Privacy Policy

128mega ("we", "us", "our", or the "Platform") is committed to protecting and respecting the privacy of every individual who accesses or uses the128mega platform at128mega.cam. This Privacy Policy (the "Policy") sets out the basis on which personal data collected from users, or provided by users, will be processed by128mega.

This Policy applies to all users of the 128mega platform, including registered account holders and visitors browsing the site without a registered account. It covers all personal data processing activities conducted by 128mega in connection with the operation of the platform, including account management, payment processing, identity verification (KYC), customer support, fraud prevention, and responsible gambling monitoring.

By registering an account, accessing the 128mega platform, or continuing to use our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not consent, please discontinue use of the platform and contact us to request account closure and data deletion where applicable.

For the purposes of this Privacy Policy, the following terms are defined as follows:

• "Personal Data" — Any information that identifies or can reasonably be used to identify a living individual, directly or in combination with other data. Examples include full name, email address, phone number, payment details, and device identifiers.
• "Processing" — Any operation performed on personal data, including collection, storage, organisation, use, disclosure, transmission, and deletion.
• "Data Controller" — 128mega, which determines the purposes and means of processing personal data collected through the platform.
• "Data Processor" — A third party that processes personal data on behalf of 128mega in accordance with documented instructions and applicable data protection obligations.
• "User" / "Player" — Any natural person who registers an account with or accesses the 128mega platform.
• "KYC Data" — Identity verification documents and supporting materials submitted by a User in compliance with 128mega's Know Your Customer requirements.
• "Cookies" — Small text files placed on a User's device by a web browser for the purpose of storing preferences, session state, and analytics data.
• "MYR" — Malaysian Ringgit, the primary transactional currency of the 128mega platform.

128mega collects personal data through several channels: directly from you when you register an account or interact with the platform; automatically when you access and use the platform; and from third-party payment providers and identity verification services where applicable. The categories of personal data we collect are described below.

3.1 Account Registration Data

3.2 Payment and Financial Data

When you make deposits or withdrawals on the 128mega platform using methods such as Touch'n Go eWallet, Boost, GrabPay, DuitNow, FPX (Maybank, CIMB, Public Bank, Hong Leong), or cryptocurrency (USDT TRC20), we collect transaction-related information including payment method identifiers, transaction amounts in MYR, transaction reference numbers, and timestamps. We do not store full card numbers or e-wallet PINs — payment authentication is handled directly by the payment provider.

3.3 Technical and Usage Data

When you access the 128mega platform, we automatically collect the following technical data:

• IP address and inferred geographic location (country and city level)
• Browser type and version, operating system, and device model
• Referring URL and navigation path within the platform
• Pages visited, time spent on each page, and click interactions
• Session duration, login timestamps, and logout events
• Game activity logs including games played, stakes placed, and outcomes

3.4 Customer Support Data

When you contact our customer support team via live chat, email, or any other channel, we collect and retain records of those interactions, including the content of messages, timestamps, resolution outcomes, and any supporting documentation you provide. This data is used to resolve your queries and to improve our support quality.

128mega processes personal data for the following specific, documented purposes:

1. Account Management: Creating, maintaining, and administering your registered account, including processing login credentials, managing account balances, and communicating account-related information.
2. Identity Verification (KYC): Verifying your identity and age in compliance with our21+ age policy and applicable anti-money laundering (AML) obligations. KYC is required before processing withdrawals and in response to flaged account activity.
3. Payment Processing: Facilitating MYR deposits and withdrawals via Malaysian payment methods including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX bank transfers, and cryptocurrency.
4. Fraud Prevention and Security: Detecting, investigating, and preventing fraudulent transactions, duplicate accounts, bonus abuse, money laundering, and other prohibited conduct as defined in our Terms and Conditions.
5. Responsible Gambling Monitoring: Monitoring gameplay patterns and account activity to identify potential gambling-related harms and to support the delivery of responsible gambling tools including deposit limits, session reminders, and self-exclusion.
6. Platform Improvement: Analysing aggregated and anonymised usage data to improve platform performance, user experience, game selection, and customer support quality.
7. Legal and Regulatory Compliance: Meeting obligations under applicable international gaming regulations, financial reporting requirements, and lawful requests from competent authorities.
8. Customer Support: Responding to queries, resolving disputes, and maintaining records of support interactions for quality assurance purposes.

128mega processes personal data on the following legal bases:

• Contractual Necessity: Processing required to perform the contract between you and 128mega — specifically, operating your account, processing payments, and providing access to platform services.
• Legal Obligation: Processing required to comply with applicable legal and regulatory requirements, including anti-money laundering obligations KYC verification requirements, and lawful disclosure requests from authorities.
• Legitimate Interests: Processing carried out in pursuit of 128mega's legitimate operational interests, including fraud prevention, platform security, responsible gambling monitoring, and platform analytics — provided these interests do not override your fundamental data protection rights.
• Consent: For certain processing activities — such as marketing communications, non-essential cookies, or processing beyond the scope of the above bases — we will seek your explicit consent and provide a clear mechanism for you to withdraw it at any time.

128mega does not sell, rent, or trade your personal data to third parties for their own commercial or marketing purposes. We may share personal data with third parties only in the limited circumstances described below:

• Payment Service Providers: We share transaction data with Malaysian payment processors including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX-participating banks (Maybank, CIMB, Public Bank, Hong Leong), and cryptocurrency processing services, strictly for the purpose of completing payment transactions.
• Identity Verification (KYC) Providers: We may use third-party identity verification services to assist with KYC and AML compliance checks. These providers act as Data Processors under documented contractual agreements and are not permitted to use your data for any purpose beyond the KYC process.
• Technology and Infrastructure Providers: We use reputable cloud hosting, platform infrastructure, and analytics service providers to operate the 128mega platform. These providers access personal data only to the extent necessary to deliver their services and are bound by strict data processing agreements.
• Regulatory Authorities: Where required by applicable law, court order, or regulatory instruction, we may disclose personal data to competent governmental or law enforcement authorities. We will notify affected users of such disclosures where legally permitted to do so.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of 128mega's business assets, personal data held by us may be transferred as part of that transaction. We will notify affected users in advance of any such transfer and in accordance with applicable privacy obligations.

