Privacy Policy

1. Introduction and Scope

This Privacy Policy applies to all personal information collected by mega56 through our website at https://mega56.cam, any associated mobile applications, customer support channels, and related services. It describes our practices regarding the collection, use, storage, sharing, and protection of your personal data in connection with your use of our online gaming platform.

mega56 operates under international gaming licenses and is committed to adhering to globally recognized data protection principles, including those established by the General Data Protection Regulation (GDPR) framework, even though Indonesia does not yet have comprehensive data protection legislation equivalent to European standards. We believe that strong privacy protections build trust and demonstrate our commitment to treating our Players with respect and transparency.

This Privacy Policy should be read in conjunction with our Terms & Conditions, which govern your use of mega56 services. Where this Privacy Policy conflicts with our Terms & Conditions regarding data protection matters, this Privacy Policy shall take precedence.

2. Data Controller Information

For the purposes of applicable data protection laws, mega56 is the data controller responsible for your personal information. This means we determine the purposes for which and the manner in which your personal data is processed. If you have any questions, concerns, or requests regarding your personal data or this Privacy Policy, please contact our Data Protection Officer using the contact details provided in Section 12 of this document.

3. What Personal Information We Collect

mega56 collects various categories of personal information from you at different stages of your relationship with us. The types of information we collect include:

3.1 Information You Provide Directly

When you register an account, use our services, or communicate with us, you provide us with information including:

• Account Registration Information: Full legal name, date of birth, gender, residential address, email address, mobile phone number, and username/password you create for your account.
• Identity Verification Documents: Copies of government-issued identification (such as Indonesian KTP or passport), proof of address documents (utility bills, bank statements), proof of payment method ownership, and selfie photographs for identity verification purposes as required by Know Your Customer (KYC) regulations.
• Payment Information: Bank account details, e-wallet account information, payment card details (if applicable), transaction history, deposit and withdrawal records, and payment method verification documentation.
• Communications: Any information you provide when you contact our customer support team via live chat, email, WhatsApp, Telegram, or phone, including the content of your messages, complaints, feedback, and survey responses.
• Marketing Preferences: Your preferences regarding receiving promotional communications, newsletters, and marketing materials from mega56.

3.2 Information We Collect Automatically

When you access and use mega56, we automatically collect certain technical and usage information, including:

• Device Information: Device type, operating system, browser type and version, screen resolution, device identifiers (such as IMEI, MAC address, or advertising ID), and device settings.
• Connection Information: IP address, Internet Service Provider (ISP), geographic location (derived from IP address), time zone settings, and connection type (WiFi, mobile data).
• Usage Data: Pages visited, features used, time spent on different pages, click patterns, navigation paths through our website, referring and exit pages, search queries within our platform, and timestamps of your activities.
• Gaming Activity: Bets placed, games played, win/loss records, account balance changes, bonus claims and wagering progress, deposits and withdrawals, and risk management assessments.
• Cookies and Similar Technologies: We use cookies, web beacons, local storage, and similar tracking technologies to collect information about your browsing behavior and preferences. See Section 10 for more details about our use of cookies.

3.3 Information From Third Parties

In some cases, we receive information about you from third-party sources, including:

• Payment Processors: Information from banks, e-wallet providers, and payment gateways regarding transaction verification, fraud screening results, and payment processing status.
• Identity Verification Services: Information from third-party KYC and identity verification service providers used to confirm your identity and prevent fraud.
• Fraud Prevention Services: Information from fraud detection and prevention services that help us identify and prevent fraudulent activity, bonus abuse, and multiple account creation.
• Affiliate Partners: If you accessed mega56 through an affiliate or marketing partner, we may receive referral information and campaign tracking data.

4. How We Use Your Personal Information

mega56 processes your personal data for the following purposes, each supported by a lawful basis under applicable data protection principles:

4.1 To Provide and Operate Our Services

We use your information to create and manage your account, process your deposits and withdrawals, enable you to place bets and play games, settle your bets according to game results, manage your account balance, process bonus claims and track wagering requirements, and provide customer support. The lawful basis for this processing is the performance of our contract with you (our Terms & Conditions).

4.2 To Verify Your Identity and Comply With Legal Obligations

We use your information to verify your identity and age (ensuring you are at least 21 years old), conduct KYC due diligence as required by our gaming licenses and anti-money laundering regulations, prevent and detect fraud, money laundering, and other illegal activities, comply with legal and regulatory requirements including reporting obligations, respond to requests from law enforcement or regulatory authorities, and maintain records as required by law. The lawful basis for this processing is compliance with legal obligations and our legitimate interests in preventing fraud and ensuring platform security.

4.3 To Improve and Optimize Our Services

We use your information to analyze usage patterns and player behavior to improve our website, games, and services, conduct market research and statistical analysis, test new features and functionality, monitor and improve website performance and loading times, and personalize your experience based on your preferences and activity. The lawful basis for this processing is our legitimate interest in improving our services and maintaining a competitive platform.

