Rujukan Laman

Your account data, wallet records and contact preferences live under these privacy and policy terms

We built mega988 around transparent data handling for Malaysia account holders. Every deposit you make through Touch 'n Go, GrabPay, Boost or FPX generates a transaction record we…

Encrypted login recordsTransaction audit trailContact consent controlData retention scheduleRequest & deletion rights
mega988 Your account data, wallet records and contact preferences live under these privacy and policy terms
POLICY CONTACT

Three direct paths to ask about your data, request changes or raise a privacy concern

If you want to see what account information we hold, update your contact preferences, ask how long we keep transaction records, or request deletion after account closure, reach us through live chat…

Live chat Open the chat bubble in the bottom corner of any page and select Privacy & Policy from the topic menu. A support agent will join within two minutes during business hours to answer questions about data storage, withdrawal-record access, or contact-preference updates. The chat transcript is saved to your account for reference.
Email desk Send your privacy or data-access request to [email protected] with the subject line Data Request or Policy Question. Include your registered email address and a brief description of what you need. We reply within forty-eight hours on weekdays with instructions for identity verification and the next steps to fulfill your request.
FAQ reference Scroll to the FAQ section at the bottom of this page for answers to the six most common policy questions — how long we keep your records, what information you can request, how to update contact consent, and what happens to your data when you close the account. Each answer includes a follow-up contact prompt if you need more detail.
SECURITY & HANDLING

Six pillars of how mega988 protects account data, payment records and personal information

Your trust starts with encryption: login credentials pass through HTTPS, payment details entered for Touch 'n Go, GrabPay, Boost and FPX never reach our database in plain text, and session cookies expire…

Credential encryption

Passwords are hashed with a one-way algorithm before storage; the plain-text version never enters our database. Payment details you provide for Touch 'n Go, GrabPay, Boost or FPX are tokenised by the payment gateway so only a reference code sits in our system. Every page that handles login or checkout runs over HTTPS.

Access logging

Each time you log in we record your IP address, device type and timestamp. When a login attempt comes from a new city or device you receive an email alert. Internal staff access to your account details is logged and reviewed monthly; only support, finance and compliance roles hold permission to view transaction history.

Transaction audit

Every deposit, wager and withdrawal you complete generates a row in our transaction ledger with timestamp, amount, method and status. The ledger is write-once; no one can edit or delete a past entry. You can download a CSV export of your own transaction history from the account page at any time.

Cookie lifespan

Session cookies expire thirty minutes after your last click, then you need to log in again. Persistent cookies that remember your device preference last ninety days. Both types are marked secure and HttpOnly so JavaScript running in your browser cannot read them. You can clear cookies through your browser settings without affecting your account standing.

Contact consent

During registration you choose whether to receive promotional emails and SMS offers. You can flip these toggles in your account settings at any time; opting out takes effect within twenty-four hours. Transactional messages — deposit confirmations, withdrawal approvals, security alerts — are not covered by marketing consent and will still reach you.

Retention & deletion

Active account data stays accessible while your account is open. When you close your account we retain transaction records and identity verification documents for six years to comply with Malaysian financial regulations, then we purge the files. To request early deletion send an email to our privacy desk; we will review the request and explain any legal holds that prevent immediate removal.

Seven common questions about data rights, retention periods and how to change your settings

We collect the email address and phone number you provide during registration, the password you create, and device identifiers your browser sends. When you add a payment method — Touch 'n Go, GrabPay, Boost or FPX — we store a tokenised reference and billing region. Each login and transaction is logged with timestamp and IP address.

Transaction history, deposit receipts and withdrawal logs are retained for six years after account closure to meet Malaysian financial record-keeping standards. Once the six-year window closes we purge the data permanently. While your account is active all records remain accessible through the account dashboard.

Yes. Send an email to [email protected] with the subject line Data Request, include your registered email address, and we will send you a summary of stored information within five business days. You will need to verify your identity through a one-time code before we release the file.

Log in, open your account settings, and toggle the marketing-consent switches to off. The change takes effect within twenty-four hours. Transactional messages — deposit confirmations, withdrawal updates, security alerts — are not affected by this setting and will continue to reach you for account-security reasons.

When you request account deletion we immediately disable login access and stop all marketing messages. Transaction records and identity documents remain archived for six years under Malaysian financial regulations, then we purge them from our servers. To start the deletion process contact support and confirm your identity through the verification flow.

We do not sell your contact list or transaction history to marketing firms. Payment processors — the gateways that handle Touch 'n Go, GrabPay, Boost and FPX — receive only the data needed to complete the transaction. Aggregated, anonymised reports may be shared with game providers for performance analysis, but these contain no identifiable account details.

Log in to your account, navigate to settings, and enter the new contact detail in the appropriate field. You will receive a verification code at the new address or number; enter the code to confirm the change. The update is instant once verified, and all future account messages will use the new contact information.