128mega uses cookies and similar tracking technologies to maintain session state, personalise your platform experience, analyse usage patterns, and support platform security. The categories of cookies used on the128mega platform are described below:

• Strictly Necessary Cookies: Essential for the operation of the platform. These include session cookies that maintain your logged-in state and cookies required for the security of authenticated sessions. These cookies cannot be disabled without rendering core platform functions inaccessible.
• Functional Cookies: Used to remember your preferences, such as language settings, display preferences, and previously used payment methods, to improve your experience on return visits.
• Analytics Cookies: Used to collect anonymised data about how users interact with the platform — including pages visited, time spent, navigation paths, and error events. This data informs platform improvements and is not linked to individual user identities for marketing purposes.
• Security Cookies: Used to detect and prevent fraud, duplicate account activity, and unauthorised access attempts. These cookies support our responsible gambling monitoring systems.

You may manage cookie preferences through your browser settings. Please note that disabling cookies beyond the strictly necessary category may affect the functionality of certain platform features.128mega does not use third-party advertising cookies or behavioural tracking cookies for external marketing purposes.

128mega retains personal data for the minimum period necessary to fulfil the purposes for which it was collected, or for as long as required by applicable legal and regulatory obligations. The table below provides an overview of our standard data retention periods by category:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with 128mega's internal data lifecycle management procedures.

128mega implements appropriate technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. Key security measures in place include:

• SSL / TLS Encryption: All data transmitted between your browser and the128mega platform is protected using industry-standard Transport Layer Security (TLS) encryption. This applies to all platform pages, including login, account settings, deposit and withdrawal flows, and customer support interactions.
• Access Controls: Access to personal data held by 128mega is restricted to authorised personnel on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations.
• Data Minimisation: 128mega collects only the personal data necessary for the purposes described in this Policy. We do not store full payment card numbers, e-wallet PINs, or online banking credentials.
• Fraud Detection Systems: Automated fraud detection and anomaly monitoring systems operate continuously to identify and respond to suspicious account activity, unusual transaction patterns, and potential data security incidents.
• Incident Response: In the event of a personal data breach that poses a risk to the rights and freedoms of affected individuals, 128mega will notify the affected users and relevant authorities in accordance with applicable data breach notification obligations.

While 128mega takes reasonable steps to protect your personal data, no system is entirely immune to security risks. Users are encouraged to use strong, unique passwords for their128mega account, enable any available two-factor authentication features, and promptly notify us of any suspected unauthorised account activity.

As a user of the 128mega platform, you have the following rights with respect to your personal data. To exercise any of these rights, please contact us via the details set out in Section 14 of this Policy.

128mega will respond to all data rights requests within 30 calendar days of receipt. In complex cases, we may extend this period by a further 60 days, in which case we will notify you of the extension and the reasons for it. We may require identity verification before processing a data rights request to ensure the security of the personal data involved.

128mega operates a strict minimum age policy of21 years. The platform is not intended for, directed at, or accessible to individuals under the age of 21. We do not knowingly collect personal data from individuals under the age of 21.

Age verification is conducted as part of the KYC process. Until KYC verification is satisfactorily completed, withdrawal capabilities may be restricted. 128mega reserves the right to request age verification documentation at any time.

As an online platform serving players across Malaysia and other jurisdictions, 128mega may transfer personal data to service providers located outside Malaysia. Such transfers may include hosting infrastructure, analytics services, and identity verification providers operating in other countries.

Where personal data is transferred internationally, 128mega ensures that appropriate safeguards are in place, including contractual data processing agreements that impose obligations equivalent to those applicable under the laws of the originating jurisdiction. 128mega does not transfer personal data to jurisdictions that do not provide an adequate level of data protection without implementing the safeguards described above.

Players who are citizens or residents of Malaysia should note that personal data may be processed outside Malaysia for the purposes described in this Policy. By using the 128mega platform, you consent to such transfers to the extent necessary for the delivery of platform services.

128mega reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or platform operations. The "Last Updated" date at the top of this Policy will be revised accordingly with each update.

Where material changes are made to the Policy — particularly changes that affect how we collect, use, or share your personal data — we will notify you via email to the address associated with your registered account or through a prominent notice on the platform prior to the changes taking effect. Continued use of the 128mega platform following the effective date of any updated Policy constitutes your acceptance of the revised terms.

We encourage you to review this Privacy Policy periodically to stay informed about how128mega protects your personal data. The current version of the Policy is always accessible at 128mega.cam/privacy-policy.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or wish to make a complaint about how128mega has handled your personal data, please contact using the following details:

• Live Chat: Available24 hours a day, 7 days a week, directly on the 128mega platform at128mega.cam. This is the fastest way to reach our team — average response time is under 15 minutes during peak hours.
• Email: [email protected] (plain text address — not a clickable link). Responses to email queries are typically provided within one business day.

Our support team is experienced in handling data protection queries from Malaysian players and is familiar with the local context, including questions related to Touch 'n Go eWallet transactions, DuitNow payment data, FPX bank records, and KYC document submissions involving Malaysian MyKad.

If you are not satisfied with our response to a data protection complaint, you have the right to escalate your complaint to the relevant data protection or gaming regulatory authority in your jurisdiction. 128mega will cooperate fully with any such inquiry.