Privacy Policy

This Privacy Policy ("Policy") sets out how megaapk ("we", "us", "our", "the Platform") collects, uses, stores, shares, and protects the personal data of individuals ("you", "Member "User") who access or use the megaapk website and associated services available at https://megaapk.cam.

megaapk is an online sports betting and live casino platform operated primarily for users based in Malaysia. We understand that the privacy of our Members is of the utmost importance. We are committed to handling all personal data responsibly, transparently, and in accordance with applicable data protection principles.

By registering an Account, accessing the Platform, or submitting any personal information to us, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein. This Policy should be read alongside our Terms & Conditions and our Responsible Gambling policy.

For the purposes of this Privacy Policy, the following definitions apply:

megaapk collects only the personal data that is necessary to provide, maintain, and improve the Platform and its services. The categories of personal data we collect include:

3.1 Registration & Identity Data

• Full legal name as it appears on your Malaysian IC (MyKad) or passport.
• Date of birth (used to verify the21+ age requirement).
• Residential address, including city (e.g., Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam).
• Email address and contact telephone number.
• Username and encrypted password.

3.2 KYC & Verification Data

• Copies of government-issued identity documents (MyKad, passport).
• Proof of address documents where requested.
• Selfie or photo verification image where required for enhanced KYC.
• Proof of payment method (e.g., screenshot of Touch'n Go eWallet, bank statement header showing account name).

3.3 Financial & Transaction Data

• Deposit and withdrawal transaction records, including amounts MYR, timestamps, and payment method used (e.g., DuitNow, FPX via Maybank or CIMB, Boost eWallet, GrabPay, USDT TRC20).
• Account balance history and betting activity records.
• Bonus crediting and wagering activity.

3.4 Technical & Usage Data

• IP address and approximate geolocation data.
• Device type, operating system, and browser version.
• Pages visited, time spent on the Platform, and navigation paths.
• Login timestamps and session duration.
• Error logs and performance data used to maintain Platform stability.

3.5 Communications Data

• Records of communications you have with our support team via live chat or email at [email protected], including the content of those communications.
• Responses to surveys or feedback requests, where voluntarily provided.

We process the personal data we collect for the following specific purposes:

We do not use your personal data for any purpose not described in this Policy without first notifying you and, where required, obtaining your separate consent.

megaapk processes your personal data on the following legal bases:

• Contractual Necessity: Processing is necessary to perform our contract with you — specifically, to operate your Account, process transactions, and deliver the betting and casino services you have registered to use.
• Legal Obligation: We are required to process certain data to comply with applicable legal and regulatory requirements, including anti-money laundering (AML) obligations, KYC verification requirements, and responsible gambling standards.
• Legitimate Interests: We process certain technical and usage data to maintain Platform security, prevent fraud, improve our services, and manage our business operations effectively. We only rely on this basis where our interests are not overridden by your privacy rights.
• Consent: Where we send you promotional or marketing communications, we do so only on the basis of your explicit consent. You may withdraw that consent at any time by contacting our support team or updating your notification preferences within your Account settings.

megaapk does not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. We will never share your data in a manner inconsistent with this Policy.

We may share your personal data with carefully selected third parties only in the following limited circumstances:

• Payment Processors: To facilitate deposits and withdrawals via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX (Maybank, CIMB, Public Bank, Hong Leong), and USDT TRC20, we share the minimum necessary financial data with the relevant payment service providers.
• KYC & Identity Verification Providers: We engage specialist third-party providers to assist with the verification of identity documents in accordance with our KYC obligations. These providers act as Data Processors under binding data processing agreements.
• IT & Infrastructure Service Providers: We use third-party cloud hosting, database management, and cybersecurity services. These providers access data solely to perform services on our behalf and are prohibited from using it for any other purpose.
• Responsible Gambling Tools: Data relevant to responsible gambling monitoring — such as self-exclusion records and deposit limit settings — may be shared with responsible gambling service providers where required to implement those tools.
• Legal & Regulatory Authorities: We may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, court order, or in connection with the investigation of suspected criminal activity including fraud or money laundering.

megapk uses cookies and similar tracking technologies to operate the Platform effectively, enhance your user experience, and gather analytical insights. The types of cookies we use include:

• Strictly Necessary Cookies: These are essential to the functioning of the Platform. They enable core services such as Account authentication, session management, and security features. The Platform cannot function properly without these cookies, and they cannot be disabled.
• Performance & Analytics Cookies: These cookies collect anonymised data about how visitors use the Platform — pages visited, time spent, and navigation paths. This data helps us identify performance issues and improve the overall user experience.
• Functionality Cookies: These remember your preferences, such as your preferred language, odds format, and notification settings, so the Platform behaves consistently across sessions.
• Targeting & Marketing Cookies: Where you have consented, these cookies are used to deliver promotional offers and relevant content based on your betting and gaming preferences. You can withdraw consent for this category at any time.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair the functionality of the Platform. Disabling other categories will affect personalisation and analytics features but will not prevent you from using the core service.

