Megapari Privacy Policy

This Privacy Policy ("Policy") describes how Megapari ("Company", "we", "us", "our") collects, uses, stores, shares, and protects the personal data of individuals ("you", "User "Member", "Data Subject") who access or use the Megapari online casino and sports betting platform at https://megapari.casa ("the Platform").

Megapari operates as an international online gaming platform and is committed to handling all personal data responsibly, transparently, and in accordance with applicable data protection legislation. This Policy applies to all data processing activities conducted by Megapari in connection with the operation of the Platform, including account registration, identity verification, payment processing, and customer support interactions.

By registering an account, making a deposit, or otherwise using the Megapari Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree with any aspect of this Policy, please discontinue your use of the Platform and contact support to close your account.

For the purposes of this Privacy Policy, the following terms have the meanings set out below:

• "Personal Data" — any information that relates to an identified or identifiable natural person, directly or indirectly, including name, identification number, location data, IP address, or online identifier.
• "Processing" — any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, transmission, erasure, or destruction.
• "Data Controller" — the entity that determines the purposes and means of processing Personal Data. For the purposes of this Policy, the Data Controller is Megapari.
• "Data Processor" — a third party that processes Personal Data on behalf of Megapari pursuant to a data processing agreement, such as a payment gateway operator or cloud infrastructure provider.
• "KYC Data" — identity verification documentation submitted by a User during the Know Your Customer process, including government-issued identification, proof of address, and payment method evidence.
• "Cookie" — a small text file placed on your device by the Platform for session management, analytics, fraud detection, or preference storage purposes.
• "Data Subject Request" — a formal request submitted by a User to exercise one of their rights under applicable data protection law, including access, rectification, erasure, portability, or restriction of processing.

Megapari collects several categories of personal data from Members and Platform visitors. The specific data collected depends on the nature of your interaction with the Platform.

Megapari does not intentionally collect sensitive personal data beyond what is necessary for KYC and regulatory compliance purposes. We do not collect racial or ethnic origin data, religious beliefs, political opinions, or health data unless required by applicable regulatory obligation.

Megapari collects personal data through the following channels:

4.1 Directly from You

The majority of personal data held by Megapari is provided directly by Members during the account registration process, KYC submission, deposit and withdrawal workflows, and communication with the support team. You are responsible for the accuracy of data you provide, and you are under a continuing obligation to update your account information if any details change.

4.2 Automatically via Technical Systems

When you access the Platform — whether via desktop browser, mobile browser, or any application interface — Megapari's systems automatically collect technical and usage data, including your IP address, device identifiers, session timestamps, and interaction patterns. This data is collected through server logs, cookies, and similar technologies as described in Section 10 of this Policy.

4.3 From Third-Party Payment Processors

When you make a deposit or withdrawal using Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, or other supported Malaysian payment instruments, the relevant payment gateway provider transmits confirmation and reference data to Megapari. Megapari receives only the data necessary to reconcile the transaction. Full payment credentials are not transmitted to or stored by Megapari.

4.4 From Identity Verification Providers

Megapari may engage third-party identity verification services to assist with KYC processing. These providers cross-reference submitted identity documents against official databases. Results are shared with Megapari for account approval purposes only.

Megapari processes your personal data for the following specific and documented purposes:

1. Account Management: To create, maintain, and administer your Megapari Member Account, including authentication, account settings, and correspondence.
2. Identity Verification and KYC Compliance: To verify your identity, confirm your age (minimum 21 years), validate your residential address, and confirm ownership of your payment method in accordance with our regulatory obligations.
3. Payment Processing: To process deposits and withdrawals via your selected payment method (Touch 'n Go eWallet, DuitNow, FPX, Boost, GrabPay, or bank transfer), reconcile transactions, and maintain financial records.
4. Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, multi-accounting, and other prohibited conduct as defined in the Terms and Conditions.
5. Customer Support: To respond to enquiries, resolve disputes, and maintain records of support interactions for quality assurance purposes.
6. Legal and Regulatory Compliance: To fulfil obligations under applicable gaming, financial crime, and data protection legislation including record retention requirements and cooperation with regulatory or law enforcement authorities.
7. Platform Improvement and Analytics: To analyse usage patterns, identify technical issues, improve platform performance, and personalise your experience (within the limits of your consent preferences).
8. Responsible Gambling: To monitor play patterns, apply player-defined deposit and session limits, identify potential problem gambling indicators, and enforce self-exclusion requests.

