Privacy Policy — mega303

1. Introduction

mega303 (hereinafter "mega303", "we", "us", or "our") is the operator of the online gaming platform accessible at https://mega303.cam. We are committed to protecting the privacy and personal data of every individual who visits, registers on, or interacts with our platform (hereinafter "you", "the User", or "the Player").

This Privacy Policy (hereinafter "the Policy") sets out in full detail how mega303 collects, processes, stores, shares, and protects personal data in connection with the delivery of our online casino, sports betting, live dealer, and related services. This Policy forms part of our broader contractual and legal relationship with registered players and should be read in conjunction with our Terms & Conditions.

mega303 takes a privacy-first approach to data governance. We collect only the personal data that is necessary for legitimate operational, regulatory, and compliance purposes. We do not monetise your data through third-party advertising networks, and we do not engage in profiling for commercial purposes unrelated to the delivery of our gaming services.

2. Definitions

For the purposes of this Privacy Policy, the following terms shall have the meanings ascribed to them below:

• "Personal Data" means any information relating to an identified or identifiable natural person ("data subject"), including but not limited to name, email address, phone number, residential address, date of birth, payment details, and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, consultation, use, disclosure, erasure, or destruction.
• "Data Controller" means mega303, which determines the purposes and means of processing Personal Data collected through the platform.
• "Data Processor" means any third party that processes Personal Data on behalf of mega303 under a contractual obligation and in accordance with mega303's instructions.
• "KYC Data" means identity and address verification documents submitted by a Player as part of the Know Your Customer verification process, including government-issued photo identification and proof of address.
• "Cookies" means small text files placed on a User's device by the mega303 platform for the purposes of session management, preference storage, and platform analytics.
• "Account" means the registered player profile created on the mega303 platform.

3. Personal Data We Collect

mega303 collects Personal Data through several channels in the course of providing its services. The categories of data collected are as follows:

3.1 Registration Data

When you create an Account on mega303, we collect the following information as provided by you during the registration process:

• Full legal name
• Date of birth (for age verification — players must be 21 or older)
• Residential address (including city, state, and postcode)
• Email address
• Mobile phone number
• Preferred username and encrypted password

3.2 KYC Verification Data

To comply with our anti-money laundering and player protection obligations, we collect the following documentation when processing a withdrawal request or when required by our compliance procedures:

• Government-issued photo identification (Malaysian MyKad, Driver's Licence, or Passport)
• Proof of residential address (utility bill or bank statement dated within three months)
• Selfie photograph of the Player holding their identity document
• Additional documentation where specifically requested by our compliance team

3.3 Financial Transaction Data

We collect records of all financial transactions conducted through your Account, including:

• Deposit and withdrawal amounts in MYR
• Payment method used (e.g., Touch 'n Go eWallet, DuitNow, FPX, Maybank, CIMB, GrabPay, Boost)
• Transaction timestamps and reference numbers
• Account balance history

3.4 Technical & Device Data

When you access mega303, our servers automatically collect certain technical information from your device and browser, including:

• IP address and approximate geographic location
• Browser type, version, and language settings
• Device type, operating system, and screen resolution
• Pages visited, session duration, and navigation path within the platform
• Referring URL (the website from which you arrived at mega303)

3.5 Gaming Activity Data

We maintain records of all gaming activity on your Account, including game sessions, bet amounts, results, sports betting selections, and bonus usage. This data is used for account management, responsible gambling monitoring, dispute resolution, and compliance auditing.

3.6 Customer Support Data

When you contact mega303's support team via live chat, email, or any other channel, we retain records of the communication — including your queries, our responses, and any attachments shared — for quality assurance, compliance, and continuity of service purposes.

4. How We Use Your Personal Data

mega303 uses the Personal Data we collect for the following specific purposes:

5. Legal Basis for Data Processing

mega303 processes Personal Data only where a lawful basis exists for doing so. The applicable legal bases are as follows:

• Contractual Necessity: Processing required to fulfil the obligations set out in our Terms & Conditions — including account registration, transaction processing, and game delivery.
• Legal Obligation: Processing required to comply with anti-money laundering (AML) regulations, Know Your Customer (KYC) requirements, and applicable international gaming licensing obligations.
• Legitimate Interests: Processing necessary for fraud prevention, platform security, responsible gambling monitoring, and the improvement of our services — where such interests are not overridden by the rights and freedoms of the data subject.
• Consent: Processing of Personal Data for optional promotional communications and non-essential cookie placement, where you have provided explicit and freely given consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6. Data Sharing & Third-Party Disclosure

mega303 does not sell, rent, or trade your Personal Data to third parties for commercial marketing purposes. We may share your data with the following categories of recipients only where necessary and under strict contractual controls:

6.1 Payment Service Providers

To process MYR deposits and withdrawals, we share relevant transaction data with our integrated payment service providers — including operators of Touch 'n Go eWallet, DuitNow, FPX, Maybank, CIMB, Public Bank, GrabPay, Boost, and cryptocurrency processing networks. Each provider operates under their own privacy policies and is subject to their respective regulatory frameworks.

6.2 Identity Verification & Compliance Partners

Third-party KYC and AML compliance service providers may process identity documents and transaction data on our behalf to verify player identity and screen for financial crime risk. These processors are bound by confidentiality obligations and may not use the data for any purpose beyond the services they perform for mega303.

6.3 Technology & Infrastructure Providers

Cloud hosting, server infrastructure, customer support tooling, and analytics platform providers may process limited technical and operational data as part of delivering services to mega303. All such providers are subject to data processing agreements that restrict their use of Personal Data.