4.4 For Marketing and Promotional Communications

With your consent, we use your information to send you promotional emails, SMS messages, and push notifications about bonuses, new games, special offers, and promotions, display targeted advertising based on your interests and gaming activity, conduct promotional campaigns and competitions, and send you newsletters and updates about mega56. You can opt out of marketing communications at any time through your account settings or by following unsubscribe links in our emails. The lawful basis for this processing is your consent, which you can withdraw at any time.

4.5 For Security and Risk Management

We use your information to monitor and prevent fraudulent activity and bonus abuse, detect and prevent creation of multiple accounts, assess and manage risk associated with player behavior, protect against cyber attacks and security threats, investigate suspected violations of our Terms & Conditions, and enforce our policies and protect the integrity of our platform. The lawful basis for this processing is our legitimate interest in maintaining platform security and protecting our business and players.

4.6 For Responsible Gaming

We use your information to identify potentially problematic gambling behavior, enforce deposit limits and self-exclusion requests, provide access to responsible gaming tools and support resources, and monitor compliance with responsible gaming policies. The lawful basis for this processing is our legitimate interest in promoting responsible gaming and protecting vulnerable players, as well as compliance with regulatory requirements.

5. How We Share Your Personal Information

mega56 does not sell your personal information to third parties for their own marketing purposes. However, we may share your information with the following categories of recipients for the purposes described in this Privacy Policy:

5.1 Service Providers and Business Partners

We share your information with trusted third-party service providers who perform services on our behalf, including:

• Payment Processors: Banks, e-wallet providers, and payment gateways that process your deposits and withdrawals.
• Identity Verification Providers: Third-party KYC and identity verification services that help us verify your identity and prevent fraud.
• Game Providers: Software providers such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, and others who supply casino games and live dealer tables.
• Cloud Hosting Providers: Companies that provide server infrastructure and data storage services.
• Customer Support Tools: Providers of live chat software, helpdesk systems, and communication platforms.
• Marketing and Analytics Services: Providers of email marketing platforms, analytics tools, and advertising networks (with your consent).
• Security and Fraud Prevention Services: Companies that provide cybersecurity, fraud detection, and risk management services.

All service providers are contractually obligated to protect your personal information and use it only for the specific purposes for which it was shared. They are not permitted to use your data for their own purposes or to disclose it to others without our authorization.

5.2 Legal and Regulatory Authorities

We may disclose your information to law enforcement agencies, regulatory authorities, courts, and other governmental bodies when required by law or when we believe in good faith that such disclosure is necessary to comply with legal obligations, respond to lawful requests for information, protect our rights and property, prevent fraud or illegal activity, protect the safety of our employees and players, or enforce our Terms & Conditions.

5.3 Business Transfers

If mega56 is involved in a merger, acquisition, sale of assets, bankruptcy, or other business transaction, your personal information may be transferred to the acquiring entity or other parties involved in the transaction. We will notify you via email or prominent notice on our website before your information becomes subject to a different privacy policy.

5.4 With Your Consent

We may share your information with other third parties when you have given us explicit consent to do so, such as when you participate in a promotional campaign with a partner brand.

6. International Data Transfers

mega56 operates internationally, and your personal information may be transferred to, stored in, and processed in countries outside of Indonesia, including jurisdictions that may have different data protection laws than those in your country of residence. When we transfer your data internationally, we ensure appropriate safeguards are in place to protect your information, including:

• Transferring data only to countries recognized as providing adequate data protection.
• Using standard contractual clauses approved by relevant data protection authorities.
• Ensuring that our service providers implement appropriate technical and organizational security measures.
• Obtaining your explicit consent for international transfers where required by law.

7. How We Protect Your Personal Information

mega56 takes data security seriously and implements comprehensive technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. Our security measures include:

7.1 Technical Security Measures

• Encryption: All data transmitted between your device and our servers is encrypted using 256-bit SSL/TLS protocols. Sensitive data stored in our databases is encrypted at rest.
• Firewalls and Intrusion Detection: Our servers are protected by advanced firewalls and intrusion detection systems that monitor for suspicious activity and prevent unauthorized access.
• Secure Data Centers: Your data is stored in secure data centers with physical access controls, 24/7 monitoring, and environmental protection systems.
• Regular Security Audits: We conduct regular security assessments and penetration testing to identify and address vulnerabilities.
• DDoS Protection: We employ distributed denial-of-service (DDoS) protection measures to ensure platform availability.

7.2 Organizational Security Measures

• Access Controls: Access to personal data is restricted to authorized employees and service providers who need it to perform their duties. Access is granted on a need-to-know basis and is regularly reviewed.
• Employee Training: All employees who handle personal data receive training on data protection principles and security best practices.
• Confidentiality Agreements: Employees and contractors are bound by confidentiality agreements that prohibit unauthorized disclosure of personal information.
• Incident Response Plan: We maintain an incident response plan to quickly detect, contain, and remediate security breaches.

