Your privacy matters to us. This Policy explains what personal data megasloto collects, why we collect it, how we use it, and your rights as a data subject — written in plain terms so every Malaysian player understands exactly how their information is handled.
All data encrypted in transit
We never sell your data to third parties
Access, correct, or delete your data
Data stored in protected environments
Manage cookie preferences at any time
Privacy queries answered within 24 hours
Megasloto ("we", "us", "our", "the Company") operates the online sports betting and live casino platform accessible at megasloto.cam (the "Platform"). We are committed to protecting and respecting the privacy of every user ("you", "User", "Player") who accesses or uses our Platform.
This Privacy Policy ("Policy") sets out in clear terms what personal data we collect from you, the lawful bases on which we process that data, how we use it, with whom we share it, how long we retain it, and what rights you hold as a data subject. It should be read alongside our Terms & Conditions, which govern your overall use of the megasloto Platform.
Megasloto serves players primarily based in Malaysia, including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam and other cities across the country. Our data practices are designed to align with internationally recognised privacy principles and applicable data protection law.
The following key terms are used throughout this Privacy Policy:
Megasloto collects several categories of personal data from users of the Platform. The specific data we collect depends on your level of interaction with our services.
When you create a megasloto Account, we collect the following information:
As part of our mandatory identity verification process prior to your first withdrawal, we collect:
We record all deposit and withdrawal transactions, including payment method identifiers (e.g., partial bank account numbers, e-wallet account references), transaction amounts in MYR, transaction timestamps, and transaction reference IDs. We do not store full card numbers, banking PINs, or e-wallet PINs.
We maintain a complete record of your betting and gaming history on the Platform, including bet amounts, game types played, sports events wagered on, wager outcomes, bonus activity, and session duration data.
When you access the Platform, we automatically collect device and usage information, including IP address, browser type and version, operating system, device identifiers, referring URLs, pages viewed, features accessed, and session timestamps. This data is used for security monitoring, fraud detection, and platform performance optimisation.
When you contact our customer support team via live chat or email, we record and retain those communications, including the content of messages, timestamps, and the resolution of any support request.
Megasloto collects personal data through the following channels:
| Collection Method | Data Categories Collected |
|---|---|
| Account registration form | Name, date of birth, IC/passport number, email, phone, address |
| KYC document upload | Identity document scans, address proofs, payment method proofs, selfie photos |
| Deposit and withdrawal processing | Transaction details, payment method references, MYR amounts, timestamps |
| Platform usage (automated) | IP address, browser data, device ID, session logs, page interactions |
| Cookies and tracking technologies | Session data, preferences, analytics identifiers |
| Support communications | Message content, support ticket history, chat transcripts |
| Third-party KYC providers | Verified identity status, document authenticity confirmation |
| Fraud prevention services | Device fingerprints, risk scores, behavioural signals |
Megasloto processes your personal data only where a lawful legal basis exists. We rely on the following processing grounds:
Processing is necessary for the performance of the contract between you and megasloto — specifically, to operate your Account, process deposits and withdrawals, settle bets, apply bonuses, and provide customer support. Without this processing, the fundamental services of the Platform cannot be delivered.
Megasloto is subject to obligations under applicable anti-money laundering (AML), counter-terrorist financing (CTF), and Know Your Customer (KYC) requirements. We are legally required to verify player identities, monitor transactions, and maintain records of financial activity. This processing is not optional — it is a mandatory compliance requirement.
We process certain data to pursue legitimate business interests, including fraud detection and prevention, platform security monitoring, responsible gambling compliance (including monitoring for problem gambling indicators), system performance optimisation, and internal analytics to improve the megasloto user experience. We ensure these interests are proportionate and do not override your fundamental rights and freedoms.
Where we send you direct marketing communications (e.g., promotional emails about new games, Liga Super Malaysia season offers, or bonus announcements), we rely on your express consent. You may withdraw this consent at any time by contacting support or using the unsubscribe mechanism in any marketing email we send.
We use your personal data for the following specific purposes:
Megasloto does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may share your data with the following categories of third parties only where necessary and under appropriate data protection agreements:
To process your deposits and withdrawals, we share necessary transaction data with payment service providers including e-wallet operators (Touch 'n Go, Boost, GrabPay), DuitNow infrastructure partners, FPX-connected Malaysian banks (Maybank, CIMB, Public Bank, Hong Leong, and others), and cryptocurrency network processors. These providers receive only the minimum data required to process the transaction.
Your KYC documents and identity data are shared with certified third-party identity verification service providers to authenticate document validity and verify your identity. These providers operate under strict data processing agreements with megasloto.
We share technical usage data (including device identifiers and behavioural signals) with fraud detection and platform security service providers to protect the Platform and its players from fraudulent activity.
Where required for game operation, limited account identifier data is shared with third-party game providers whose content is available on megasloto. These providers do not receive personally identifying information beyond what is necessary for game session management.
Megasloto may disclose personal data to law enforcement agencies, regulatory authorities, or courts where legally required to do so, or where we have a good-faith belief that disclosure is necessary to protect the rights, property, or safety of megasloto, its users, or the public.
