Privacy Policy

1. Introduction

mega55 ("we", "us", "our", "the Company") is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, store, share, and safeguard the personal data you provide when using our website, mobile application, and gaming services (collectively, "the Service"). By creating an account or using mega55, you acknowledge that you have read, understood, and consent to the data practices described in this Privacy Policy.

This Privacy Policy applies to all users of mega55, including visitors who browse the website without registering, registered account holders, and individuals who contact our customer support team. We are dedicated to maintaining transparency about our data handling practices and complying with applicable data protection regulations. If you do not agree with the terms of this Privacy Policy, you must discontinue use of the Service immediately.

2. Information We Collect

mega55 collects several categories of personal information to provide, maintain, and improve our Service, comply with legal obligations, and ensure the security of our platform and users.

2.1 Information You Provide Directly

When you register for a mega55 account, we collect the following personal information:

• Identity Information: Full legal name, date of birth, gender, nationality, and government-issued identification documents (Indonesian KTP, passport, or driver's license) required for Know Your Customer (KYC) verification.
• Contact Information: Email address, mobile phone number, residential address (including street, city, province, and postal code), and preferred language.
• Financial Information: Bank account details (bank name, account number, account holder name), e-wallet account information (OVO, DANA, GoPay), payment card details (if applicable), and transaction history including deposits, withdrawals, wagers, and winnings.
• Account Credentials: Username, password (stored in encrypted form), and security questions/answers for account recovery purposes.
• Communications: Content of messages sent to customer support via live chat, email, or other communication channels, including any documents or images you provide during support interactions.

2.2 Information Collected Automatically

When you access or use mega55, we automatically collect certain technical and usage information:

• Device Information: Device type (desktop, mobile, tablet), operating system (Android, iOS, Windows, macOS), browser type and version, screen resolution, device identifiers, and mobile network information.
• Usage Data: Pages viewed, features accessed, games played, bet amounts, session duration, login/logout times, referral source (how you found mega55), and navigation patterns within the platform.
• Location Data: IP address (used to determine approximate geographic location), time zone, and country/region. We collect location data to comply with geographic restrictions on online gambling services.
• Cookies and Tracking Technologies: We use cookies, web beacons, pixels, and similar technologies to recognize your device, remember your preferences, analyze site traffic, and improve user experience. See Section 8 (Cookies) for detailed information.

2.3 Information From Third Parties

mega55 may receive personal information about you from third-party sources including:

• Payment Processors: Transaction data from banks (BCA, BRI, BNI, Mandiri) and e-wallet providers (OVO, DANA, GoPay) to verify deposits and process withdrawals.
• Game Providers: Gaming session data from third-party studios (Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe) whose games are offered on mega55, including game outcomes, RTP statistics, and jackpot wins.
• Identity Verification Services: Information from third-party KYC and anti-fraud services used to verify your identity, age, and residential address against government databases and watchlists.
• Marketing Partners: If you access mega55 through an affiliate or promotional link, we may receive limited referral information (but never your personal contact details) from the referring party.

3. How We Use Your Information

mega55 uses the personal information we collect for the following lawful purposes:

3.1 Service Provision and Account Management

• Create, maintain, and secure your mega55 account
• Process deposits, withdrawals, and other financial transactions
• Enable gameplay and betting functionality across all gaming categories (live casino, slots, sports betting, togel, sabung ayam)
• Calculate and credit winnings, bonuses, and loyalty rewards
• Provide customer support and respond to your inquiries
• Send account-related notifications including transaction confirmations, security alerts, and important service updates

3.2 Legal Compliance and Verification

• Verify your identity, age (21+ requirement), and residential address through KYC procedures
• Comply with anti-money laundering (AML), counter-terrorism financing (CTF), and other regulatory obligations
• Prevent underage gambling, fraud, money laundering, and other illegal activities
• Respond to legal process, government requests, court orders, and law enforcement inquiries
• Maintain records as required by applicable gaming licenses and financial regulations

3.3 Platform Security and Fraud Prevention

• Monitor for suspicious activity, unauthorized access attempts, and potential security threats
• Detect and prevent fraud, collusion between players, bonus abuse, and terms of service violations
• Enforce our Terms and Conditions, including account restrictions and terminations
• Conduct internal audits and risk assessments
• Implement responsible gaming measures including self-exclusion, deposit limits, and problem gambling detection

