Privacy Policy

1. Introduction and Scope

This Privacy Policy applies to all personal data collected by mega22 through our website (https://mega22.cam), mobile applications, and related services. This policy covers:

• Information collected when you create an account, make deposits, place bets, or interact with our platform.
• Information collected automatically through cookies, device identifiers, and usage analytics.
• Information obtained from third-party sources such as payment processors and identity verification services.
• How we use, store, share, and protect your personal information.
• Your rights to access, correct, delete, or restrict the processing of your personal data.

mega22 operates as an international online gaming platform targeting Indonesian players. While we serve the Indonesian market with localized payment methods (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay) and Indonesian-speaking support, we are not governed by Indonesian data protection regulations. Our data processing practices comply with international data protection standards including principles aligned with GDPR (General Data Protection Regulation) frameworks used globally.

2. Data Controller Information

mega22 is the data controller responsible for your personal information collected through our services. For privacy-related inquiries, data access requests, or to exercise your privacy rights, you may contact us at:

• Email: [email protected]
• Subject Line: "Privacy Inquiry" or "Data Protection Request"
• Response Time: We aim to respond to all privacy inquiries within 5 business days.

3. Information We Collect

3.1 Information You Provide Directly

When you register an account or use mega22 services, you provide us with personal information including:

• Account Registration Data: Full legal name, date of birth, gender, email address, phone number, residential address, username, and password.
• Identity Verification (KYC) Data: Government-issued identification documents (Indonesian KTP or passport), proof of address documents (utility bills, bank statements), selfie photographs with ID for identity confirmation.
• Financial Information: Payment method details (bank account numbers, e-wallet account information), transaction history, deposit and withdrawal records.
• Communication Data: Content of messages, emails, and live chat conversations with our customer support team.
• Preference Data: Language preferences, notification settings, responsible gaming limits (deposit limits, loss limits, session time limits), marketing communication preferences.

3.2 Information Collected Automatically

When you access and use mega22, we automatically collect certain information about your device and usage patterns:

• Device Information: IP address, device type (mobile, tablet, desktop), operating system, browser type and version, screen resolution, device identifiers (IMEI, UDID, advertising IDs).
• Usage Data: Pages visited, games played, bet history, time spent on platform, click patterns, navigation paths, session duration, frequency of visits.
• Location Data: IP-based geolocation to verify your location is within permitted jurisdictions and to comply with regulatory requirements.
• Cookie Data: Information stored in cookies and similar tracking technologies (see Section 10 for detailed cookie policy).

3.3 Information from Third-Party Sources

We may receive information about you from third-party service providers including:

• Payment Processors: Transaction verification data, payment status confirmations, fraud screening results from Indonesian banks (BCA, BRI, BNI, Mandiri) and e-wallet providers (OVO, DANA, GoPay).
• Identity Verification Services: Results of identity document authenticity checks, address verification, sanctions list screening, politically exposed person (PEP) screening.
• Fraud Prevention Services: Risk scores, device fingerprinting data, behavioral analytics to detect fraudulent activity or bonus abuse.

4. How We Use Your Information

mega22 processes your personal data for the following purposes, all of which are necessary to provide you with gaming services and comply with legal obligations:

4.1 Account Management and Service Provision

• Creating and maintaining your mega22 account.
• Verifying your identity and eligibility to use our services (age verification, jurisdiction verification).
• Processing deposits, withdrawals, and internal account transfers.
• Recording and settling bets placed on casino games, sports betting markets, togel, sabung ayam streams, and other gaming products.
• Managing bonuses, promotions, and loyalty program participation.
• Providing customer support and responding to your inquiries.

4.2 Legal and Regulatory Compliance

• Complying with Know Your Customer (KYC) and Anti-Money Laundering (AML) regulations.
• Preventing underage gambling by verifying that all users are 21 years of age or older.
• Detecting and preventing fraudulent activity, bonus abuse, collusion, and other prohibited activities.
• Maintaining records required by gaming licenses and regulatory authorities.
• Responding to legal requests from law enforcement or regulatory bodies.

4.3 Security and Fraud Prevention

• Monitoring for suspicious account activity, unauthorized access attempts, and security breaches.
• Conducting risk assessments and fraud screening on transactions.
• Protecting against cheating, hacking, and exploitation of software vulnerabilities.
• Enforcing our Terms & Conditions and investigating violations.

4.4 Platform Improvement and Analytics

• Analyzing usage patterns to improve website and app functionality.
• Understanding player preferences to enhance game selection and features.
• Testing new features and conducting A/B testing.
• Generating aggregated, anonymized statistics for business intelligence.

