This Privacy Policy explains how 128mega collects, uses, stores, and protects the personal information of members and visitors to our platform. We are committed to handling your data responsibly and in compliance with applicable privacy and data protection legislation.
Six principles that govern how 128mega handles your personal data
All personal and financial data held by 128mega is stored using industry-standard encryption. Sensitive fields such as payment credentials are never stored in plain text on our systems.
128mega does not sell, rent, or share your personal data with third-party advertisers or data brokers. Data is shared only with service providers essential to platform operation, under strict confidentiality agreements.
128mega collects only the personal data that is necessary for account operation, identity verification, payment processing, and regulatory compliance. We do not collect data for speculative future use.
Members have the right to access, correct, and in certain circumstances request deletion of their personal data held by 128mega. Data subject requests are handled within a reasonable timeframe.
Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. Data no longer needed is securely deleted.
Where personal data is transferred outside Malaysia to support platform operations, 128mega ensures appropriate contractual safeguards are in place with receiving parties to maintain an equivalent level of data protection.
This Privacy Policy is issued by 128mega ("128mega", "we", "us", "our"), the operator of the online gaming platform accessible at https://128mega.club. 128mega operates under international gaming authority licensing and is the data controller responsible for the personal data of its members and website visitors.
For all privacy-related enquiries, data subject requests, and complaints, please contact our data team at: [email protected]. We aim to respond to all privacy-related correspondence within fourteen (14) business days.
This Privacy Policy applies to all personal data collected by 128mega in connection with:
This Policy should be read alongside the 128mega Terms & Conditions, which are available at /terms-conditions.
When you register a 128mega account, we collect your full legal name, date of birth, residential address, email address, and mobile phone number. This information is required to create your account, verify your identity, and communicate with you regarding your account.
To comply with Know Your Customer (KYC) requirements under our international gaming licence, 128mega may collect copies of government-issued identity documents such as your Malaysian MyKad or passport, and proof of address documents such as a utility bill or bank statement issued within the preceding three months.
128mega collects information about payment methods you use to fund your account, including bank account identifiers, e-wallet account identifiers (such as Touch 'n Go eWallet or Boost account numbers), and transaction records. We do not store full payment card numbers on our systems; payment processing is handled by certified third-party payment service providers.
We maintain records of all gaming activity conducted through your 128mega account, including game history, wager amounts, win/loss outcomes, session durations, and transaction history. These records are required for regulatory compliance, dispute resolution, and responsible gaming monitoring purposes.
When you access the 128mega platform, we automatically collect certain technical data including your IP address, device type, operating system, browser type and version, referring URLs, pages visited, session duration, and clickstream data. This data is used for platform security, fraud prevention, and service optimisation.
We retain records of communications between you and 128mega customer support, including live chat transcripts and email correspondence. These records are maintained for quality assurance, training, and dispute resolution purposes.
Where you have consented to receive marketing communications from 128mega, we record your preferences and maintain records of communications sent to you. You may update your marketing preferences at any time through your account settings.
128mega uses the personal data we collect for the following purposes:
128mega processes your personal data on the following legal bases:
128mega does not sell your personal data. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection agreements:
128mega uses cookies and similar tracking technologies on its website and mobile applications. Cookies are small text files placed on your device that help us recognise you, maintain your session, and understand how you use our platform.
These cookies are strictly necessary for the 128mega platform to function. They include session authentication cookies that keep you logged in during your visit and security cookies that help protect your account. These cannot be disabled.
With your consent, 128mega uses analytics tools to collect aggregated data about how members use the platform. This helps us identify popular games, navigation patterns, and technical performance issues. Analytics data is processed in aggregate and is not used to identify individual members.
These cookies remember your platform preferences such as language settings and display preferences to provide a more personalised experience during subsequent visits.
You may manage cookie preferences through your browser settings. Note that disabling certain cookies may impair the functionality of the 128mega platform.
128mega implements appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These measures include:
While 128mega takes data security seriously, no internet-based service can guarantee absolute security. You are responsible for maintaining the security of your 128mega account credentials and for notifying us promptly of any suspected unauthorised access.
128mega retains personal data for the following periods, or as otherwise required by applicable law:
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with 128mega's data disposal procedures.
As an internationally licensed gaming operator, 128mega may transfer personal data to countries outside Malaysia in connection with the operation of its platform, including to servers and service providers located in other jurisdictions. Where such transfers occur, 128mega ensures that appropriate safeguards are in place, such as contractual data transfer agreements that require the recipient to maintain data protection standards consistent with this Privacy Policy and applicable Malaysian data protection law.
Subject to applicable law and regulatory limitations, you have the following rights in relation to your personal data held by 128mega:
To exercise any of the above rights, please submit a written request to [email protected]. We may require identity verification before processing a data subject request. Requests will be addressed within fourteen (14) business days, or a longer period where permitted by applicable law for complex or multiple requests.
128mega's gaming services are strictly restricted to individuals aged 21 and above. We do not knowingly collect personal data from persons under the age of 21. If 128mega becomes aware that personal data has been collected from a person under 21 years of age, we will immediately close the associated account, forfeit any related balances in accordance with our Terms & Conditions, and securely delete the personal data collected. If you believe that an underage individual has registered a 128mega account, please notify us immediately at [email protected].
The 128mega platform may reference or provide links to third-party services, including game providers whose content is hosted within the 128mega lobby. 128mega is not responsible for the privacy practices of third-party game providers, payment processors, or any other third-party services. Where you interact directly with third-party services, their respective privacy policies apply. We encourage you to review the privacy policies of any third-party services you use in connection with your 128mega account.
128mega may update this Privacy Policy from time to time to reflect changes in our data processing practices, regulatory requirements, or for other operational reasons. The effective date of the current version is displayed at the top of this page. For material changes, 128mega will provide notice to registered members via email or in-platform notification at least seven (7) days before the change takes effect. Your continued use of the 128mega platform following notification of a material change constitutes your acceptance of the updated Privacy Policy.
For any questions about this Privacy Policy, your personal data held by 128mega, or to exercise your data subject rights, please contact us:
This Privacy Policy was last reviewed on 1 June 2026. 128mega reserves the right to amend this Policy at any time in accordance with Section 14 above.
Your data is protected. Your games are fair. Your withdrawals are processed in Ringgit. Join Malaysian players who trust 128mega for their online gaming — slots, live casino, and sportsbook all in one account.
Players must be 21 or older. 128mega operates under international gaming authority licensing.