Privacy Policy

IMPORTANT NOTICE: This Privacy Policy ("Policy") describes how meg288 ("we", "us", "our", or the "Company") collects, processes, stores, and protects the personal data of individuals ("you", "Player", "User") who access or use the meg288 online gaming platform at https://meg288.cam and all associated services. By registering an Account with meg288 or using our Services, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein. This Policy is incorporated by reference into our Terms & Conditions.

1. Definitions

• "Personal Data" means any information that identifies or could reasonably identify a natural person, including name, email address, phone number, Indonesian national identification number (NIK), bank account details, e-wallet identifiers, IP address, and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, erasure, or destruction.
• "Controller" means meg288, the entity that determines the purposes and means of processing Personal Data.
• "Processor" means any third party that processes Personal Data on behalf of meg288 under a contractual arrangement.
• "Consent" means a freely given, specific, informed, and unambiguous indication of your agreement to the processing of your Personal Data.
• "Services" means all gaming products, betting markets, casino games, payment processing, customer support, and other offerings provided by meg288.

2. Data Controller Information

meg288 is the Data Controller responsible for your Personal Data. If you have any questions about this Policy or wish to exercise your data rights, please contact our Data Protection team:

3. Personal Data We Collect

3.1 Data You Provide Directly

When you register an Account, make a deposit, contact Customer Support, or otherwise interact with meg288, we collect the following categories of Personal Data:

Data Category	Specific Data Points	When Collected
Identity Data	Full legal name, date of birth, gender, Indonesian national ID (KTP/NIK), passport number	Account registration & KYC verification
Contact Data	Email address, mobile phone number, residential address (city, province, postal code)	Account registration
Financial Data	Bank account number and bank name (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata), e-wallet account details (OVO, DANA, GoPay, ShopeePay, LinkAja), transaction history, account balances	Deposits, withdrawals & KYC verification
KYC Documents	Scanned copies or photographs of government-issued ID, utility bills, and bank statements	KYC verification process
Gaming Activity Data	Bet history, game selections, wagering amounts, win/loss records, session durations	Ongoing platform use
Communications Data	Live chat transcripts, email correspondence, Customer Support call records	Any customer service interaction

3.2 Data We Collect Automatically

When you access the meg288 Platform, we automatically collect certain technical data through cookies, web beacons, and log files:

• Device Data: Device type, operating system, browser type and version, screen resolution, and device identifiers
• Network Data: IP address, Internet Service Provider (ISP), approximate geographic location derived from IP address (city and province level)
• Usage Data: Pages visited, links clicked, session duration, navigation path, time and date of access, referring URL
• Cookie Data: Session cookies, preference cookies, analytics cookies — see Section 9 (Cookies) for full details

3.3 Data We Receive from Third Parties

We may receive supplementary data about you from trusted third-party sources, including:

• Payment processors and Indonesian banks for transaction verification and fraud prevention
• Identity verification services used for KYC compliance
• Anti-fraud and anti-money laundering screening services
• Analytics providers to improve Platform performance

4. How We Use Your Personal Data

meg288 processes your Personal Data only where we have a valid legal basis to do so. The following table summarises our processing activities and the corresponding legal basis:

Purpose of Processing	Legal Basis
Creating and managing your Account	Contractual necessity
Processing deposits and withdrawals via Indonesian banks and e-wallets	Contractual necessity
Conducting KYC identity verification to prevent fraud and underage gambling	Legal obligation & legitimate interests
Anti-money laundering (AML) monitoring and reporting	Legal obligation
Delivering personalised game recommendations and promotional offers	Consent / legitimate interests
Sending transactional communications (deposit confirmations, withdrawal notifications)	Contractual necessity
Sending marketing communications (promotions, bonuses, seasonal offers)	Consent
Detecting and preventing fraud, cheating, and Terms violations	Legitimate interests
Responsible gaming monitoring and intervention	Legitimate interests & legal obligation
Improving Platform functionality and user experience	Legitimate interests
Responding to Customer Support enquiries	Contractual necessity