6.4 Regulatory & Law Enforcement Disclosure

mega303 may disclose Personal Data to regulatory authorities, law enforcement agencies, or courts of competent jurisdiction where required to do so by applicable law, court order, or regulatory directive. We will, where legally permissible, notify affected players of such disclosures.

7. Data Retention

mega303 retains Personal Data for as long as is necessary to fulfil the purposes for which it was collected, to maintain your Account in active or dormant status, and to comply with applicable legal, regulatory, and contractual retention obligations.

The following general retention periods apply:

• Account and registration data: Retained for the duration of the Account relationship and for a minimum period of five (5) years following Account closure, in accordance with AML record-keeping requirements.
• KYC documents: Retained for a minimum of five (5) years following the completion of KYC verification, or such longer period as required by applicable law.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• Customer support communications: Retained for three (3) years following resolution of the relevant support matter.
• Technical and device data: Retained for up to twenty-four (24) months for analytics and security purposes, after which it is anonymised or deleted.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in accordance with our data disposal procedures.

8. Cookies & Tracking Technologies

The mega303 platform uses cookies and similar tracking technologies to deliver a functional, secure, and personalised user experience. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the operation of the platform, including session authentication, security token management, and load balancing. These cookies cannot be disabled without impairing core platform functionality.
• Performance Cookies: Collect anonymised data on how users interact with the platform — such as page load times, error rates, and navigation paths — to help us identify and resolve performance issues.
• Functional Cookies: Store your preferences such as preferred language, display settings, and game history to personalise your experience on return visits.
• Analytics Cookies: Used with a third-party analytics provider to understand aggregate user behaviour on the platform. All analytics data is anonymised prior to processing.

You may manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect your ability to use some features of the mega303 platform. mega303 does not use cookies to serve third-party advertising.

9. International Data Transfers

As an international online gaming platform, mega303 may transfer Personal Data to, and process it in, countries other than Malaysia. These transfers may include data storage on servers located in jurisdictions with different data protection frameworks from those applicable in Malaysia.

Where Personal Data is transferred internationally, mega303 implements appropriate safeguards to ensure that the data receives an equivalent level of protection, including:

• Standard contractual clauses binding our overseas Data Processors to confidentiality and data security obligations consistent with this Policy.
• Technical security measures including encryption in transit and at rest for all cross-border data flows.
• Access controls limiting overseas access to Personal Data to authorised personnel only, on a need-to-know basis.

10. Your Data Rights

Registered players have the following rights with respect to their Personal Data held by mega303. To exercise any of these rights, please submit a written request to [email protected]. We will acknowledge your request within five (5) business days and respond substantively within thirty (30) days.

• Right of Access: You have the right to request a copy of the Personal Data we hold about you, including details of the purposes for which it is processed and the categories of recipients with whom it has been shared.
• Right to Rectification: You have the right to request correction of any Personal Data that is inaccurate, incomplete, or out of date.
• Right to Erasure: You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected — subject to our overriding retention obligations under AML and licensing regulations.
• Right to Restriction of Processing: You have the right to request that we restrict the processing of your Personal Data in certain circumstances, such as where you contest the accuracy of the data or object to our use of it.
• Right to Data Portability: Where processing is based on consent or contract, you have the right to receive your Personal Data in a structured, commonly used, and machine-readable format.
• Right to Object: You have the right to object to the processing of your Personal Data where it is based on our legitimate interests, including direct marketing communications.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

11. Children's Privacy

The mega303 platform is strictly for adults. Access is prohibited for any person under the age of 21. mega303 does not knowingly collect Personal Data from individuals under the age of 21. If we become aware that Personal Data has been submitted by or on behalf of a person under 21, the Account will be immediately closed, all associated data will be deleted without retention, and any funds in the Account will be handled in accordance with our Terms & Conditions.

If you believe that a minor has created an Account on mega303 or submitted Personal Data to us, please contact us immediately at [email protected] so that we may take prompt remedial action.

12. Security Measures

mega303 implements a comprehensive suite of technical and organisational security measures to protect Personal Data against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the mega303 platform.
• AES-256 encryption for Personal Data stored at rest on our servers.
• Role-based access controls ensuring that only authorised personnel with a legitimate operational need can access specific categories of Personal Data.
• Two-factor authentication (2FA) for Player Accounts and for internal administrative systems.
• Regular security audits and penetration testing conducted by independent third-party security professionals.
• Automated intrusion detection and anomaly monitoring systems operating on a continuous basis.
• Formal incident response procedures in the event of a suspected data breach, including notification protocols.

Notwithstanding the above, no data transmission over the internet or electronic storage system can be guaranteed to be completely secure. We urge all players to maintain strong, unique passwords for their mega303 Account and to contact us immediately if they suspect any unauthorised access.

13. Amendments to This Policy

mega303 reserves the right to amend, update, or replace this Privacy Policy at any time. When we make material changes to the Policy, we will update the "Last Updated" date at the top of this page. Where the changes materially affect how we process your Personal Data, we will endeavour to notify you by email to your registered address, though such notification is provided as a courtesy and does not affect the binding nature of the updated Policy.

Continued use of the mega303 platform following publication of an amended Policy constitutes your acceptance of the revised terms. We encourage you to review this page periodically to remain informed of how we handle your data.

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your Personal Data by mega303, please contact us through the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 via the support widget on the mega303 platform — average response time of 3–5 minutes.
• Coverage: Serving players across Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and all of Malaysia.

Our support team handles data protection enquiries in English, Bahasa Melayu, and Mandarin. For formal data subject access requests or right-to-erasure requests, please submit your enquiry via email with the subject line "Data Rights Request" and include your registered Account username for identification purposes.