Privacy Policy

1. Introduction

mega38 ("we", "us", "our", or "the Company") is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, store, and protect information about you when you use the mega38 online gaming platform (the "Platform"), including our website and mobile applications.

This Privacy Policy applies to all Users who access or use mega38 services and forms an integral part of our Terms and Conditions. By creating an account or using the Platform, you acknowledge that you have read, understood, and consent to the data practices described in this Privacy Policy.

mega38 operates under international gaming regulations and adheres to industry-standard data protection principles. We are committed to transparency regarding our data collection and processing activities, and we employ robust technical and organizational measures to safeguard your personal information against unauthorized access, disclosure, alteration, or destruction.

2. Information We Collect

mega38 collects several categories of information necessary to provide our gaming services, ensure platform security, comply with regulatory requirements, and improve user experience. The information we collect includes:

2.1 Personal Identification Information

When you register for a mega38 account, we collect the following personal identification information:

• Full legal name as it appears on your government-issued identification document
• Date of birth (to verify you meet the minimum age requirement of 21 years)
• Email address and mobile phone number
• Residential address within Indonesia
• Gender (optional)
• Government-issued identification documents including Indonesian KTP (Kartu Tanda Penduduk) or passport for KYC verification
• Selfie photograph holding identification document for identity verification

2.2 Financial Information

To process deposits and withdrawals, we collect financial information including:

• Bank account details (bank name, account number, account holder name) for Indonesian banks including BCA, BRI, BNI, and Mandiri
• E-wallet account information for OVO, DANA, GoPay, ShopeePay, and LinkAja
• Transaction history including deposit amounts, withdrawal amounts, dates, and payment method used
• Source of funds documentation for anti-money laundering compliance

Please note: mega38 does not store your full bank account numbers or credit card details. Payment processing is handled by certified third-party payment processors who maintain PCI DSS compliance.

2.3 Gaming Activity Data

We automatically collect information about your gaming activity on the Platform, including:

• Games played, bet amounts, win/loss records, and game outcomes
• Sports betting selections, odds accepted, stake amounts, and settlement results
• Bonus claims, wagering progress, and promotional participation
• Account balance history and transaction logs
• Session duration, frequency of play, and gameplay patterns

This data is used for responsible gaming monitoring, fraud detection, dispute resolution, and regulatory compliance.

2.4 Technical and Device Information

When you access mega38, we automatically collect technical information including:

• IP address and geographic location data
• Device type, operating system, and browser information
• Screen resolution, language preferences, and time zone settings
• Cookies, device identifiers, and similar tracking technologies
• Pages visited, clickstream data, and navigation patterns on the Platform
• Referring website or application

2.5 Communications

We retain records of communications between you and mega38, including:

• Customer support inquiries via live chat, email, WhatsApp, or phone
• Feedback, complaints, and dispute correspondence
• Survey responses and promotional opt-in preferences
• Marketing communications delivery and engagement metrics

3. How We Use Your Information

mega38 uses the collected information for the following legitimate business purposes:

3.1 Account Management and Service Delivery

• Creating, maintaining, and administering your gaming account
• Processing deposits, withdrawals, and other financial transactions
• Providing access to sports betting, casino games, and slot machines
• Calculating and crediting winnings to your account
• Managing bonuses, promotions, and loyalty rewards
• Sending transactional notifications regarding account activity

3.2 Regulatory Compliance and Legal Obligations

• Verifying your identity and age to comply with KYC requirements
• Detecting and preventing money laundering, terrorist financing, and fraud
• Monitoring for problem gambling behaviors and enforcing responsible gaming policies
• Complying with international gaming regulations and licensing requirements
• Responding to legal requests from law enforcement or regulatory authorities
• Maintaining audit trails and records as required by gaming regulations

3.3 Security and Fraud Prevention

• Detecting unusual account activity and suspicious transaction patterns
• Preventing unauthorized access, identity theft, and account takeover
• Identifying multiple accounts, collusion, and bonus abuse
• Protecting the integrity of games and sports betting markets
• Investigating disputes, complaints, and rule violations

3.4 Platform Improvement and Analytics

• Analyzing user behavior to improve website functionality and user experience
• Testing new features, games, and promotional offers
• Optimizing platform performance, loading times, and mobile responsiveness
• Conducting market research and gathering user feedback
• Generating statistical reports and business intelligence (using anonymized data)

3.5 Marketing and Communications

• Sending promotional offers, bonuses, and special event notifications (with your consent)
• Personalizing marketing messages based on your gaming preferences
• Delivering targeted advertisements on the Platform
• Conducting promotional campaigns via email, SMS, and push notifications

You may opt out of marketing communications at any time through your account settings or by contacting customer support. Transactional and account-related communications cannot be opted out as they are essential to service delivery.

4. Information Sharing and Disclosure

mega38 does not sell, rent, or trade your personal information to third parties for their marketing purposes. We may share your information only in the following limited circumstances:

4.1 Service Providers and Partners

We engage trusted third-party service providers to perform functions on our behalf, including:

• Payment Processors: To process deposits and withdrawals via Indonesian banks and e-wallets
• Game Providers: Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, and other software suppliers who deliver games on the Platform
• Identity Verification Services: To conduct KYC checks and verify document authenticity
• Customer Support Tools: Live chat software, ticketing systems, and communication platforms
• Analytics Providers: To analyze Platform usage and generate performance reports
• Cloud Hosting Services: To store data securely on encrypted servers

All third-party service providers are contractually obligated to maintain the confidentiality and security of your information and are prohibited from using it for any purpose other than providing services to mega38.

