mega88 Privacy Policy

Introduction

mega88 ("we", "us", "our") operates the online casino and sports betting platform accessible at https://mega88.cam. We are committed to protecting the personal information of every individual who visits, registers with, or transacts on the mega88 platform. This Privacy Policy sets out, in plain and formal terms, the categories of personal data we collect, the purposes for which that data is processed, the parties with whom it may be shared, and the rights you hold in respect of your own information.

This Privacy Policy applies to all users of the mega88 platform, including visitors who browse without registering, registered account holders, and players who actively wager on casino games or sports markets. By accessing mega88 and providing your personal data, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein.

This Privacy Policy should be read alongside our Terms & Conditions and our Responsible Gaming policy, both of which form part of the overall legal framework governing your relationship with mega88.

Data We Collect

mega88 collects personal data across several categories depending on how you interact with the platform. The following table provides a structured overview of the data categories, specific data points within each category, and the primary reason each category is collected:

We do not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data (other than identity photographs required for KYC), or health data, unless you voluntarily disclose such information in the context of a responsible gaming self-assessment or support enquiry.

How We Collect Your Data

mega88 collects personal data through a variety of channels and mechanisms. These include:

• Direct interactions: Data you provide when you complete the registration form, submit KYC documents, make a deposit or withdrawal request, contact our support team, or respond to a survey or promotion.
• Automated technologies: Data collected automatically when you visit or interact with the mega88 platform, including cookies, web beacons, server logs, and device fingerprinting technologies. This data is collected to maintain platform security and improve user experience.
• Payment processors: Transaction confirmation data received from mobile financial service providers such as bKash, Nagad, Rocket, and Upay when you initiate a deposit or withdrawal.
• Identity verification partners: Data received from third-party KYC service providers when we verify the identity documents you submit during account registration or at any subsequent verification checkpoint.
• Fraud prevention services: Risk signals and behavioural data received from third-party fraud detection partners to help us identify and prevent account abuse, money laundering, and other prohibited activities.
• Publicly available sources: In certain circumstances, and where legally permissible, mega88 may supplement your account data with information obtained from publicly available records to support identity verification or due-diligence obligations.

Legal Basis for Processing

mega88 processes personal data only where a valid legal basis exists. The legal bases on which we rely are set out below, together with the categories of processing activity to which each applies:

• Contractual necessity: Processing required to fulfil our obligations under the account agreement with you, including account registration, payment processing, game delivery, and customer support.
• Legal obligation: Processing required to comply with applicable law, including anti-money laundering (AML) obligations, Know Your Customer (KYC) requirements, age-verification duties, and record-keeping mandates.
• Legitimate interests: Processing carried out in pursuit of mega88's legitimate business interests where those interests are not overridden by your rights and freedoms. This includes fraud detection, platform security, internal analytics, and responsible gaming monitoring.
• Consent: Processing carried out on the basis of your freely given, specific, and informed consent. This applies primarily to the sending of direct marketing communications. You may withdraw your consent at any time by contacting support or updating your account preferences, without this affecting the lawfulness of any processing already carried out.

How We Use Your Data

The personal data we collect is used for the following specific purposes:

• Account management: Creating and maintaining your mega88 account, verifying your identity, managing your balance, and recording your transaction and gaming history.
• Payment processing: Facilitating deposits and withdrawals via your registered payment methods and reconciling transaction records to ensure accuracy.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, account takeover attempts, money laundering, bonus abuse, and other prohibited conduct. This may involve automated profiling and real-time risk scoring.
• Legal and regulatory compliance: Fulfilling mandatory KYC, AML, and age-verification obligations, maintaining records as required by applicable law, and responding to lawful requests from regulatory or law enforcement authorities.
• Responsible gaming: Monitoring your gaming patterns to identify indicators of problem gambling, enforcing self-exclusion requests, and applying deposit or loss limits you have voluntarily set.
• Customer support: Responding to your enquiries, resolving disputes, and maintaining a record of your support interactions to ensure continuity of service.
• Platform improvement: Analysing aggregated usage data to understand how players interact with mega88, identify technical issues, and prioritise improvements to the platform experience.
• Marketing communications: Sending you personalised promotional offers, bonus notifications, and news about mega88 products and events — but only where you have provided your consent and have not subsequently withdrawn it.

mega88 does not use your personal data to make fully automated decisions that produce legal or similarly significant effects on you without human oversight. Where automated profiling is used (for example, in fraud detection), a human review process is available if you believe a decision has been made incorrectly about your account.

Data Sharing & Disclosure

mega88 may share your personal data with the following categories of third parties, strictly on a need-to-know basis and subject to appropriate data-protection safeguards:

• Payment service providers: Mobile financial service operators (bKash, Nagad, Rocket, Upay) and any associated banking partners, to the extent required to process your deposit and withdrawal transactions.
• Identity verification and KYC providers: Specialist third-party services engaged to verify the authenticity of identity documents and cross-reference personal data against relevant databases as part of our legal compliance obligations.
• Fraud prevention and security partners: Third-party risk management and cybersecurity providers who help us detect and prevent fraud, account abuse, and other unlawful activity on the platform.
• Game software providers: Where game providers require access to transaction or account data to support game delivery, resolve game disputes, or fulfil their own legal obligations, we may share the minimum data necessary for those purposes.
• Legal and regulatory authorities: Competent courts, regulatory bodies, law enforcement agencies, and other government authorities, where mega88 is required to disclose data by applicable law or pursuant to a valid legal order. mega88 will notify you of any such disclosure request to the extent permitted by law.
• Professional advisers: Legal counsel, auditors, and accountants engaged to provide professional services to mega88, subject to strict confidentiality obligations.
• Business transfers: In the event that mega88 undergoes a merger, acquisition, or sale of assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified in advance of any such transfer and of any material change to data processing practices that may result.

