Mega RTP Privacy Policy — Our Commitment to Your Personal Data

1 Introduction

Mega RTP ("we", "platform", "Company") are committed to protecting the privacy and security of all our users' personal data. This Privacy Policy document sets out in detail how Mega RTP collect, process, store, and protect your personal information when you use our website, mobile app, and all services we offer.

This Privacy Policy applies to all users of the Mega RTP, including website visitors, registered members, and those who interact with us through customer support channels. We encourage you to read this document carefully to fully understand our privacy practices.

Mega RTP comply with Malaysia's Personal Data Protection Act 2010 (PDPA) — the primary legislation governing the processing of personal data in commercial activities in Malaysia. Every data processing activity we carry out has a valid legal basis and a clearly defined purpose.

2 Personal Data We Collect

Mega RTP collect your personal data through several means — directly when you register or use the platform, and automatically through website tracking technologies. Below is a detailed table of the data we collect:

We only collect data that is necessary for the stated purposes. Mega RTP does not collect sensitive information such as biometric data, medical records, or political affiliations without your explicit consent.

3 How We Use Your Personal Data

Every piece of data we collect is used for a specific and legitimate purpose. Mega RTP does not process your data for any other purpose without informing you in advance. The primary purposes for which your data is used are as follows:

• Account Management: Registering, verifying, and maintaining your account Mega RTP yours, including the required KYC process.
• Transaction Processing: Processing deposits via DuitNow, FPX, Touch 'n Go eWallet, GrabPay, Boost, and ShopeePay, as well as handling withdrawals to your Malaysian bank account.
• Service Delivery: Ensuring you have seamless access to all games and features on the Mega RTP platform — slots, live casino, poker, e-sports, and football betting.
• Security & Fraud Prevention: Detecting and preventing fraudulent activity, money laundering, and other security threats to your account and our platform.
• Service Communications: Sending important notifications related to transactions, account security, and policy updates.
• Marketing (with consent): Keeping you informed about Mega RTP promotions, bonuses, and exclusive offers — only if you have consented to receive marketing communications.
• Analytics & Improvement: Analysing usage patterns to improve the user experience, platform performance, and our product offerings.
• Legal Compliance: Comply with applicable legal obligations, including PDPA 2010, regulatory authority directives, and anti-money laundering requirements.

4 Data Sharing with Third Parties

Mega RTP affirms that we does not sell your personal data to any third party for their own commercial purposes. However, there are limited circumstances where we need to share your data with certain parties in order to operate the platform:

• Payment Providers: Financial institutions and e-wallet providers (such as Touch 'n Go, GrabPay, Boost, ShopeePay, and banks supporting FPX including Maybank, CIMB, and RHB) receive only the data necessary to securely process your financial transactions.
• Game Software Providers: Game development companies (providers of slots, live casino, and poker software) may receive session data necessary to run the games properly.
• KYC Service Provider: Third-party identity verification companies that help us verify the identity of new members in accordance with legal requirements.
• Legal Authorities: Malaysian government agencies, law enforcement bodies, or courts when we are legally required to disclose such information.
• Professional Advisors: Auditors, lawyers, and consultants bound by strict confidentiality obligations.

All third parties that receive your data from Mega RTP are required to handle that information with the same level of security and confidentiality that we apply. Legally binding data processing agreements are signed with every service provider.

5 Data Security

Protecting your personal data from unauthorised access, disclosure, alteration, or destruction is our highest priority Mega RTP. We implement multiple layers of technical and organisational security measures:

• Data Encryption: All sensitive data is encrypted using AES-256 encryption at rest and SSL/TLS 1.3 in transit.
• Two-Factor Authentication (2FA): An additional security layer is available and encouraged for all Mega RTP member accounts.
• 24/7 Monitoring: An intrusion detection system and round-the-clock security monitoring are in place to identify suspicious activity.
• Regular Security Audits: Penetration testing and security audits are conducted regularly by independent cybersecurity experts.
• Internal Access Controls: The principle of least privilege is applied — only staff who genuinely require access to your personal data are permitted to do so.
• Staff Training: All Mega RTP staff receive comprehensive data protection training and are bound by confidentiality agreements.