4.5 Marketing and Communications

• Sending promotional offers, bonus announcements, and marketing communications (only with your consent).
• Personalizing content and recommendations based on your gaming preferences.
• Sending transactional communications such as deposit confirmations, withdrawal updates, and security alerts.
• Conducting customer satisfaction surveys and collecting feedback.

4.6 Responsible Gaming

• Monitoring for signs of problem gambling behavior.
• Enforcing responsible gaming limits you have set (deposit limits, loss limits, session time limits).
• Processing self-exclusion requests and cooling-off periods.
• Providing access to responsible gaming resources and support.

5. Legal Basis for Data Processing

mega22 processes your personal data based on the following legal grounds:

Processing Purpose	Legal Basis
Account registration and service provision	Contractual necessity (to fulfill our agreement with you)
KYC/AML compliance, age verification, fraud prevention	Legal obligation and legitimate interests
Payment processing and financial transactions	Contractual necessity and legal obligation
Security monitoring and account protection	Legitimate interests (protecting our services and users)
Platform improvement and analytics	Legitimate interests (improving user experience)
Marketing communications	Consent (you can opt out at any time)
Responsible gaming monitoring	Legitimate interests and legal obligation

6. How We Share Your Information

6.1 Service Providers and Business Partners

mega22 shares your personal data with trusted third-party service providers who assist us in operating our platform. These include:

• Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) to process deposits and withdrawals.
• Identity Verification Providers: Third-party KYC services that verify the authenticity of your identification documents and screen against sanctions lists.
• Cloud Hosting Providers: Secure data centers where our servers and databases are hosted.
• Customer Support Tools: Live chat platforms, email systems, and CRM software used to manage customer inquiries.
• Analytics Providers: Web analytics and business intelligence tools to analyze platform usage and performance.
• Security Services: Fraud detection, DDoS protection, and cybersecurity monitoring providers.

All third-party service providers are contractually required to protect your data, use it only for the purposes we specify, and comply with applicable data protection laws.

6.2 Legal Requirements and Law Enforcement

mega22 may disclose your personal information when required by law or in response to valid legal requests, including:

• Complying with court orders, subpoenas, or legal process.
• Cooperating with law enforcement investigations related to fraud, money laundering, or other criminal activities.
• Responding to regulatory inquiries from gaming authorities or financial regulators.
• Protecting the rights, property, or safety of mega22, our users, or the public.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred to the acquiring entity as part of the transaction. You will be notified of any such change in ownership or control of your personal information.

6.4 With Your Consent

We may share your information with other parties when you explicitly consent to such sharing, such as when participating in co-branded promotions with partners.

6.5 What We Do NOT Do

mega22 does NOT:

• Sell your personal data to third parties for their own marketing purposes.
• Share your data with advertising networks for targeted advertising outside our platform.
• Rent or lease your contact information to third parties.
• Publicly disclose your identity, gaming activity, or winnings without your explicit consent.

7. Data Security Measures

mega22 implements comprehensive security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction:

7.1 Technical Security Controls

• SSL/TLS Encryption: All data transmitted between your device and mega22 servers is encrypted using 256-bit SSL (Secure Socket Layer) technology—the same standard used by banks and financial institutions.
• Secure Data Storage: Personal data is stored on secure servers located in internationally certified data centers with physical security controls, environmental monitoring, and redundant infrastructure.
• Database Encryption: Sensitive data such as passwords and financial information is encrypted at rest using industry-standard encryption algorithms.
• Firewalls and Intrusion Detection: Multi-layered firewall protection and real-time intrusion detection systems monitor for suspicious activity and unauthorized access attempts.
• DDoS Protection: Distributed denial-of-service (DDoS) mitigation to protect platform availability and data integrity.

7.2 Organizational Security Controls

• Access Controls: Strict access controls ensure that only authorized personnel with a legitimate business need can access personal data. Access is logged and monitored.
• Employee Training: All mega22 staff receive data protection and security awareness training.
• Confidentiality Agreements: Employees and contractors sign confidentiality and non-disclosure agreements.
• Security Audits: Regular security assessments, vulnerability scans, and penetration testing to identify and remediate potential weaknesses.
• Incident Response Plan: Documented procedures for detecting, responding to, and recovering from data breaches or security incidents.

7.3 Account Security Best Practices

You also play an important role in protecting your data. We recommend:

• Creating a strong, unique password for your mega22 account (combination of letters, numbers, and symbols).
• Never sharing your account credentials with anyone.
• Logging out after each session, especially on shared or public devices.
• Enabling two-factor authentication (2FA) if available on your account.
• Being cautious of phishing emails or messages claiming to be from mega22—we will never ask for your password via email or chat.
• Contacting support immediately if you suspect unauthorized access to your account.