Megasloto retains personal data only for as long as necessary to fulfil the purposes described in this Policy, or as required by applicable law.
Upon the expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with an identified or identifiable individual.
Megasloto implements robust technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction.
Our security measures include, but are not limited to:
In the event of a data breach that is likely to result in a high risk to your rights and freedoms, megasloto will notify affected users without undue delay and take all reasonable steps to contain and remediate the incident.
Megasloto uses cookies and similar tracking technologies on the Platform to provide a functional, secure, and personalised user experience.
You can control and manage non-essential cookies through your browser settings. Most modern browsers allow you to block, delete, or restrict cookie placement. Please note that disabling certain cookies may affect the functionality of the megasloto Platform. Strictly necessary cookies cannot be disabled while using the Platform.
Some browsers support a "Do Not Track" (DNT) setting that sends a signal to websites requesting that you are not tracked across sites. Megasloto currently does not respond differently to DNT signals but remains committed to transparent, proportionate data collection as described in this Policy.
As a user of the megasloto Platform, you hold the following data subject rights in respect of your personal data. To exercise any of these rights, please contact us at [email protected] with your full name, registered account email address, and a clear description of the right you wish to exercise.
You have the right to request confirmation of whether megasloto holds personal data about you, and to receive a copy of that data together with information about how it is being processed. We will respond to valid access requests within 30 days.
If you believe that any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it without undue delay. Certain data (such as your registered name or date of birth after KYC verification) may require supporting documentation to amend.
You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent and no other legal basis applies, or where the data has been unlawfully processed. Please note that certain data (such as KYC documents and financial transaction records) must be retained for a minimum period under applicable AML/CTF regulations, and cannot be deleted prior to the end of that mandatory retention period.
You have the right to request that we restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested, or where processing is unlawful but you prefer restriction to deletion.
Where processing is based on your consent or on a contractual necessity, and is carried out by automated means, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format, and to request transmission to another service provider where technically feasible.
You have the right to object to the processing of your personal data where it is based on our legitimate interests, including direct marketing. Where you object to marketing, we will cease sending marketing communications immediately. Other objections will be evaluated against our legitimate business and legal obligations.
Where processing is based on your consent (such as marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal. To withdraw marketing consent, use the unsubscribe link in any marketing email or contact support.
We rely on age declarations provided during registration and verify age through our KYC process. If you have reason to believe that a minor has registered an account on megasloto, please notify us immediately at [email protected].
Parents and guardians concerned about potential underage gambling are encouraged to use parental control software to restrict access to gambling websites, and to review our Responsible Gambling page for further information and resources.
Megasloto operates in Malaysia and primarily processes data of Malaysian users. In certain circumstances, personal data may be transferred to and processed in countries outside Malaysia — for example, where third-party service providers (such as game providers, KYC verification services, or fraud detection tools) operate internationally.
When personal data is transferred outside Malaysia, megasloto takes appropriate safeguards to ensure that your data continues to receive a level of protection consistent with this Policy and applicable data protection standards. These safeguards may include:
Megasloto may update or amend this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or the services we provide. When material changes are made, we will:
We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your data. Your continued use of the megasloto Platform following the posting of a revised Policy constitutes your acknowledgement and acceptance of the changes.
If you have any questions, concerns, or requests regarding this Privacy Policy or the way megasloto handles your personal data, please contact our dedicated privacy team using the details below. We are committed to resolving all privacy-related enquiries promptly and transparently.
For responsible gambling inquiries, account restriction tools, or self-exclusion requests, please visit our Responsible Gambling page.
For questions about your account, deposits, withdrawals, or bonuses, please refer to our FAQ page or contact live chat support on the Platform.
A plain-language summary of our key privacy commitments to every megasloto player across Malaysia.
Megasloto does not sell, rent, or trade your personal information to any third party for commercial purposes. Your data is shared only where strictly necessary for service delivery, legal compliance, or fraud prevention — and always under formal data processing agreements.
Every piece of data transmitted between your device and megasloto's servers is protected by 256-bit SSL encryption — the same standard used by major Malaysian banks including Maybank and CIMB. Your login credentials, KYC documents, and financial details are secured at every step.
You can request access to, correction of, or deletion of your personal data at any time. You can withdraw consent for marketing communications instantly. You can request a portable copy of your data. We respond to all data subject requests within 30 days.
Megasloto does not retain your personal data indefinitely. Most account data is held for 5 years following account closure to meet AML legal requirements, after which it is securely deleted or irreversibly anonymised. We do not keep data longer than legally or operationally necessary.
We only send promotional emails and bonus notifications where you have given your express consent. You can unsubscribe from all marketing communications at any time — simply click the unsubscribe link in any marketing email or contact our support team.
Where we share data with third parties — payment processors like Touch 'n Go and DuitNow, KYC providers, or fraud detection services — we tell you clearly what data is shared, with whom, and why. Every third-party processor is bound by a formal data protection agreement with megasloto.
Review our related policies, visit the homepage, or get answers to common questions. All content is written in plain English for Malaysian players.
Privacy questions? Reach our team at [email protected] — available 24/7 on Malaysia Standard Time.