Megapari processes personal data on the following legal bases, depending on the nature of the processing activity:

• Contractual Necessity: Processing required to perform the Member Agreement, including account creation, transaction processing, and customer support.
• Legal Obligation: Processing required to comply with applicable laws, including KYC obligations, anti-money laundering requirements, and data retention mandates.
• Legitimate Interests: Processing conducted in pursuit of Megapari's legitimate business interests, including fraud prevention, security monitoring, platform analytics, and responsible gambling oversight, where these interests are not overridden by your data protection rights.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent, particularly for optional marketing communications and non-essential cookies. Consent may be withdrawn at any time without penalty.

Megapari does not sell, rent, or otherwise commercialise your personal data to third parties. Personal data may be shared in the following circumstances only:

7.1 Authorised Data Processors

Megapari engages a limited number of third-party service providers who process personal data on our behalf, under binding data processing agreements that restrict their use of the data to the specific purpose for which it was shared. These include: payment gateway operators (processing your MYR transactions via Touch 'n Go eWallet, DuitNow, FPX, and other Malaysian payment rails), KYC and identity verification providers, cloud infrastructure and hosting providers, live chat and customer support software providers, and anti-fraud and security platform vendors.

7.2 Legal and Regulatory Authorities

Megapari may disclose personal data to governmental authorities, regulatory bodies, law enforcement agencies, or courts where such disclosure is required by applicable law, a valid court order, or a regulatory instruction. Megapari will provide only the minimum data necessary to fulfil such obligations and will, where legally permissible, notify the affected Member of any such disclosure.

7.3 Corporate Transactions

In the event of a merger, acquisition, restructuring, or sale of all or substantially all of Megapari's assets, personal data held by Megapari may be transferred to the successor entity, subject to that entity adopting equivalent data protection standards. Affected Members will be notified of any such transfer prior to its completion.

Megapari operates as an international platform and may transfer personal data to, and process data in, jurisdictions outside Malaysia. Where personal data is transferred internationally, Megapari ensures that appropriate safeguards are in place to protect the data, including:

• Data processing agreements incorporating internationally recognised standard contractual clauses;
• Transfers only to jurisdictions that provide an adequate level of data protection as recognised by applicable law; and
• Technical and organisational security measures comensurate with the sensitivity of the data transferred.

By using the Megapari Platform, you acknowledge and consent to the transfer of your personal data to countries outside Malaysia where such transfers are necessary to deliver the services described in this Policy.

Megapari retains personal data for no longer than is necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by applicable law. The following indicative retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with Megapari's data lifecycle management procedures. Anonymised or aggregated data that cannot be used to identify any individual may be retained indefinitely for statistical and platform improvement purposes.

The Megapari Platform uses cookies and similar browser-based technologies to enable core platform functionality, maintain your authenticated session, detect security anomalies, and collect anonymised analytics data. Megapari uses the following categories of cookies:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies and security tokens. These cookies cannot be disabled without impairing your ability to use the Platform. No consent is required for strictly necessary cookies.
• Functional Cookies: Used to remember your Platform preferences, such as language settings, display preferences, and responsible gambling tool configurations. These are activated by default but can be disabled in your Account settings.
• Analytics Cookies: Used to collect anonymised information about how Members navigate the Platform, which features are most used, and where technical errors occur. This data is aggregated and cannot be used to identify individual users. Analytics cookies are only deployed with your prior consent.
• Security Cookies: Used by Megapari's fraud detection systems to identify anomalous login or transaction patterns associated with account compromise or automated bot activity.

Megapari does not use third-party advertising or retargeting cookies. You can review and manage your cookie preferences at any time via the cookie settings panel accessible from your Account dashboard or the cookie banner displayed on your first visit to the Platform.

Megapari implements a comprehensive suite of technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures include:

• Encryption in Transit: All data transmitted between your device and Megapari's servers is encrypted using TLS 1.2 or higher, providing bank-grade protection for your personal and financial data.
• Encryption at Rest: Personal data and KYC documentation stored on Megapari's servers is encrypted using AES-256 encryption.
• Access Controls: Access to personal data within Megapari is restricted to authorised personnel on a strict need-to-know basis, enforced by role-based access control systems and multi-factor authentication for internal systems.
• Regular Security Audits: Megapari's security infrastructure is subject to regular third-party penetration testing and vulnerability assessments.
• Incident Response: Megapari maintains a documented data breach response procedure. In the event of a security incident resulting in a material breach of personal data, Megapari will notify affected Members and relevant authorities within the timeframes required by applicable law.

Subject to applicable law and the verification of your identity, Megapari recognises the following data subject rights and will facilitate their exercise upon receipt of a valid written request: