Privacy Policy

1. Introduction and Scope

mega11 ("we," "us," "our," or the "Platform") is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, store, share, and protect personal data obtained from users ("you," "your," or "Player") of our online gaming platform, including our website, mobile applications, and all associated services.

This Privacy Policy applies to all personal information processed by mega11 in connection with your use of our platform, including but not limited to account registration, gameplay, financial transactions, customer support interactions, and marketing communications. By creating an account or using any mega11 service, you acknowledge that you have read, understood, and agree to the data practices described in this Privacy Policy.

We recognize the importance of privacy in the online gaming industry, particularly given the sensitive nature of financial and personal information involved in betting and gaming activities. mega11 adheres to international data protection standards and implements industry-leading security measures to safeguard your information against unauthorized access, disclosure, alteration, or destruction.

2. Data Controller Information

mega11 acts as the data controller for all personal information processed through our platform. As the data controller, we determine the purposes and means of processing your personal data and are responsible for ensuring compliance with applicable data protection laws.

For all privacy-related inquiries, data subject requests, or concerns about how your information is handled, please contact our dedicated Privacy Team at:

• Email: [email protected]
• Support Email: [email protected] (subject line: "Privacy Inquiry")
• Response Time: We aim to respond to all privacy inquiries within 72 hours

3. Information We Collect

mega11 collects several categories of personal information necessary to provide gaming services, process transactions, ensure platform security, and comply with regulatory requirements. The types of information we collect include:

Personal Identification Information

During account registration and KYC (Know Your Customer) verification, we collect:

• Full legal name as it appears on government-issued identification documents
• Date of birth to verify you meet the minimum age requirement (21+ years)
• Residential address including street address, city, province, postal code, and country
• Email address for account communications and verification
• Mobile phone number for account security and two-factor authentication
• Government-issued identification documents such as Indonesian KTP (ID card), passport, or driver's license
• Selfie photographs for identity verification purposes

Financial and Payment Information

To process deposits and withdrawals, we collect:

• Bank account information including bank name, account holder name, account number for Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon)
• E-wallet account details for OVO, DANA, GoPay, ShopeePay, LinkAja transactions
• Transaction history including deposit amounts, withdrawal requests, timestamps, and payment method used
• Cryptocurrency wallet addresses where applicable

Important: mega11 does not store complete credit card numbers or CVV codes on our servers. Payment processing is handled securely through encrypted third-party payment gateways that comply with international payment security standards.

Account and Gaming Activity Data

To provide personalized gaming experiences and maintain platform integrity, we collect:

• Betting history including all bets placed, stakes, odds, outcomes, and winnings across sports betting, casino games, and other products
• Game preferences and favorite games for personalization
• Bonus and promotion participation including claimed bonuses and wagering progress
• Account balance and transaction ledger
• Login history including dates, times, and IP addresses
• Session duration and gameplay patterns

Technical and Device Information

When you access mega11, we automatically collect certain technical data:

• IP address and approximate geographic location
• Device information including device type, operating system, browser type and version, screen resolution
• Cookies and similar tracking technologies (see Section 10 for details)
• Referral source (how you found mega11)
• Pages visited and navigation patterns within the platform

Communications and Support Data

• Customer support interactions including live chat transcripts, email correspondence, and phone call recordings
• Survey responses and feedback you choose to provide
• Marketing communication preferences

4. How We Use Your Information

mega11 processes your personal information for the following specific purposes:

Account Management and Service Delivery

• Creating and maintaining your player account
• Processing deposits, withdrawals, and other financial transactions
• Providing access to games, sports betting markets, and platform features
• Recording and settling bets, calculating winnings, and updating account balances
• Administering bonuses, promotions, and loyalty rewards
• Communicating important account information, transaction confirmations, and service updates

Verification and Compliance

• Verifying your identity and age to prevent underage gambling
• Conducting KYC (Know Your Customer) checks as required by anti-money laundering regulations
• Detecting and preventing fraud, cheating, collusion, and other prohibited activities
• Complying with legal obligations including tax reporting and regulatory requirements
• Investigating disputes, chargebacks, and suspected Terms violations

Platform Security and Integrity

• Monitoring for unusual betting patterns, bonus abuse, and fraudulent activity
• Protecting against unauthorized access, hacking attempts, and cyberattacks
• Maintaining platform stability and preventing technical abuse
• Ensuring fair play and game integrity across all products

Responsible Gaming and Player Protection

• Identifying potential problem gambling behaviors through activity pattern analysis
• Implementing and enforcing deposit limits, loss limits, and self-exclusion requests
• Providing resources and support for responsible gaming
• Preventing access by self-excluded players or those who have requested account closure

Marketing and Personalization

• Sending promotional offers, bonus opportunities, and platform updates (with your consent)
• Personalizing game recommendations based on your preferences and playing history
• Conducting market research and analyzing player behavior to improve services
• Creating aggregated, anonymized statistics for business analytics

Customer Support

• Responding to your inquiries, complaints, and support requests
• Troubleshooting technical issues and resolving disputes
• Improving support quality through conversation analysis and staff training

5. Legal Basis for Processing

mega11 processes your personal data based on the following legal grounds recognized under international data protection law:

Legal Basis	Processing Activities
Contractual Necessity	Processing required to fulfill our service agreement with you, including account management, transaction processing, game provision, and customer support
Legal Obligation	Processing required to comply with applicable laws, regulations, court orders, or regulatory requirements such as KYC verification, age verification, anti-money laundering checks, and tax reporting
Legitimate Interest	Processing necessary for our legitimate business interests such as fraud prevention, platform security, responsible gaming monitoring, business analytics, and improving services, provided these interests do not override your privacy rights
Consent	Processing based on your explicit consent, such as marketing communications, optional data collection for service improvement, and cookies/tracking beyond essential functionality

You have the right to withdraw consent at any time for processing activities based solely on consent, without affecting the lawfulness of processing conducted prior to withdrawal.

6. Data Sharing and Disclosure

mega11 does not sell your personal information to third parties. However, we may share your data with trusted partners and service providers in the following circumstances:

Payment Processors and Financial Institutions

We share necessary transaction information with payment gateway providers, banks, and e-wallet services to process your deposits and withdrawals. These partners are bound by strict confidentiality obligations and process data only as instructed by mega11.

Game Providers and Platform Partners

When you play games from third-party providers (e.g., Pragmatic Play, Evolution Gaming, NetEnt), we share limited information such as username and bet details necessary to deliver the gaming experience. Game providers operate under their own privacy policies and data protection standards.

Identity Verification Services

We may use specialized KYC verification services to authenticate your identity documents and prevent fraud. These services access only the information necessary for verification purposes.

Customer Support Tools

We use third-party customer support software (live chat, ticketing systems) to manage player inquiries. Support tool providers have access to conversation history but are prohibited from using data for any purpose other than providing the service.

Analytics and Business Intelligence

We share anonymized, aggregated data with analytics providers to understand player behavior, improve our platform, and optimize marketing strategies. This data cannot be used to identify individual players.

Legal and Regulatory Authorities

We will disclose personal information to law enforcement, regulatory bodies, courts, or government agencies when:

• Required by law, regulation, legal process, or enforceable government request
• Necessary to detect, prevent, or address fraud, security issues, or technical problems
• Required to protect the rights, property, or safety of mega11, our users, or the public
• Necessary to enforce our Terms and Conditions or investigate violations

Business Transfers

In the event of a merger, acquisition, bankruptcy, or sale of assets, your personal information may be transferred to the acquiring entity. We will notify you via email and/or prominent notice on our platform before any such transfer occurs and before your data becomes subject to a different privacy policy.

7. Data Security Measures

mega11 implements comprehensive technical, administrative, and physical security measures to protect your personal information from unauthorized access, disclosure, alteration, and destruction:

Technical Security Controls

• 256-bit SSL/TLS Encryption: All data transmitted between your device and mega11 servers is encrypted using industry-standard SSL/TLS protocols
• Encrypted Data Storage: Sensitive personal information is encrypted at rest using AES-256 encryption
• Secure Password Storage: Passwords are hashed using bcrypt with salt, making them unreadable even to mega11 staff
• Two-Factor Authentication (2FA): Available to all players for enhanced account security
• Firewall Protection: Advanced firewalls protect our servers from unauthorized access attempts
• Intrusion Detection Systems: 24/7 monitoring for suspicious activity and potential security breaches
• Regular Security Audits: Third-party penetration testing and vulnerability assessments conducted quarterly

Administrative Security Measures

• Access Controls: Personal data is accessible only to authorized mega11 staff who require it for their job functions
• Employee Training: All staff receive regular data protection and security awareness training
• Confidentiality Agreements: Employees and contractors sign strict confidentiality agreements
• Background Checks: Comprehensive screening for all personnel with data access

Physical Security Measures

• Servers hosted in secure, certified data centers with 24/7 physical security
• Access to data centers restricted to authorized personnel only
• Biometric access controls and surveillance systems
• Redundant power supplies and backup systems to prevent data loss

Incident Response

In the unlikely event of a data breach that poses a risk to your rights and freedoms, mega11 will:

• Notify affected users within 72 hours of becoming aware of the breach
• Report the breach to relevant data protection authorities as required by law
• Provide clear information about what data was compromised and what steps we are taking
• Offer guidance on protective measures you can take

8. Data Retention Periods

mega11 retains your personal information only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods include:

Data Category	Retention Period	Rationale
Account Information	Duration of account + 7 years after closure	Legal and regulatory compliance (KYC, AML, tax reporting)
Financial Transaction Records	7 years from transaction date	Financial regulations, tax requirements, dispute resolution
Betting and Gaming History	7 years from bet placement	Regulatory compliance, dispute resolution, responsible gaming monitoring
Customer Support Communications	3 years from last interaction	Quality assurance, dispute resolution, service improvement
Marketing Consent and Preferences	Until consent withdrawn + 1 year	Compliance with marketing regulations, preference management
Technical Logs (IP addresses, device info)	12 months from creation	Security monitoring, fraud prevention, platform optimization
Self-Exclusion Records	Permanent (or as specified in exclusion period)	Player protection, regulatory compliance, preventing circumvention

After the applicable retention period expires, personal data will be securely deleted or anonymized so that it can no longer identify you. However, we may retain aggregated, anonymized data indefinitely for statistical and analytical purposes.