Cookies & Tracking Technologies

mega88 uses cookies and similar tracking technologies to operate, secure, and improve the platform. A cookie is a small text file stored on your device by your web browser when you visit a website. The following categories of cookies are used on mega88:

• Strictly necessary cookies: Essential for the platform to function. These cookies manage your login session, maintain your account security, and remember your preferences during a single browsing session. They cannot be disabled.
• Performance and analytics cookies: Collect anonymised data about how visitors use mega88, including which pages are visited most frequently and whether error messages are received. This data helps us improve the platform experience.
• Functional cookies: Remember choices you make — such as your language preference or the last game you played — to provide a more personalised experience on return visits.
• Security and fraud-detection cookies: Help us identify suspicious activity and protect your account from unauthorised access by tracking behavioural patterns during your session.

You may manage or restrict non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the availability or functionality of some features on the mega88 platform. mega88 does not use advertising networks or permit third-party advertisers to place tracking cookies on our platform.

Data Retention

mega88 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Active account data: Retained for the full duration of your account relationship with mega88, plus a minimum of five (5) years following account closure, to comply with AML record-keeping obligations.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, in accordance with financial compliance requirements.
• KYC and identity documents: Retained for a minimum of five (5) years from the date of submission, or longer where required by applicable law.
• Customer support records: Retained for a minimum of two (2) years from the date of the last interaction, to support dispute resolution and quality assurance.
• Marketing preference records: Retained until you withdraw consent or close your account, at which point your marketing preferences are updated and any active campaign suppression is applied without delay.
• Technical and log data: Typically retained for a period of twelve (12) months, unless a specific security investigation requires retention for a longer period.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with any identifiable individual.

Data Security

mega88 applies a multi-layered approach to data security, combining technical, organisational, and procedural controls to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Key security measures include:

• TLS/SSL encryption: All data transmitted between your device and the mega88 platform is encrypted using industry-standard Transport Layer Security (TLS) protocols. Look for the padlock icon in your browser address bar when visiting mega88.cam.
• Encryption at rest: Sensitive personal data stored on mega88 servers — including identity documents and financial records — is encrypted at rest using AES-256 encryption.
• Access controls: Access to personal data is restricted on a strict need-to-know basis. Internal staff access is controlled through role-based permissions, multi-factor authentication, and comprehensive audit logging.
• Regular security assessments: mega88 conducts periodic vulnerability assessments and security reviews to identify and remediate potential weaknesses in our infrastructure and application code.
• Incident response: mega88 maintains a documented data breach response plan. In the event of a breach that poses a risk to your rights and freedoms, we will notify you and relevant authorities within the timeframes prescribed by applicable law.

Your Data Rights

As an individual whose personal data is processed by mega88, you hold a number of rights in respect of that data. mega88 is committed to facilitating the exercise of these rights promptly and without undue burden. Your rights are summarised below:

To exercise any of these rights, please submit a written request to [email protected] with the subject line "Data Rights Request". We will acknowledge your request within five (5) business days and aim to fulfil it within thirty (30) calendar days. Complex or multiple requests may require up to sixty (60) days; we will notify you if an extension is necessary.

Please note that certain rights may be limited where mega88 is required to retain or process your data to comply with a legal obligation, to exercise or defend legal claims, or to prevent fraud and protect the security of other players on the platform.

Children's Privacy

The mega88 platform is strictly intended for adults aged 18 years and above. mega88 does not knowingly collect, process, or retain personal data belonging to individuals under the age of 18. Age verification is a mandatory step during the account registration process, and mega88 reserves the right to request additional proof of age at any time.

If mega88 becomes aware that personal data has been collected from a person under the age of 18 without appropriate parental or guardian consent, we will take immediate steps to delete that data and close the associated account. If you are a parent or guardian and believe that your child has registered on mega88 without your knowledge, please contact us immediately at [email protected] so that we can investigate and take the necessary corrective action.

Third-Party Links

The mega88 platform may, from time to time, contain references to game providers, payment partners, or other third-party services. This Privacy Policy applies solely to data collected and processed by mega88 directly. It does not extend to any third-party websites, applications, or services that may be accessible from or referenced on the mega88 platform.

mega88 has no control over the privacy practices of third-party services and accepts no responsibility for the manner in which they collect, use, or protect your personal data. We encourage you to review the privacy policies of any third-party service you interact with independently of mega88.

Changes to This Policy

mega88 reserves the right to revise this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. When material changes are made, we will notify registered players by email to the address on file and by posting a prominent notice on the mega88 platform for a reasonable period prior to the revised policy taking effect.

The "Last updated" date at the top of this page will be revised each time the Privacy Policy is updated. We encourage you to review this page periodically to stay informed about how mega88 protects your personal data. Your continued use of the platform after the effective date of any revision constitutes your acceptance of the updated Privacy Policy.

Contact Us

If you have any questions, concerns, or complaints about this Privacy Policy or about the way mega88 handles your personal data, please contact our data support team using the details below. We are committed to addressing privacy-related enquiries fairly and within a reasonable timeframe.

• Email: [email protected] — use subject line "Privacy Enquiry" for fastest routing
• Live Chat: Available 24/7 through the live chat feature on the mega88 platform
• Support Hours: Bangladesh Standard Time (BST, UTC+6), round-the-clock
• Response Time: We aim to respond to all privacy-related written enquiries within 48 hours on standard business days

When contacting us about a data rights request or privacy concern, please include your registered username and a clear description of the matter so we can locate your account and respond effectively.