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other relevant factors. The effective date at the top of this page will be updated whenever an amendment is made.

For material amendments — meaning changes that significantly affect your privacy rights — mega303 will send a notice to your registered email address at least 14 days before the changes take effect. This gives you sufficient time to read and understand what is changing.

Your continued use of the mega303 platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not agree with the changes, you should stop using the platform and contact us to close your account.

9 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how mega303 handles your personal data, please contact us through the following channels:

• Email: support@mega303.top
• Operating hours: 24 hours a day, 7 days a week, including all Malaysian public holidays
• Response time: Under 24 hours for all privacy-related enquiries

The mega303 privacy team is committed to addressing every enquiry thoroughly and providing meaningful responses. If you feel your issue has not been resolved to your satisfaction, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia.