128mega Privacy Policy – Malaysian Player Data Protection

128mega ("we", "platform", "Company") respects the privacy of every individual who uses our platform and is committed to protecting the personal data of Malaysian players. This Privacy Policy explains in detail how we collect, process, store, and protect your personal information when you use 128mega's services – including slots, blackjack, progressive jackpots, Malaysia Super League sports betting, e-sports, badminton, and all other game categories available on our platform.

By registering an account or using any 128mega service, you acknowledge that you have read, understood, and agreed to the terms of this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of the 128mega platform and contact us to close your account.

This Privacy Policy is to be read together with Terms & Conditions 128mega and all other documents referenced therein.

128mega only collects data that is necessary to operate the platform securely and deliver quality services to players in Malaysia. The following are the categories of data we collect:

128mega collects players' personal data through a variety of transparent and lawful means:

• Account Registration: When you complete the 128mega registration form, we collect the name, email address, phone number, date of birth, and password you provide;
• Financial Transactions: When you make a deposit via Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, or FPX online banking, transaction details are recorded for financial record-keeping and verification purposes;
• Platform Usage: Your activity on 128mega — including games played, session duration, bet amounts, and page navigation — is automatically recorded by our systems;
• Customer Support: When you contact the 128mega support team via live chat, email, or Telegram, those conversations are stored for service improvement purposes;
• Cookies and Tracking Technologies: The 128mega website uses cookies to save player preferences, maintain login sessions, and analyse usage patterns anonymously.

128mega uses players' personal data solely for the following legitimate and necessary purposes:

128mega will not use your data for any purpose beyond those stated above without first obtaining your renewed consent.

128mega does not sell, rent, or disclose players' personal data to any third party for commercial purposes. However, in certain strictly limited situations, we may share data with:

• Payment Providers: Transaction information that must be shared with Malaysian payment service providers such as Touch 'n Go, GrabPay, DuitNow, and FPX banks to complete your financial transactions;
• Game Providers: Minimum game data required by Pragmatic Play, PG Soft, Habanero, and other software providers to operate their games on the 128mega platform. These providers are bound by strict confidentiality agreements;
• Authority: Where required by Malaysian law or a valid court order, 128mega may be obligated to disclose certain information to law enforcement agencies or regulatory authorities;
• Fraud Prevention Services: Data required to verify identity and prevent fraudulent activity or money laundering.

128mega invests heavily in security infrastructure to ensure the personal data of players in Malaysia remains protected at all times. Key security measures we have implemented include:

• 256-bit SSL encryption for all data transmitted between your device and 128mega's servers;
• Data encryption at rest for all personal and financial information stored in our databases;
• Strict access controls — only specifically authorised 128mega staff may access player data, and only to the extent necessary for their role;
• Round-the-clock security monitoring with automated intrusion detection systems;
• Regular security audits conducted by accredited independent third parties;
• Mandatory data security training for all 128mega staff who handle player data;
• Two-factor authentication (2FA) for all internal platform administrator accounts.

128mega retains players' personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required under Malaysian law:

• Active Account Data: Retained for the duration your account remains active with 128mega, plus 6 years after account closure (financial record-keeping requirements);
• Transaction Records: Retained for 7 years in accordance with Malaysian legal requirements for financial records;
• Activity Logs: Retained for 2 years for security and fraud prevention purposes;
• KYC Documents: Deleted once the verification process is complete, unless a longer retention period is required by law;
• Support Records: Retained for 3 years for service quality control purposes.

When data is no longer needed and there is no legal obligation to retain it, 128mega will securely delete or anonymise that data.

As a 128mega player, you have the following rights regarding your personal data under Malaysia's Personal Data Protection Act 2010:

• Right of Access: You have the right to request and obtain a copy of the personal data we hold about you;
• Right of Rectification: You have the right to request correction of any inaccurate or incomplete personal data;
• Right to Erasure: You have the right to request deletion of your personal data under certain circumstances (subject to statutory data retention obligations);
• Right to Object: You have the right to object to the processing of your data for direct marketing purposes at any time;
• Data Portability Rights: You have the right to receive your data in a machine-readable format for transfer to another platform;
• Right to Withdraw Consent: You may withdraw your consent for any consent-based processing at any time.

To exercise any of the above rights, please contact the 128mega privacy team at privacy@128mega.biz. We will process your request within 14 business days.

128mega uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit the 128mega website.

• Essential Cookies: Required for core platform functionality, such as maintaining your login session and ensuring security. These cookies cannot be disabled;
• Performance Cookies: Collects anonymous information about how players use the 128mega platform for improvement purposes;
• Functional Cookies: Remembering player preferences and settings, such as preferred language and frequently used deposit methods;
• Marketing Cookies: With your consent, used to show you relevant 128mega promotions and offers.

You can manage your cookie settings through your web browser. Disabling certain cookies may affect the functionality of some parts of the 128mega platform.

The 128mega platform does not contain links to unrelated third-party websites. However, in the context of payments, you may be redirected to the payment interfaces of service providers such as Touch 'n Go, GrabPay, DuitNow, or the FPX banking portal. These payment pages operate under their own privacy policies, separate from 128mega.

128mega is not responsible for the privacy practices or content of any third-party websites. We recommend reading the privacy policy of each payment provider you use to understand how they handle your data.

128mega reserves the right to modify this Privacy Policy at any time to reflect changes in our practices, new legal requirements, or technological developments. The "Last Updated" date at the top of this document always reflects the most current version.

For significant changes that affect how we use your personal data, we will notify you via a prominent notice on the 128mega platform or to the email address registered to your account at least 14 days before the changes take effect. Your continued use of the platform after the changes take effect constitutes your acceptance of the updated Privacy Policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or how 128mega handles your personal data, please do not hesitate to contact our privacy team:

We encourage players to contact us directly before filing a complaint with a regulatory authority. 128mega is committed to resolving any privacy concerns fairly and transparently within a reasonable timeframe.