3.4 Service Improvement and Analytics

• Analyze usage patterns and user behavior to improve platform functionality, game selection, and user interface design
• Conduct market research and player satisfaction surveys
• Develop new features, products, and services tailored to Indonesian player preferences
• Optimize website performance, loading times, and mobile compatibility
• Generate aggregated, anonymized statistics for business intelligence (these statistics contain no personally identifiable information)

3.5 Marketing and Promotions (With Your Consent)

• Send promotional emails, SMS messages, and push notifications about bonuses, tournaments, and special offers (you may opt out at any time)
• Personalize marketing content based on your gaming preferences and activity
• Administer contests, tournaments, and prize draws
• Display targeted advertisements on mega55 and partner websites (we do not share your personal data with advertisers; targeting is based on anonymized behavioral segments)

4. Legal Basis for Processing (GDPR and Data Protection Laws)

Where applicable under Indonesian and international data protection laws, mega55 processes your personal information based on the following legal grounds:

• Contractual Necessity: Processing is necessary to perform our contract with you (providing gaming services, processing transactions, paying out winnings).
• Legal Obligation: Processing is required to comply with legal obligations including KYC verification, AML compliance, age verification, and regulatory reporting.
• Legitimate Interests: Processing is necessary for our legitimate business interests including fraud prevention, security monitoring, service improvement, and marketing (balanced against your privacy rights).
• Consent: For certain activities such as marketing communications and non-essential cookies, we obtain your explicit consent which you may withdraw at any time.

5. How We Share Your Information

mega55 does not sell your personal information to third parties. We share personal data only in the following limited circumstances:

5.1 Service Providers and Business Partners

We share personal information with trusted third-party service providers who perform functions on our behalf under strict confidentiality agreements:

• Payment Processors: Banks, e-wallet providers, and payment gateways that facilitate deposits and withdrawals (they receive only the information necessary to process transactions).
• Game Providers: Software studios whose games are offered on mega55 receive limited session data (username, bet amounts, game outcomes) to deliver gameplay functionality.
• KYC and Verification Services: Identity verification platforms that confirm your age, identity, and address against official databases.
• Cloud Hosting Providers: Secure server infrastructure providers that store our databases and backups with enterprise-grade encryption.
• Customer Support Tools: Live chat, email, and ticketing platforms that enable our support team to assist you efficiently.
• Analytics Providers: Web analytics services that help us understand how users interact with mega55 (data is typically anonymized or pseudonymized).

5.2 Legal and Regulatory Disclosures

We may disclose personal information when required by law or when we believe disclosure is necessary to:

• Comply with legal process, court orders, subpoenas, or government requests
• Respond to regulatory inquiries from gaming authorities or financial regulators
• Enforce our Terms and Conditions or other policies
• Protect the rights, property, or safety of mega55, our users, or the public
• Detect, prevent, or investigate fraud, security breaches, or illegal activity

5.3 Business Transfers

In the event mega55 undergoes a business transition such as merger, acquisition, asset sale, or bankruptcy, your personal information may be transferred to the successor entity. We will notify you via email and/or prominent notice on our website before any such transfer occurs, and the new entity will be bound by this Privacy Policy.

5.4 With Your Consent

We may share personal information with additional third parties when you provide explicit consent for such sharing, such as participating in a joint promotion with a partner brand.

6. Data Retention

mega55 retains your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. Specific retention periods include:

• Active Accounts: Personal data is retained for the duration of your active account plus any required legal retention period.
• Closed Accounts: After voluntary account closure, we retain transaction records, KYC documents, and certain account data for a minimum of 5 years to comply with financial regulations and anti-money laundering laws.
• Transaction Records: Deposit, withdrawal, wager, and payout records are retained for at least 7 years as required by financial regulators.
• Marketing Data: If you opt out of marketing communications, we retain only your email address and opt-out preference to honor your request.
• Inactive Accounts: Accounts with no login activity for 24 consecutive months are considered dormant. We may delete or anonymize data from dormant accounts after providing reasonable notice.