6 Cookies & Tracking Technologies

Mega RTP uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login session authentication, security, and language preferences. These cookies cannot be disabled.
• Performance Cookies: Collects information on how you use our platform — pages visited, time spent, and any errors encountered. This data is used to improve website performance.
• Functional Cookies: Allows the platform to remember your preferences — such as language, display settings, and game preferences — for a more personalised experience.
• Analytics Cookies: Used to understand aggregated usage patterns, helping us make better decisions about platform design and content.

You can manage your cookie settings through your internet browser settings. Disabling certain cookies may affect the functionality of some parts of the platform Mega RTP. For more information on managing cookies, refer to your browser's documentation.

7 Your Rights Under PDPA 2010

As a data subject under Malaysia's Personal Data Protection Act 2010, you have the following rights with respect to your personal data processed by Mega RTP:

To exercise any of the above rights, please contact our Data Protection Officer at privacy@megartp.net. Requests will be processed within 14 working days. In complex cases, this period may be extended by up to 30 days with notice to you.

8 Data Retention & Deletion

Mega RTP only retains your personal data for as long as necessary to fulfil the purposes stated in this Privacy Policy, or as required by applicable Malaysian law.

• Active Account Data: Retained for as long as your account remains active on the Mega RTP platform.
• Data Following Account Closure: Financial transaction records and KYC information are retained for a minimum of six (6) years following account closure, in accordance with Malaysia's anti-money laundering legal requirements.
• Communication Data: Customer support conversation records are retained for two (2) years for quality control and dispute resolution purposes.
• Technical Logs: Server logs and technical access data are retained for ninety (90) days for security and debugging purposes.

Once the retention period expires, your personal data will be securely deleted or permanently anonymised so that it can no longer be linked to you. Our data deletion procedures comply with recognised security standards.

9 Children's Privacy

Platform Mega RTP is intended for individuals aged 18 years and above only. We do not knowingly collect or process personal data of anyone under 18 years of age.

Should we discover that we have collected personal data from someone under the age of 18, we will take immediate steps to delete that information and close the account in question. If you believe your child or a minor has registered on our platform, please contact us immediately at privacy@megartp.net.

10 Links to Third-Party Sites

Platform Mega RTP may contain links to third-party websites or services from time to time. This Privacy Policy applies solely to the Mega RTP platform and does not cover the privacy practices of any third-party websites.

We are not responsible for the content, privacy policies, or practices of any third-party websites. We encourage you to read the privacy policy of every website you visit. Mega RTP has no control over and accepts no responsibility for the content, privacy policies, or practices of any third-party sites or services.

11 Privacy Policy Amendments

Mega RTP reserves the right to review and update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technology. All amendments take effect as soon as they are published on our platform.

For material amendments — that is, significant changes that may affect your privacy rights — we will provide advance notice through:

• Email to the address registered on your account at least thirty (30) days before the amendment takes effect.
• A clear notice on the Mega RTP platform's main page.
• An in-account notice upon your next login.

Continued use of the platform Mega RTP after the effective date of any amendment will be considered your acceptance of the updated Privacy Policy. If you do not agree, you have the right to close your account and request data deletion in accordance with the procedures set out in Section 7.

12 Contact Our Data Protection Officer

If you have any questions, concerns, or complaints regarding how Mega RTP handles your personal data, or if you wish to exercise any of your rights under PDPA 2010, please contact our Data Protection Officer (DPO):

• Privacy-Specific Email: privacy@megartp.net
• General Support Email: support@megartp.net
• Live Chat: Available 24/7 via the Mega RTP platform
• FAQ: Visit our FAQ page for an immediate response

We are committed to responding to all privacy-related enquiries within seven (7) business days. For complaints that cannot be resolved, you have the right to refer the matter to the Department of Personal Data Protection Malaysia under the Ministry of Communications and Digital.