Important Note: By registering or continuing to use the megasloto platform, you are deemed to have read and agreed to this Privacy Policy in its entirety. If you do not agree with any part of this policy, please discontinue use of the platform and contact us to close your account.
1. Information We Collect
Megasloto collects personal information from members through several means — directly during the registration process and platform use, automatically via industry-standard tracking technologies, and in certain cases through trusted third-party sources. All of this is carried out within the boundaries established by applicable law.
1.1 Information You Provide Directly
When you register a megasloto account, make a deposit, or submit KYC documents, you provide us with the following information:
- Full name as shown on official identification documents.
- Malaysian identity card number (MyKad) or passport number.
- Active email address and Malaysia phone number.
- Date of birth for age verification purposes.
- Current residential address.
- Payment method information (bank account number or e-wallet — excluding passwords).
- A selfie with an identification document for advanced KYC verification when required.
1.2 Information Collected Automatically
When you use the megasloto platform, our systems automatically record certain technical information required to ensure the platform operates correctly and securely:
- IP address and approximate geographic location based on IP.
- Browser type, operating system, and device type used.
- Session data including pages visited, time of visit and actions taken on the platform.
- Transaction logs including deposits, withdrawals, wagering, and wins.
- Cookies and device identifiers for security and personalisation purposes.
Cookie Notice: megasloto uses essential cookies to keep core platform functions running, analytics cookies to understand usage patterns, and preference cookies to remember your settings. You can manage cookie settings through your browser, but disabling essential cookies may affect platform functionality.
2. Purpose of Use of Information
Megasloto uses collected information solely for legitimate purposes directly related to the provision of platform services. We never use your data for purposes outside the scope of our services without first obtaining your consent.
| Purpose of Use | Data Type | Legal Basis |
|---|---|---|
| Identity verification & KYC | Name, IC, photo, address | Legal obligation |
| Deposit & withdrawal processing | Payment information, transaction logs | Contract performance |
| Account security & anti-fraud | IP, device, login patterns | Legitimate interest |
| Service communications | Email, phone number | Contract performance |
| Platform improvements | Anonymised analytics data | Legitimate interest |
| AML legal compliance | Financial transaction records | Legal obligation |
3. Sharing Information with Third Parties
Megasloto understands that member trust is our most valuable asset. For this reason, we limit the sharing of personal information with external parties to only genuinely necessary situations. Every third party that handles megasloto member data is bound by strict confidentiality agreements.
3.1 Parties Who May Receive Your Data
- Payment processing provider — the payment gateway used to process your deposits and withdrawals.
- KYC service provider — certified and audited third-party identity verification systems.
- Cloud infrastructure provider — servers and data storage services that comply with international security standards.
- Regulatory bodies and law enforcement authorities — only when required by applicable Malaysian law.
Our Guarantee: megasloto does NOT share your personal information with advertisers, marketing companies, or any other commercial entity for promotional or data-selling purposes. This is a commitment we have never broken.
4. Data Security & Technical Protection Measures
Megasloto continuously invests in the latest security infrastructure to ensure member data remains protected at all times. Our approach to security is multi-layered — no single mechanism is considered sufficient; instead, we employ a combination of technical controls and operational procedures that complement one another.
4.1 Technical Security Layers
- 256-bit SSL/TLS encryption for all data in transit.
- AES-256 encryption for sensitive data stored in the database.
- Two-factor authentication (2FA) available for all member accounts.
- Real-time threat monitoring with automated intrusion detection systems.
- Regular penetration testing conducted by independent cybersecurity firms.
- Automatic daily data backups with full encryption applied to all backup copies.
4.2 Internal Access Controls
Access to member data among megasloto staff is strictly controlled using the principle of least privilege — each staff member can only access data genuinely needed to carry out their duties. All access is logged and periodically audited by the internal security team.
Shared Responsibility: While megasloto does everything technically possible to keep the platform secure, the safety of your account also depends on your own actions. Use a strong, unique password, enable 2FA, and never share your login credentials with anyone — including megasloto staff.
5. Your Privacy Rights as a Member
As a registered megasloto member, you hold certain rights regarding your personal data that we are obligated to respect and fulfil. These rights arise from Malaysia's Personal Data Protection Act 2010 and megasloto's internal commitment to member privacy.
Right of Access
Request a copy of all personal data we hold about you.
Right to Rectification
Correct any inaccurate or incomplete information.
Right to Erasure
Request data deletion upon account closure where no legal obligation to retain it exists.
Right to Object
Object to data processing for specific purposes such as direct marketing.
Right to Data Portability
Obtain your data in a machine-readable format for transfer.
Right to Restriction
Request a restriction on processing during disputes about data accuracy or purpose.
To exercise any of the above rights, please contact the megasloto data protection team via email at the address listed in the footer of this site. We will process your request within 14 business days from the date of receipt.
6. Data Retention Period
Megasloto does not retain members' personal data longer than necessary for the stated purposes or as required by law. Our data retention schedule is as follows:
| Data Type | Retention Period | Reason |
|---|---|---|
| Active account information | For the duration of the active account | Service provision |
| Financial transaction records | 7 years after transaction | AML legal obligation |
| KYC Documents | 5 years after account closure | Regulatory requirement |
| Support communication logs | 3 years | Dispute resolution |
| Technical & security logs | 12 months | Security investigation |
| Anonymised analytics data | Unlimited (anonymised) | Platform improvements |
7. Cookies and Tracking Technologies
The megasloto website and app use cookies and similar technologies such as local storage and tracking pixels to enhance the user experience and ensure session security. The use of these technologies is standard industry practice and poses no privacy risk when managed responsibly, as we do.
7.1 Types of Cookies Used
- Essential session cookies — maintains your login status and session security. Cannot be disabled without disrupting core functionality.
- Preference cookies — remembers your language settings, time zone, and display preferences.
- Analytics cookies — collects anonymised data on usage patterns for platform improvement purposes.
- Security cookies — detects unusual login patterns and suspicious activity.
8. Cross-Border Data Transfers
In the course of providing megasloto services, member personal data may be stored or processed on servers located outside Malaysia. When this occurs, megasloto ensures that such data transfers are protected by contractual safeguards equivalent to those provided under Malaysian law — including standard data protection clauses and binding data processing agreements.
Data Transfer Guarantee: megasloto uses only cloud infrastructure providers holding international security certifications such as ISO 27001 and SOC 2 Type II. Destination countries for data transfers are selected based on adequate data protection standards or are covered by approved contractual transfer mechanisms.
9. Children's Privacy
Megasloto is a platform intended exclusively for individuals aged 18 and above. We do not knowingly collect or process any personal information from minors. Should we discover that personal data from a minor has been collected without our knowledge, we will take immediate action to delete that data and close the associated account.
10. Changes to This Privacy Policy
Megasloto reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements. Any material changes will be communicated to members via their registered email or an in-platform notification at least 7 days before taking effect.
The "Last Updated" date at the top of this document indicates when this policy was last reviewed. We encourage you to revisit this page periodically to stay informed about how we protect your information.