Privacy Policy — megabet

1. Data We Collect

When you register for or use the megabet platform, we collect personal data in the following categories. We collect only what is necessary for the purposes described in this Privacy Policy.

1.1 Registration Data

When you create a megabet account, we collect your full legal name, date of birth, residential address (including city — for example, Dhaka, Chittagong, Sylhet, Khulna, or Rajshahi), email address, and a chosen username. This information is required to open and maintain your account and to verify that you meet the minimum age requirement of 18 years.

1.2 Identity Verification (KYC) Data

To comply with anti-money-laundering (AML) obligations and to confirm your identity, megabet may request copies of government-issued identification documents such as your National Identity Card (NID), passport, or birth certificate. These documents are processed securely and retained only for as long as required by applicable law or regulatory guidance.

1.3 Financial Data

When you make a deposit or request a withdrawal using bKash, Nagad, Rocket, or Upay, we collect the mobile number associated with the transaction, the transaction reference number, the amount (in Bangladeshi Taka, ৳), and the timestamp. megabet does not store full payment credentials such as bKash PINs or account passwords — these are handled exclusively by the respective payment provider.

1.4 Usage and Device Data

We automatically collect certain technical information when you visit or interact with megabet, including your IP address, browser type and version, operating system, device type, pages visited, time spent on each page, referring URL, and clickstream data. This data is used for security monitoring, fraud detection, and platform performance optimisation.

1.5 Communications Data

If you contact our customer support team — by email at support@megabet or through our live chat feature — we retain a record of the correspondence, including the date, subject matter, and content of the communication. This record helps us resolve disputes, improve our service quality, and maintain an audit trail.

2. How We Use Your Data

megabet uses the personal data described above for the following specific, legitimate purposes:

megabet does not use your personal data for automated decision-making that produces significant legal effects without human review. If you have opted in to promotional communications, you may withdraw your consent at any time by contacting support@megabet.

3. Data Sharing & Disclosure

megabet does not sell your personal data. We share your data only in the following limited circumstances, and only to the extent necessary for each specific purpose:

3.1 Payment Processors

To process deposits and withdrawals, we share relevant transaction data with our payment processing partners — bKash, Nagad, Rocket, and Upay. These providers process data in accordance with their own privacy policies and are bound by contractual data protection obligations. megabet shares only the minimum data required to complete each transaction.

3.2 Identity Verification Partners

megabet may engage third-party KYC and identity verification service providers to assist with document verification and fraud screening. These providers are contractually bound to process data solely for the purpose of verification on our behalf and are prohibited from using your data for any other purpose.

3.3 Game Content Providers

Our platform features games supplied by third-party studios including Pragmatic Play, Evolution Gaming, Spribe, NetEnt, Microgaming, and Ezugi. These providers may receive anonymised session data — such as game round identifiers and bet amounts — for the purpose of game integrity auditing and RNG certification. They do not receive your personally identifiable information such as your name, address, or NID number.

3.4 Legal and Regulatory Disclosure

megabet may disclose your personal data if required to do so by applicable law, court order, or the lawful request of a competent regulatory or law enforcement authority. In such cases, we will disclose only the minimum information required and, where legally permissible, will notify the affected user.

3.5 Business Transfers

In the event that megabet undergoes a merger, acquisition, or sale of assets, your personal data may be transferred as part of that transaction. In such circumstances, the acquiring entity will be required to honour the commitments set out in this Privacy Policy. You will be notified of any material change in data controller via the email address registered to your account.

4. Cookies & Tracking

megabet uses cookies — small text files stored on your device — and similar tracking technologies to deliver a functional and personalised experience on the platform. The following categories of cookies are used:

• Strictly Necessary Cookies: These are essential for the platform to function. They maintain your login session, remember your language and currency preferences, and protect against cross-site request forgery (CSRF). You cannot opt out of strictly necessary cookies while using the platform.
• Performance and Analytics Cookies: These cookies collect anonymised data about how users interact with megabet — for example, which pages are visited most frequently and where users encounter errors. This information is used exclusively to improve the platform. No personally identifiable information is collected via these cookies.
• Functionality Cookies: These cookies remember choices you make on megabet — such as preferred game categories, display settings, or notification preferences — so that you do not have to reconfigure them each time you log in.

megabet does not use third-party advertising or retargeting cookies. You may manage or delete cookies at any time through your browser settings. Please note that disabling strictly necessary cookies may impair the functionality of the platform, including the ability to log in and place bets.

5. Data Security

megabet employs a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction:

• 256-bit SSL/TLS Encryption: All data transmitted between your browser or app and our servers is encrypted using industry-standard Transport Layer Security (TLS 1.2 or higher).
• Secure Data Storage: Personal data is stored in access-controlled databases with role-based access permissions. Only authorised personnel with a legitimate operational need may access personally identifiable information.
• Password Hashing: Account passwords are stored using strong cryptographic hashing algorithms. megabet staff cannot view your plain-text password — this is why we ask you to reset your password rather than retrieve it if it is forgotten.
• Fraud Monitoring: Our security team operates continuous monitoring systems that detect unusual account activity, suspicious login patterns, and anomalous financial transactions in real time.
• Regular Security Audits: megabet conducts periodic internal and third-party security reviews of our platform infrastructure to identify and remediate vulnerabilities before they can be exploited.

While megabet takes all reasonable steps to secure your data, no online platform can guarantee absolute security. You are responsible for keeping your login credentials confidential and for notifying us immediately at support@megabet if you suspect unauthorised access to your account.

6. Data Retention

megabet retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account and registration data: Retained for the lifetime of your active account, and for a minimum of 5 years after account closure, in accordance with AML record-keeping obligations.
• KYC and identity documents: Retained for a minimum of 5 years after the end of the business relationship, as required by financial crime prevention regulations.
• Financial transaction records: Retained for a minimum of 5 years from the date of each transaction.
• Customer support communications: Retained for a minimum of 2 years from the date of the last communication in a support thread.
• Usage and device data (anonymised): Retained for up to 24 months for platform analytics and fraud detection purposes.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised so that it can no longer be linked to an identifiable individual.

7. Your Privacy Rights

As a megabet user, you have the following rights with respect to your personal data. To exercise any of these rights, contact us at support@megabet with the subject line "Privacy Request". We will respond within 30 days.

• Right of Access: You may request a copy of the personal data megabet holds about you, along with information about how it is being used.
• Right to Rectification: If your personal data is inaccurate or incomplete, you have the right to request that it be corrected or updated.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to any overriding legal retention obligations.
• Right to Restriction of Processing: You may request that we restrict processing of your personal data in certain circumstances, for example while the accuracy of the data is being contested.
• Right to Data Portability: Where processing is based on your consent or on contract performance, you may request a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to Withdraw Consent: Where processing is based solely on your consent (for example, receipt of promotional emails), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Right to Object: You may object to processing of your personal data based on megabet's legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.

Please note that certain rights are subject to limitations where legal obligations require us to retain or continue processing your data — for example, KYC records required by AML regulations cannot be deleted on request during the mandatory retention period.

8. Policy Updates & Contact

megabet reserves the right to update this Privacy Policy at any time. When material changes are made, we will notify registered users by email at the address associated with their account and update the "Effective Date" at the top of this page. Minor clarifications or formatting changes that do not affect your rights or how we process data may be made without notice.

We encourage you to review this Privacy Policy periodically to stay informed about how megabet protects your personal information. Your continued use of the platform following notification of any change constitutes acceptance of the updated policy.

8.1 How to Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data megabet holds about you, please contact our Data Protection team:

• Email: support@megabet — subject line: "Privacy Request"
• Response time: Within 30 calendar days of receipt
• Support languages: English and Bengali
• Support hours: 24 hours a day, 7 days a week