7.3 Your Responsibility

While we implement strong security measures, you also play a role in protecting your account. You should choose a strong, unique password, never share your login credentials with others, log out of your account when using shared devices, keep your contact information up to date, and report any suspicious activity to our customer support team immediately.

8. Data Retention

mega56 retains your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, comply with our legal obligations, resolve disputes, and enforce our agreements. Specific retention periods vary depending on the type of information and the purpose for which it was collected:

• Account Information: Retained for as long as your account is active, plus a period of time after account closure to comply with legal and regulatory requirements (typically 5-7 years).
• Identity Verification Documents: Retained for as long as required by anti-money laundering regulations and gaming licenses (typically 5-7 years after account closure).
• Transaction Records: Retained for as long as required by financial regulations and tax laws (typically 7-10 years).
• Marketing Data: Retained until you withdraw consent or request deletion, whichever comes first.
• Technical and Usage Data: Typically retained for 2-3 years for analytics and platform improvement purposes, then anonymized or deleted.

When personal information is no longer needed, we securely delete or anonymize it in accordance with our data retention and disposal policies.

9. Your Privacy Rights

Under applicable data protection laws and in accordance with international best practices, you have certain rights regarding your personal information. mega56 respects these rights and provides mechanisms for you to exercise them:

9.1 Right of Access

You have the right to request a copy of the personal information we hold about you. We will provide this information in a commonly used electronic format within 30 days of your request, free of charge for the first request in a 12-month period.

9.2 Right to Rectification

If any personal information we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it. You can update most of your account information directly through your account settings.

9.3 Right to Erasure (Right to be Forgotten)

In certain circumstances, you have the right to request deletion of your personal data. However, this right is not absolute and may be limited by our legal obligations to retain certain information (for example, financial transaction records that must be kept for tax and anti-money laundering purposes).

9.4 Right to Restrict Processing

You have the right to request that we restrict processing of your personal information in certain circumstances, such as when you contest the accuracy of the data or object to our processing.

9.5 Right to Data Portability

Where technically feasible, you have the right to receive your personal information in a structured, commonly used, and machine-readable format and to transmit that data to another controller.

9.6 Right to Object

You have the right to object to processing of your personal data where we rely on legitimate interests as the legal basis, including for direct marketing purposes.

9.7 Right to Withdraw Consent

Where we process your personal data based on your consent (such as for marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before withdrawal.

9.8 How to Exercise Your Rights

To exercise any of these rights, please contact our Data Protection Officer using the contact details in Section 12. We will respond to your request within 30 days and may request additional information to verify your identity before processing your request.

10. Cookies and Tracking Technologies

mega56 uses cookies and similar tracking technologies to enhance your experience, analyze usage patterns, and deliver personalized content. A cookie is a small text file stored on your device that allows us to recognize you when you return to our website.

10.1 Types of Cookies We Use

• Essential Cookies: Necessary for the operation of our website, including authentication, security, and account functionality. These cannot be disabled without affecting core functionality.
• Performance Cookies: Collect anonymous information about how visitors use our website, helping us improve performance and user experience.
• Functionality Cookies: Remember your preferences and settings, such as language selection and display options.
• Marketing Cookies: Track your browsing activity across websites to deliver targeted advertising and measure campaign effectiveness. These require your consent.

10.2 Managing Cookies

You can manage cookie preferences through your browser settings. Most browsers allow you to refuse cookies or delete existing cookies. However, disabling certain cookies may limit your ability to use some features of our website. Note that opting out of marketing cookies does not mean you will stop seeing advertisements—it means the ads you see will not be tailored to your interests.

11. Children's Privacy

mega56 services are strictly intended for individuals aged 21 and older. We do not knowingly collect personal information from anyone under the age of 21. If we become aware that we have inadvertently collected personal information from a minor, we will take immediate steps to delete that information and close the associated account. If you believe a minor has provided personal information to mega56, please contact us immediately at the email address provided in Section 12.

12. Changes to This Privacy Policy

mega56 reserves the right to modify, amend, or update this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes to this Privacy Policy, we will notify you by posting a prominent notice on our website and updating the "Last Updated" date at the top of this page. We may also send you an email notification if the changes significantly affect your rights or how we process your data. Your continued use of mega56 services after any changes to this Privacy Policy constitutes your acceptance of the updated terms. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

13. Contact Us and Data Protection Officer

If you have any questions, concerns, or complaints about this Privacy Policy or our data handling practices, or if you wish to exercise any of your privacy rights, please contact our Data Protection Officer:

• Email: [email protected]
• General Customer Support: [email protected]
• Live Chat: Available 24/7 through our website
• WhatsApp / Telegram: Contact our customer support team for secure messaging channels

We will respond to all privacy-related inquiries within 30 days. If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority or supervisory body (where applicable in your jurisdiction).