Privacy Policy

1. Definitions

The following definitions apply throughout this Privacy Policy:

• "meg188" / "the Company" / "we" / "us" / "our" — the legal entity operating the online gaming platform at https://meg188.cam.
• "Platform" — the meg188 website, mobile interface, and all associated digital services and content.
• "User" / "Player" / "you" / "your" — any individual who accesses, registers with, or uses any service offered through the Platform.
• "Personal Data" — any information that identifies or could reasonably identify a living individual, directly or in combination with other data. This includes name, email address, date of birth, IP address, device identifiers, and financial account details.
• "Sensitive Personal Data" — a subset of Personal Data requiring enhanced protection, including government-issued identity numbers (e.g., KTP national identity number), financial account credentials, and biometric data if collected for verification purposes.
• "Processing" — any operation performed on Personal Data, including collection, storage, use, transmission, alteration, restriction, or deletion.
• "Controller" — the entity that determines the purposes and means of processing Personal Data; meg188 acts as Controller for data collected through the Platform.
• "Processor" — a third-party entity that processes Personal Data on behalf of meg188 under contractual instruction and data processing agreements.
• "KYC" — Know Your Customer; the identity and age verification process required before withdrawals are processed.
• "Cookie" — a small text file stored on a User's device by the Platform to enable functionality, analytics, and personalization.

2. Data We Collect

meg188 collects Personal Data across several categories depending on how you interact with the Platform. The table below summarizes the main data categories and representative examples:

meg188 does not knowingly collect data relating to racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, or health data beyond what is strictly required for responsible gaming assessments.

3. How We Collect Data

3.1 Data You Provide Directly

The majority of Personal Data we hold is provided directly by you when you: create an Account on the Platform; complete the KYC identity verification process; make a deposit or submit a withdrawal request; contact our customer support team via live chat, email, or WhatsApp; respond to surveys or promotional communications; or update your Account profile and preferences.

3.2 Automatically Collected Data

When you access the Platform, our servers and analytics systems automatically collect certain Technical and Usage Data. This includes your IP address (which may indicate your approximate geographic location within Indonesia, such as the region associated with a Jakarta or Surabaya-based internet service provider), device and browser fingerprinting data, and behavioral analytics such as which game categories you browse, how long you spend on each page, and which deposit methods you use most frequently.

3.3 Data from Third Parties

We may receive Personal Data about you from third-party sources, including:

• Payment Processors: Transaction confirmation data, bank reference numbers, and e-wallet transaction IDs from providers including the Indonesian banking network and e-wallet operators.
• Identity Verification Services: Results of document authenticity checks and fraud-risk scores from third-party KYC service providers.
• Fraud Prevention Databases: Information shared by industry anti-fraud consortia and financial crime screening services.
• Game Providers: Aggregated game session data from providers such as Pragmatic Play, Evolution Gaming, NetEnt, and Pocket Games Soft for settlement and dispute resolution purposes.

4. Purpose of Processing

meg188 processes Personal Data only for defined, legitimate purposes. The table below maps each processing purpose to its corresponding data categories and legal basis:

We do not use your Personal Data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or unless required by applicable law.

5. Legal Basis for Processing

5.1 Contract Performance

The primary legal basis for processing most of your Personal Data is the performance of the contract between you and meg188 — specifically, the Terms & Conditions you agreed to upon registration. This covers account management, payment processing, customer support, and all activities necessary to deliver the Services you have requested.

5.2 Legal Obligation

Certain processing activities are required for meg188 to comply with applicable legal and regulatory obligations, including anti-money laundering (AML) laws, know-your-customer (KYC) regulations, and financial reporting requirements. Data processed under this basis cannot be withheld or restricted by you without affecting our ability to provide compliant Services.

5.3 Legitimate Interests

Where not overridden by your fundamental rights, meg188 processes certain data on the basis of its legitimate business interests, including: fraud detection and prevention, network and information security, responsible gaming monitoring, and product improvement analytics. We conduct a balancing test before relying on this basis to ensure our interests do not unfairly override your privacy rights.

5.4 Consent

For processing activities that are not strictly necessary for contract performance or legal compliance — such as sending promotional emails, push notifications, or personalized marketing communications — we rely on your explicit, freely given consent. You may withdraw your consent at any time by updating your notification preferences in your Account settings or by contacting our support team. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

6. Data Sharing & Disclosure

6.1 Authorized Third-Party Processors

meg188 engages carefully selected third-party Processors who act under binding data processing agreements and are permitted to use your data only for the specific purposes instructed by meg188. These include:

• Payment Service Providers: Indonesian bank transfer gateways and e-wallet operators (OVO, DANA, GoPay, ShopeePay, LinkAja) for transaction processing.
• Identity Verification Providers: Third-party KYC platforms that validate government-issued identity documents and perform biometric or liveness checks.
• Game Software Providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft for game delivery, bet settlement, and dispute resolution.
• Cloud Infrastructure Providers: Hosting and data storage partners operating under strict data security certifications.
• Customer Support Platforms: Live chat and ticketing system providers that facilitate communication between Users and our support team.
• Analytics Providers: Aggregated, anonymized usage analytics tools that help us understand Platform performance and user experience patterns.

6.2 Regulatory and Legal Disclosure

meg188 may disclose Personal Data to government authorities, law enforcement agencies, financial intelligence units, or courts when required to do so by applicable law, court order, or regulatory directive. We will notify you of such disclosure where legally permitted to do so.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of meg188's business assets, Personal Data held by the Company may be transferred to the acquiring entity as part of the transaction. We will notify affected Users and ensure that the receiving entity is bound by data protection obligations no less stringent than those in this Privacy Policy before any transfer occurs.

6.4 What We Do Not Do

meg188 does not sell, rent, license, or otherwise commercially exploit your Personal Data to third parties for their own marketing or commercial purposes. We do not share your data with data brokers or advertising networks for behavioral advertising.

7. Data Retention

7.1 Retention Periods

meg188 retains Personal Data only for as long as is necessary to fulfil the purpose for which it was collected, subject to the following minimum retention periods required by law and operational necessity:

• Account and Identity Data: Retained for the lifetime of the Account plus a minimum of five (5) years following Account closure, to satisfy AML record-keeping obligations.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with financial regulations applicable to gaming operators.
• KYC Documentation: Retained for a minimum of five (5) years following Account closure or the conclusion of any related legal or regulatory proceedings, whichever is later.
• Customer Support Communications: Retained for a minimum of two (2) years from the date of the last interaction, unless the communication forms part of an ongoing dispute or regulatory inquiry.
• Marketing Preferences and Consent Records: Retained for as long as your Account is active and for two (2) years thereafter as evidence of consent.
• Technical and Usage Logs: Retained for a rolling period of thirteen (13) months to support fraud investigation and platform performance analysis.

7.2 Secure Deletion

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymized using industry-standard data destruction procedures. Anonymized or aggregated data that can no longer identify any individual may be retained indefinitely for statistical analysis and Platform improvement purposes.

8. Data Security

meg188 implements a comprehensive, layered security framework to protect your Personal Data against unauthorized access, loss, alteration, disclosure, or destruction. Our key security measures include:

• Transport Encryption: All data transmitted between your browser or app and our servers is encrypted using TLS 1.2 or higher. Our SSL certificate is maintained continuously and monitored for validity.
• Data-at-Rest Encryption: Sensitive Personal Data stored in our databases — including financial account numbers and identity document records — is encrypted at rest using AES-256 encryption.
• Password Security: User passwords are never stored in plaintext. They are hashed using a strong, salted hashing algorithm (bcrypt or equivalent) before storage.
• Access Controls: Internal access to Personal Data is strictly limited to authorized personnel who require it to perform their job functions. Role-based access controls and multi-factor authentication are enforced for all staff accessing production systems.
• Network Security: Our Platform infrastructure is protected by enterprise-grade firewalls, intrusion detection and prevention systems (IDS/IPS), and regular penetration testing by independent security professionals.
• Third-Party Security Audits: We conduct periodic security assessments and code reviews, including vulnerability scanning and third-party penetration testing, to identify and address potential weaknesses proactively.
• Incident Response: We maintain a documented data breach response plan. In the event of a breach that poses a risk to your rights, we will notify affected Users and relevant authorities within the timeframes required by applicable law.

9. Cookies & Tracking Technologies

9.1 What Are Cookies?

Cookies are small text files placed on your device when you visit the meg188 Platform. They allow the Platform to remember your preferences, maintain your session state, and collect anonymized usage data. Similar technologies, including web beacons, pixel tags, and local storage objects, are used for analogous purposes.

9.2 Categories of Cookies We Use

9.3 Managing Your Cookie Preferences

You can control non-essential cookies through your browser settings. Most modern browsers — including Chrome, Firefox, Safari, and the Android browser commonly used by players in Jakarta, Surabaya, Bandung, and across Indonesia — allow you to block or delete cookies via the browser's privacy or settings menu. Please note that disabling strictly necessary cookies will prevent you from logging into or using the Platform effectively.

10. Your Rights

As a User of the meg188 Platform, you have the following rights with respect to your Personal Data. To exercise any of these rights, please contact our data protection team using the details in Section 15.

We aim to respond to all valid rights requests within 30 calendar days of receipt. In cases of complexity or high volume, we may extend this period by a further 30 days, with notice provided to you. There is no charge for exercising these rights unless a request is manifestly unfounded or excessive.

11. Children's Privacy

The meg188 Platform is strictly intended for adults aged 21 years and over. We do not knowingly collect, process, or retain Personal Data from any individual under the age of 21. Our registration flow includes mandatory age declaration, and our KYC process verifies date of birth against government-issued identity documents to enforce this restriction.

If meg188 discovers or is notified that it has inadvertently collected Personal Data from a person under the age of 21, we will take immediate steps to suspend the associated Account, delete all collected data, and void any transactions associated with that Account. If you are a parent or guardian and believe your child has registered on the Platform, please contact us immediately at [email protected] and we will act without delay.

12. International Data Transfers

meg188 primarily stores and processes data within data centers serving the Asia-Pacific region. However, certain third-party service providers — including cloud infrastructure, KYC verification platforms, and game providers — may process data in jurisdictions outside Indonesia.

Where Personal Data is transferred outside Indonesia, meg188 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that applied within Indonesia. These safeguards include contractual data processing agreements incorporating standard data protection clauses, verification that the destination country provides an adequate level of data protection, and additional technical measures such as end-to-end encryption where required.

By using the Platform, you acknowledge that your data may be transferred to and processed in countries outside Indonesia. If you have concerns about any specific international transfer, please contact our data protection team for details of the safeguards applied.

13. Third-Party Services

The meg188 Platform integrates third-party services — including game software from providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft — to deliver its core gaming content. When you interact with these embedded third-party services, those providers may independently collect certain Technical and Usage Data in accordance with their own privacy policies.

meg188 is not responsible for the privacy practices of third-party game providers, payment processors, or any other external service with which you interact directly. We encourage you to review the privacy policies of any third-party service that you engage with. Links or references to third-party services on this Platform do not constitute an endorsement of their privacy or data security practices.

All third-party Processors engaged by meg188 are bound by contractual data processing agreements that require them to handle your Personal Data only under meg188's instruction and in a manner consistent with this Privacy Policy.

14. Policy Amendments

meg188 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, our data processing activities, or our business operations. Material changes — meaning changes that significantly affect how we collect or use your Personal Data — will be communicated to you via email notification to your registered address and/or by a prominent notice on the Platform at least seven (7) days before the revised policy takes effect.

Non-material changes (such as clarifications to existing wording, corrections of typographical errors, or restructuring of sections for improved readability) may be made without advance notice. The "Last Updated" date at the top of this page will always reflect when the most recent revision was published. We encourage you to review this Privacy Policy periodically. Your continued use of the Platform after the effective date of any amendment constitutes your acceptance of the revised terms.

15. Contact & Data Requests

If you have questions about this Privacy Policy, wish to exercise any of your data rights, or want to report a potential data security concern, please contact meg188's data protection team through the following channels:

• Email: [email protected] — please use the subject line "Privacy Request" for data rights inquiries
• Live Chat: Available 24/7 through the in-platform chat interface — ask to be connected to the Data Protection team
• Response Time: We aim to acknowledge all privacy-related contacts within 48 hours and to fully resolve requests within 30 calendar days

When submitting a data access, rectification, or erasure request, please include your registered Account email address and a brief description of your request. We may need to verify your identity before processing sensitive data requests, which may involve asking you to confirm certain Account details or submit a copy of your identity document.

For concerns that have not been resolved through our internal process, you may also escalate to the relevant data protection supervisory authority in your jurisdiction. Our support team can provide guidance on the appropriate authority to contact based on your location within Indonesia.