5. Disclosure of Your Personal Data

5.1 Service Providers and Processors

meg288 engages trusted third-party service providers to assist in delivering our Services. These providers process your Personal Data only on our instructions and are bound by strict confidentiality and data protection obligations. Categories of processors include:

• Payment processing partners and Indonesian bank integrations
• Cloud infrastructure and secure data hosting pro viders
• KYC identity verification and AML screening services
• Customer support platforms and live chat software
• Email and SMS communication providers
• Analytics and fraud detection tools
• Game providers and live dealer studios

5.2 Legal and Regulatory Obligations

We may disclose your Personal Data where required or permitted by Indonesian law, including:

• To law enforcement agencies, regulatory authorities, or government bodies in response to valid legal requests, court orders, or subpoenas
• To comply with anti-money laundering, counter-terrorism financing, or financial crime reporting obligations
• To protect the rights, property, or safety of meg288, our Players, or the public
• In connection with legal proceedings, including investigations of Terms violations or suspected fraud

5.3 Business Transfers

In the event of a merger, acquisition, corporate restructuring, or sale of assets, your Personal Data may be transferred to the acquiring entity. We will notify you via email and prominent Platform notice before any such transfer occurs, and the acquiring entity will remain bound by this Privacy Policy.

5.4 No Sale of Personal Data

meg288 does not and will never sell, rent, lease, or otherwise commercially transfer your Personal Data to third-party advertisers, marketing agencies, or data brokers. Your data is used solely to operate our Services and fulfill our legal obligations.

6. Data Retention

meg288 retains your Personal Data only for as long as necessary to fulfill the purposes outlined in this Policy or as required by Indonesian law. Specific retention periods are as follows:

• Account Data: Retained for the duration of your active Account, plus five (5) years following Account closure for legal compliance and dispute resolution purposes
• KYC Documents: Retained for five (5) years following the end of the business relationship, as required by Indonesian AML regulations
• Financial Transaction Records: Retained for seven (7) years as required by Indonesian financial record-keeping laws
• Marketing Communications Data: Retained until you withdraw consent, plus a reasonable period to process opt-out requests
• Customer Support Records: Retained for three (3) years to improve service quality and resolve disputes
• Technical Logs and Analytics Data: Typically retained for twelve (12) months for security monitoring and Platform optimization

After the applicable retention period expires, Personal Data is securely deleted or anonymised so that it can no longer identify you.

7. Data Security Measures

meg288 employs industry-leading technical and organisational security measures to protect your Personal Data against unauthorised access, loss, alteration, or disclosure:

• Encryption: All data transmitted between your device and our servers is encrypted using 256-bit SSL/TLS protocols. Sensitive data at rest (KYC documents, financial records) is encrypted using AES-256 encryption.
• Access Controls: Access to Personal Data is restricted to authorised personnel only, based on role-based access control (RBAC) policies. All access is logged and monitored.
• Secure Infrastructure: Our servers are hosted in secure, ISO 27001-certified data centres with physical access controls, environmental monitoring, and redundancy systems.
• Firewall and Intrusion Detection: Multi-layered firewalls, intrusion detection systems (IDS), and intrusion prevention systems (IPS) protect against malicious attacks.
• Regular Security Audits: Independent third-party security audits and penetration testing are conducted at least annually to identify and remediate vulnerabilities.
• Employee Training: All meg288 staff undergo mandatory data protection and security awareness training.

While we implement robust security measures, no system is entirely immune to security breaches. In the unlikely event of a data breach affecting your Personal Data, we will notify you promptly and take immediate action to mitigate harm.

8. Your Data Rights

Under Indonesian data protection principles and international best practices, you have the following rights regarding your Personal Data:

8.1 Right of Access

You may request a copy of the Personal Data we hold about you. We will provide this information in a structured, commonly used, and machine-readable format (typically PDF or CSV) within 30 days of your request.

8.2 Right to Rectification

If you believe any Personal Data we hold about you is inaccurate or incomplete, you may request correction. You can update certain information directly through your Account settings, or contact Customer Support for assistance.

8.3 Right to Erasure ("Right to be Forgotten")

You may request deletion of your Personal Data where:

• The data is no longer necessary for the purposes for which it was collected
• You withdraw consent (where processing was based on consent)
• You object to processing and there are no overriding legitimate grounds for continued processing
• The data has been unlawfully processed

Please note that we may be legally required to retain certain data (such as KYC documents and transaction records) even after you request deletion, in order to comply with Indonesian AML and financial record-keeping laws.

8.4 Right to Object to Processing

You may object to processing of your Personal Data where:

• Processing is based on legitimate interests, and you believe your rights override our legitimate interests
• Your Personal Data is being used for direct marketing purposes (you can opt out at any time)

8.5 Right to Data Portability

Where technically feasible, you may request that we transfer your Personal Data directly to another service provider in a machine-readable format.

8.6 Right to Withdraw Consent

Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time by clicking the "unsubscribe" link in our emails or contacting Customer Support. Withdrawal of consent does not affect the lawfulness of processing before withdrawal.

8.7 How to Exercise Your Rights

To exercise any of the above rights, please submit a written request to [email protected] with the subject line "Data Rights Request" and include your full name, registered email address, and a description of your request. We will respond within 30 days and may request additional information to verify your identity before processing your request.

9. Cookies and Tracking Technologies

meg288 uses cookies and similar technologies to enhance Platform functionality, personalise your experience, and analyse usage patterns. A cookie is a small text file stored on your device that allows us to recognise you on return visits.

9.1 Types of Cookies We Use

• Essential Cookies: Required for the Platform to function. These include session management, authentication, and security cookies. You cannot opt out of essential cookies without losing access to core Services.
• Performance Cookies: Collect anonymous data about how you use the Platform, allowing us to identify and fix technical issues and improve performance.
• Functionality Cookies: Remember your preferences (language, display settings) to provide a more personalised experience.
• Marketing Cookies: Track your browsing activity to deliver targeted promotional content. These cookies require your consent and can be disabled at any time.

9.2 Managing Cookies

You can manage cookie preferences through your browser settings. Most browsers allow you to refuse cookies or delete existing cookies. However, disabling essential cookies may impair your ability to use certain Platform features. For more information, consult your browser's help documentation.

10. International Data Transfers

meg288 primarily operates within Indonesia. However, some of our third-party service providers (cloud hosting, payment processors, analytics tools) may be located outside Indonesia. When we transfer Personal Data internationally, we ensure adequate safeguards are in place, including:

• Standard contractual clauses approved by data protection authorities
• Binding corporate rules for intra-group transfers
• Ensuring the receiving country provides an adequate level of data protection

By using meg288 Services, you consent to such international transfers where necessary to deliver our Services.

11. Children's Privacy

meg288 Services are strictly for adults aged 21 years and above. We do not knowingly collect Personal Data from individuals under 21. If we discover that we have inadvertently collected data from a minor, we will delete it immediately. If you believe a minor has provided Personal Data to meg288, please contact us at [email protected].

12. Changes to This Privacy Policy

meg288 reserves the right to update this Privacy Policy at any time to reflect changes in our practices, legal requirements, or Service offerings. We will notify you of material changes by:

• Posting a prominent notice on the Platform homepage
• Sending an email notification to your registered email address
• Displaying an in-Platform notification upon your next login

The "Last Updated" date at the top of this Policy indicates when the most recent changes were made. Your continued use of meg288 Services following any changes constitutes acceptance of the updated Policy. We encourage you to review this Policy periodically.

13. Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or our data handling practices, please contact our Data Protection team:

By using meg288 Services, you acknowledge that you have read, understood, and agree to the collection and use of your Personal Data as described in this Privacy Policy.