Privacy Policy

1. Introduction

uea8mega ("uea8mega," "we," "us," or "our") is committed to protecting the privacy and personal data of all members and visitors who use the uea8mega Platform. This Privacy Policy ("Policy") describes our practices with respect to the collection, use, disclosure, and retention of personal information obtained through uea8mega.club and all associated services.

This Policy should be read in conjunction with the uea8mega Terms & Conditions, which govern your use of the Platform. Capitalised terms used but not defined in this Policy have the meaning given to them in the Terms & Conditions.

uea8mega operates primarily for English-speaking Malaysian users and handles all transactions in Malaysian Ringgit (MYR). We take our data protection obligations seriously and apply recognised international data protection standards to all personal data we process.

2. Data Controller

For the purposes of applicable data protection law, uea8mega is the data controller in respect of personal data collected through the Platform. Our designated data protection contact can be reached at the email address set out in Section 15 of this Policy.

Where uea8mega engages third-party service providers to process personal data on our behalf, those providers act as data processors under our instructions and are bound by appropriate data processing agreements.

3. Personal Data We Collect

uea8mega collects personal data in the following categories:

Category	Examples	Purpose
Identity Data	Full name, date of birth, gender, nationality, MyKad or passport number	Account registration, KYC verification, age verification (21+)
Contact Data	Email address, Malaysian mobile number, residential address	Account communications, support, transaction notifications
Financial Data	Payment method identifiers (Touch n Go eWallet, Boost, bank account details), transaction history	Processing deposits and withdrawals in MYR, AML compliance
Technical Data	IP address, device type, browser type, operating system, session timestamps	Security, fraud prevention, platform optimisation
Usage Data	Pages visited, games played, bet history, session duration, feature interactions	Service improvement, responsible gaming monitoring, personalisation
Communication Data	Live chat transcripts, support emails, survey responses	Customer support, dispute resolution, service quality
KYC Documents	Copies of MyKad, passport, proof of address, selfies	Identity verification per international gaming authority licensing requirements

4. How We Collect Personal Data

uea8mega collects personal data through the following means:

• Direct interactions: Data you provide when registering an account, completing KYC, making deposits or withdrawals, contacting support, or responding to promotions.
• Automated technologies: When you access or use the Platform, we automatically collect technical and usage data through cookies, server logs, and similar tracking technologies. See Section 11 for details.
• Third-party sources: We may receive data from identity verification providers, payment processors (including Touch n Go eWallet and Boost infrastructure operators), fraud detection services, and analytics providers — solely for the purposes described in this Policy.

5. How We Use Your Personal Data

uea8mega uses the personal data we collect for the following purposes:

• To create, verify, and maintain your uea8mega account.
• To process deposits and withdrawals in MYR via your chosen payment method.
• To comply with KYC, Anti-Money Laundering (AML), and Know Your Transaction (KYT) obligations under our international gaming authority licensing framework.
• To verify that you meet the minimum age requirement of 21 years.
• To provide customer support and resolve disputes.
• To detect, investigate, and prevent fraud, cheating, collusion, or other prohibited conduct.
• To administer bonuses, promotions, and the uea8mega Rewards programme.
• To monitor responsible gaming indicators and, where required, apply account controls such as deposit limits or self-exclusion.
• To send transactional communications (account alerts, withdrawal confirmations, security notifications).
• To send marketing communications, where you have provided consent or where permitted under applicable law. You may opt out at any time by contacting support.
• To improve and personalise the Platform experience.
• To comply with legal obligations and regulatory requirements.

6. Legal Basis for Processing

uea8mega processes personal data on the following legal bases:

• Contract performance: Processing necessary to provide the services you have registered for, including account management, gaming services, and payment processing.
• Legal obligation: Processing required to comply with KYC, AML, licensing, and other regulatory obligations imposed on uea8mega by applicable law and our gaming authority licence conditions.
• Legitimate interests: Processing for fraud prevention, security, platform integrity, and service improvement, where such interests are not overridden by your data protection rights.
• Consent: Processing for direct marketing communications, or any other processing activities where we have obtained your explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

7. Disclosure and Data Sharing

uea8mega does not sell your personal data to third parties. We may share personal data with the following categories of recipient, strictly on a need-to-know basis and subject to appropriate data protection agreements:

• Payment processors: Touch n Go eWallet, Boost, Maybank, CIMB, Public Bank, and their infrastructure providers, for the purpose of processing your financial transactions.
• Identity verification providers: Third-party KYC and document verification services used to verify your identity and age as required by our licensing obligations.
• Fraud and security providers: Services used to detect and prevent unauthorised access, fraud, and money laundering.
• Game providers: Licensed game studios whose content is offered on the uea8mega Platform may receive limited technical data necessary to deliver their game services.
• Analytics providers: Aggregated and anonymised usage data may be shared with analytics services to assist in Platform improvement.
• Regulatory and legal authorities: Where required by applicable law, court order, or our gaming authority licence conditions, we may disclose personal data to law enforcement, regulatory bodies, or other competent authorities.
• Business successors: In the event of a merger, acquisition, or sale of all or part of uea8mega's business, personal data may be transferred to the acquiring entity, subject to equivalent data protection commitments.

