megaboi Privacy Policy for Malaysian Players

Introduction and Scope

This Privacy Policy describes how megaboi handles personal information associated with website access, account activity, customer support, security checks, payment guidance and related services. It applies to information submitted directly by a user, collected automatically through the website or received from an authorised service provider.

References to “you” and “your” mean the person using megaboi. References to “we”, “us”, “our” or the “brand” mean megaboi where the context permits. “Personal information” means information that identifies an individual or can reasonably be connected with an identifiable individual.

megaboi aims to process information fairly, transparently and for defined purposes. This policy should be read with the Terms & Conditions, which govern access and acceptable use. Where applicable, megaboi will consider relevant Malaysian data protection requirements, including principles reflected in the Personal Data Protection Act 2010.

Information megaboi May Collect

The information required by megaboi depends on how a user interacts with the website. Browsing public information may require less data than opening an account, completing KYC, requesting a withdrawal or contacting support.

Support communications may also be retained when a user asks megaboi about a delayed FPX transfer, Touch 'n Go eWallet withdrawal, KYC review, responsible gambling limit or other account matter. Users should provide only the information reasonably necessary to address the issue.

How Information Is Collected

megaboi may receive information directly when a user creates or updates an account, completes verification, selects privacy preferences, communicates with support or carries out a transaction. Information may also be generated when the user navigates the website or activates account security and responsible gambling features.

Authorised payment and verification providers may supply transaction status, identity-match results, fraud indicators or confirmation that a bank account or e-wallet belongs to the user. Depending on availability, this may involve Maybank, CIMB, Public Bank, Hong Leong Bank, DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay or another selected provider.

megaboi may collect technical data automatically through server logs, cookies and similar technologies. Such information supports session continuity, authentication, performance monitoring, security and the prevention of duplicate or fraudulent activity.

Purposes of Data Processing

megaboi may process personal information for one or more of the following purposes:

• To create, maintain, verify and secure an eligible user account.
• To confirm that a user is aged 21 or above and meets account requirements.
• To administer deposits, withdrawals, bonus records and MYR transactions.
• To respond to support enquiries and investigate reported account issues.
• To detect fraud, payment abuse, duplicate accounts and unauthorised access.
• To apply deposit limits, cooling-off periods, self-exclusion and other responsible-play controls.
• To improve megaboi navigation, mobile performance and content relevance.
• To maintain records and comply with valid legal or regulatory obligations.
• To send service notices or permitted marketing communications according to user preferences.

Information should not be used for an unrelated purpose without an appropriate basis. Where a new purpose is materially different, megaboi may provide an additional notice or request consent when required.

Legal and Operational Basis

Depending on the context, megaboi may process information because it is necessary to provide an account or requested service, comply with a legal obligation, protect legitimate security interests, prevent fraud, safeguard users or act on valid consent.

For example, megaboi may need identity and transaction information to assess a withdrawal request. Technical logs may be used to investigate an unfamiliar login from a new device. Responsible-play information may be retained to enforce a self-exclusion request and prevent an excluded user from opening another account.

Where processing relies on consent, the user may withdraw that consent for future activity, subject to any information that must continue to be retained for security, contractual or legal reasons. Withdrawal of consent does not invalidate processing that occurred before the withdrawal.

Payments and Financial Information

megaboi may process payment information to confirm deposits, reconcile MYR transfers, return funds, review chargebacks and manage approved withdrawals. Complete card credentials, online banking passwords and one-time authorisation codes should not be requested or stored by megaboi.

A payment provider may process information under its own privacy and security practices. Users should access Maybank2u, CIMB Clicks, Public Bank services, Hong Leong Connect, Touch 'n Go eWallet, Boost or GrabPay only through trusted applications or official channels. Users must never disclose banking passwords or one-time codes to another person.

Transaction monitoring may identify unusual amounts, repeated failed deposits, mismatched names or unsupported cryptocurrency networks. megaboi may temporarily delay a transaction while reasonable identity, ownership or security checks are completed.

Cookies and Similar Technologies

Cookies are small data files placed on a device or recognised by a browser. megaboi may use necessary cookies to maintain login sessions, remember security choices, balance website traffic and protect account functions.

Preference or measurement technologies may help megaboi understand which pages are useful, how mobile layouts perform and whether users encounter technical errors. Where required, optional technologies should be controlled through an appropriate consent or preference mechanism.

Blocking necessary cookies may prevent parts of megaboi from working correctly. Browser controls can usually remove or restrict cookies, but doing so may sign the user out or reset saved preferences.