When personal data is no longer needed, we securely delete or anonymize it using industry-standard data destruction methods.

7. Data Security

mega55 implements comprehensive technical and organizational security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction:

• Encryption: All data transmitted between your device and mega55 servers is encrypted using 256-bit SSL/TLS encryption (the same standard used by banks).
• Secure Servers: Personal data is stored on secure servers located in jurisdictions with strong data protection laws, protected by firewalls, intrusion detection systems, and 24/7 monitoring.
• Access Controls: Access to personal data is restricted to authorized personnel on a need-to-know basis, subject to confidentiality agreements and regular security training.
• Password Security: Passwords are hashed using strong cryptographic algorithms (bcrypt or similar) and never stored in plain text.
• Two-Factor Authentication: We offer optional 2FA for account login to add an extra layer of security.
• Regular Audits: We conduct periodic security audits, vulnerability assessments, and penetration testing to identify and remediate potential weaknesses.
• Incident Response: We maintain a documented incident response plan to quickly detect, contain, and remediate security breaches.

While we employ industry-leading security measures, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we continuously work to protect your personal information to the best of our ability.

8. Cookies and Tracking Technologies

mega55 uses cookies and similar tracking technologies to enhance user experience, analyze site traffic, and deliver personalized content. Cookies are small text files stored on your device that allow us to recognize you on subsequent visits.

8.1 Types of Cookies We Use

• Essential Cookies: Necessary for the website to function properly (login authentication, session management, security). These cannot be disabled.
• Performance Cookies: Collect anonymized data about how users interact with mega55, helping us identify errors and optimize performance.
• Functional Cookies: Remember your preferences such as language, time zone, and display settings to provide a personalized experience.
• Marketing Cookies: Track your activity across mega55 to deliver relevant advertisements and measure campaign effectiveness (used only with your consent).

You can control cookie settings through your browser preferences. Disabling non-essential cookies may limit certain features of the Service.

9. Your Privacy Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Right to Access: Request a copy of the personal data we hold about you, including account information, transaction history, and communications.
• Right to Rectification: Request correction of inaccurate or incomplete personal data.
• Right to Erasure: Request deletion of your personal data, subject to legal retention obligations (e.g., financial records must be retained for 5-7 years).
• Right to Restrict Processing: Request that we limit how we use your personal data in certain circumstances.
• Right to Data Portability: Receive your personal data in a structured, commonly used, machine-readable format to transfer to another service.
• Right to Object: Object to processing of your personal data for marketing purposes or when based on legitimate interests.
• Right to Withdraw Consent: Withdraw consent for data processing activities that require consent (e.g., marketing emails).

To exercise any of these rights, contact our Data Protection Officer at [email protected]. We will respond to your request within 30 days. Please note that certain requests may be declined if they conflict with legal obligations or legitimate business interests.

10. Children's Privacy

mega55 services are intended exclusively for individuals aged 21 years and older. We do not knowingly collect personal information from anyone under 21. If we discover that we have inadvertently collected data from a minor, we will immediately delete such information and terminate the associated account. Parents or guardians who believe their child has provided personal information to mega55 should contact us immediately at [email protected].

11. International Data Transfers

Your personal information may be transferred to and processed in countries outside Indonesia, including jurisdictions that may have different data protection standards. When we transfer data internationally, we ensure adequate safeguards are in place such as standard contractual clauses, data processing agreements, and ensuring recipient countries provide adequate levels of protection as determined by relevant data protection authorities.

12. Changes to This Privacy Policy

mega55 reserves the right to update this Privacy Policy at any time to reflect changes in our practices, legal requirements, or technological capabilities. We will notify you of material changes by posting the updated policy on this page with a new "Last Updated" date and, where appropriate, sending email notifications to registered users. Your continued use of mega55 following such changes constitutes acceptance of the revised Privacy Policy. We encourage you to review this page periodically to stay informed about how we protect your personal information.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or how mega55 handles your personal information, please contact us:

• Email: [email protected]
• Subject Line: "Privacy Inquiry" or "Data Protection Request"
• Response Time: We aim to respond to all privacy inquiries within 48 hours

For data protection matters requiring escalation, you may contact our Data Protection Officer directly at the above email address with "ATTN: DPO" in the subject line.