Privacy Policy

Privacy Policy Mega APK — Your Data, Your Rights

At Mega APK, user privacy is not merely a legal obligation — it is a genuine commitment. This document clearly explains how we collect, use, store, and protect your personal information as a member of our platform.

Last updated: 1 January 2026 256-bit SSL PDPA Compliance
Quick Summary: mega apk collects only the data that is necessary, does not sell your information to third parties, and gives you full control over your personal data. Read on for full details.

1 Introduction & Scope of This Policy


This Privacy Policy is issued by Mega APK ("we", "Platform", or "Mega APK") and applies to all users who access or use our website at megaapk.win, the Mega APK mobile app, and all related services we provide ("Platform").

We understand that your trust is our most valuable asset. That's why we are committed to handling your personal information with full transparency, integrity and responsibility — in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international industry best practices.

By registering for or using the Mega APK Platform, you acknowledge that you have read, understood, and agree to the terms set out in this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of the Platform and contact us with any enquiries.

This Privacy Policy is written in Bahasa Malaysia for the convenience of our users. In the event of any conflict in interpretation, the Bahasa Malaysia version shall be final for users in Malaysia.

2 Types of Personal Data We Collect


Mega apk collects your personal information through various means — directly from you, automatically through your use of the Platform, and in some cases from trusted third-party sources. Below are the main categories of data we collect:

A. Information You Provide Directly:

  • Full name as stated in official identification documents.
  • Active email address used for communication and login.
  • A valid Malaysian phone number for two-factor authentication.
  • Date of birth for age eligibility verification (18 years and above).
  • Current residential address for identity verification (KYC) purposes.
  • Bank account or e-wallet details for processing deposits and withdrawals.
  • A copy of your identity document (MyKad/Passport) for the KYC process.
  • Any additional information you provide to our customer support team.

B. Information Collected Automatically:

  • IP address and network information when accessing the Platform.
  • Device type, operating system, and web browser version used.
  • Session data including login times, session duration, and activity within the platform.
  • Transaction records including deposits, withdrawals, wagering, and wins.
  • Logs of interactions with game features and promotional offers.
  • Cookie data and similar tracking technologies (see Section 6).
Data Categories Primary Purpose Retention Period
Identity Information Registration, KYC, age verification While account is active + 5 years
Financial Information Transaction processing, fraud prevention 7 years (legal requirement)
Technical Data Security, performance analytics 13 rolling months
Gaming Data Compliance, audit, customer support While account is active + 2 years
Communication Support records, dispute resolution 3 years from the date of interaction

3 How We Use Your Personal Data


Mega apk only uses your personal data for legitimate, necessary and relevant purposes in connection with the provision of our platform services. We will not use your data for any other purpose without obtaining your consent first.

  • Account Management: Creating, verifying and managing your member account including the mandatory KYC process and age verification.
  • Transaction Processing: Process deposits, withdrawals, bonuses and all financial transactions related to your account securely and accurately.
  • Platform Security: Detect and prevent fraud, money laundering, unauthorized access attempts and any suspicious activity or violations of the terms of use.
  • Customer Support: Answering inquiries, resolving complaints and providing effective technical assistance to you.
  • Personalise Your Experience: Personalizing game recommendations, promotions and platform content based on your preferences and gaming habits.
  • Service Communication: Sending important notifications related to your account, system updates, policy changes and security information.
  • Marketing (with consent): Contacting you about promotions, bonus offers and special events if you have given consent to receive marketing communications.
  • Legal Compliance: Fulfil legal obligations, regulatory directives and applicable reporting requirements.
  • Responsible Gaming: Monitoring gaming patterns to identify signs of problem gambling and provide appropriate support.
You may withdraw consent for marketing communications at any time by contacting our support team or through your account settings on the Platform. Withdrawing consent will not affect any data processing that has already taken place.

4 Information Sharing & Disclosure


Mega apk does not sell, rent or trade your personal information to any third party for their own marketing purposes. We only share your data in limited and necessary circumstances as follows:

  • Service Providers: Technical partners who help us operate the Platform — including game service providers, payment processors, cloud infrastructure providers, and identity verification services. All such parties are bound by strict confidentiality agreements.
  • Legal Authorities: Law enforcement agencies, courts, or government authorities where we are required to do so under applicable law or a valid court order.
  • Fraud Prevention: Industry-grade fraud prevention services and shared databases to protect all users from malicious activity.
  • Business Transfers: If mega apk is involved in a merger, acquisition, or asset sale, user information may be transferred as part of the business assets with appropriate notice given to users.
Important: mega apk does not share any of your personal information with third parties for advertising or marketing purposes without your explicit consent. If you receive a communication claiming to be from mega apk that appears suspicious, please contact our support immediately.

5 Data Security & Protection Measures


Mega apk continually invests in robust security infrastructure to ensure your personal data is always protected against unauthorized access, disclosure, alteration or destruction.

  • 256-bit SSL/TLS encryption for all data transmitted between your device and our servers.
  • Sensitive data in the database is encrypted using AES-256 standards.
  • Two-factor authentication (2FA) for login and critical financial operations.
  • Continuous 24/7 security monitoring with automated intrusion detection systems.
  • Regular security audits conducted by accredited independent third-party firms.
  • Strict internal access controls — only staff who need it can access user data.
  • A comprehensive incident response plan to address any data breaches.

While we take all reasonable steps to protect your data, no data transmission over the internet or electronic storage method is 100% secure. You are also responsible for keeping your own login credentials safe.

Breach Notification: In the event of a data breach that materially affects your personal information, mega apk will notify you within the timeframe required by applicable law and take immediate action to contain and remediate the situation.