8. Data Retention

mega22 retains your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy and to comply with legal, regulatory, and contractual obligations:

8.1 Active Account Data

• While your account remains active, we retain all personal data necessary to provide services, including account information, transaction history, gaming activity, and communications.

8.2 Post-Closure Retention

• After account closure, we retain certain data for legal and regulatory compliance, typically for 5-7 years depending on applicable laws.
• Retained data includes KYC/AML records, transaction history, responsible gaming records, and records required for tax reporting or dispute resolution.
• Marketing data is deleted immediately upon account closure or opt-out.

8.3 Inactive Account Policy

• Accounts inactive for 12 consecutive months may be subject to inactivity fees or closure as outlined in our Terms & Conditions.
• You will receive email notifications before any action is taken on an inactive account.

8.4 Data Deletion Requests

• You may request deletion of your personal data by contacting [email protected].
• We will comply with deletion requests subject to legal retention requirements (we cannot delete data we are legally required to retain).
• Deletion requests are processed within 30 days.

9. Your Privacy Rights

mega22 respects your rights regarding your personal data. Depending on your jurisdiction, you may have the following rights:

9.1 Right to Access

You have the right to request a copy of the personal data we hold about you. To exercise this right, contact [email protected] with the subject line "Data Access Request." We will provide your data in a commonly used electronic format within 30 days.

9.2 Right to Correction

If any personal information we hold about you is inaccurate or incomplete, you can update it directly in your account settings or contact support to make corrections.

9.3 Right to Deletion

You may request deletion of your personal data, subject to legal retention requirements. We will delete data that is no longer necessary for legal, regulatory, or contractual purposes.

9.4 Right to Restriction of Processing

You may request that we restrict processing of your personal data in certain circumstances, such as while we investigate a data accuracy dispute.

9.5 Right to Data Portability

You have the right to receive your personal data in a structured, machine-readable format and transmit it to another service provider where technically feasible.

9.6 Right to Object

You may object to processing of your personal data for direct marketing purposes at any time. You can opt out of marketing emails by clicking the "unsubscribe" link in any marketing email or by adjusting your communication preferences in account settings.

9.7 Right to Withdraw Consent

Where we process your data based on consent (e.g., marketing communications), you may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

10. Cookies and Tracking Technologies

10.1 What Are Cookies?

Cookies are small text files stored on your device when you visit a website. They help websites remember your preferences, keep you logged in, and improve your browsing experience.

10.2 Types of Cookies We Use

• Strictly Necessary Cookies: Required for the website to function. These cookies enable core functionality such as security, network management, and accessibility. You cannot opt out of these cookies.
• Performance Cookies: Collect anonymous information about how visitors use our website, such as which pages are most visited. This helps us improve site performance.
• Functionality Cookies: Remember your preferences (language, region, login status) to provide enhanced, personalized features.
• Targeting/Advertising Cookies: Used to deliver relevant promotional content and measure the effectiveness of advertising campaigns. These cookies may be set by us or third-party advertising partners.

10.3 Managing Cookie Preferences

You can control and manage cookies through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or receive notifications when cookies are set. Note that disabling cookies may affect website functionality and your user experience.

11. International Data Transfers

mega22 operates internationally and may transfer your personal data to countries outside Indonesia for processing and storage. When we transfer data internationally, we ensure appropriate safeguards are in place, including:

• Data processing agreements with third-party providers that include standard contractual clauses.
• Ensuring recipient countries have adequate data protection laws or certifications.
• Implementing technical and organizational measures to protect data during transfer.

12. Children's Privacy

mega22 services are strictly intended for adults aged 21 years and older. We do not knowingly collect personal information from individuals under 21. If we discover that we have inadvertently collected data from someone under 21, we will delete that information immediately. If you believe we have collected information from a minor, please contact [email protected].

13. Changes to This Privacy Policy

mega22 may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technology. We will notify users of material changes via email or prominent notice on our platform. The "Last Updated" date at the bottom of this policy indicates when changes were last made. Your continued use of mega22 after policy updates constitutes acceptance of the revised policy.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or how mega22 handles your personal data, please contact us:

• Email: [email protected]
• Subject Line: "Privacy Inquiry" or "Data Protection Request"
• Live Chat: Available 24/7 through your account dashboard
• Response Time: We aim to respond to all privacy inquiries within 5 business days