9. Your Privacy Rights

Under applicable data protection laws, you have the following rights regarding your personal information:

Right of Access

You have the right to request a copy of the personal data we hold about you. We will provide this information in a structured, commonly used, and machine-readable format within 30 days of your request.

Right to Rectification

If you believe any personal information we hold about you is inaccurate or incomplete, you have the right to request correction. You can update most information directly through your account settings, or contact our support team for assistance.

Right to Erasure ("Right to be Forgotten")

You may request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected, or when you withdraw consent. However, we may be legally required to retain certain information (e.g., for regulatory compliance, dispute resolution, or preventing fraud).

Right to Restrict Processing

You have the right to request that we limit how we use your personal data in certain situations, such as when you contest the accuracy of the data or object to our processing.

Right to Data Portability

You have the right to receive your personal data in a portable format and transmit it to another service provider, where technically feasible.

Right to Object

You may object to processing of your personal data when we rely on legitimate interests as the legal basis. You have an absolute right to object to processing for direct marketing purposes at any time.

Right to Withdraw Consent

Where we process your data based on consent (e.g., marketing communications), you can withdraw that consent at any time. This will not affect the lawfulness of processing conducted before withdrawal.

Right to Lodge a Complaint

If you believe mega11 has not handled your personal data appropriately, you have the right to lodge a complaint with your local data protection authority.

How to Exercise Your Rights

To exercise any of these rights, please contact our Privacy Team at [email protected] with the following information:

• Your full name and mega11 username
• Email address associated with your account
• Specific right you wish to exercise
• Any relevant details or documentation supporting your request

We will respond to your request within 30 days. In some cases, we may request additional information to verify your identity before processing your request.

10. Cookies and Tracking Technologies

mega11 uses cookies and similar tracking technologies to enhance your experience, maintain platform security, and analyze usage patterns. This section explains what cookies we use and how you can control them.

What Are Cookies?

Cookies are small text files stored on your device when you visit our website. They help us recognize your device on subsequent visits and remember your preferences.

Types of Cookies We Use

Cookie Type	Purpose	Duration
Essential Cookies	Required for platform functionality including login, account security, and transaction processing. These cannot be disabled without breaking core features.	Session or up to 1 year
Functional Cookies	Remember your preferences such as language, currency, and game favorites for a personalized experience.	Up to 2 years
Analytics Cookies	Help us understand how visitors interact with mega11, which pages are most popular, and how to improve user experience.	Up to 2 years
Marketing Cookies	Track your activity across websites to deliver relevant advertisements and measure campaign effectiveness.	Up to 13 months

Managing Cookie Preferences

You can control cookie settings through:

• Browser Settings: Most browsers allow you to refuse or delete cookies through their settings. Note that disabling essential cookies may impair platform functionality.
• Cookie Consent Tool: When you first visit mega11, we present a cookie consent banner allowing you to accept or customize cookie preferences.
• Opt-Out Links: For third-party marketing cookies, you can opt out through industry opt-out tools.

11. International Data Transfers

mega11 operates internationally and may transfer your personal data to countries outside your country of residence, including countries that may not provide the same level of data protection as your home jurisdiction. When we transfer data internationally, we implement appropriate safeguards including:

• Standard Contractual Clauses approved by relevant data protection authorities
• Ensuring recipient countries provide adequate data protection as recognized by applicable regulations
• Obtaining your explicit consent where required by law

Regardless of where your data is processed, we apply the same high standards of data protection described in this Privacy Policy.

12. Children's Privacy

mega11 services are strictly intended for individuals aged 21 years and older. We do not knowingly collect personal information from anyone under the age of 21. If we discover that we have inadvertently collected data from someone under 21, we will immediately delete that information and close the associated account.

If you believe that someone under 21 has created a mega11 account or provided personal information to us, please contact us immediately at [email protected] so we can take appropriate action.

13. Changes to This Policy

mega11 may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes, we will:

• Update the "Last Updated" date at the top of this policy
• Notify you via email to the address associated with your account
• Display a prominent notice on our platform
• In some cases, request your renewed consent where required by law

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of mega11 after changes are posted constitutes acceptance of the updated policy.

14. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact mega11 through the following channels:

• Privacy Team Email: [email protected]
• General Support Email: [email protected] (subject: "Privacy Inquiry")
• Live Chat: Available 24/7 through the mega11 website for immediate assistance
• Response Timeframe: We aim to respond to all privacy inquiries within 72 hours

For data subject rights requests (access, deletion, correction, etc.), please include your full name, mega11 username, and a detailed description of your request to expedite processing.