4.2 Legal and Regulatory Requirements

We may disclose your personal information if required to do so by law or in response to valid requests from public authorities, including:

• Compliance with legal obligations, court orders, or subpoenas
• Cooperation with law enforcement investigations
• Reporting to gaming regulators and licensing authorities
• Protection of mega38's legal rights, property, and safety
• Prevention or investigation of fraud, security breaches, or illegal activities

4.3 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your personal information may be transferred to the acquiring entity. We will notify you via email and prominent notice on the Platform before your information is transferred and becomes subject to a different privacy policy.

4.4 With Your Consent

We may share your information with third parties when you have given explicit consent for such disclosure, such as participating in co-branded promotions or connecting your account to third-party services.

5. Data Security Measures

mega38 implements industry-leading technical and organizational security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction:

• SSL/TLS Encryption: All data transmitted between your device and mega38 servers is encrypted using 256-bit SSL technology, the same encryption standard used by banks and financial institutions.
• Secure Data Storage: Personal information is stored on secure servers located in certified data centers with 24/7 monitoring, fire suppression systems, and redundant power supplies.
• Access Controls: Access to personal data is restricted to authorized personnel only, based on role-based access control principles. All access is logged and audited.
• Data Encryption at Rest: Sensitive information including financial data and identification documents is encrypted when stored in our databases.
• Regular Security Audits: Our systems undergo regular penetration testing, vulnerability assessments, and third-party security audits.
• Employee Training: All mega38 employees with access to personal data receive mandatory privacy and security training.
• Incident Response Plan: We maintain a comprehensive data breach response plan to quickly address and mitigate any security incidents.

While we employ robust security measures, no method of transmission over the internet or electronic storage is 100% secure. You are responsible for maintaining the confidentiality of your account password and notifying us immediately of any unauthorized account access.

6. Data Retention

mega38 retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy and to comply with legal and regulatory obligations:

• Active Accounts: Personal and gaming data is retained for the duration of your account's active status.
• Closed Accounts: Following account closure, we retain certain information for up to seven (7) years to comply with financial record-keeping requirements, anti-money laundering regulations, and to resolve disputes.
• Transaction Records: Deposit, withdrawal, and gaming transaction records are retained for a minimum of five (5) years as required by gaming regulations.
• Communications: Customer support communications are retained for two (2) years for quality assurance and dispute resolution purposes.
• Marketing Data: If you opt out of marketing communications, your contact information is retained on a suppression list to ensure we do not contact you in the future.

After the applicable retention period expires, personal information is securely deleted or anonymized such that it can no longer identify you.

7. Your Privacy Rights

As a mega38 User, you have the following rights regarding your personal information:

• Right to Access: You may request a copy of the personal information we hold about you by contacting our Data Protection team.
• Right to Correction: You can update inaccurate or incomplete information through your account settings or by contacting customer support.
• Right to Deletion: You may request deletion of your personal data, subject to our legal retention obligations. Note that deleting your account may affect your ability to access the Platform.
• Right to Data Portability: You may request a copy of your personal data in a structured, machine-readable format.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.
• Right to Object: You may object to processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.

To exercise any of these rights, please contact our Data Protection Officer at [email protected]. We will respond to your request within thirty (30) days.

8. Cookies and Tracking Technologies

mega38 uses cookies, web beacons, and similar tracking technologies to enhance your experience on the Platform, analyze usage patterns, and deliver personalized content. Cookies are small text files stored on your device that help us recognize you on subsequent visits.

We use the following types of cookies:

Cookie Type	Purpose	Duration
Essential Cookies	Required for Platform functionality, account authentication, and security. Cannot be disabled.	Session / Persistent
Performance Cookies	Collect anonymous data about Platform usage to improve performance and user experience.	Up to 2 years
Functional Cookies	Remember your preferences, language settings, and customization choices.	Up to 1 year
Marketing Cookies	Track your activity to deliver relevant advertisements and promotional offers.	Up to 1 year

You can manage cookie preferences through your browser settings. Note that disabling certain cookies may affect Platform functionality and your user experience.

9. Third-Party Links

The mega38 Platform may contain links to third-party websites, including game providers, payment processors, and social media platforms. This Privacy Policy does not apply to those external sites. We are not responsible for the privacy practices or content of third-party websites. We encourage you to review the privacy policies of any third-party sites you visit.

10. Children's Privacy

mega38 services are strictly intended for adults aged twenty-one (21) years or older. We do not knowingly collect personal information from individuals under the age of 21. If we become aware that we have inadvertently collected information from a minor, we will take immediate steps to delete that information and terminate the associated account.

If you are a parent or guardian and believe your child has provided personal information to mega38, please contact us immediately at [email protected].

11. International Data Transfers

mega38 operates internationally and may transfer your personal information to servers located outside Indonesia for processing and storage. When we transfer data internationally, we ensure that appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable data protection laws.

All international data transfers are conducted using secure, encrypted channels and with service providers who have executed data protection agreements with mega38.

12. Changes to This Privacy Policy

mega38 may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or business operations. The "Last Updated" date at the top of this document indicates when the most recent changes were made. Material changes will be communicated via email notification or prominent notice on the Platform thirty (30) days before the changes take effect.

Your continued use of mega38 services after the effective date of any changes constitutes acceptance of the updated Privacy Policy. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

13. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Data Protection Officer:

• Email: [email protected]
• Customer Support: [email protected]
• Live Chat: Available 24/7 through the Platform

We will make every effort to respond to your inquiry within forty-eight (48) hours.