megaapk retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. Our general retention periods are as follows:

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in manner that prevents re-identification.

megaapk implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the megaapk Platform is encrypted in transit using industry-standard TLS protocols.
• Encrypted Data Storage: Sensitive personal data, including identity documents and financial records, is stored in encrypted form at rest. Passwords are hashed and salted using recognised cryptographic standards and are never stored in plain text.
• Access Controls: Access to personal data within megaapk is governed by strict role-based access controls. Only authorised personnel with documented business need may access Member data, and all such access is logged and audited.
• Intrusion Detection & Monitoring: Our infrastructure is monitored continuously for anomalous activity, intrusion attempts, and security incidents. Our security team responds to alerts on a 24/7 basis.
• Regular Security Assessments: We conduct regular vulnerability assessments and penetration tests of our Platform infrastructure to identify and remediate security weaknesses proactively.

While we take every reasonable precaution to protect your personal data, no method of internet transmission or electronic storage is entirely immune to risk. In the event of a data breach that is likely to result in a significant risk to your rights and freedoms, we will notify you without undue delay in accordance with our obligations under applicable data protection law.

As a Member of megaapk, you hold the following rights in respect of your personal data. You may exercise any of these rights by contacting our support team at the details provided in Section14:

• Right of Access: You have the right to request a copy of the personal data we hold about you, together with information about how that data is being used.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it without undue delay.
• Right to Erasure: In certain circumstances, you have the right to request the deletion of your personal data. Note that this right may be limited where we are required to retain data to comply with legal obligations (such as AML record-keeping requirements).
• Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data in certain circumstances, for example while the accuracy of the data is being contested.
• Right to Data Portability: Where processing is based on your consent or on a contract, you have the right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Withdraw Consent: Where processing is based on your consent — for example, for marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
• Right to Object: You have the right to object to our processing of your personal data for direct marketing purposes at any time, with immediate effect.

We will respond to all rights requests within a reasonable timeframe and in any event within 30 calendar days. Where a request is complex or numerous, we may extend this period by a further 60 days with prior notification.

megaapk is an adults-only platform. We do not knowingly collect, store, or process personal data belonging to individuals under the age of 21. Our registration process requires users to confirm that they meet the 21+ age requirement, and KYC verification is used to validate this where necessary.

If we become aware that we have inadvertently collected personal data from a person under the age of 21, we will take immediate steps to delete that data from our systems and close the associated Account. Any funds deposited by an underage user will be handled in accordance with applicable legal requirements.

If you are a parent or guardian and you believe your child may have accessed or registered on the megaapk Platform, please contact us immediately at [email protected] so that we can investigate and take appropriate action.

The megaapk Platform integrates with certain third-party services necessary to deliver a functional and secure betting experience. These include payment gateway providers (for Touch 'n Go eWallet, DuitNow, FPX, GrabPay, Boost, and USDT TRC20 processing), live casino game studio providers, KYC verification services, and cloud infrastructure partners.

Each third-party service provider is selected with care and is required to demonstrate adequate data protection standards. We enter into binding data processing agreements with all third-party Data Processors, which contractually restrict their ability to use your personal data for any purpose other than delivering the service for which they were engaged.

Please note that this Privacy Policy applies solely to the megaapk Platform. We are not responsible for the privacy practices or data handling of any third-party provider's own platforms or websites. We encourage you to review the privacy policies of any third-party services you interact with independently of megaapk.

megaapk reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or business operations. The "Last Updated" date at the top of this page will be revised accordingly whenever changes are made.

Where amendments are material — meaning they significantly affect your rights or our processing activities — we will notify active Members via email or an in-Platform notification prior to the changes taking effect. For minor or administrative updates, the revision of the "Last Updated" date is the sole form of notification.

Your continued use of the megaapk Platform following the publication of any revised Privacy Policy constitutes your acknowledgement and acceptance of the updated terms. If you do not agree with any amendment, you should cease using the Platform and contact us to request Account closure.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way megaapk handles your personal data, please contact our Data Protection team through the following channel:

Email: [email protected]

Live Chat: Available 24 hours a day, 7 days a week via the live chat feature on the megaapk Platform. Live chat is the fastest way to receive an initial response.

We aim to acknowledge all privacy-related enquiries within 24 hours and to provide a substantive response within 30 calendar days. For complex requests involving data erasure, portability, or formal objection, we may take up to 90 days in total with advance notification.

For queries relating to responsible gambling tools, self-exclusion, or problem gambling resources, please visit our dedicated Responsible Gambling page.