6 Cookies & Tracking Technologies


Mega apk uses cookies and similar tracking technologies to enhance user experience, ensure smooth platform functionality and analyze usage patterns for continuous improvement.

Types of Cookies We Use:

  • Essential Cookies: Required for core Platform functions such as login session authentication and security. These cookies cannot be disabled.
  • Performance Cookies: Collecting information on how you use the Platform to help us identify technical issues and improve performance.
  • Functional Cookies: Saving your preferences such as language, display settings and game choices to deliver a more personalized experience.
  • Analytics Cookies: Help us understand how users interact with the Platform in aggregate and anonymized form for product improvement purposes.

You can control and manage cookies through your web browser settings. Please note that disabling certain cookies may affect the functionality and user experience of the Mega APK Platform. For more information on managing cookies, refer to your web browser's help section.

7 Your Rights as a Data Subject


Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have certain rights regarding your personal information held by Mega APK. We are committed to respecting and facilitating the exercise of these rights:

Right of Access

Request a copy of the personal data we hold about you and information on how it is used.

Right to Rectification

Request correction or update of personal data that is inaccurate, incomplete or outdated.

Right to Erasure

Request deletion of your personal data under certain circumstances provided for by law.

Right to Object

Object to the processing of your personal data for direct marketing or certain other purposes.

Right to Restrict Processing

Request that we restrict the processing of your data in certain situations while a dispute is being resolved.

Right to Data Portability

Receive your personal data in a structured, machine-readable format for transfer to another party.

To exercise any of the above rights, please contact our privacy team via official email or Live Chat on the Platform. We will process your request within 30 business days. In some cases, we may need to verify your identity before processing the request.

8 Data Retention Period & Deletion


Mega apk retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy, or as required by applicable law. Our guiding principle is "keep what's needed, discard what's not."

  • Active account data is retained for the duration your account remains active, plus the minimum retention period required by applicable legal obligations.
  • Financial transaction records are retained for a minimum of seven (7) years in accordance with Malaysia's financial legal requirements.
  • After your account is terminated or upon a valid deletion request, your data will be securely deleted or anonymised within the stipulated timeframe, unless there is a legal obligation to retain it longer.
  • Technical log data is retained for 13 rolling months for security and system monitoring purposes.
When your data is no longer needed, we apply secure deletion methods that ensure it cannot be recovered or accessed again by any party.

9 Changes to This Privacy Policy


Mega apk reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements or other operational reasons. Whenever we make significant changes, we will:

  • Updating the "Last Updated" date displayed at the top of this page.
  • Displaying a clear notice within the Platform to inform you of the changes.
  • Sending an email notification to your registered address for changes that materially affect your privacy rights.

Your continued use of the mega apk Platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. We encourage you to review this page periodically to stay informed about how we protect your information.

10 Contact Us Regarding Privacy


If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, we encourage you to contact us directly. Our Data Protection Officer (DPO) team is ready to assist.

  • Privacy Email: [email protected]
  • Live Chat: Available 24/7 on the mega apk Platform
  • Response Time: Within 3 business days for general enquiries; 30 business days for formal data rights requests.

If you are not satisfied with our response, you have the right to lodge a complaint with Malaysia's Department of Personal Data Protection or the relevant regulatory authority in your jurisdiction.

Why Trust Us

Data Protection World-Class

Mega apk builds a solid privacy infrastructure so you can focus on your gaming experience without worry.

256-bit SSL Encryption

Every bit of data travelling between your device and mega apk's servers is protected by 256-bit SSL encryption — the same standard used by leading financial institutions worldwide.

Secure KYC Verification

Our identity verification process is handled through a fully encrypted system. Your KYC documents are never stored in a format accessible to regular staff.

No Data Sales

Mega apk has never and will never sell, rent or trade your personal data to advertisers or third-party data brokers. Your information belongs entirely to you.

Malaysia PDPA Compliance

All our data management practices are designed to comply with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international standards.

Full Control in Your Hands

You may access, correct, or request deletion of your personal data at any time. Mega APK provides easy channels for you to manage your own privacy rights.

Independent Security Audit

Mega APK's security infrastructure and data management practices undergo regular audits by accredited independent cybersecurity firms to ensure the highest standards are consistently maintained.

FAQ

FAQ — Privacy & Data

Absolutely not. mega apk never sells, rents, or trades your personal data to any third party for marketing or commercial purposes. Your data is only shared in very limited situations as described in Section 4 of our Privacy Policy, and only with parties bound by strict confidentiality agreements.

You may submit a data deletion request by contacting our support team via Live Chat on the Platform or through our official email. We will process your request within 30 business days. Please note that some data may need to be retained to fulfil legal obligations even after your account has been closed.

Yes, the security of your financial information is our highest priority. All transactions are processed through channels encrypted to 256-bit SSL standards. mega apk works exclusively with licensed and certified payment processors that comply with PCI-DSS security standards. Your bank account information is stored in encrypted format and used solely for transactions you have authorised.

Yes, you can withdraw your consent to receive marketing communications at any time. You may do so via the notification settings in your account or by contacting our support team. Unsubscribe requests will be processed within 5 to 7 business days. Please note that you will still receive important account and security-related emails even after unsubscribing from marketing.

Financial transaction records are retained for a minimum of seven (7) years in compliance with Malaysia's financial and anti-money laundering legal requirements. This is a statutory obligation we cannot waive even upon user request. Other data such as game activity logs are retained for shorter periods as specified in the data retention schedule in Section 2 of our Privacy Policy.

Your Data Is Safe. Now's the Time Play Now!

You now understand how Mega APK protects your privacy. Join millions of Malaysian players enjoying the best gaming experience with complete peace of mind.

100% Secure Data PDPA Compliance No data sales Full control in your hands
Bahasa Melayu