Disclosure of Personal Information

megaboi does not treat personal information as a product for unrestricted sale. Information may, however, be disclosed to carefully selected providers where reasonably necessary to operate the website or complete a user request.

Recipients may include hosting and security providers, payment processors, identity-verification services, customer support systems, professional advisers and authorities acting under valid legal powers. Each recipient should receive only information relevant to its role and should be subject to appropriate confidentiality, security or data-processing obligations.

megaboi may also disclose information where necessary to protect users, investigate fraud, respond to lawful requests, enforce the Terms & Conditions or support a legitimate corporate reorganisation. Any disclosure will be assessed according to the circumstances and applicable requirements.

International Data Handling

Some infrastructure or service providers supporting megaboi may operate outside Malaysia. As a result, information may be accessed or processed in another jurisdiction with different data protection rules.

Where cross-border handling occurs, megaboi will seek appropriate contractual, organisational or technical safeguards. These may include restricted access, confidentiality duties, encryption and assessment of the provider's security practices. International processing does not remove the responsibility to protect information appropriately.

Data Security

megaboi uses reasonable safeguards designed to protect personal information against accidental loss, unauthorised access, misuse, alteration or disclosure. Measures may include encrypted transmission, credential protection, access controls, event logging, network monitoring and internal limits on who may view sensitive records.

No internet service can guarantee absolute security. Users also have an important role. A megaboi password should be unique, difficult to guess and kept private. One-time codes must not be shared, and users should sign out after accessing megaboi on a shared device.

If a user suspects that an account has been compromised, the user should stop transacting, change available credentials and contact support promptly. megaboi may temporarily restrict access while investigating a credible security concern.

Data Retention

megaboi retains personal information only for as long as reasonably necessary for the purpose for which it was collected, subject to security, dispute, fraud-prevention and legal record-keeping needs. Different records may therefore have different retention periods.

An account closure request does not always permit immediate deletion of every record. Transaction histories, self-exclusion details, verification outcomes and security logs may need to be retained to prevent fraud, resolve complaints, meet financial record obligations or stop an excluded user from creating another account.

When information is no longer required, megaboi may delete it, securely destroy it or transform it into a form that no longer identifies the individual.

Your Privacy Rights and Choices

Subject to identity verification, applicable law and permitted exceptions, a user may contact megaboi about the following privacy matters:

1. Request information about whether megaboi holds personal data concerning the user.
2. Ask for access to relevant personal information in an appropriate form.
3. Request correction of information that is incomplete, outdated or inaccurate.
4. Ask for deletion or restriction where continued processing is no longer justified.
5. Withdraw consent for future processing where consent is the applicable basis.
6. Change permitted marketing preferences without affecting essential service notices.
7. Raise a concern about how megaboi has handled personal information.

megaboi may request reasonable proof of identity before acting on a privacy request. This protects information from being disclosed or changed at the request of an unauthorised person. Some requests may be limited where retention or processing remains necessary for fraud prevention, self-exclusion, legal claims or another valid obligation.

Responsible Gambling and Sensitive Information

Responsible gambling controls may generate information about deposit limits, spending patterns, cooling-off periods, support conversations or self-exclusion. megaboi treats these records as important safeguards and limits their use to account protection, support, compliance and the enforcement of responsible-play decisions.

If a user activates self-exclusion, megaboi may retain sufficient identity information to recognise and block attempts to create another account. A request to erase all data may not override the need to maintain an effective exclusion measure.

Gambling should remain optional entertainment for adults aged 21 and above. Users experiencing financial stress, secrecy, loss chasing or difficulty stopping should discontinue play and review the Responsible Gambling guidance.

Children and Age-Restricted Access

megaboi is not intended for children or anyone under 21. A person below the required age must not create an account, submit personal information or access gambling-related features.

If megaboi reasonably believes that information has been provided by an underage person, access may be suspended while age is investigated. Information may then be deleted or retained only where necessary to document and prevent prohibited access.

Policy Updates

megaboi may revise this Privacy Policy when services, technology, legal expectations or information-handling practices change. The effective date near the top of the page will indicate the current version.

Material changes may also be communicated through an appropriate website or account notice. Continued use of megaboi after an updated policy takes effect acknowledges the revised notice, although fresh consent will be requested where required for a particular processing activity.

Contact Us

Questions about this Privacy Policy, data security or a privacy request may be directed to the megaboi support team. Website email:

[email protected]

The email address is displayed as plain text. When contacting megaboi, include enough information to identify the relevant account or issue, but do not send a password, one-time code, complete banking credential or unnecessary identification document.

Users may also review the FAQ for general account guidance or the Terms & Conditions for the rules governing access to megaboi.