8. International Data Transfers

uea8mega operates under international gaming authority licensing, and certain service providers engaged by uea8mega may be located outside Malaysia. Where personal data is transferred to countries that may not provide an equivalent level of data protection to Malaysia, uea8mega implements appropriate safeguards, including standard contractual clauses or equivalent mechanisms, to ensure your data remains protected in accordance with the standards described in this Policy.

9. Data Retention

uea8mega retains personal data for as long as is necessary to fulfil the purposes described in this Policy, unless a longer retention period is required or permitted by applicable law or our licensing obligations.

As a general guide:

• Account and KYC data is retained for a minimum of five (5) years following account closure, in compliance with AML and gaming authority record-keeping requirements.
• Transaction and bet history is retained for a minimum of five (5) years.
• Communication and support records are retained for three (3) years following resolution.
• Technical and log data is typically retained for up to twelve (12) months.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised.

10. Your Data Protection Rights

Subject to applicable law and the terms of uea8mega's licensing obligations, you have the following rights in respect of your personal data:

• Right of access: You may request a copy of the personal data uea8mega holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: In certain circumstances, you may request deletion of your personal data. Note that regulatory retention obligations may limit our ability to fulfil erasure requests in full.
• Right to restriction: You may request that we restrict processing of your personal data in certain circumstances.
• Right to data portability: Where processing is based on consent or contract, you may request transfer of your data in a structured, machine-readable format.
• Right to object: You may object to processing based on legitimate interests, including direct marketing.
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, contact uea8mega at the address in Section 15. We will respond within 30 days. We may need to verify your identity before processing your request.

11. Cookies and Tracking Technologies

uea8mega uses cookies and similar tracking technologies on the Platform for the following purposes:

• Essential cookies: Required for the Platform to function, including session management and login state. These cannot be disabled without affecting Platform functionality.
• Analytics cookies: Used to collect aggregated, anonymised data about how members use the Platform, enabling us to improve performance and user experience.
• Security cookies: Used to detect and prevent fraudulent activity and unauthorised access.
• Preference cookies: Used to remember your settings and preferences, such as language selection.

You may control cookie settings through your browser. Disabling essential cookies may affect your ability to use certain Platform features, including the uea8mega Login function.

12. Data Security

uea8mega implements appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform.
• Encrypted storage of sensitive data including passwords (hashed) and financial identifiers.
• Role-based access controls limiting staff access to personal data on a need-to-know basis.
• Regular security assessments and penetration testing of Platform infrastructure.
• Two-factor authentication available to all registered members.

No transmission over the internet or electronic storage system is 100% secure. While uea8mega takes all reasonable precautions, we cannot guarantee absolute security. In the event of a data breach affecting your rights and freedoms, uea8mega will notify affected members and relevant authorities as required by applicable law.

13. Children and Minors

The uea8mega Platform is strictly for individuals aged 21 years and above. We do not knowingly collect personal data from persons under 21. If you believe that a minor has registered on the Platform or provided personal data to us, please contact us immediately at the address in Section 15. Upon confirmation, we will take immediate steps to delete the relevant data and close the associated account.

14. Changes to This Privacy Policy

uea8mega reserves the right to update or amend this Privacy Policy at any time. Material changes will be communicated to registered members via the Platform notification system or by email to the registered address. The "Last Updated" date at the top of this page reflects the date of the most recent revision.

Your continued use of the uea8mega Platform following notification of any change constitutes your acceptance of the revised Policy. We encourage you to review this Policy periodically.

15. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or uea8mega's data protection practices, please contact our data protection team through the following channels:

• Live Chat: Available 24/7 via the Platform interface — the fastest way to reach us.
• Email: [email protected]

We aim to acknowledge all privacy-related enquiries within 48 hours and to resolve them within 30 days of receipt. If you are not satisfied with our response, you may have the right to lodge a complaint with the data protection supervisory authority applicable to your jurisdiction.